Search for vulnerabilities
Vulnerability details: VCID-89e7-n8qr-mkc1
Vulnerability ID VCID-89e7-n8qr-mkc1
Aliases CVE-2024-22188
GHSA-5w2h-59j3-8x5w
Summary TYPO3 Install Tool vulnerable to Code Execution ### Problem Several settings in the Install Tool for configuring the path to system binaries were vulnerable to code execution. Exploiting this vulnerability requires an administrator-level backend user account with system maintainer permissions. The corresponding change for this advisory involves enforcing the known disadvantages described in [TYPO3-PSA-2020-002: Protecting Install Tool with Sudo Mode](https://typo3.org/security/advisory/typo3-psa-2020-002). ### Solution Update to TYPO3 versions 8.7.57 ELTS, 9.5.46 ELTS, 10.4.43 ELTS, 11.5.35 LTS, 12.4.11 LTS, 13.0.1 that fix the problem described. ### Credits Thanks to Rickmer Frier & Daniel Jonka who reported this issue and to TYPO3 core & security team member Benjamin Franzke who fixed the issue. ### References * [TYPO3-CORE-SA-2024-002](https://typo3.org/security/advisory/typo3-core-sa-2024-002)
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (5)
CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')
CWE-94 Improper Control of Generation of Code ('Code Injection')
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.00295 https://api.first.org/data/v1/epss?cve=CVE-2024-22188
cvssv3.1_qr HIGH https://github.com/advisories/GHSA-5w2h-59j3-8x5w
cvssv3.1 7.2 https://github.com/TYPO3/typo3
generic_textual HIGH https://github.com/TYPO3/typo3
cvssv3.1 7.2 https://github.com/TYPO3/typo3/commit/47e897f8c7668ef299ecc9ce93f52cafbb3497ed
generic_textual HIGH https://github.com/TYPO3/typo3/commit/47e897f8c7668ef299ecc9ce93f52cafbb3497ed
cvssv3.1 7.2 https://github.com/TYPO3/typo3/commit/6cc11761b8e2434fa4ccc9f096c65ca82569cfdf
generic_textual HIGH https://github.com/TYPO3/typo3/commit/6cc11761b8e2434fa4ccc9f096c65ca82569cfdf
cvssv3.1 7.2 https://github.com/TYPO3/typo3/commit/84e07e35b880a544b517868432c56987d05d46d4
generic_textual HIGH https://github.com/TYPO3/typo3/commit/84e07e35b880a544b517868432c56987d05d46d4
cvssv3.1 7.2 https://github.com/TYPO3/typo3/security/advisories/GHSA-5w2h-59j3-8x5w
cvssv3.1_qr HIGH https://github.com/TYPO3/typo3/security/advisories/GHSA-5w2h-59j3-8x5w
generic_textual HIGH https://github.com/TYPO3/typo3/security/advisories/GHSA-5w2h-59j3-8x5w
ssvc Track https://github.com/TYPO3/typo3/security/advisories/GHSA-5w2h-59j3-8x5w
cvssv3.1 7.2 https://nvd.nist.gov/vuln/detail/CVE-2024-22188
generic_textual HIGH https://nvd.nist.gov/vuln/detail/CVE-2024-22188
cvssv3.1 7.2 https://typo3.org/security/advisory/typo3-core-sa-2024-002
generic_textual HIGH https://typo3.org/security/advisory/typo3-core-sa-2024-002
ssvc Track https://typo3.org/security/advisory/typo3-core-sa-2024-002
cvssv3.1 7.2 https://typo3.org/security/advisory/typo3-psa-2020-002
generic_textual HIGH https://typo3.org/security/advisory/typo3-psa-2020-002
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2024-22188
https://github.com/TYPO3/typo3
https://github.com/TYPO3/typo3/commit/47e897f8c7668ef299ecc9ce93f52cafbb3497ed
https://github.com/TYPO3/typo3/commit/6cc11761b8e2434fa4ccc9f096c65ca82569cfdf
https://github.com/TYPO3/typo3/commit/84e07e35b880a544b517868432c56987d05d46d4
https://github.com/TYPO3/typo3/security/advisories/GHSA-5w2h-59j3-8x5w
https://nvd.nist.gov/vuln/detail/CVE-2024-22188
https://typo3.org/security/advisory/typo3-core-sa-2024-002
https://typo3.org/security/advisory/typo3-psa-2020-002
GHSA-5w2h-59j3-8x5w https://github.com/advisories/GHSA-5w2h-59j3-8x5w
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/TYPO3/typo3
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/TYPO3/typo3/commit/47e897f8c7668ef299ecc9ce93f52cafbb3497ed
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/TYPO3/typo3/commit/6cc11761b8e2434fa4ccc9f096c65ca82569cfdf
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/TYPO3/typo3/commit/84e07e35b880a544b517868432c56987d05d46d4
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/TYPO3/typo3/security/advisories/GHSA-5w2h-59j3-8x5w
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-03-05T16:17:44Z/ Found at https://github.com/TYPO3/typo3/security/advisories/GHSA-5w2h-59j3-8x5w
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2024-22188
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Found at https://typo3.org/security/advisory/typo3-core-sa-2024-002
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-03-05T16:17:44Z/ Found at https://typo3.org/security/advisory/typo3-core-sa-2024-002
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Found at https://typo3.org/security/advisory/typo3-psa-2020-002
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.52401
EPSS Score 0.00295
Published At June 30, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-01T12:09:55.673883+00:00 GithubOSV Importer Import https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/02/GHSA-5w2h-59j3-8x5w/GHSA-5w2h-59j3-8x5w.json 36.1.3