Cross-site Scripting (XSS)

🗓️ 14 Sep 2022 06:07:36Reported by Veracode Vulnerability DatabaseType

typo3/cms FileDumpController.php vulnerabilit

Reporter	Title	Published	Views	Family All 20
Huntr	Stored Cross-Site Scripting (XSS)	25 Aug 202222:20	–	huntr
Circl	CVE-2022-36107	13 Sep 202222:25	–	circl
CNNVD	TYPO3 跨站脚本漏洞	13 Sep 202200:00	–	cnnvd
CVE	CVE-2022-36107	13 Sep 202217:30	–	cve
Cvelist	CVE-2022-36107 Stored Cross-Site Scripting via FileDumpController	13 Sep 202217:30	–	cvelist
EUVD	EUVD-2022-6755	3 Oct 202520:07	–	euvd
Friends Of PHP	TYPO3-CORE-SA-2022-009: Stored Cross-Site Scripting via FileDumpController	13 Sep 202208:06	–	friendsofphp
Friends Of PHP	TYPO3-CORE-SA-2022-009: Stored Cross-Site Scripting via FileDumpController	13 Sep 202208:06	–	friendsofphp
Github Security Blog	TYPO3 CMS Stored Cross-Site Scripting via FileDumpController	16 Sep 202217:15	–	github
Mend	CVE-2022-36107	13 Sep 202217:30	–	mend

Vulners

Node

cms-core typo3/cms-coreRangev11.0.0–v11.5.15php

cms-core typo3/cms-coreRangev8.7.7–8.7.7php

cms typo3/cmsRangev11.0.0–v11.5.15php

cms typo3/cmsRange7.4.0–v10.4.31php

Source	Link
typo3	www.typo3.org/security/advisory/typo3-core-sa-2022-009
github	www.github.com/TYPO3/typo3/commit/546208428c861a09d62b86cde141eb19a81fae66
github	www.github.com/TYPO3/typo3/commit/b880477e16881e57005dc22e7a14b455b8823fc6
github	www.github.com/TYPO3/typo3/security/advisories/GHSA-9c6w-55cp-5w25
github	www.github.com/TYPO3/typo3/commit/bd58d2ff2eeef89e63ef754a2389597d22622a39
github	www.github.com/TYPO3-CMS/core/commit/e47af8895fb01046196910ff96b9572586020bd8
github	www.github.com/TYPO3-CMS/core/commit/24ffe41ceb3fa0451bbf1aa2c3b3db8283de6fff

16 Sep 2022 16:23Current

5.4Medium risk

Vulners AI Score5.4

CVSS 3.15.4 - 6.5

EPSS0.00932