Lucene search
PRIOn knowledge basePRION:CVE-2023-47125HistoryNov 14, 2023 - 8:15 p.m.
Cross site scripting
2023-11-1420:15:00
PRIOn knowledge base
www.prio-n.com
2
typo3
php
cms
xss
gnu gpl
dom processing
vulnerability
patch
upgrade
TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected versions DOM processing instructions are not handled correctly. This allows bypassing the cross-site scripting mechanism of typo3/html-sanitizer. This vulnerability has been addressed in versions 1.5.3 and 2.1.4. Users are advised to upgrade. There are no known workarounds for this vulnerability.
| CPE | Name | Operator | Version |
|---|---|---|---|
| html_sanitizer | ge | 2.0.0 | |
| html_sanitizer | lt | 2.1.4 | |
| html_sanitizer | ge | 1.0.0 | |
| html_sanitizer | lt | 1.5.3 | |
| typo3 | ge | 10.4.19 | |
| typo3 | lt | 10.4.41 | |
| typo3 | ge | 9.5.29 | |
| typo3 | lt | 9.5.44 | |
| typo3 | ge | 8.7.42 | |
| typo3 | lt | 8.7.55 |
Related
osv
osv
BIT-typo3-2023-47125
2024-03-06 11:07:53
CVE-2023-47125
2023-11-14 20:15:07
Bypassing Cross-Site Scripting Protection in TYPO3 HTML Sanitizer
2023-11-14 20:33:27
nvd
nvd
CVE-2023-47125
2023-11-14 20:15:07
github
github
Bypassing Cross-Site Scripting Protection in TYPO3 HTML Sanitizer
2023-11-14 20:33:27
cve
cve
CVE-2023-47125
2023-11-14 20:15:07
cvelist
cvelist
CVE-2023-47125 By-passing Cross-Site Scripting Protection in HTML Sanitizer
2023-11-14 20:07:56
veracode
veracode
Cross Site Scripting (XSS)
2023-11-16 10:43:14
nessus
nessus
freebsd
freebsd
typo3 -- Multiple vulnerabilities
2023-11-14 00:00:00