Typo3 XSS Vulnerability

MEDIO 5.4CVE-2011-4630 · GHSA-29wr-24h5-95r5 · Published 06/11/2019 · updated 16/06/2026

In breve

CVE-2011-4630 è una vulnerabilità MEDIO (CVSS 5.4) che riguarda typo3/cms, typo3 (typo3).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.68%, superiore al 52.3% delle vulnerabilità.
Correzione: aggiornare a 4.4.9, 4.5.4, 4.3.12 o successiva.

Package	Affected versions	Patched versions
typo3/cms Packagist	`≥ 4.4.0, < 4.4.9≥ 4.5.0, < 4.5.4< 4.3.12`	`4.4.94.5.44.3.12`
typo3 typo3	`≥ 4.3.0, < 4.3.12≥ 4.4.0, < 4.4.9≥ 4.5.0, < 4.5.4`	`4.3.124.4.94.5.4`

Description

Cross-site Scripting (XSS) in TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to inject arbitrary web script or HTML via the browse_links wizard.

NVD description

Cross-site Scripting (XSS) in TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to inject arbitrary web script or HTML via the browse_links wizard.

References

nvd.nist.gov/vuln/detail/CVE-2011-4630 · ADVISORY
TYPO3/typo3 · PACKAGE
security-tracker.debian.org/tracker/CVE-2011-4630 · WEB
typo3.org/security/advisory/typo3-core-sa-2011-001 · WEB

Altre vulnerabilità di typo3/cms

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

typo3/cms

Packagist

≥ 4.4.0, < 4.4.9≥ 4.5.0, < 4.5.4< 4.3.12

4.4.94.5.44.3.12

typo3

≥ 4.3.0, < 4.3.12≥ 4.4.0, < 4.4.9≥ 4.5.0, < 4.5.4

4.3.124.4.94.5.4

Description

Cross-site Scripting (XSS) in TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to inject arbitrary web script or HTML via the browse_links wizard.

NVD description

Cross-site Scripting (XSS) in TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to inject arbitrary web script or HTML via the browse_links wizard.

Altre vulnerabilità di typo3/cms

Vedi tutto →