Severity
- CVSS 3.x
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected versions
Repository
| Affected commits | Fixed by commit |
|---|---|
| GIT github.com/TYPO3/typo3 ↗ | |
| 583c888de32e077111951cced1a33571516cb5d3 through 5fa3e3899f93a5fcc022ad2564c1f23855c81e5f | No fix listed |
Also listed as affected (4)
| |
| GIT github.com/benjaminkott/bootstrap_package ↗ | |
| 2bc505c5e22c84371390d6b9969da0e437094e93 through fe9f029bdc791fab9ac1c6fbf5f721522b961a10 | No fix listed |
Also listed as affected (3)
| |
| GIT github.com/typo3/typo3 ↗ | |
| 583c888de32e077111951cced1a33571516cb5d3 through 5fa3e3899f93a5fcc022ad2564c1f23855c81e5f | No fix listed |
Also listed as affected (4)
| |
Description
svg.swf in TYPO3 6.2.0 to 6.2.38 ELTS and 7.0.0 to 7.1.0 could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack on a targeted system. This may be at a contrib/websvg/svg.swf pathname.