← Vulnerability feed

Vulnerability record · CVE-2020-15098 · published 29 July 2020

CVE-2020-15098: Typo3 improper input validation vulnerability

Typo3 · Typo3

In TYPO3 CMS greater than or equal to 9.0.0 and less than 9.5.20, and greater than or equal to 10.0.0 and less than 10.4.6, it has been discovered that an internal verification mechanism can be used to generate arbitrary checksums. This allows to inject arbitrary data having a valid cryptographic message authentication code (HMAC-SHA1) and can lead to various attack chains including potential privilege escalation, insecure deserialization & remote code execution. The overall severity of this vulnerability is high based on mentioned attack chains and the requirement of having a valid backend user session (authenticated). This has been patched in versions 9.5.20 and 10.4.6.

8.8 CVSS 3.1 High EPSS 2.2% · top 17.9% CWE-20 · Improper input validationCWE-200 · Information exposure
8.8CVSS 3.1 base score, v2 6.5
2.2%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
8References
17 Jun 2026Last modified by NVD

Description

In TYPO3 CMS greater than or equal to 9.0.0 and less than 9.5.20, and greater than or equal to 10.0.0 and less than 10.4.6, it has been discovered that an internal verification mechanism can be used to generate arbitrary checksums. This allows to inject arbitrary data having a valid cryptographic message authentication code (HMAC-SHA1) and can lead to various attack chains including potential privilege escalation, insecure deserialization & remote code execution. The overall severity of this vulnerability is high based on mentioned attack chains and the requirement of having a valid backend user session (authenticated). This has been patched in versions 9.5.20 and 10.4.6.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/TYPO3/TYPO3.CMS/commit/85d3e70dff35a99ef53f4b561114acfa9e5c47e1 Broken Link
https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-m5vr-3m74-jwxp Third Party Advisory
https://typo3.org/security/advisory/typo3-core-sa-2016-013 Vendor Advisory
https://typo3.org/security/advisory/typo3-core-sa-2020-008 Vendor Advisory
https://github.com/TYPO3/TYPO3.CMS/commit/85d3e70dff35a99ef53f4b561114acfa9e5c47e1 Broken Link
https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-m5vr-3m74-jwxp Third Party Advisory
https://typo3.org/security/advisory/typo3-core-sa-2016-013 Vendor Advisory
https://typo3.org/security/advisory/typo3-core-sa-2020-008 Vendor Advisory

Track CVE-2020-15098 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2020-11066Typo3 mass assignment vulnerabilityIn TYPO3 CMS greater than or equal to 9.0.0 and less than 9.5.17 and greater than or equal to 10.0.0 and less than 10.4.2, calling unserialize() on m…EPSS 1.5%10.0CVE-2009-0258Typo3 improper input validation vulnerabilityThe Indexed Search Engine (indexed_search) system extension in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allows remote …EPSS 3.3%9.8CVE-2011-3583Typo3 sql injection vulnerabilityIt was found that Typo3 Core versions 4.5.0 - 4.5.5 uses prepared statements that, if the parameter values are not properly replaced, could lead to a…EPSS 1.4%9.8CVE-2011-4628Typo3 improper authentication vulnerabilityTYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to bypass authentication mechanisms in the backend through a …EPSS 1.6%8.8CVE-2024-55921Typo3 cross-site request forgery vulnerabilityTYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user interface functionality involvi…EPSS 0.36%8.8CVE-2022-23503Typo3 code injection vulnerabilityTYPO3 is an open source PHP based web content management system. Versions prior to 8.7.49, 9.5.38, 10.4.33, 11.5.20, and 12.1.1 are vulnerable to Cod…EPSS 0.81%8.8CVE-2021-41113Typo3 cross-site request forgery vulnerabilityTYPO3 is an open source PHP based web content management system released under the GNU GPL. It has been discovered that the new TYPO3 v11 feature tha…EPSS 0.64%8.8CVE-2020-11067Typo3 deserialization of untrusted data vulnerabilityIn TYPO3 CMS 9.0.0 through 9.5.16 and 10.0.0 through 10.4.1, it has been discovered that backend user settings (in $BE_USER->uc) are vulnerable to in…EPSS 2.0%

Source: NIST National Vulnerability Database (record CVE-2020-15098), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.