Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 4

Количество 4

ubuntu логотип

CVE-2015-5956

почти 11 лет назад

The sanitizeLocalUrl function in TYPO3 6.x before 6.2.15, 7.x before 7.4.0, 4.5.40, and earlier allows remote authenticated users to bypass the XSS filter and conduct cross-site scripting (XSS) attacks via a base64 encoded data URI, as demonstrated by the (1) returnUrl parameter to show_rechis.php and the (2) redirect_url parameter to index.php.

CVSS2: 3.5
EPSS: Низкий
nvd логотип

CVE-2015-5956

почти 11 лет назад

The sanitizeLocalUrl function in TYPO3 6.x before 6.2.15, 7.x before 7.4.0, 4.5.40, and earlier allows remote authenticated users to bypass the XSS filter and conduct cross-site scripting (XSS) attacks via a base64 encoded data URI, as demonstrated by the (1) returnUrl parameter to show_rechis.php and the (2) redirect_url parameter to index.php.

CVSS2: 3.5
EPSS: Низкий
debian логотип

CVE-2015-5956

почти 11 лет назад

The sanitizeLocalUrl function in TYPO3 6.x before 6.2.15, 7.x before 7 ...

CVSS2: 3.5
EPSS: Низкий
github логотип

GHSA-989h-wv8x-933p

больше 4 лет назад

TYPO3 cross-site scripting (XSS)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2015-5956

The sanitizeLocalUrl function in TYPO3 6.x before 6.2.15, 7.x before 7.4.0, 4.5.40, and earlier allows remote authenticated users to bypass the XSS filter and conduct cross-site scripting (XSS) attacks via a base64 encoded data URI, as demonstrated by the (1) returnUrl parameter to show_rechis.php and the (2) redirect_url parameter to index.php.

CVSS2: 3.5
2%
Низкий
почти 11 лет назад
nvd логотип
CVE-2015-5956

The sanitizeLocalUrl function in TYPO3 6.x before 6.2.15, 7.x before 7.4.0, 4.5.40, and earlier allows remote authenticated users to bypass the XSS filter and conduct cross-site scripting (XSS) attacks via a base64 encoded data URI, as demonstrated by the (1) returnUrl parameter to show_rechis.php and the (2) redirect_url parameter to index.php.

CVSS2: 3.5
2%
Низкий
почти 11 лет назад
debian логотип
CVE-2015-5956

The sanitizeLocalUrl function in TYPO3 6.x before 6.2.15, 7.x before 7 ...

CVSS2: 3.5
2%
Низкий
почти 11 лет назад
github логотип
GHSA-989h-wv8x-933p

TYPO3 cross-site scripting (XSS)

2%
Низкий
больше 4 лет назад

Уязвимостей на страницу