Lucene search

K
friendsofphpOpenJS FoundationFRIENDSOFPHP:TYPO3:CMS:CVE-2022-36107
HistorySep 13, 2022 - 8:06 a.m.

TYPO3-CORE-SA-2022-009: Stored Cross-Site Scripting via FileDumpController

2022-09-1308:06:41
OpenJS Foundation
github.com
10
typo3
cross-site scripting
filedumpcontroller
security advisory

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

AI Score

7.2

Confidence

Low

EPSS

0.001

Percentile

25.1%

Affected configurations

Vulners
Node
typo3typo3_cmsRange<11.5.16
VendorProductVersionCPE
typo3typo3_cms*cpe:2.3:a:typo3:typo3_cms:*:*:*:*:*:*:*:*

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

AI Score

7.2

Confidence

Low

EPSS

0.001

Percentile

25.1%

Related for FRIENDSOFPHP:TYPO3:CMS:CVE-2022-36107