Packagist/typo3/cms-core: medium 6.1
TYPO3 HTML Sanitizer Bypasses Cross-Site Scripting Protection
Action: Upgrade typo3/cms-core to 7.6.58 or later.
composer require typo3/cms-core:7.6.58composer require typo3/cms-core:8.7.48composer require typo3/cms-core:9.5.37composer require typo3/cms-core:10.4.32composer require typo3/cms-core:11.5.16Affected
| introduced | fixed | last affected |
|---|---|---|
| 7.0.0 | 7.6.58 | - |
| 8.0.0 | 8.7.48 | - |
| 9.0.0 | 9.5.37 | - |
| 10.0.0 | 10.4.32 | - |
| 11.0.0 | 11.5.16 | - |
Fixed versions
| 7.6.58 | 8.7.48 | 9.5.37 | 10.4.32 | 11.5.16 |
Sources
- osv: GHSA-gqqf-g5r7-84vf
- https://github.com/TYPO3/typo3/security/advisories/GHSA-gqqf-g5r7-84vf
- https://github.com/TYPO3/typo3/commit/d4f260570abd934fcf3819370a135bef33d729b7
- https://github.com/TYPO3/typo3
published · modified · JSON