CVE-2009-3633
1 advisory.
Packagist/typo3/cms-core CVE-2009-3633: medium
TYPO3 API function vulnerable to Cross-site Scripting
Action: Upgrade typo3/cms-core to 4.1.13 or later.
composer require typo3/cms-core:4.1.13composer require typo3/cms-core:4.2.10composer require typo3/cms-core:4.3beta2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 4.0.13 |
| 4.1.0 | 4.1.13 | - |
| 4.2.0 | 4.2.10 | - |
| 4.3alpha1 | 4.3beta2 | - |
Fixed versions
| 4.1.13 | 4.2.10 | 4.3beta2 |
Sources
- osv: GHSA-m7rg-85g8-28m9
- https://nvd.nist.gov/vuln/detail/CVE-2009-3633
- https://github.com/TYPO3/typo3/commit/51f3dd9804cae04575323b92a9136e5a511fe810
- https://github.com/TYPO3/typo3/commit/5d4218fad3aeda46236754004232d7e635205e7a
- https://github.com/TYPO3/typo3/commit/ef9ab2da76c2506306d835209d2a38195bdf7bcf
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53925
- https://github.com/TYPO3-CMS/core
- https://web.archive.org/web/20101223093042/http://www.securityfocus.com/bid/36801
- http://marc.info/?l=oss-security&m=125632856206736&w=2
- http://marc.info/?l=oss-security&m=125633199111438&w=2
- http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016
CVE-2009-3633 · published · modified · JSON