Vulnerability advisory

BIT-typo3-2020-8091

Published Mar 6, 2024Updated Mar 6, 2024OSV record ↗

Also known as CVE-2020-8091GHSA-qvhv-pwww-53jj

Severity

Severity not reported.

Affected versions

typo3 Bitnami

Affected Fixed in

6.2.0 to before 6.2.39 6.2.39

7.0.0 to before 7.1.0 7.1.0

Affected	Fixed in
`6.2.0` to before 6.2.39	`6.2.39`
`7.0.0` to before 7.1.0	`7.1.0`
Severity for this package CVSS 3.x`CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N`

Severity for this package

CVSS 3.xCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

Description

svg.swf in TYPO3 6.2.0 to 6.2.38 ELTS and 7.0.0 to 7.1.0 could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack on a targeted system. This may be at a contrib/websvg/svg.swf pathname.

References

Webtypo3.org/security/advisory/typo3-psa-2019-003/ ↗
Webwww.purplemet.com/blog/typo3-xss-vulnerability ↗