UpHeron
All vulnerabilities

Servers and applications

CVE-2021-21359

Denial of Service in Page Error Handling

Severity
High 7.5
Published
16 Mar 2021
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
9.5.25, 10.4.14, 11.1.1
Also known as
GHSA-4p9g-qgx9-397p
Sources
NVD, Project advisories (GitHub)

Description

TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 9.5.25, 10.4.14, 11.1.1 requesting invalid or non-existing resources via HTTP triggers the page error handler which again could retrieve content to be shown as error message from another page. This leads to a scenario in which the application is calling itself recursively - amplifying the impact of the…

Affected software

SoftwareAffected versions
TYPO3Servers and applications · cpe:a:typo3:typo3
  • From 9.0.0 before 9.5.25
  • From 10.0.0 before 10.4.14
  • From 11.0.0 before 11.1.1
TYPO3Servers and applications · github:typo3/typo3
  • From 11.0.0 before 11.1.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-21359
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-21359
  • GitHub Advisory Database https://github.com/advisories/GHSA-4p9g-qgx9-397p
  • github.com https://github.com/TYPO3/typo3/security/advisories/GHSA-4p9g-qgx9-397p