Lucene search
MitreCVE-2013-7074HistoryDec 21, 2013 - 12:55 a.m.
CVE-2013-7074
2013-12-2100:55:04
CWE-79
mitre
web.nvd.nist.gov
40
typo3
cross-site scripting
xss
security vulnerability
content editing wizard
cve-2013-7074
nvd
CVSS2
3.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
AI Score
5.2
Confidence
High
EPSS
0.001
Percentile
43.6%
Multiple cross-site scripting (XSS) vulnerabilities in Content Editing Wizards in TYPO3 4.5.x before 4.5.32, 4.7.x before 4.7.17, 6.0.x before 6.0.12, 6.1.x before 6.1.7, and the development versions of 6.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters.
Affected configurations
Node
typo3typo3Match6.1
ORtypo3typo3Match6.1.1
ORtypo3typo3Match6.1.2
ORtypo3typo3Match6.1.3
ORtypo3typo3Match6.1.4
ORtypo3typo3Match6.1.5
ORtypo3typo3Match6.1.6
Node
typo3typo3Match4.7.0
ORtypo3typo3Match4.7.1
ORtypo3typo3Match4.7.2
ORtypo3typo3Match4.7.3
ORtypo3typo3Match4.7.4
ORtypo3typo3Match4.7.5
ORtypo3typo3Match4.7.6
ORtypo3typo3Match4.7.7
ORtypo3typo3Match4.7.8
ORtypo3typo3Match4.7.9
ORtypo3typo3Match4.7.10
ORtypo3typo3Match4.7.11
ORtypo3typo3Match4.7.12
ORtypo3typo3Match4.7.13
ORtypo3typo3Match4.7.14
ORtypo3typo3Match4.7.15
ORtypo3typo3Match4.7.16
Node
typo3typo3Match6.2.0beta1
ORtypo3typo3Match6.2.0beta2
ORtypo3typo3Match6.2.0beta3
Node
typo3typo3Match4.5.0
ORtypo3typo3Match4.5.1
ORtypo3typo3Match4.5.2
ORtypo3typo3Match4.5.3
ORtypo3typo3Match4.5.4
ORtypo3typo3Match4.5.5
ORtypo3typo3Match4.5.6
ORtypo3typo3Match4.5.7
ORtypo3typo3Match4.5.8
ORtypo3typo3Match4.5.9
ORtypo3typo3Match4.5.10
ORtypo3typo3Match4.5.11
ORtypo3typo3Match4.5.12
ORtypo3typo3Match4.5.13
ORtypo3typo3Match4.5.14
ORtypo3typo3Match4.5.15
ORtypo3typo3Match4.5.16
ORtypo3typo3Match4.5.17
ORtypo3typo3Match4.5.18
ORtypo3typo3Match4.5.19
ORtypo3typo3Match4.5.20
ORtypo3typo3Match4.5.21
ORtypo3typo3Match4.5.22
ORtypo3typo3Match4.5.23
ORtypo3typo3Match4.5.24
ORtypo3typo3Match4.5.25
ORtypo3typo3Match4.5.26
ORtypo3typo3Match4.5.27
ORtypo3typo3Match4.5.28
ORtypo3typo3Match4.5.29
ORtypo3typo3Match4.5.30
ORtypo3typo3Match4.5.31
Node
typo3typo3Match6.0
ORtypo3typo3Match6.0.1
ORtypo3typo3Match6.0.2
ORtypo3typo3Match6.0.3
ORtypo3typo3Match6.0.4
ORtypo3typo3Match6.0.5
ORtypo3typo3Match6.0.6
ORtypo3typo3Match6.0.7
ORtypo3typo3Match6.0.8
ORtypo3typo3Match6.0.9
ORtypo3typo3Match6.0.10
ORtypo3typo3Match6.0.11
| Vendor | Product | Version | CPE |
|---|---|---|---|
| typo3 | typo3 | 6.1 | cpe:2.3:a:typo3:typo3:6.1:*:*:*:*:*:*:* |
| typo3 | typo3 | 6.1.1 | cpe:2.3:a:typo3:typo3:6.1.1:*:*:*:*:*:*:* |
| typo3 | typo3 | 6.1.2 | cpe:2.3:a:typo3:typo3:6.1.2:*:*:*:*:*:*:* |
| typo3 | typo3 | 6.1.3 | cpe:2.3:a:typo3:typo3:6.1.3:*:*:*:*:*:*:* |
| typo3 | typo3 | 6.1.4 | cpe:2.3:a:typo3:typo3:6.1.4:*:*:*:*:*:*:* |
| typo3 | typo3 | 6.1.5 | cpe:2.3:a:typo3:typo3:6.1.5:*:*:*:*:*:*:* |
| typo3 | typo3 | 6.1.6 | cpe:2.3:a:typo3:typo3:6.1.6:*:*:*:*:*:*:* |
| typo3 | typo3 | 4.7.0 | cpe:2.3:a:typo3:typo3:4.7.0:*:*:*:*:*:*:* |
| typo3 | typo3 | 4.7.1 | cpe:2.3:a:typo3:typo3:4.7.1:*:*:*:*:*:*:* |
| typo3 | typo3 | 4.7.2 | cpe:2.3:a:typo3:typo3:4.7.2:*:*:*:*:*:*:* |
Related
prion
prion
Cross site scripting
2013-12-21 00:55:00
ubuntucve
ubuntucve
CVE-2013-7074
2013-12-21 00:00:00
nvd
nvd
CVE-2013-7074
2013-12-21 00:55:04
github
github
osv
osv
cvelist
cvelist
CVE-2013-7074
2013-12-21 00:00:00
openvas
openvas
TYPO3 Multiple Vulnerabilities (Dec 2013)
2014-01-06 00:00:00
Debian: Security Advisory (DSA-2834-1)
2013-12-31 00:00:00
Debian Security Advisory DSA 2834-1 (typo3-src - several vulnerabilities)
2014-01-01 00:00:00
debian
debian
[SECURITY] [DSA 2834-1] typo3-src security update
2014-01-01 16:19:19
[SECURITY] [DSA 2834-1] typo3-src security update
2014-01-01 16:19:19
nessus
nessus
Debian DSA-2834-1 : typo3-src - several vulnerabilities
2014-01-02 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 2834-1] typo3-src security update
2014-01-09 00:00:00
typo3
typo3
Multiple Vulnerabilities in TYPO3 CMS
2013-12-10 00:00:00
CVSS2
3.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
AI Score
5.2
Confidence
High
EPSS
0.001
Percentile
43.6%
Related for CVE-2013-7074