CVE-2010-5100

Packagist/typo3/cms-install CVE-2010-5100: low

TYPO3 Cross-Site Scripting vulnerability in the Install Tool

Action: Upgrade typo3/cms-install to 4.2.16 or later.

composer require typo3/cms-install:4.2.16

composer require typo3/cms-install:4.3.9

composer require typo3/cms-install:4.4.5

Affected

Fixed versions

Sources

• osv: GHSA-9hh2-8cw6-hfv7
• https://nvd.nist.gov/vuln/detail/CVE-2010-5100
• https://github.com/TYPO3/typo3/commit/9bb2fe60d8938048c9049e2d660c0ae8409b21d4
• https://github.com/TYPO3/typo3/commit/cf974942d1738b6b38c506a30a808c5e405d3ca2
• https://github.com/TYPO3/typo3/commit/e892f0a17f40d703fd71ee66490dee15b132909c
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64181
• https://github.com/TYPO3-CMS/install
• http://secunia.com/advisories/35770
• http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-sa-2010-022
• http://www.openwall.com/lists/oss-security/2011/01/13/2
• http://www.openwall.com/lists/oss-security/2012/05/10/7
• http://www.openwall.com/lists/oss-security/2012/05/11/3
• http://www.osvdb.org/70120
• http://www.securityfocus.com/bid/45470

CVE-2010-5100 · published 2022-05-17T01:55:58Z · modified 2024-02-08T00:11:46.942717Z · JSON