Описание
Cross-site scripting (XSS) vulnerability in the Exception Handler in TYPO3 4.4.x before 4.4.15, 4.5.x before 4.5.15, 4.6.x before 4.6.8, and 4.7 allows remote attackers to inject arbitrary web script or HTML via exception messages.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was not-affected [4.5.16+dfsg3-1]] |
| hardy | ignored | end of life |
| lucid | ignored | end of life |
| natty | released | 4.3.9+dfsg1-1+squeeze4build0.11.04.1 |
| oneiric | ignored | end of life |
| precise | ignored | end of life |
| precise/esm | DNE | precise was needed |
| quantal | not-affected | 4.5.16+dfsg3-1 |
| raring | not-affected | 4.5.16+dfsg3-1 |
Показывать по
10
EPSS
Процентиль: 70%
0.01387
Низкий
4.3 Medium
CVSS2
Связанные уязвимости
nvd
почти 14 лет назад
Cross-site scripting (XSS) vulnerability in the Exception Handler in TYPO3 4.4.x before 4.4.15, 4.5.x before 4.5.15, 4.6.x before 4.6.8, and 4.7 allows remote attackers to inject arbitrary web script or HTML via exception messages.
debian
почти 14 лет назад
Cross-site scripting (XSS) vulnerability in the Exception Handler in T ...
EPSS
Процентиль: 70%
0.01387
Низкий
4.3 Medium
CVSS2