What is GHSA-733v-22mg-7f8w?

GHSA-733v-22mg-7f8w is a security advisory published by GitHub Security Advisories with Medium severity. TYPO3 Cross-site Scripting vulnerability in the file backend module

Which CVE IDs does GHSA-733v-22mg-7f8w cover?

GHSA-733v-22mg-7f8w covers the following CVE IDs: CVE-2008-5644. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-733v-22mg-7f8w?

GHSA-733v-22mg-7f8w affects 1 product, including: composer/typo3/cms-backend:= 4.2.2.

GHSA-733v-22mg-7f8wMedium

TYPO3 Cross-site Scripting vulnerability in the file backend module

Vendor

GitHub Security Advisories

Published

May 17, 2022

Last Modified

February 9, 2024

🔗 CVE IDs covered (1)

CVE-2008-5644 →

📋 Description

Cross-site scripting (XSS) vulnerability in the file backend module in TYPO3 4.2.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

🎯 Affected products1

composer/typo3/cms-backend:= 4.2.2

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2008-5644
https://exchange.xforce.ibmcloud.com/vulnerabilities/46585
http://typo3.org/teams/security/security-bulletins/typo3-20081113-1/
https://web.archive.org/web/20111229084039/http://secunia.com/advisories/32689
https://web.archive.org/web/20200301075354/http://www.securityfocus.com/bid/32284
https://github.com/advisories/GHSA-733v-22mg-7f8w