Lucene search
OpenJS FoundationFRIENDSOFPHP:TYPO3:CMS:CVE-2022-36020HistorySep 13, 2022 - 8:07 a.m.
TYPO3-CORE-SA-2022-011: By-passing Cross-Site Scripting Protection in HTML Sanitizer
2022-09-1308:07:02
OpenJS Foundation
github.com
9
typo3
core
cross-site scripting
protection
html
sanitizer
software
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
AI Score
7.2
Confidence
Low
EPSS
0.001
Percentile
47.8%
Affected configurations
Node
typo3typo3_cmsRange<11.5.16
Related
osv
osv
TYPO3 HTML Sanitizer Bypasses Cross-Site Scripting Protection
2022-09-16 18:50:12
CVE-2022-36020
2022-09-13 17:15:08
prion
prion
Cross site scripting
2022-09-13 17:15:00
github
github
TYPO3 HTML Sanitizer Bypasses Cross-Site Scripting Protection
2022-09-16 18:50:12
veracode
veracode
Cross-site Scripting (XSS)
2022-09-14 06:11:19
openvas
openvas
TYPO3 XSS Vulnerability (TYPO3-CORE-SA-2022-011)
2022-12-15 00:00:00
friendsofphp
friendsofphp
nvd
nvd
CVE-2022-36020
2022-09-13 17:15:08
cvelist
cvelist
cve
cve
CVE-2022-36020
2022-09-13 17:15:08
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
AI Score
7.2
Confidence
Low
EPSS
0.001
Percentile
47.8%
Related for FRIENDSOFPHP:TYPO3:CMS:CVE-2022-36020