| Package | Affected versions | Patched versions |
|---|---|---|
| typo3/cms | ≥ 6.2.0, < 6.2.19≥ 7.6.0, < 7.6.4 | 6.2.197.6.4 |
All XML processing within the TYPO3 CMS are vulnerable to XEE processing. This can lead to load internal and/or external (file) content within an XML structure. Furthermore it is possible to inject arbitrary files for an XML Denial of Service attack. For more information on that topic see https://www.owasp.org/index.php/XML_External_Entity_(XXE)_Processing.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free