Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Cross-Site Scripting in Query Generator & Query View

šŸ—“ļøĀ 22 Jul 2021Ā 19:36:58Reported byĀ GitHub Advisory DatabaseTypeĀ 
github
Ā githubšŸ”—Ā github.comšŸ‘Ā 57Ā Views

Failing to properly encode error messages, the QueryGenerator & QueryView components are vulnerable to reflected and persistent cross-site scripting. Update to TYPO3 versions 8.7.41 ELTS, 9.5.28, 10.4.18, 11.3.1 to fix the problem

Related
Detection
Refs
ReporterTitlePublishedViews
Family
Circl		CVE-2021-32668
20 Jul 202118:33
ā€“circl
CNNVD		TYPO3 č·Øē«™č„šęœ¬ę¼ę“ž
20 Jul 202100:00
ā€“cnnvd
CNVD		TYPO3 Cross-Site Scripting Vulnerability (CNVD-2022-17986)
22 Jul 202100:00
ā€“cnvd
CVE		CVE-2021-32668
20 Jul 202114:45
ā€“cve
Cvelist		CVE-2021-32668 Cross-Site Scripting in Query Generator & Query View
20 Jul 202114:45
ā€“cvelist
EUVD		EUVD-2021-1445
7 Oct 202500:30
ā€“euvd
Friends Of PHP		TYPO3-CORE-SA-2021-010: Cross-Site Scripting in Query Generator & Query View
20 Jul 202109:14
ā€“friendsofphp
Friends Of PHP		TYPO3-CORE-SA-2021-010: Cross-Site Scripting in Query Generator & Query View
20 Jul 202109:14
ā€“friendsofphp
NCSC		Vulnerabilities fixed in Typo3
20 Jul 202100:00
ā€“ncsc
NVD		CVE-2021-32668
20 Jul 202115:15
ā€“nvd
Rows per page
Vulners
Node
typo3cms_poll_system_extensionRange9.0.0ā€“9.5.28composer
OR
typo3cms_poll_system_extensionRange11.0.0ā€“11.3.1composer
OR
typo3cms_poll_system_extensionRange10.0.0ā€“10.4.18composer
OR
typo3cms-coreRange11.0.0ā€“11.3.1composer
OR
typo3cms-coreRange10.0.0ā€“10.4.18composer
OR
typo3cms-coreRange9.0.0ā€“9.5.28composer
OR
typo3cms-coreRange8.0.0ā€“8.7.41composer

Data

Build on a solid foundation withĀ Vulners data

WeĀ provide theĀ essential building blocks forĀ cybersecurity solutions withĀ comprehensive, structured, andĀ constantly updated vulnerability andĀ exploits data

Api

Power your application withĀ Vulners API

The Vulners REST API offers reliable, high-performance access toĀ vulnerabilityĀ intelligence, withĀ 99.9%Ā SLAĀ uptime andĀ CDN-backed data delivery forĀ seamlessĀ global access

App

Assess and manage vulnerabilities withĀ VulnersĀ tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
05 Feb 2024 11:17Current
1.7Low risk
Vulners AI Score1.7
CVSS 23.5
CVSS 3.14.8 - 6.4
EPSS0.00364
CWE-79
cross-site scriptingquerygeneratorqueryviewtypo3eltsvulnerabilityreflectedpersistentupdatesecurity advisory
57