Lucene search

K
osvGoogleOSV:GHSA-7GG8-3R6J-5G55
HistoryMay 17, 2022 - 1:43 a.m.

Typo3 Backend Configuration XSS Vulnerability

2022-05-1701:43:54
Google
osv.dev
2

6.2 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

65.1%

The configuration module in the backend in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 and 4.7.x before 4.7.4 allows remote authenticated backend users to obtain the encryption key via unspecified vectors.

6.2 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

65.1%