TYPO3 CMS Stored Cross-Site Scripting via FileDumpController

🗓️ 16 Sep 2022 17:15:57Reported by GitHub Advisory DatabaseType

TYPO3 CMS FileDumpController XSS vulnerability fix availabl

Reporter	Title	Published	Views	Family All 18
Huntr	Stored Cross-Site Scripting (XSS)	25 Aug 202222:20	–	huntr
Circl	CVE-2022-36107	13 Sep 202222:25	–	circl
CNNVD	TYPO3 跨站脚本漏洞	13 Sep 202200:00	–	cnnvd
CVE	CVE-2022-36107	13 Sep 202217:30	–	cve
Cvelist	CVE-2022-36107 Stored Cross-Site Scripting via FileDumpController	13 Sep 202217:30	–	cvelist
EUVD	EUVD-2022-6755	3 Oct 202520:07	–	euvd
Friends Of PHP	TYPO3-CORE-SA-2022-009: Stored Cross-Site Scripting via FileDumpController	13 Sep 202208:06	–	friendsofphp
Friends Of PHP	TYPO3-CORE-SA-2022-009: Stored Cross-Site Scripting via FileDumpController	13 Sep 202208:06	–	friendsofphp
NCSC	Vulnerabilities fixed in TYPO3	13 Sep 202200:00	–	ncsc
NVD	CVE-2022-36107	13 Sep 202218:15	–	nvd

Vulners

Node

typo3 cms-coreRange11.0.0–11.5.16composer

typo3 cms-coreRange10.0.0–10.4.32composer

typo3 cms-coreRange9.0.0–9.5.37composer

typo3 cms-coreRange8.0.0–8.7.48composer

typo3 cms-coreRange7.0.0–7.6.58composer

Source	Link
github	www.github.com/TYPO3/typo3/security/advisories/GHSA-9c6w-55cp-5w25
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-36107
github	www.github.com/TYPO3/typo3/commit/546208428c861a09d62b86cde141eb19a81fae66
github	www.github.com/TYPO3/typo3/commit/bd58d2ff2eeef89e63ef754a2389597d22622a39
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2022-36107.yaml
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2022-36107.yaml
typo3	www.typo3.org/security/advisory/typo3-core-sa-2022-009
github	www.github.com/advisories/GHSA-9c6w-55cp-5w25

27 Jan 2023 05:03Current

5.3Medium risk

Vulners AI Score5.3

CVSS 3.15.4 - 6.5

EPSS0.00687