typo3 权限问题

Question

从昨天开始（没有任何改变），当我想编辑页面或添加内容时，出现以下错误。

禁止 您无权访问此资源。

我以具有完全权限的后端管理员身份登录...对我有什么提示吗？ 访问权限看起来不错。

提前致谢。

php 日志消息

AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
AH01215: PHP Fatal error:  Only variables can be passed by reference in /mnt/web107/a3/90/58486790/htdocs/typo3_grau_01/typo3conf/ext/pt_extlist/Classes/Domain/Renderer/Default/CellRenderer.php on line 158: /home/strato/http/premium/rid/67/90/58486790/htdocs/typo3_grau_01/index.php
AH01215: PHP Fatal error:  Only variables can be passed by reference in /mnt/web107/a3/90/58486790/htdocs/typo3_grau_01/typo3conf/ext/pt_extlist/Classes/Domain/Renderer/Default/CellRenderer.php on line 158: /home/strato/http/premium/rid/67/90/58486790/htdocs/typo3_grau_01/index.php
AH01630: client denied by server configuration: /home/strato/http/premium/rid/67/90/58486790/htdocs/typo3_grau_01/.git
AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
AH01630: client denied by server configuration: /home/strato/http/premium/rid/67/90/58486790/htdocs/typo3_grau_01/fileadmin/src
AH01215: PHP Fatal error:  Only variables can be passed by reference in /mnt/web107/a3/90/58486790/htdocs/typo3_grau_01/typo3conf/ext/pt_extlist/Classes/Domain/Renderer/Default/CellRenderer.php on line 158: /home/strato/http/premium/rid/67/90/58486790/htdocs/typo3_grau_01/index.php
AH01215: PHP Fatal error:  Only variables can be passed by reference in /mnt/web107/a3/90/58486790/htdocs/typo3_grau_01/typo3conf/ext/pt_extlist/Classes/Domain/Renderer/Default/CellRenderer.php on line 158: /home/strato/http/premium/rid/67/90/58486790/htdocs/typo3_grau_01/index.php
AH01215: PHP Fatal error:  Only variables can be passed by reference in /mnt/web107/a3/90/58486790/htdocs/typo3_grau_01/typo3conf/ext/pt_extlist/Classes/Domain/Renderer/Default/CellRenderer.php on line 158: /home/strato/http/premium/rid/67/90/58486790/htdocs/typo3_grau_01/index.php
AH01630: client denied by server configuration: /home/strato/http/premium/rid/67/90/58486790/htdocs/typo3_grau_01/.git

Answer 1

我们联系了strato并收到以下回复：

“您联系我们是因为您在使用 Typo3 实例时遇到错误消息（‘403 Forbidden’）。

这是由于基础设施中的软件更新修复了不安全漏洞。这将使攻击者能够渗透您的网络空间并执行恶意代码。这会阻止 Typo3 及其使用的方法与 Typo3 实例的某些区域中的 Web 服务器进行通信。

我们参考漏洞描述CVE-2024-38474 (https://www.cve.org/CVERecord?id=CVE-2024-38474)。此更新通常会安装在所有当前的 Apache 实例上。

出于安全原因，我们不会在主机系统上发布 Typo3 使用的不安全方法。我们恳请您联系 Typo3 的开发人员并告知他该漏洞。我们明确建议您不要实施任何规避此操作的修改，因为这将使您容易受到攻击。 ’