Packagist/typo3/cms CVE-2013-7341: medium, EPSS 2.40%

Moodle cross-site scripting (XSS) vulnerabilities

Action: Upgrade typo3/cms to 6.2.14 or later.

composer require typo3/cms:6.2.14

composer require typo3/cms:7.3.1

Affected

Fixed versions

Sources

• osv: GHSA-j6c3-3c4w-qv8p#Packagist/typo3/cms
• https://nvd.nist.gov/vuln/detail/CVE-2013-7341
• https://github.com/flowplayer/flash/issues/121
• https://github.com/moodle/moodle/commit/98d135fea3006334093efa822205d4b2c3fd8ff9
• https://github.com/moodle/moodle/commit/9f2967e301d123d11625f3b6948e1ee538086791
• https://github.com/moodle/moodle/commit/c3cd5e1db9de4f1a634492d99990534e30518066
• https://github.com/moodle/moodle/commit/d65634044ebaa738f55bdec521beb42844d6916a
• https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2013-7341.yaml
• https://github.com/moodle/moodle
• https://moodle.org/mod/forum/discuss.php?d=256420
• https://typo3.org/security/advisory/typo3-core-sa-2015-007
• http://flash.flowplayer.org/documentation/version-history.html
• http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-43344
• http://openwall.com/lists/oss-security/2014/03/17/1

CVE-2013-7341 · published 2022-05-13T01:12:49Z · modified 2024-12-03T06:08:31.322701Z · JSON