Lucene search

Ubuntu.comUB:CVE-2012-3528

HistorySep 05, 2012 - 12:00 a.m.

CVE-2012-3528

2012-09-0500:00:00

ubuntu.com

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

43.4%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in the backend in TYPO3
4.5.x before 4.5.19, 4.6.x before 4.6.12 and 4.7.x before 4.7.4 allow
remote authenticated backend users to inject arbitrary web script or HTML
via unspecified vectors.

Bugs

<http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=685011>

OSVersionArchitecturePackageVersionFilename
ubuntu11.04noarchtypo3-src< 4.3.9+dfsg1-1+squeeze5build0.11.04.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	11.04	noarch	typo3-src	< 4.3.9+dfsg1-1+squeeze5build0.11.04.1	UNKNOWN

References

typo3.org/support/teams-security-security-bulletins/security-bulletins-single-view/article/several-vulnerabilities-in-typo3-core/

launchpad.net/bugs/cve/CVE-2012-3528

nvd.nist.gov/vuln/detail/CVE-2012-3528

security-tracker.debian.org/tracker/CVE-2012-3528

www.cve.org/CVERecord?id=CVE-2012-3528

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

43.4%

JSON

Related for UB:CVE-2012-3528