GoogleOSV:GHSA-9HH2-8CW6-HFV7TYPO3 Cross-Site Scripting vulnerability in the Install Tool
Multiple cross-site scripting (XSS) vulnerabilities in the Install Tool in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
References
secunia.com/advisories/35770
typo3.org/teams/security/security-bulletins/typo3-core/typo3-sa-2010-022
www.openwall.com/lists/oss-security/2011/01/13/2
www.openwall.com/lists/oss-security/2012/05/10/7
www.openwall.com/lists/oss-security/2012/05/11/3
www.osvdb.org/70120
www.securityfocus.com/bid/45470
exchange.xforce.ibmcloud.com/vulnerabilities/64181
github.com/TYPO3-CMS/install
github.com/TYPO3/typo3/commit/9bb2fe60d8938048c9049e2d660c0ae8409b21d4
github.com/TYPO3/typo3/commit/cf974942d1738b6b38c506a30a808c5e405d3ca2
github.com/TYPO3/typo3/commit/e892f0a17f40d703fd71ee66490dee15b132909c
nvd.nist.gov/vuln/detail/CVE-2010-5100
Related
