icon

We found results for “

WS-2019-0009

Good to know:

icon

Date: December 11, 2018

TYPO3 versions 7.0.0-7.6.31, 8.0.0-8.7.20 and 9.0.0-9.5.1 Failing to properly encode user input, login status display is vulnerable to cross-site scripting in the website frontend.

Language: PHP

Severity Score

Severity Score

Weakness Type (CWE)

Code

CWE-17

Top Fix

icon

Upgrade Version

Upgrade to version TYPO3_7-6-32,TYPO3_8-7-21,v9.5.2

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): HIGH
Privileges Required (PR): LOW
User Interaction (UI): REQUIRED
Scope (S): CHANGED
Confidentiality (C): LOW
Integrity (I): LOW
Availability (A): NONE

Do you need more information?

Contact Us