Project

General

Profile

Actions

Bug #91420

closed

Story #91384: Backend login and referrer problems after recent TYPO3 9.5.17 and 10.4.2 security fixes

MissingReferrerException TYPO3 v10.4.2

Added by Anonymous over 4 years ago. Updated over 4 years ago.

Status:
Closed
Priority:
Should have
Assignee:
-
Category:
Backend User Interface
Target version:
Start date:
2020-05-16
Due date:
% Done:

0%

Estimated time:
TYPO3 Version:
10
PHP Version:
7.4
Tags:
Complexity:
Is Regression:
Sprint Focus:

Description

Hi,
a few days ago i installed a new Typo3 Instance (v.10.4.2) and i cannot access the admin panel (/typo3).

The admin panel is asking for my credentials, and after entering my credentials i am getting the error "#1588095935 TYPO3\CMS\Core\Http\Security\MissingReferrerException - Missing referrer for /main".

If i want to access the Install Tool, i am also getting a MissingReferrerException.

I am using a setup with reverse proxy: Client --> nginx reverse proxy --> nginx with typo3

The reverse proxy (nginx) is setting a "same-origin" Referrer-Policy Header.
I already tried to debug and find the problem, but without any success... meanwhile i am pretty sure, that this is a bug.

I had the issue with Firefox 77.0b6, Firefox 68.8.0esr and Chromium 80.0.3987.149.

I already had seen a similar issue with v9.5.17 (https://forge.typo3.org/issues/91414) here. I guess the bug is existing in v10.4.2 as well as in v9.5.17...


Related issues 2 (0 open2 closed)

Related to TYPO3 Core - Bug #91414: After update from 9.5.16 to 9.5.17 I get an error 'Missing referrer for /main' in /typo3Closed2020-05-15

Actions
Related to TYPO3 Core - Bug #91406: "#1588095936: Missing referrer for Install Tool" in TYPO3 7.6.42 ELTSClosedAndreas Kienast2020-05-14

Actions
Actions

Also available in: Atom PDF