Lucene search
OpenJS FoundationFRIENDSOFPHP:TYPO3:CMS-CORE:CVE-2022-36020HistorySep 13, 2022 - 8:07 a.m.
TYPO3-CORE-SA-2022-011: By-passing Cross-Site Scripting Protection in HTML Sanitizer
2022-09-1308:07:02
OpenJS Foundation
github.com
7
typo3
core-sa-2022-011
cross-site scripting
html sanitizer
security advisory
software
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
AI Score
7.2
Confidence
Low
EPSS
0.001
Percentile
47.8%
Affected configurations
Node
typo3cms_coreRange<11.5.16
Related
osv
osv
TYPO3 HTML Sanitizer Bypasses Cross-Site Scripting Protection
2022-09-16 18:50:12
CVE-2022-36020
2022-09-13 17:15:08
prion
prion
Cross site scripting
2022-09-13 17:15:00
friendsofphp
friendsofphp
github
github
TYPO3 HTML Sanitizer Bypasses Cross-Site Scripting Protection
2022-09-16 18:50:12
veracode
veracode
Cross-site Scripting (XSS)
2022-09-14 06:11:19
openvas
openvas
TYPO3 XSS Vulnerability (TYPO3-CORE-SA-2022-011)
2022-12-15 00:00:00
nvd
nvd
CVE-2022-36020
2022-09-13 17:15:08
cvelist
cvelist
cve
cve
CVE-2022-36020
2022-09-13 17:15:08
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
AI Score
7.2
Confidence
Low
EPSS
0.001
Percentile
47.8%
Related for FRIENDSOFPHP:TYPO3:CMS-CORE:CVE-2022-36020