Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

WS-2019-0008

Good to know:

icon

Date: December 11, 2018

TYPO3 versions 7.1.0-7.6.31, 8.5.0-8.7.20 and 9.0.0-9.5.1 Failing to properly encode user input, notifications shown in modal windows in the TYPO3 backend are vulnerable to cross-site scripting.

Language: JS

Severity Score

Related Resources (3)

https://github.com/TYPO3/TYPO3.CMS/commit/02cd5c97228cba477d16c68e28309ce25c433ce9
https://typo3.org/security/advisory/typo3-core-sa-2018-007/
https://www.mend.io/vulnerability-database/WS-2019-0008

Severity Score

Weakness Type (CWE)

Code

CWE-17

Top Fix

icon

Upgrade Version

Upgrade to version TYPO3_7-6-32,TYPO3_8-7-21,v9.5.2

Learn More

CVSS v3

Base Score:
Attack Vector (AV):
Attack Complexity (AC):
Privileges Required (PR):
User Interaction (UI):
Scope (S):
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): PARTIAL

Do you need more information?

Contact Us