Packagist/neos/flow CVE-2013-7082: medium, EPSS 1.19%
TYPO3 Flow Cross-site scripting (XSS) vulnerability
Action: Upgrade neos/flow to 1.1.1 or later.
composer require neos/flow:1.1.1composer require neos/flow:2.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.1.0 | 1.1.1 | - |
| 2.0.0 | 2.0.1 | - |
Fixed versions
| 1.1.1 | 2.0.1 |
Sources
- osv: GHSA-vc74-c4m6-9979
- https://nvd.nist.gov/vuln/detail/CVE-2013-7082
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89614
- https://github.com/FriendsOfPHP/security-advisories/blob/master/neos/flow/CVE-2013-7082.yaml
- https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/flow/CVE-2013-7082.yaml
- https://www.neos.io/blog/flow-sa-2013-001.html
- http://osvdb.org/100825
- http://secunia.com/advisories/55996
- http://typo3.org/teams/security/security-bulletins/typo3-flow/typo3-flow-sa-2013-001
CVE-2013-7082 · published · modified · JSON