En resumen
- CVE-2023-35783 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a tpwd/ke_search, faceted search (faceted search project).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.34%, mayor que el 27.8% de las vulnerabilidades.
- Solución: actualizar a 4.6.6, 5.0.2, 4.0.3 o posterior.
| Package | Affected versions | Patched versions |
|---|
| tpwd/ke_search Packagist | ≥ 4.1.0, < 4.6.6≥ 5.0.0, < 5.0.2< 4.0.3
| 4.6.65.0.24.0.3
|
| faceted search | ≥ 4.1.0, < 4.6.6≥ 5.0.0, < 5.0.2< 4.0.3
| 4.6.65.0.24.0.3
|
Description
The ke_search (aka Faceted Search) extension before 4.0.3, 4.1.x through 4.6.x before 4.6.6, and 5.x before 5.0.2 for TYPO3 allows XSS via indexed data.
NVD description
The ke_search (aka Faceted Search) extension before 4.0.3, 4.1.x through 4.6.x before 4.6.6, and 5.x before 5.0.2 for TYPO3 allows XSS via indexed data.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free