CVE-2013-1843: Open redirect vulnerability in the Access tracking mechanism in TYPO3 4.5.x before 4.5.24, 4.6.x before 4.6...

Security readout for executives and security teams

CVE-2013-1843 is an open redirect flaw in TYPO3’s Access tracking mechanism. A remote attacker could cause users to be redirected to an arbitrary website, supporting phishing or credential-harvesting campaigns. The provided sources do not show code execution, data theft by itself, or confirmed active exploitation. Exposure is most likely on internet-facing TYPO3 sites still running the listed legacy core branches or distribution packages from that era. Modern unsupported deployments, old intranet portals, and archived public sites should be checked if they retain TYPO3 Access tracking behavior. Handle during normal vulnerability remediation unless the affected TYPO3 site is customer-facing, brand-sensitive, or used for login flows. In those cases, prioritize promptly because phishing through a trusted domain can damage user trust even without server compromise. Mitigation focus: Upgrade TYPO3 core to 4.5.24, 4.6.17, 4.7.9, 6.0.3, or later supported release.; Apply Debian DSA-2646 or openSUSE-SU-2013:0510 package updates where distribution packages are used.; Review the TYPO3 security bulletin for branch-specific vendor guidance before changing legacy systems..

Prepared

Jun 24, 2026, 11:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.