Lucene search

K
osvGoogleOSV:GHSA-2HP4-8H6H-93RR
HistoryMay 17, 2022 - 4:43 a.m.

Typo3 Backend History Module Vulnerable to XSS

2022-05-1704:43:27
Google
osv.dev
3

6.4 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

35.8%

The Backend History Module in TYPO3 4.5.x before 4.5.21, 4.6.x before 4.6.14, and 4.7.x before 4.7.6 does not properly restrict access, which allows remote authenticated editors to read the history of arbitrary records via a crafted URL.

6.4 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

35.8%

Related for OSV:GHSA-2HP4-8H6H-93RR