[SECURITY] Prevent arbitrary access to privileged resources via t3://
Resolves: #93571 Releases: main, 13.0, 12.4, 11.5 Change-Id: I9622bfa47ef9637cecaff4a790f742445f598682 Security-Bulletin: TYPO3-CORE-SA-2024-005 Security-References: CVE-2024-25120 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/82949 Reviewed-by:Oliver Hader <oliver.hader@typo3.org> Tested-by:
Oliver Hader <oliver.hader@typo3.org>
Showing
- typo3/sysext/backend/Classes/Backend/Shortcut/ShortcutRepository.php 1 addition, 1 deletion...t/backend/Classes/Backend/Shortcut/ShortcutRepository.php
- typo3/sysext/backend/Classes/Controller/LinkController.php 1 addition, 1 deletiontypo3/sysext/backend/Classes/Controller/LinkController.php
- typo3/sysext/backend/Classes/Controller/Resource/ResourceController.php 1 addition, 1 deletion...ackend/Classes/Controller/Resource/ResourceController.php
- typo3/sysext/backend/Classes/Form/Element/LinkElement.php 9 additions, 4 deletionstypo3/sysext/backend/Classes/Form/Element/LinkElement.php
- typo3/sysext/backend/Classes/LinkHandler/PageLinkHandler.php 11 additions, 2 deletionstypo3/sysext/backend/Classes/LinkHandler/PageLinkHandler.php
- typo3/sysext/core/Classes/LinkHandling/FileLinkHandler.php 8 additions, 0 deletionstypo3/sysext/core/Classes/LinkHandling/FileLinkHandler.php
- typo3/sysext/core/Classes/LinkHandling/LegacyLinkNotationConverter.php 1 addition, 1 deletion...core/Classes/LinkHandling/LegacyLinkNotationConverter.php
- typo3/sysext/core/Classes/Resource/ResourceStorage.php 29 additions, 6 deletionstypo3/sysext/core/Classes/Resource/ResourceStorage.php
- typo3/sysext/core/Classes/Resource/Security/StoragePermissionsAspect.php 2 additions, 5 deletions...re/Classes/Resource/Security/StoragePermissionsAspect.php
- typo3/sysext/core/Classes/Utility/File/ExtendedFileUtility.php 1 addition, 1 deletion.../sysext/core/Classes/Utility/File/ExtendedFileUtility.php
- typo3/sysext/core/Tests/Unit/DataHandling/SoftReference/TypoLinkSoftReferenceParserTest.php 3 additions, 0 deletions...andling/SoftReference/TypoLinkSoftReferenceParserTest.php
- typo3/sysext/core/Tests/Unit/DataHandling/SoftReference/TypoLinkTagSoftReferenceParserTest.php 2 additions, 0 deletions...ling/SoftReference/TypoLinkTagSoftReferenceParserTest.php
- typo3/sysext/core/Tests/Unit/LinkHandling/FileLinkHandlerTest.php 1 addition, 1 deletion...sext/core/Tests/Unit/LinkHandling/FileLinkHandlerTest.php
- typo3/sysext/filelist/Classes/Controller/File/CreateFileController.php 1 addition, 1 deletion...filelist/Classes/Controller/File/CreateFileController.php
- typo3/sysext/filelist/Classes/Controller/File/EditFileController.php 1 addition, 1 deletion...t/filelist/Classes/Controller/File/EditFileController.php
- typo3/sysext/filelist/Classes/Controller/File/FileUploadController.php 1 addition, 1 deletion...filelist/Classes/Controller/File/FileUploadController.php
- typo3/sysext/filelist/Classes/Controller/File/ReplaceFileController.php 1 addition, 1 deletion...ilelist/Classes/Controller/File/ReplaceFileController.php
- typo3/sysext/filelist/Classes/Controller/FileListController.php 1 addition, 1 deletion...sysext/filelist/Classes/Controller/FileListController.php
- typo3/sysext/filelist/Classes/LinkHandler/AbstractResourceLinkHandler.php 35 additions, 8 deletions...elist/Classes/LinkHandler/AbstractResourceLinkHandler.php
Please register or sign in to comment