Cross-Site Scripting via Rich-Text Content

🗓️ 19 Aug 2021 15:53:12Reported by GitHub Advisory DatabaseType

Cross-Site Scripting vulnerability in TYPO3 due to unsanitized rich-text content rendering via HTMLparse

Reporter	Title	Published	Views	Family All 18
Circl	CVE-2021-32768	10 Aug 202120:37	–	circl
CNNVD	TYPO3跨站脚本漏洞	10 Aug 202100:00	–	cnnvd
CNVD	TYPO3 Cross-Site Scripting Vulnerability (CNVD-2022-17973)	16 Aug 202100:00	–	cnvd
CVE	CVE-2021-32768	10 Aug 202116:30	–	cve
Cvelist	CVE-2021-32768 Cross-Site Scripting via Rich-Text Content	10 Aug 202116:30	–	cvelist
EUVD	EUVD-2021-1673	7 Oct 202500:30	–	euvd
Friends Of PHP	TYPO3-CORE-SA-2021-013: Cross-Site Scripting via Rich-Text Content	10 Aug 202107:50	–	friendsofphp
Friends Of PHP	TYPO3-CORE-SA-2021-013: Cross-Site Scripting via Rich-Text Content	10 Aug 202107:50	–	friendsofphp
NVD	CVE-2021-32768	10 Aug 202117:15	–	nvd
OpenVAS	TYPO3 XSS Vulnerability (TYPO3-CORE-SA-2021-013)	11 Aug 202100:00	–	openvas

Vulners

Node

typo3 cms-coreRange9.0.0–9.5.29composer

typo3 cms-coreRange11.0.0–11.3.2composer

typo3 cms-coreRange10.0.0–10.4.19composer

typo3 cms-coreRange8.0.0–8.7.42composer

typo3 cms-coreRange7.0.0–7.6.53composer

Source	Link
github	www.github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-c5c9-8c6m-727v
github	www.github.com/TYPO3/typo3/security/advisories/GHSA-c5c9-8c6m-727v
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-32768
typo3	www.typo3.org/security/advisory/typo3-core-sa-2021-013
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-32768.yaml
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-32768.yaml
github	www.github.com/advisories/GHSA-c5c9-8c6m-727v

07 Feb 2024 18:51Current

1.1Low risk

Vulners AI Score1.1

CVSS 24.3

CVSS 3.16.1

EPSS0.00284