Lucene search
MitreCVE-2014-6237HistorySep 11, 2014 - 2:16 p.m.
CVE-2014-6237
2014-09-1114:16:05
CWE-79
mitre
web.nvd.nist.gov
27
cve
2014
6237
cross-site scripting
xss
typo3
news pack
extension
security vulnerability
CVSS2
3.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
AI Score
5.4
Confidence
High
EPSS
0.001
Percentile
38.4%
Cross-site scripting (XSS) vulnerability in the News Pack extension 0.1.0 and earlier for TYPO3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
Node
news_pack_projectnews_packMatch0.1.0typo3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| news_pack_project | news_pack | 0.1.0 | cpe:2.3:a:news_pack_project:news_pack:0.1.0:*:*:*:*:typo3:*:* |
Related
prion
prion
Cross site scripting
2014-09-11 14:16:00
cvelist
cvelist
CVE-2014-6237
2014-09-11 14:00:00
nvd
nvd
CVE-2014-6237
2014-09-11 14:16:05
typo3
typo3
Several vulnerabilities in third party extensions
2014-09-02 00:00:00
CVSS2
3.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
AI Score
5.4
Confidence
High
EPSS
0.001
Percentile
38.4%
Related for CVE-2014-6237