GitHub Advisory DatabaseGHSA-9HH2-8CW6-HFV7TYPO3 Cross-Site Scripting vulnerability in the Install Tool
3.5 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
5.7 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
45.1%
Multiple cross-site scripting (XSS) vulnerabilities in the Install Tool in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| typo3/cms-install | lt | 4.4.5 | |
| typo3/cms-install | lt | 4.3.9 | |
| typo3/cms-install | lt | 4.2.16 |
References
secunia.com/advisories/35770
typo3.org/teams/security/security-bulletins/typo3-core/typo3-sa-2010-022/
www.openwall.com/lists/oss-security/2011/01/13/2
www.openwall.com/lists/oss-security/2012/05/10/7
www.openwall.com/lists/oss-security/2012/05/11/3
www.osvdb.org/70120
www.securityfocus.com/bid/45470
exchange.xforce.ibmcloud.com/vulnerabilities/64181
github.com/advisories/GHSA-9hh2-8cw6-hfv7
github.com/TYPO3/typo3/commit/9bb2fe60d8938048c9049e2d660c0ae8409b21d4
github.com/TYPO3/typo3/commit/cf974942d1738b6b38c506a30a808c5e405d3ca2
github.com/TYPO3/typo3/commit/e892f0a17f40d703fd71ee66490dee15b132909c
nvd.nist.gov/vuln/detail/CVE-2010-5100
Related
3.5 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
5.7 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
45.1%