CVE-2010-3659
1 advisory.
Packagist/typo3/cms-backend CVE-2010-3659: medium 5.4
TYPO3 Cross-site Scripting vulnerability in the extension manager and backend forms
Action: Upgrade typo3/cms-backend to 4.1.14 or later.
composer require typo3/cms-backend:4.1.14composer require typo3/cms-backend:4.2.13composer require typo3/cms-backend:4.3.4composer require typo3/cms-backend:4.4.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.1.0 | 4.1.14 | - |
| 4.2.0 | 4.2.13 | - |
| 4.3.0 | 4.3.4 | - |
| 4.4.0 | 4.4.1 | - |
Fixed versions
| 4.1.14 | 4.2.13 | 4.3.4 | 4.4.1 |
Sources
- osv: GHSA-jr79-65xr-q7cx
- https://nvd.nist.gov/vuln/detail/CVE-2010-3659
- https://github.com/TYPO3-CMS/backend
- https://security-tracker.debian.org/tracker/CVE-2010-3659
- https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-sa-2010-012
- https://web.archive.org/web/20120903133822/http://www.securityfocus.com/bid/42029
- http://www.openwall.com/lists/oss-security/2010/09/28/8
- http://www.openwall.com/lists/oss-security/2014/02/12/8
CVE-2010-3659 · published · modified · JSON