- CVSS 3.x
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected versions
Repository
| Affected commits | Fixed by commit |
|---|---|
| GIT github.com/typo3/fluid ↗ | |
| All commits before 5d43efc93e4058658d48c19d58a81f3ecd6e3c47 | 5d43efc93e4058658d48c19d58a81f3ecd6e3c47 |
| 617595f736ca1e880817cea852572b9b0b329f39 to before 7a03cd3f755c80b5a7eb338dafbde8386a6fd5a7 | 7a03cd3f755c80b5a7eb338dafbde8386a6fd5a7 |
| 48e434663ec3844bd8f8f91f8fa33587b1a643e2 to before f9c78d98f57bc1d9523519e47fb34fa08121112a | f9c78d98f57bc1d9523519e47fb34fa08121112a |
| b36c00a756cea9df944be0ef2e4827554646832a to before 0d8f96d604a4a68a94c5d126a897ddef53b2a62f | 0d8f96d604a4a68a94c5d126a897ddef53b2a62f |
| f583badd3b2a90f046fe5c1e0459300325a3e0ce to before 2f2c6d06f4ecf2b4bb258ca6d63b0515f927e67f | 2f2c6d06f4ecf2b4bb258ca6d63b0515f927e67f |
| 5dc5836bf1bb3465cb0cc69f6471c5519d33b934 to before 14c371123eebd828ad0bf18884a041870d13492e | 14c371123eebd828ad0bf18884a041870d13492e |
| e3533d0b80e4020cf0de7a546efaae25866f898b to before f20db4e74cf9803c6cffca2ed2f03e1b0b89d0dc | f20db4e74cf9803c6cffca2ed2f03e1b0b89d0dc |
Also listed as affected (61)
| |
Description
TYPO3 Fluid before versions 2.0.8, 2.1.7, 2.2.4, 2.3.7, 2.4.4, 2.5.11 and 2.6.10 is vulnerable to Cross-Site Scripting. Three XSS vulnerabilities have been detected in Fluid: 1. TagBasedViewHelper allowed XSS through maliciously crafted additionalAttributes arrays by creating keys with attribute-closing quotes followed by HTML. When rendering such attributes, TagBuilder would not escape the keys. 2. ViewHelpers which used the CompileWithContentArgumentAndRenderStatic trait, and which declared escapeOutput = false, would receive the content argument in unescaped format. 3. Subclasses of AbstractConditionViewHelper would receive the then and else arguments in unescaped format. Update to versions 2.0.8, 2.1.7, 2.2.4, 2.3.7, 2.4.4, 2.5.11 or 2.6.10 of this typo3fluid/fluid package that fix the problem described. More details are available in the linked advisory.