TYPO3 Cross-site scripting (XSS) vulnerability in the Backend User Administration Module

MEDIO 4.3CVE-2013-7077 · GHSA-5cmc-r23m-hvrr · Published 21/12/2013 · updated 17/06/2026

En resumen

CVE-2013-7077 es una vulnerabilidad MEDIO (CVSS 4.3) que afecta a typo3/cms-core, typo3 (typo3).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.2%, mayor que el 67.9% de las vulnerabilidades.
Solución: actualizar a 6.0.12, 6.1.7 o posterior.

Package	Affected versions	Patched versions
typo3/cms-core Packagist	`≥ 6.0, < 6.0.12≥ 6.1, < 6.1.7`	`6.0.126.1.7`
typo3 typo3	`= 6.0= 6.0.1= 6.0.10= 6.0.11= 6.0.2= 6.0.3= 6.0.4= 6.0.5= 6.0.6= 6.0.7= 6.0.8= 6.0.9= 6.1= 6.1.1= 6.1.2= 6.1.3= 6.1.4= 6.1.5= 6.1.6`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in the Backend User Administration Module in TYPO3 6.0.x before 6.0.12 and 6.1.x before 6.1.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

NVD description

References

nvd.nist.gov/vuln/detail/CVE-2013-7077 · ADVISORY
exchange.xforce.ibmcloud.com/vulnerabilities/89626 · WEB
TYPO3-CMS/core · PACKAGE
osvdb.org/100884 · WEB
seclists.org/oss-sec/2013/q4/473 · WEB
seclists.org/oss-sec/2013/q4/487 · WEB
typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2013-004 · WEB

Más vulnerabilidades de typo3/cms-core

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

typo3/cms-core

Packagist

≥ 6.0, < 6.0.12≥ 6.1, < 6.1.7

6.0.126.1.7

typo3

= 6.0= 6.0.1= 6.0.10= 6.0.11= 6.0.2= 6.0.3= 6.0.4= 6.0.5= 6.0.6= 6.0.7= 6.0.8= 6.0.9= 6.1= 6.1.1= 6.1.2= 6.1.3= 6.1.4= 6.1.5= 6.1.6

No fix yet

Description

NVD description

Más vulnerabilidades de typo3/cms-core

Ver todo →