CVE-2010-3715
1 advisory.
Packagist/typo3/cms-backend CVE-2010-3715: medium, EPSS 1.06%
TYPO3 cross-site scripting (XSS) vulnerability in the RemoveXSS function and the backend
Action: Upgrade typo3/cms-backend to 4.2.15 or later.
composer require typo3/cms-backend:4.2.15composer require typo3/cms-backend:4.3.7composer require typo3/cms-backend:4.4.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.2.0 | 4.2.15 | - |
| 4.3.0 | 4.3.7 | - |
| 4.4.0 | 4.4.4 | - |
Fixed versions
| 4.2.15 | 4.3.7 | 4.4.4 |
Sources
- osv: GHSA-mwqv-jff6-5v62
- https://nvd.nist.gov/vuln/detail/CVE-2010-3715
- https://github.com/TYPO3/typo3/commit/38ec239a35d50746a2f95eef004227acd1932b81
- https://github.com/TYPO3/typo3/commit/aba23d6f12775d31acd9b7197d5eeddca09d3574
- https://github.com/TYPO3/typo3/commit/ce47d8dcdc2cd67b7866a3a53d36aa8203311780
- https://github.com/TYPO3-CMS/backend
- https://web.archive.org/web/20111220151231/http://www.securityfocus.com/bid/43786
- http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-020
- http://www.debian.org/security/2010/dsa-2121
CVE-2010-3715 · published · modified · JSON