TYPO3 CMS indexed search Cross-site Scripting vulnerability

MOYENNE 5.4CVE-2015-8756 · GHSA-xx7m-8rq2-cw2v · Published 08/01/2016 · updated 17/06/2026

En bref

CVE-2015-8756 est une vulnérabilité MOYENNE (CVSS 5.4) touchant typo3/cms, typo3 (typo3).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.80%, plus élevée que 56.5% des vulnérabilités.
Correctif : mettre à jour vers 6.2.16 ou plus récent.

Package	Affected versions	Patched versions
typo3/cms Packagist	`≥ 6.2.0, < 6.2.16`	`6.2.16`
typo3 typo3	`= 6.2= 6.2.0= 6.2.1= 6.2.10= 6.2.11= 6.2.12= 6.2.13= 6.2.14= 6.2.15= 6.2.2= 6.2.3= 6.2.4= 6.2.5= 6.2.6= 6.2.7= 6.2.8= 6.2.9`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in the search result view in the Indexed Search (indexed_search) component in TYPO3 6.2.x before 6.2.16 allows remote authenticated editors to inject arbitrary web script or HTML via unspecified vectors.

NVD description

References

nvd.nist.gov/vuln/detail/CVE-2015-8756 · ADVISORY
TYPO3/typo3 commit 7e4bdf4 · WEB
TYPO3-CMS/indexed_search · PACKAGE
typo3.org/security/advisory/typo3-core-sa-2015-015 · WEB
web.archive.org/web/20160624215319/http://www.securitytracker.com/id/1034486 · WEB
typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-015 · Vendor Advisory
securitytracker.com/id/1034486

Autres vulnérabilités de typo3/cms

Tout voir →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

typo3/cms

Packagist

≥ 6.2.0, < 6.2.16

6.2.16

typo3

= 6.2= 6.2.0= 6.2.1= 6.2.10= 6.2.11= 6.2.12= 6.2.13= 6.2.14= 6.2.15= 6.2.2= 6.2.3= 6.2.4= 6.2.5= 6.2.6= 6.2.7= 6.2.8= 6.2.9

No fix yet

Description

NVD description

Autres vulnérabilités de typo3/cms

Tout voir →