Packagist/typo3/cms-core: medium 6.1
TYPO3 Cross-Site Scripting in Online Media Asset Rendering
Action: Upgrade typo3/cms-core to 8.7.21 or later.
composer require typo3/cms-core:8.7.21composer require typo3/cms-core:9.5.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 8.0.0 | 8.7.21 | - |
| 9.0.0 | 9.5.2 | - |
Fixed versions
| 8.7.21 | 9.5.2 |
Sources
- osv: GHSA-wg8h-gxf4-g4gh
- https://github.com/TYPO3-CMS/core/commit/23800859368e2af60604ff27f3eed9971ccd9fbd
- https://github.com/TYPO3-CMS/core/commit/f9e5e255f41c248e115b2a755b797ce48d10d72a
- https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2018-12-11-1.yaml
- https://github.com/TYPO3-CMS/core
- https://typo3.org/security/advisory/typo3-core-sa-2018-006
published · modified · JSON