Typo3 Exception Handler XSS

🗓️ 17 May 2022 01:46:40Reported by GitHub Advisory DatabaseType

github

github🔗 github.com👁 18 Views

TYPO3 Exception Handler XSS vulnerability in versions 4.4.x - 4.7

Reporter	Title	Published	Views	Family All 20
FreeBSD	typo -- Cross-Site Scripting	17 Apr 201200:00	–	freebsd
CVE	CVE-2012-2112	27 Aug 201221:00	–	cve
Cvelist	CVE-2012-2112	27 Aug 201221:00	–	cvelist
Debian	[SECURITY] [DSA 2455-1] typo3-src security update	20 Apr 201218:05	–	debian
Tenable Nessus	Debian DSA-2455-1 : typo3-src - missing input sanitization	23 Apr 201200:00	–	nessus
Tenable Nessus	FreeBSD : typo -- XSS (67516177-88ec-11e1-9a10-0023ae8e59f0)	19 Apr 201200:00	–	nessus
EUVD	EUVD-2022-4961	3 Oct 202520:07	–	euvd
NVD	CVE-2012-2112	27 Aug 201221:55	–	nvd
OpenVAS	Debian: Security Advisory (DSA-2455-1)	30 Apr 201200:00	–	openvas
OpenVAS	FreeBSD Ports: typo3	30 Apr 201200:00	–	openvas

Vulners

Node

typo3 cms_poll_system_extensionMatch4.7composer

OR

typo3 cms_poll_system_extensionRange4.6–4.6.8composer

OR

typo3 cms_poll_system_extensionRange4.5–4.5.15composer

OR

typo3 cms_poll_system_extensionRange4.4–4.4.15composer

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2012-2112
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/74920
lists	www.lists.typo3.org/pipermail/typo3-announce/2012/000241.html
lists	www.lists.typo3.org/pipermail/typo3-announce/2012/000242.html
typo3	www.typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-002/
debian	www.debian.org/security/2012/dsa-2455
openwall	www.openwall.com/lists/oss-security/2012/04/17/5
openwall	www.openwall.com/lists/oss-security/2012/04/18/1
web	www.web.archive.org/web/20120421201555/http://www.securityfocus.com/bid/53047
github	www.github.com/advisories/GHSA-qfr3-29w6-hwpg

12 Jan 2024 18:01Current

6Medium risk

Vulners AI Score6

CVSS 24.3

EPSS0.00503

cross-site scripting typo3 4.4.x 4.5.x 4.6.x 4.7 exception handler xss vulnerability