CVE-2016-4056
1 advisory.
Packagist/typo3/cms CVE-2016-4056: medium 6.1, EPSS 1.08%
TYPO3 Backend component Cross-site scripting (XSS) vulnerability
Action: Upgrade typo3/cms to 6.2.19 or later.
composer require typo3/cms:6.2.19Affected
| introduced | fixed | last affected |
|---|---|---|
| 6.2.0 | 6.2.19 | - |
Fixed versions
| 6.2.19 |
Sources
- osv: GHSA-ffcm-vhcw-p32r
- https://nvd.nist.gov/vuln/detail/CVE-2016-4056
- https://github.com/TYPO3/typo3
- https://labs.integrity.pt/advisories/cve-pending-stored-cross-site-scripting-in-typo3-bookmarks
- https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2016-006
- http://www.openwall.com/lists/oss-security/2016/04/21/1
CVE-2016-4056 · published · modified · JSON