Packagist/typo3/cms: medium 6.1
ExtJS JavaScript framework used in TYPO3 vulnerable to Cross-site Scripting
Action: Upgrade typo3/cms to 4.5.34 or later.
composer require typo3/cms:6.2.3composer require typo3/cms:6.1.9composer require typo3/cms:4.7.19composer require typo3/cms:4.5.34Affected
| introduced | fixed | last affected |
|---|---|---|
| 6.2.0 | 6.2.3 | - |
| 6.1.0 | 6.1.9 | - |
| 4.7.0 | 4.7.19 | - |
| 4.5.0 | 4.5.34 | - |
Fixed versions
| 6.2.3 | 6.1.9 | 4.7.19 | 4.5.34 |
Sources
- osv: GHSA-mxjf-hc9v-xgv2
- https://github.com/TYPO3/typo3/commit/32efb1b03573d51391126c90cd87c74b3dc457fb
- https://github.com/TYPO3/typo3/commit/9bd777649e4022c89dbf39ca41988a594b5e94b8
- https://github.com/TYPO3/typo3/commit/c39bca9613c311dd12e61771dd311b1bb2283b8d
- https://github.com/TYPO3/typo3/commit/d554ac5323f3b0fac1fce4c2c491d0123badd669
- https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2014-05-22-1.yaml
- https://github.com/TYPO3/typo3
- https://typo3.org/security/advisory/typo3-core-sa-2014-001
- https://web.archive.org/web/20140531042943/http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2014-001
published · modified · JSON