GitHub Advisoryadvisory · Packagist

GHSA-6mh3-j5r5-2379 Cross-Site Scripting in Query Generator & Query View

MEDIUM Published 2021-07-22 Modified 2021-08-31 Official page ↗
Aliases
CVE-2021-32668
Ecosystem
Packagist
Packages
typo3/cms-core, typo3/cms
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N
Weaknesses
CWE-79
Reviewed
2021-07-20

Affected packages

• Packagist typo3/cms-core: >= 8.0.0, < 8.7.41 → fixed in 8.7.41 • Packagist typo3/cms-core: >= 9.0.0, < 9.5.28 → fixed in 9.5.28 • Packagist typo3/cms-core: >= 10.0.0, < 10.4.18 → fixed in 10.4.18 • Packagist typo3/cms-core: >= 11.0.0, < 11.3.1 → fixed in 11.3.1 • Packagist typo3/cms: >= 10.0.0, < 10.4.18 → fixed in 10.4.18 • Packagist typo3/cms: >= 11.0.0, < 11.3.1 → fixed in 11.3.1 • Packagist typo3/cms: >= 9.0.0, < 9.5.28 → fixed in 9.5.28

Description

> ### Meta > * CVSS: `CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N/E:F/RL:O/RC:C` (4.5) Problem Failing to properly encode error messages, the components _QueryGenerator_ and _QueryView_ are vulnerable to both reflected and persistent cross-site scripting. A valid backend user account having administrator privileges is needed to exploit this vulnerability. Solution Update to TYPO3 versions 8.7.41 ELTS, 9.5.28, 10.4.18, 11.3.1 that fix the problem described. Credits Thanks to Richie Lee who reported this issue and to TYPO3 security team member Oliver Hader who fixed the issue. References • TYPO3-CORE-SA-2021-010

Related

Alias · CVE (1)

  • CVE-2021-32668 TYPO3 is an open source PHP based web content management system. vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References