CVE-2010-3672: TYPO3 vulnerable to Cross-Site Scripting… – CVSS 6.1 · Watchpost

← All vulnerabilities

TYPO3 vulnerable to Cross-Site Scripting in the textarea view helper

中危 6.1CVE-2010-3672 · GHSA-p78x-93mq-qwqh · Published 05/11/2019 · updated 16/06/2026

要点

CVE-2010-3672 是影响 typo3/cms-fluid, typo3 (typo3) 的中危 (CVSS 6.1)漏洞。
未来 30 天内被利用的概率（EPSS）：0.95%，高于 61.4% 的漏洞。
修复：升级到 4.4.1, 4.3.4 或更高版本。

Package	Affected versions	Patched versions
typo3/cms-fluid Packagist	`≥ 4.4.0, < 4.4.1< 4.3.4`	`4.4.14.3.4`
typo3 typo3	`≥ 4.4.0, < 4.4.1< 4.3.4`	`4.4.14.3.4`

Description

TYPO3 before 4.3.4 and 4.4.x before 4.4.1 allows XSS in the textarea view helper in an extbase extension.

NVD description

TYPO3 before 4.3.4 and 4.4.x before 4.4.1 allows XSS in the textarea view helper in an extbase extension.

References

nvd.nist.gov/vuln/detail/CVE-2010-3672 · ADVISORY
TYPO3/typo3 commit 5f13c22 · WEB
TYPO3/typo3 commit fc2b435 · WEB
bugs.debian.org/cgi-bin/bugreport.cgi · WEB
TYPO3-CMS/core · PACKAGE
TYPO3-CMS/fluid · WEB
security-tracker.debian.org/tracker/CVE-2010-3672 · WEB
typo3.org/security/advisory/typo3-sa-2010-012 · WEB

typo3/cms-fluid 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free