CVE-2009-3636
1 advisory.
Packagist/typo3/cms-install CVE-2009-3636: medium, EPSS 1.96%
Typo3 API Install Tool vulnerable to Cross-site Scripting
Action: Upgrade typo3/cms-install to 4.1.13 or later.
composer require typo3/cms-install:4.1.13composer require typo3/cms-install:4.2.10composer require typo3/cms-install:4.3beta2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 4.0.13 |
| 4.1.0 | 4.1.13 | - |
| 4.2.0 | 4.2.10 | - |
| 4.3alpha1 | 4.3beta2 | - |
Fixed versions
| 4.1.13 | 4.2.10 | 4.3beta2 |
Sources
- osv: GHSA-c73w-4rcj-2622
- https://nvd.nist.gov/vuln/detail/CVE-2009-3636
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53929
- https://github.com/TYPO3-CMS/install
- https://web.archive.org/web/20101223093042/http://www.securityfocus.com/bid/36801
- http://marc.info/?l=oss-security&m=125632856206736&w=2
- http://marc.info/?l=oss-security&m=125633199111438&w=2
- http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016
CVE-2009-3636 · published · modified · JSON