GHSA-989h-wv8x-933p

Suggest an improvement
Source
https://github.com/advisories/GHSA-989h-wv8x-933p
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-989h-wv8x-933p/GHSA-989h-wv8x-933p.json
JSON Data
https://api.test.osv.dev/v1/vulns/GHSA-989h-wv8x-933p
Aliases
  • CVE-2015-5956
Published
2022-05-14T02:48:01Z
Modified
2024-12-07T05:40:29.528421Z
Summary
TYPO3 cross-site scripting (XSS)
Details

The sanitizeLocalUrl function in TYPO3 6.x before 6.2.15, 7.x before 7.4.0, 4.5.40, and earlier allows remote authenticated users to bypass the XSS filter and conduct cross-site scripting (XSS) attacks via a base64 encoded data URI, as demonstrated by the (1) returnUrl parameter to showrechis.php and the (2) redirecturl parameter to index.php.

Database specific
{
    "nvd_published_at": "2015-09-16T14:59:00Z",
    "cwe_ids": [
        "CWE-79"
    ],
    "severity": "LOW",
    "github_reviewed": true,
    "github_reviewed_at": "2024-04-25T21:35:16Z"
}
References

Affected packages

Packagist / typo3/cms

Package

Name
typo3/cms
Purl
pkg:composer/typo3/cms

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.0
Fixed
6.2.15

Affected versions

6.*

6.2.0
6.2.1
6.2.2
6.2.3
6.2.4
6.2.5
6.2.6
6.2.7
6.2.8
6.2.9
6.2.10-rc1
6.2.10
6.2.11
6.2.12
6.2.13
6.2.14

Packagist / typo3/cms

Package

Name
typo3/cms
Purl
pkg:composer/typo3/cms

Affected ranges

Type
ECOSYSTEM
Events
Introduced
7.0
Fixed
7.4.0

Affected versions

7.*

7.0.0
7.0.1
7.0.2
7.1.0
7.2.0
7.3.0
7.3.1

Packagist / typo3/cms

Package

Name
typo3/cms
Purl
pkg:composer/typo3/cms

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.0
Last affected
4.5.40