~ / search / GHSA-g857-p997-wx7w

GHSA-g857-p997-wx7w

TYPO3 Backend vulnerable to Cross-site Scripting

Source: GitHub Advisory Database (reviewed) Low CVE-2009-3629

Packages

EcosystemPackageAffectedFixed in
Packagist typo3/cms-backend <= 4.0.13 no fix listed
Packagist typo3/cms-backend >= 4.1.0, < 4.1.13 4.1.13
Packagist typo3/cms-backend >= 4.2.0, < 4.2.10 4.2.10
Packagist typo3/cms-backend >= 4.3alpha1, < 4.3beta2 4.3beta2

Details

As written in the advisory (Markdown source, shown as plain text).

Multiple cross-site scripting (XSS) vulnerabilities in the Backend subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

References

External links from the advisory. They lead to third-party sites.