Cross Site Scripting (XSS)

2023-07-2708:15:29

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

typo3

stored xss

server environment variable

typoscript

malicious content

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L

EPSS

0.003

Percentile

65.6%

JSON

typo3 is vulnerable to Stored XSS. The vulnerability is due to GeneralUtility::getIndpEnv() function which uses unfiltered server environment variable PATH_INFO and TypoScript setting config.absRefPrefix=auto. This can lead to an attacker injecting malicious content or malicious HTML code in non-rendered and non-cached content resulting in persisted cross-site scripting when the pages are viewed by other users.