CVE-2012-3530

Опубликовано: 05 сент. 2012

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Incomplete blacklist vulnerability in the t3lib_div::quoteJSvalue API function in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 and 4.7.x before 4.7.4 allows remote attackers to conduct cross-site scripting (XSS) attacks via certain HTML5 JavaScript events.

Комментарий

Per: http://cwe.mitre.org/data/definitions/184.html

'CWE-184: Incomplete Blacklist'

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:typo3:typo3:4.5:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.5.0:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.5.1:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.5.2:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.5.3:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.5.4:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.5.5:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.5.6:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.5.7:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.5.8:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.5.9:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.5.10:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.5.11:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.5.12:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.5.13:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.5.14:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.5.15:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.5.16:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.5.17:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.5.18:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:typo3:typo3:4.6:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.6.0:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.6.1:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.6.2:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.6.3:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.6.4:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.6.5:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.6.6:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.6.7:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.6.8:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.6.9:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.6.10:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.6.11:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:a:typo3:typo3:4.7:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.7.0:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.7.1:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.7.2:*:*:*:*:*:*:*

cpe:2.3:a:typo3:typo3:4.7.3:*:*:*:*:*:*:*

EPSS

Процентиль: 68%

0.00573

Низкий

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2012-3530

ubuntu

больше 13 лет назад

CVE-2012-3530

debian

больше 13 лет назад

Incomplete blacklist vulnerability in the t3lib_div::quoteJSvalue API ...

GHSA-94c2-g68f-9r98

github

больше 3 лет назад

Typo3 API XSS Vulnerability

EPSS

Процентиль: 68%

0.00573

Низкий

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other