Exploitation ongoing with high activity in latest observed window (1 mentions)
Recommended action window: Immediate (within 24h)
NVD description
TYPO3 is an enterprise content management system. Starting in version 9.0.0 and prior to versions 9.5.48 ELTS, 10.4.45 ELTS, 11.5.37 LTS, 12.4.15 LTS, and 13.1.1, the `ShowImageController` (`_eID tx_cms_showpic_`) lacks a cryptographic HMAC-signature on the `frame` HTTP query parameter (e.g. `/index.php?eID=tx_cms_showpic?file=3&...&frame=12345`). This allows adversaries to instruct the system to produce an arbitrary number of thumbnail images on the server side. TYPO3 versions 9.5.48 ELTS, 10.4.45 ELTS, 11.5.37 LTS, 12.4.15 LTS, 13.1.1 fix the problem described.
Priority
LOW
Exploitation
ACTIVE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
#RCE attempt targeting Next.js (CVE-2024-34358) 2026-08-13 02:20:59 UTC Source IP: 205.237.105.132 🇫🇷 POST / IOCs: hxxp://154.90.70.23/x86 154.90.70.23 🇷🇺 3151f6a5585d35d1cd40677150d05a67 https://t.co/VrP9EttVaW
Post summary
The tweet reports an active RCE attempt against Next.js (CVE‑2024‑34358) from a specific source IP, listing malicious URLs but providing no PoC, patch, or detailed vulnerability data.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | typo3 | typo3 | - | - | - |