TYPO3 Fluid Engine is vulnerable to cross-site scripting via ternary conditional operator in templates
Reporter | Title | Published | Views | Family All 16 |
---|---|---|---|---|
![]() | CVE-2020-15241 Cross-Site Scripting in TYPO3 Fluid Engine | 8 Oct 202020:15 | – | cvelist |
![]() | TYPO3 Input Validation Error Vulnerability (CNVD-2021-26151) | 11 Oct 202000:00 | – | cnvd |
![]() | Cross-Site Scripting (XSS) | 9 Oct 202004:11 | – | veracode |
![]() | CVE-2020-15241 | 8 Oct 202021:15 | – | osv |
![]() | GHSA-7733-HJV6-4H47 Cross-Site Scripting in ternary conditional operator | 8 Oct 202019:55 | – | osv |
![]() | BIT-TYPO3-2020-15241 | 6 Mar 202411:11 | – | osv |
![]() | Cross site scripting | 8 Oct 202021:15 | – | prion |
![]() | Cross-Site Scripting in Fluid Engine | 7 May 201906:59 | – | friendsofphp |
![]() | Cross-Site Scripting in Fluid Engine | 7 May 201906:59 | – | friendsofphp |
![]() | Cross-Site Scripting in Fluid Engine | 7 May 201909:33 | – | friendsofphp |
[
{
"product": "Fluid",
"vendor": "TYPO3",
"versions": [
{
"status": "affected",
"version": ">= 2.0.0, < 2.0.5"
},
{
"status": "affected",
"version": ">= 2.1.0, < 2.1.4"
},
{
"status": "affected",
"version": ">= 2.2.0, < 2.2.1"
},
{
"status": "affected",
"version": ">= 2.3.0, < 2.3.5"
},
{
"status": "affected",
"version": ">= 2.4.0, < 2.4.1"
},
{
"status": "affected",
"version": ">= 2.5.0, < 2.5.5"
},
{
"status": "affected",
"version": ">= 2.6.0, < 2.6.1"
}
]
}
]
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo