In breve
- CVE-2023-35783 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda tpwd/ke_search, faceted search (faceted search project).
- Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.34%, superiore al 27.8% delle vulnerabilità.
- Correzione: aggiornare a 4.6.6, 5.0.2, 4.0.3 o successiva.
| Package | Affected versions | Patched versions |
|---|
| tpwd/ke_search Packagist | ≥ 4.1.0, < 4.6.6≥ 5.0.0, < 5.0.2< 4.0.3
| 4.6.65.0.24.0.3
|
| faceted search | ≥ 4.1.0, < 4.6.6≥ 5.0.0, < 5.0.2< 4.0.3
| 4.6.65.0.24.0.3
|
Description
The ke_search (aka Faceted Search) extension before 4.0.3, 4.1.x through 4.6.x before 4.6.6, and 5.x before 5.0.2 for TYPO3 allows XSS via indexed data.
NVD description
The ke_search (aka Faceted Search) extension before 4.0.3, 4.1.x through 4.6.x before 4.6.6, and 5.x before 5.0.2 for TYPO3 allows XSS via indexed data.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free