GitHub Advisory DatabaseGHSA-7WWR-P84Q-QR3QTypo3 Backend XSS Vulnerabilities
3.5 Low
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
0.001 Low
EPSS
Percentile
42.2%
Multiple cross-site scripting (XSS) vulnerabilities in the Backend component in TYPO3 4.4.0 through 4.4.13, 4.5.0 through 4.5.13, 4.6.0 through 4.6.6, 4.7, and 6.0 allow remote authenticated backend users to inject arbitrary web script or HTML via unspecified vectors.
References
typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-001/
www.debian.org/security/2012/dsa-2445
www.openwall.com/lists/oss-security/2012/03/30/4
github.com/advisories/GHSA-7wwr-p84q-qr3q
nvd.nist.gov/vuln/detail/CVE-2012-1606
web.archive.org/web/20120527123559/www.securityfocus.com/bid/52771
Related
3.5 Low
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
0.001 Low
EPSS
Percentile
42.2%