Lucene search

CVE-2023-47125

🗓️ 14 Nov 2023 20:07:15Reported by GoogleType

osv🔗 osv.dev👁 12 Views

TYPO3 PHP web content management system vulnerability with DOM processing instructions bypassing XSS mechanism

Reporter	Title	Published	Views	Family All 12
OSV	BIT-typo3-2023-47125	6 Mar 202411:07	–	osv
OSV	Bypassing Cross-Site Scripting Protection in TYPO3 HTML Sanitizer	14 Nov 202320:33	–	osv
Github Security Blog	Bypassing Cross-Site Scripting Protection in TYPO3 HTML Sanitizer	14 Nov 202320:33	–	github
NVD	CVE-2023-47125	14 Nov 202320:15	–	nvd
Cvelist	CVE-2023-47125 By-passing Cross-Site Scripting Protection in HTML Sanitizer	14 Nov 202320:07	–	cvelist
Vulnrichment	CVE-2023-47125 By-passing Cross-Site Scripting Protection in HTML Sanitizer	14 Nov 202320:07	–	vulnrichment
CVE	CVE-2023-47125	14 Nov 202320:15	–	cve
Prion	Cross site scripting	14 Nov 202320:15	–	prion
Tenable Nessus	TYPO3 8.7.42 < 8.7.55 ELTS / 9.5.29 < 9.5.44 ELTS / 10.4.19 < 10.4.41 ELTS / 11.3.2 < 11.5.33 / 12.0.0 < 12.4.8 XSS (TYPO3-CORE-SA-2023-007)	14 Nov 202300:00	–	nessus
Tenable Nessus	FreeBSD : typo3 -- Multiple vulnerabilities (7cc003cb-83b9-11ee-957d-b42e991fc52e)	15 Nov 202300:00	–	nessus

Source	Link
github	www.github.com/TYPO3/html-sanitizer/security/advisories/GHSA-mm79-jhqm-9j54
typo3	www.typo3.org/security/advisory/typo3-core-sa-2023-007
github	www.github.com/TYPO3/html-sanitizer/commit/b8f90717251d968c49dc77f8c1e5912e2fbe0dff

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

14 Nov 2023 20:15Current

6Medium risk

Vulners AI Score6

CVSS34.7 - 6.1

EPSS0.001

SSVC