Vulnerability advisory
GHSA-7gg8-3r6j-5g55
Typo3 Backend Configuration XSS Vulnerability
Also known as CVE-2012-3529
Severity
Severity not reported.
Affected versions
typo3/cms Packagist
All typo3/cms advisories →| Affected | Fixed in |
|---|---|
4.5 to before 4.5.19 | 4.5.19Advisories → |
4.6 to before 4.6.12 | 4.6.12Advisories → |
4.7 to before 4.7.4 | 4.7.4Advisories → |
Description
The configuration module in the backend in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 and 4.7.x before 4.7.4 allows remote authenticated backend users to obtain the encryption key via unspecified vectors.