CVE-2013-7074
1 advisory.
Packagist/typo3/cms CVE-2013-7074: low 3
TYPO3 Cross-Site Scripting (XSS) vulnerabilities in Content Editing Wizards component
Action: Upgrade typo3/cms to 4.5.32 or later.
composer require typo3/cms:4.5.32composer require typo3/cms:4.7.17composer require typo3/cms:6.0.12composer require typo3/cms:6.1.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.5.0 | 4.5.32 | - |
| 4.7.0 | 4.7.17 | - |
| 6.0.0 | 6.0.12 | - |
| 6.1.0 | 6.1.7 | - |
Fixed versions
| 4.5.32 | 4.7.17 | 6.0.12 | 6.1.7 |
Sources
- osv: GHSA-r8m7-792j-5jvq
- https://nvd.nist.gov/vuln/detail/CVE-2013-7074
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89620
- https://github.com/TYPO3/typo3
- http://osvdb.org/100881
- http://seclists.org/oss-sec/2013/q4/473
- http://seclists.org/oss-sec/2013/q4/487
- http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2013-004
- http://www.debian.org/security/2014/dsa-2834
- http://www.securityfocus.com/bid/64245
CVE-2013-7074 · published · modified · JSON