Lucene search
GitHub Advisory DatabaseGHSA-6XWF-7RFM-4GWCHistoryMay 30, 2024 - 6:35 p.m.
TYPO3 Cross-Site Scripting in Filelist Module
2024-05-3018:35:47
CWE-79
GitHub Advisory Database
github.com
8
typo3
filelist module
cross-site scripting
vulnerability
file system
server
AI Score
6.5
Confidence
High
It has been discovered that the output table listing in the “Files” backend module is vulnerable to cross-site scripting when a file extension contains malicious sequences.
Access to the file system of the server - either directly or through synchronization - is required to exploit the vulnerability.
Affected configurations
Node
typo3cms-coreRange9.0.0–9.5.12
ORtypo3cms-coreRange8.0.0–8.7.30
ORtypo3cms-coreRange10.0.0–10.2.1
AI Score
6.5
Confidence
High