Description
Cross-site scripting (XSS) vulnerability in the file backend module in TYPO3 4.2.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | typo3/cms-backend | >= 4.2.2, < 4.2.3 | 4.2.3 | GHSA-733v-22mg-7f8w |
References
- ADV-2008-3144 vdb-entry
- http://typo3.org/teams/security/security-bulletins/typo3-20081113-1/
- typo3-file-backend-xss(46585) vdb-entry
- 32689 third-party-advisory
- 32284 vdb-entry