Cross-site Scripting in the yoast_seo TYPO3 extension

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2021-36788 · ADVISORY
• Yoast/Yoast-SEO-for-TYPO3 commit a8278da · WEB
• Yoast/Yoast-SEO-for-TYPO3 · PACKAGE
• typo3.org/security/advisory/typo3-ext-sa-2021-012 · WEB
• typo3.org/help/security-advisories/security · Vendor Advisory
• typo3.org/security/advisory/typo3-ext-sa-2021-013 · Vendor Advisory

yoast-seo-for-typo3/yoast_seo のその他の脆弱性

• CVE-2021-31779中 6.4The yoast_seo (aka Yoast SEO) extension before 7.2.1 for TYPO3 allows SSRF via a backend user account.