Skip to content
OpenAdvisories
Unscored DSA-2455-1 1 CVE

typo3-src - cross site scripting

Published Apr 20, 2012 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 typo3-src 4.3.9+dfsg1-1+squeeze4

Vulnerabilities 1

  • Medium —
    CVE-2012-2112

    Typo3 Exception Handler XSS

    Cross-site scripting (XSS) vulnerability in the Exception Handler in TYPO3 4.4.x before 4.4.15, 4.5.x before 4.5.15, 4.6.x before 4.6.8, and 4.7 allows remote attackers to inject arbitrary web script or HTML via exception messages.

    typo3/cms Packagist