Описание
Incomplete blacklist vulnerability in the t3lib_div::quoteJSvalue API function in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 and 4.7.x before 4.7.4 allows remote attackers to conduct cross-site scripting (XSS) attacks via certain HTML5 JavaScript events.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was not-affected [4.5.19+dfsg1-1]] |
| hardy | ignored | end of life |
| lucid | ignored | end of life |
| natty | released | 4.3.9+dfsg1-1+squeeze5build0.11.04.1 |
| oneiric | ignored | end of life |
| precise | ignored | end of life |
| precise/esm | DNE | precise was needed |
| quantal | not-affected | 4.5.19+dfsg1-1 |
| raring | not-affected | 4.5.19+dfsg1-1 |
Показывать по
10
EPSS
Процентиль: 68%
0.0056
Низкий
4.3 Medium
CVSS2
Связанные уязвимости
nvd
больше 13 лет назад
Incomplete blacklist vulnerability in the t3lib_div::quoteJSvalue API function in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 and 4.7.x before 4.7.4 allows remote attackers to conduct cross-site scripting (XSS) attacks via certain HTML5 JavaScript events.
debian
больше 13 лет назад
Incomplete blacklist vulnerability in the t3lib_div::quoteJSvalue API ...
EPSS
Процентиль: 68%
0.0056
Низкий
4.3 Medium
CVSS2