GitHub Advisoryadvisory · Packagist

GHSA-xjwx-78x7-q6jc TYPO3 vulnerable to an HTML Injection in the History Module

LOW Published 2024-05-14 Modified 2024-05-14 Official page ↗
Aliases
CVE-2024-34355
Ecosystem
Packagist
Packages
typo3/cms-core
Severity
Low
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Weaknesses
CWE-116, CWE-79
Reviewed
2024-05-14

Affected packages

• Packagist typo3/cms-core: >= 13.0.0, < 13.1.1 → fixed in 13.1.1

Description

Problem The history backend module is vulnerable to HTML injection. Although Content-Security-Policy headers effectively prevent JavaScript execution, adversaries can still inject malicious HTML markup. Exploiting this vulnerability requires a valid backend user account. Solution Update to TYPO3 version 13.1.1 that fixes the problem described. Credits Thanks to TYPO3 core team member Andreas Kienast who reported this issue and to TYPO3 core & security team Benjamin Franzke who fixed the issue. References • TYPO3-CORE-SA-2024-007

Related

Alias · CVE (1)

  • CVE-2024-34355 TYPO3 is an enterprise content management system. vulnerability

Weakness · CWE (2)

  • CWE-116 Improper Encoding or Escaping of Output weakness
  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References