Описание
Cross-site scripting (XSS) vulnerability in the Exception Handler in TYPO3 4.4.x before 4.4.15, 4.5.x before 4.5.15, 4.6.x before 4.6.8, and 4.7 allows remote attackers to inject arbitrary web script or HTML via exception messages.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:typo3:typo3:4.4.0:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.4.1:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.4.2:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.4.3:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.4.4:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.4.5:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.4.6:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.4.7:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.4.8:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.4.9:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.4.10:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.4.11:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.4.12:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.4.13:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.4.14:*:*:*:*:*:*:*
Конфигурация 2
Одно из
cpe:2.3:a:typo3:typo3:4.5.0:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.5.1:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.5.2:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.5.3:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.5.4:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.5.5:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.5.6:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.5.7:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.5.8:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.5.9:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.5.10:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.5.11:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.5.12:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.5.13:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.5.14:*:*:*:*:*:*:*
Конфигурация 3
Одно из
cpe:2.3:a:typo3:typo3:4.6.0:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.6.1:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.6.2:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.6.3:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.6.4:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.6.5:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.6.6:*:*:*:*:*:*:*
cpe:2.3:a:typo3:typo3:4.6.7:*:*:*:*:*:*:*
Конфигурация 4
cpe:2.3:a:typo3:typo3:4.7:*:*:*:*:*:*:*
EPSS
Процентиль: 66%
0.00503
Низкий
4.3 Medium
CVSS2
Дефекты
CWE-79
Связанные уязвимости
ubuntu
больше 13 лет назад
Cross-site scripting (XSS) vulnerability in the Exception Handler in TYPO3 4.4.x before 4.4.15, 4.5.x before 4.5.15, 4.6.x before 4.6.8, and 4.7 allows remote attackers to inject arbitrary web script or HTML via exception messages.
debian
больше 13 лет назад
Cross-site scripting (XSS) vulnerability in the Exception Handler in T ...
EPSS
Процентиль: 66%
0.00503
Низкий
4.3 Medium
CVSS2
Дефекты
CWE-79