{
  "document": {
    "aggregate_severity": {
      "text": "mittel"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "TYPO3 ist ein freies Content-Management-System, basierend auf der Scriptsprache PHP und einer SQL-Datenbank. \u00dcber zahlreiche Extensions kann der Funktionsumfang der Core-Installation individuell erweitert werden.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, anonymer Angreifer kann eine Schwachstelle in der TYPO3 Extension \"oidc\" ausnutzen, um Sicherheitsvorkehrungen zu umgehen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Linux\n- MacOS X\n- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2024-0754 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0754.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2024-0754 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0754"
      },
      {
        "category": "external",
        "summary": "Typo3 Security Advisory TYPO3-EXT-SA-2024-002 vom 2024-04-01",
        "url": "https://typo3.org/security/advisory/typo3-ext-sa-2024-002"
      }
    ],
    "source_lang": "en-US",
    "title": "TYPO3 Extension \"oidc\": Schwachstelle erm\u00f6glicht Umgehen von Sicherheitsvorkehrungen",
    "tracking": {
      "current_release_date": "2024-11-27T23:00:00.000+00:00",
      "generator": {
        "date": "2024-11-28T11:39:10.476+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.8"
        }
      },
      "id": "WID-SEC-W-2024-0754",
      "initial_release_date": "2024-04-01T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2024-04-01T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2024-11-27T23:00:00.000+00:00",
          "number": "2",
          "summary": "Produktzuordnung \u00fcberpr\u00fcft"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "oidc \u003c2.1.0",
                "product": {
                  "name": "TYPO3 Extension oidc \u003c2.1.0",
                  "product_id": "T033820"
                }
              },
              {
                "category": "product_version",
                "name": "oidc 2.1.0",
                "product": {
                  "name": "TYPO3 Extension oidc 2.1.0",
                  "product_id": "T033820-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:typo3:typo3_extension:oidc__2.1.0"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Extension"
          }
        ],
        "category": "vendor",
        "name": "TYPO3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-30173",
      "notes": [
        {
          "category": "description",
          "text": "Es besteht eine Schwachstelle in der TYPO3 Extension. Dieser Fehler besteht in der OpenID Connect Authentication (oidc) Komponente eines Drittanbieters, da der Dienst jeden g\u00fcltigen Frontend-Benutzer authentifiziert, wenn das Benutzerfeld \"tx_oidc\" nicht leer ist. Ein entfernter, anonymer Angreifer kann diese Schwachstelle ausnutzen, um Sicherheitsma\u00dfnahmen zu umgehen."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033820"
        ]
      },
      "release_date": "2024-04-01T22:00:00.000+00:00",
      "title": "CVE-2024-30173"
    }
  ]
}

{
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2024-30173"
      ],
      "id": "GSD-2024-30173",
      "modified": "2024-04-03T05:02:29.220911Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2024-30173",
        "STATE": "RESERVED"
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
          }
        ]
      }
    }
  }
}

{
  "affected": [
    {
      "package": {
        "ecosystem": "Packagist",
        "name": "causal/oidc"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.1.0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2024-30173"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-284"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2024-04-02T18:21:49Z",
    "nvd_published_at": null,
    "severity": "MODERATE"
  },
  "details": "The authentication service of the extension does not verify the OpenID Connect authentication state from the user lookup chain. Instead, the authentication service authenticates every valid frontend user from the user lookup chain, where the  frontend user field \u201ctx_oidc\u201d is not empty.\n\nIn scenarios, where either ext:felogin is active or where `$GLOBALS[\u0027TYPO3_CONF_VARS\u0027][\u2018FE\u2019][\u2018checkFeUserPid\u2019]` is disabled, an attacker can login to OpenID Connect frontend user accounts by providing a valid username and any password. ",
  "id": "GHSA-hhf8-f5w9-g6vh",
  "modified": "2024-04-02T18:21:49Z",
  "published": "2024-04-02T18:21:49Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/causal/oidc/CVE-2024-30173.yaml"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/xperseguers/t3ext-oidc"
    },
    {
      "type": "WEB",
      "url": "https://typo3.org/security/advisory/typo3-ext-sa-2024-002"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N/E:F/RL:O/RC:C",
      "type": "CVSS_V3"
    }
  ],
  "summary": "OpenID Connect Authentication (oidc) Typo3 extension Authentication Bypass"
}