GitHub Advisoryadvisory · Packagist

GHSA-mm79-jhqm-9j54 Bypassing Cross-Site Scripting Protection in TYPO3 HTML Sanitizer

MEDIUM Published 2023-11-14 Modified 2023-11-15 Official page ↗
Aliases
CVE-2023-47125
Ecosystem
Packagist
Packages
typo3/html-sanitizer
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N
Weaknesses
CWE-79
Reviewed
2023-11-14

Affected packages

• Packagist typo3/html-sanitizer: >= 1.0.0, < 1.5.3 → fixed in 1.5.3 • Packagist typo3/html-sanitizer: >= 2.0.0, < 2.1.4 → fixed in 2.1.4

Description

> ### CVSS: `CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N/E:F/RL:O/RC:C` (4.4) Problem DOM processing instructions are not handled correctly. This allows bypassing the cross-site scripting mechanism of `typo3/html-sanitizer`. Solution Update to `typo3/html-sanitizer` versions 1.5.3 or 2.1.4 that fix the problem described. Credits Thanks to Yaniv Nizry and Niels Dossche who reported this issue, and to TYPO3 core & security team member Oliver Hader who fixed the issue. References • TYPO3-CORE-SA-2023-007 • Context & Details at `masterminds/html5`

Related

Alias · CVE (1)

  • CVE-2023-47125 TYPO3 is an open source PHP based web content management system released under the GNU GPL. vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References