TYPO3 CMS vulnerable to Cross-Site Scripting in <f:asset.css> view helper

🗓️ 16 Sep 2022 17:14:27Reported by GitHub Advisory DatabaseType

TYPO3 CSS View Helper XSS Vulnerability Fixe

Reporter	Title	Published	Views	Family All 16
CNNVD	TYPO3 跨站脚本漏洞	13 Sep 202200:00	–	cnnvd
CVE	CVE-2022-36108	13 Sep 202217:20	–	cve
Cvelist	CVE-2022-36108 Cross-Site Scripting in typo3/cms-core	13 Sep 202217:20	–	cvelist
EUVD	EUVD-2022-6809	3 Oct 202520:07	–	euvd
Friends Of PHP	TYPO3-CORE-SA-2022-010: Cross-Site Scripting in <f:asset.css> view helper	13 Sep 202208:06	–	friendsofphp
Friends Of PHP	TYPO3-CORE-SA-2022-010: Cross-Site Scripting in <f:asset.css> view helper	13 Sep 202208:06	–	friendsofphp
NCSC	Vulnerabilities fixed in TYPO3	13 Sep 202200:00	–	ncsc
NVD	CVE-2022-36108	13 Sep 202218:15	–	nvd
OpenVAS	TYPO3 XSS Vulnerability (TYPO3-CORE-SA-2022-010)	19 Sep 202200:00	–	openvas
OSV	BIT-TYPO3-2022-36108	6 Mar 202411:08	–	osv

Vulners

Node

typo3 cms-coreRange11.0.0–11.5.16composer

typo3 cms-coreRange10.3.0–10.4.32composer

Source	Link
github	www.github.com/TYPO3/typo3/security/advisories/GHSA-fv2m-9249-qx85
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-36108
github	www.github.com/TYPO3/typo3/commit/6863f73818c36b0b88c677ba533765c8074907b4
github	www.github.com/TYPO3/typo3/commit/c62e16fac031c270d9759c7261e504c7e25405df
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2022-36108.yaml
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2022-36108.yaml
typo3	www.typo3.org/security/advisory/typo3-core-sa-2022-010
github	www.github.com/advisories/GHSA-fv2m-9249-qx85

27 Jan 2023 05:03Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.16.1 - 6.5

EPSS0.00687