Search for vulnerabilities
Vulnerability details: VCID-au4n-kuzg-h3es
Vulnerability ID VCID-au4n-kuzg-h3es
Aliases CVE-2009-0815
GHSA-c22j-84c7-cm77
Summary TYPO3 leaks a hash secret in an error message The jumpUrl mechanism in class.tslib_fe.php in TYPO3 3.3.x through 3.8.x, 4.0 before 4.0.12, 4.1 before 4.1.10, 4.2 before 4.2.6, and 4.3alpha1 leaks a hash secret (juHash) in an error message, which allows remote attackers to read arbitrary files by including the hash in a request.
Status Published
Exploitability 2.0
Weighted Severity 6.2
Risk 10.0
Affected and Fixed Packages Package Details
Weaknesses (4)
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
CWE-209 Generation of Error Message Containing Sensitive Information
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.498 https://api.first.org/data/v1/epss?cve=CVE-2009-0815
epss 0.498 https://api.first.org/data/v1/epss?cve=CVE-2009-0815
cvssv3.1_qr MODERATE https://github.com/advisories/GHSA-c22j-84c7-cm77
generic_textual MODERATE https://github.com/TYPO3/typo3
generic_textual MODERATE https://nvd.nist.gov/vuln/detail/CVE-2009-0815
generic_textual MODERATE https://web.archive.org/web/20091206080208/http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-002
generic_textual MODERATE https://web.archive.org/web/20200915000000*/http://www.securitytracker.com/id?1021710
generic_textual MODERATE http://www.debian.org/security/2009/dsa-1720
generic_textual MODERATE http://www.openwall.com/lists/oss-security/2009/02/10/6
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2009-0815
https://github.com/TYPO3/typo3
https://nvd.nist.gov/vuln/detail/CVE-2009-0815
https://web.archive.org/web/20091206080208/http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-002
https://web.archive.org/web/20200915000000*/http://www.securitytracker.com/id?1021710
http://www.debian.org/security/2009/dsa-1720
http://www.openwall.com/lists/oss-security/2009/02/10/6
GHSA-c22j-84c7-cm77 https://github.com/advisories/GHSA-c22j-84c7-cm77
Data source Metasploit
Description This module exploits a file disclosure vulnerability in the jumpUrl mechanism of Typo3. This flaw can be used to read any file that the web server user account has access to.
Note 
Stability:
  - crash-safe
SideEffects:
  - ioc-in-logs
Reliability: []
Ransomware campaign use Unknown
Source publication date Feb. 10, 2009
Source URL https://github.com/rapid7/metasploit-framework/tree/master/modules/auxiliary/admin/http/typo3_sa_2009_002.rb
Exploit Prediction Scoring System (EPSS)
Percentile 0.97665
EPSS Score 0.498
Published At June 30, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-01T12:27:19.688238+00:00 GithubOSV Importer Import https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-c22j-84c7-cm77/GHSA-c22j-84c7-cm77.json 36.1.3