Lucene search
OpenJS FoundationFRIENDSOFPHP:TYPO3:CMS-CORE:CVE-2022-23499HistoryDec 13, 2022 - 9:19 a.m.
TYPO3-CORE-SA-2022-017: By-passing Cross-Site Scripting Protection in HTML Sanitizer
2022-12-1309:19:37
OpenJS Foundation
github.com
6
typo3
html sanitizer
security advisory
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
AI Score
7.2
Confidence
Low
EPSS
0.001
Percentile
30.7%
Affected configurations
Node
typo3cms_coreRange<12.1.1
Related
osv
osv
TYPO3 HTML Sanitizer vulnerable to Cross-Site Scripting
2022-12-13 16:59:12
CVE-2022-23499
2022-12-13 21:15:11
nessus
nessus
veracode
veracode
Cross-site Scripting (XSS)
2022-12-14 04:54:30
friendsofphp
friendsofphp
nvd
nvd
CVE-2022-23499
2022-12-13 21:15:11
cve
cve
CVE-2022-23499
2022-12-13 21:15:11
cvelist
cvelist
CVE-2022-23499 Cross-Site Scripting Protection bypass in HTML Sanitizer
2022-12-13 20:29:41
prion
prion
Cross site scripting
2022-12-13 21:15:00
openvas
openvas
TYPO3 XSS Vulnerability (TYPO3-CORE-SA-2022-017)
2022-12-14 00:00:00
github
github
TYPO3 HTML Sanitizer vulnerable to Cross-Site Scripting
2022-12-13 16:59:12
freebsd
freebsd
typo3 -- multiple vulnerabilities
2022-12-13 00:00:00
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
AI Score
7.2
Confidence
Low
EPSS
0.001
Percentile
30.7%
Related for FRIENDSOFPHP:TYPO3:CMS-CORE:CVE-2022-23499