Vulnerability advisory

CVE-2016-4056

Published Jan 23, 2017Updated Oct 24, 2026OSV record ↗

Severity

CVSS 3.xCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected versions

Repository

Affected commits	Fixed by commit
GIT github.com/TYPO3/typo3 ↗
4924c9e5e3188648b2b4f1dd8669b74b7ad61405 through 1d8a0aad7b8e539dd3fba7f494e573df0befc6ea	No fix listed
Also listed as affected (53) `6.2` `6.2.0-alpha1` `6.2.0-alpha2` `6.2.0-alpha3` `6.2.0-beta1` `6.2.0-beta2` `6.2.0-beta3` `6.2.0-beta4` `6.2.0-beta5` `6.2.0-beta6` `6.2.0-beta7` `6.2.0-rc1` `6.2.0-rc2` `6.2.1` `6.2.10` `6.2.10-rc1` `6.2.11` `6.2.12` `6.2.13` `6.2.14` `6.2.15` `6.2.16` `6.2.17` `6.2.18` `6.2.2` `6.2.3` `6.2.4` `6.2.5` `6.2.6` `6.2.7` `6.2.8` `6.2.9` `TYPO3_6-2-18` `TYPO3_6-2-17` `TYPO3_6-2-16` `TYPO3_6-2-15` `TYPO3_6-2-14` `TYPO3_6-2-13` `TYPO3_6-2-12` `TYPO3_6-2-11` `TYPO3_6-2-10` `TYPO3_6-2-10rc1` `TYPO3_6-2-9` `TYPO3_6-2-8` `TYPO3_6-2-7` `TYPO3_6-2-6` `TYPO3_6-2-5` `TYPO3_6-2-4` `TYPO3_6-2-3` `TYPO3_6-2-2` `TYPO3_6-2-1` `TYPO3_6-2-0` `6.2.0`
GIT github.com/benjaminkott/bootstrap_package ↗
523709066b0c5391dc39a5071731ebc1712a30d5 through 7cb9e05a24689a489ef27da5f217693e0459c2d2	No fix listed
Also listed as affected (27) `6.2.10` `6.2.11` `6.2.12` `6.2.13` `6.2.14` `6.2.15` `6.2.16` `6.2.17` `6.2.4` `6.2.5` `6.2.6` `6.2.7` `6.2.8` `6.2.9` `v6.2.16` `v6.2.15` `v6.2.14` `v6.2.13` `v6.2.12` `v6.2.11` `v6.2.10` `v6.2.9` `v6.2.8` `v6.2.7` `v6.2.6` `v6.2.5` `v6.2.4`
GIT github.com/typo3/typo3 ↗
4924c9e5e3188648b2b4f1dd8669b74b7ad61405 through 1d8a0aad7b8e539dd3fba7f494e573df0befc6ea	No fix listed
Also listed as affected (53) `6.2` `6.2.0-alpha1` `6.2.0-alpha2` `6.2.0-alpha3` `6.2.0-beta1` `6.2.0-beta2` `6.2.0-beta3` `6.2.0-beta4` `6.2.0-beta5` `6.2.0-beta6` `6.2.0-beta7` `6.2.0-rc1` `6.2.0-rc2` `6.2.1` `6.2.10` `6.2.10-rc1` `6.2.11` `6.2.12` `6.2.13` `6.2.14` `6.2.15` `6.2.16` `6.2.17` `6.2.18` `6.2.2` `6.2.3` `6.2.4` `6.2.5` `6.2.6` `6.2.7` `6.2.8` `6.2.9` `TYPO3_6-2-18` `TYPO3_6-2-17` `TYPO3_6-2-16` `TYPO3_6-2-15` `TYPO3_6-2-14` `TYPO3_6-2-13` `TYPO3_6-2-12` `TYPO3_6-2-11` `TYPO3_6-2-10` `TYPO3_6-2-10rc1` `TYPO3_6-2-9` `TYPO3_6-2-8` `TYPO3_6-2-7` `TYPO3_6-2-6` `TYPO3_6-2-5` `TYPO3_6-2-4` `TYPO3_6-2-3` `TYPO3_6-2-2` `TYPO3_6-2-1` `TYPO3_6-2-0` `6.2.0`

Description

Cross-site scripting (XSS) vulnerability in the Backend component in TYPO3 6.2.x before 6.2.19 allows remote attackers to inject arbitrary web script or HTML via the module parameter when creating a bookmark.

CVE-2016-4056

Affected versions

Repository

Description

References