Cross-Site Scripting in Fluid view helpers

🗓️ 21 Dec 2020 16:28:11Reported by GitHub Advisory DatabaseType

Update TYPO3 to fix Cross-Site Scripting issue in Fluid view helper

Reporter	Title	Published	Views	Family All 18
Circl	CVE-2020-26227	24 Nov 202000:46	–	circl
CNNVD	TYPO3 跨站脚本漏洞	17 Nov 202000:00	–	cnnvd
CNVD	TYPO3 cross-site scripting vulnerability (CNVD-2021-26150)	18 Nov 202000:00	–	cnvd
CVE	CVE-2020-26227	23 Nov 202021:05	–	cve
Cvelist	CVE-2020-26227 Cross-Site Scripting in Fluid view helpers	23 Nov 202021:05	–	cvelist
EUVD	EUVD-2020-1506	7 Oct 202500:30	–	euvd
Friends Of PHP	TYPO3-CORE-SA-2020-010: Cross-Site Scripting in Fluid view helpers	17 Nov 202008:49	–	friendsofphp
Friends Of PHP	TYPO3-CORE-SA-2020-010: Cross-Site Scripting in Fluid view helpers	17 Nov 202008:49	–	friendsofphp
NCSC	Vulnerabilities fixed in TYPO3	18 Nov 202000:00	–	ncsc
NVD	CVE-2020-26227	23 Nov 202021:15	–	nvd

Vulners

Node

typo3 cms-coreRange8.7.0–8.7.38composer

typo3 cms-coreRange10.0.0–10.4.10composer

typo3 cms-coreRange9.0.0–9.5.23composer

Source	Link
github	www.github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-vqqx-jw6p-q3rf
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-26227
packagist	www.packagist.org/packages/typo3/cms-core
typo3	www.typo3.org/security/advisory/typo3-core-sa-2020-010
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2020-26227.yaml
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2020-26227.yaml
github	www.github.com/advisories/GHSA-vqqx-jw6p-q3rf

01 Feb 2024 18:55Current

5.8Medium risk

Vulners AI Score5.8

CVSS 24.3

CVSS 3.16.1

EPSS0.00359