GitHub Advisoryadvisory · Packagist

GHSA-qrxh-46mr-pr7q TYPO3 is susceptible to Cross-Site Flashing

MEDIUM Published 2024-06-03 Modified 2024-06-03 Official page ↗

Ecosystem: Packagist
Packages: typo3/cms
Severity: Moderate
Reviewed: 2024-06-03

Affected packages

• Packagist typo3/cms: >= 6.2.0, < 6.2.16 → fixed in 6.2.16

Description

The flashplayer misses to validate flash and image files. Therefore it is possible to embed flash videos from external domains.

References