Cross-Site Scripting in TYPO3's Form Framework

🗓️ 17 Jun 2022 20:55:48Reported by GitHub Advisory DatabaseType

Cross-Site Scripting in TYPO3's Form Framework. Update to versions 8.7.47 ELTS, 9.5.35 ELTS, 10.4.29, 11.5.1

Reporter	Title	Published	Views	Family All 18
Circl	CVE-2022-31048	15 Jun 202200:19	–	circl
CNNVD	TYPO3 跨站脚本漏洞	14 Jun 202200:00	–	cnnvd
CVE	CVE-2022-31048	14 Jun 202220:50	–	cve
Cvelist	CVE-2022-31048 Cross-Site Scripting in Form Framework	14 Jun 202220:50	–	cvelist
EUVD	EUVD-2022-5911	3 Oct 202520:07	–	euvd
Friends Of PHP	TYPO3-CORE-SA-2022-003: Cross-Site Scripting in Form Framework	14 Jun 202207:11	–	friendsofphp
Friends Of PHP	TYPO3-CORE-SA-2022-003: Cross-Site Scripting in Form Framework	14 Jun 202207:11	–	friendsofphp
NCSC	Vulnerabilities fixed in TYPO3	14 Jun 202200:00	–	ncsc
NVD	CVE-2022-31048	14 Jun 202221:15	–	nvd
OpenVAS	TYPO3 XSS Vulnerability (TYPO3-CORE-SA-2022-003)	15 Jun 202200:00	–	openvas

Vulners

Node

typo3 cms-coreRange11.0.0–11.5.11composer

typo3 cms-coreRange10.0.0–10.4.29composer

typo3 cms-coreRange9.0.0–9.5.35composer

typo3 cms-coreRange8.0.0–8.7.47composer

Source	Link
github	www.github.com/TYPO3/typo3/security/advisories/GHSA-3r95-23jp-mhvg
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-31048
github	www.github.com/TYPO3/typo3/commit/6f2554dc4ea0b670fd5599c54fd788d4db96c4a0
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2022-31048.yaml
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2022-31048.yaml
typo3	www.typo3.org/security/advisory/typo3-core-sa-2022-003
github	www.github.com/advisories/GHSA-3r95-23jp-mhvg

27 Jan 2023 05:04Current

5.4Medium risk

Vulners AI Score5.4

CVSS 23.5

CVSS 3.15.4

EPSS0.0063

SSVC