Описание
Cross-site scripting (XSS) vulnerability in the Exception Handler in TYPO3 4.4.x before 4.4.15, 4.5.x before 4.5.15, 4.6.x before 4.6.8, and 4.7 allows remote attackers to inject arbitrary web script or HTML via exception messages.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was not-affected [4.5.16+dfsg3-1]] |
| hardy | ignored | end of life |
| lucid | ignored | end of life |
| natty | released | 4.3.9+dfsg1-1+squeeze4build0.11.04.1 |
| oneiric | ignored | end of life |
| precise | ignored | end of life |
| precise/esm | DNE | precise was needed |
| quantal | not-affected | 4.5.16+dfsg3-1 |
| raring | not-affected | 4.5.16+dfsg3-1 |
Показывать по
10
EPSS
Процентиль: 66%
0.00503
Низкий
4.3 Medium
CVSS2
Связанные уязвимости
nvd
больше 13 лет назад
Cross-site scripting (XSS) vulnerability in the Exception Handler in TYPO3 4.4.x before 4.4.15, 4.5.x before 4.5.15, 4.6.x before 4.6.8, and 4.7 allows remote attackers to inject arbitrary web script or HTML via exception messages.
debian
больше 13 лет назад
Cross-site scripting (XSS) vulnerability in the Exception Handler in T ...
EPSS
Процентиль: 66%
0.00503
Низкий
4.3 Medium
CVSS2