CVE-2018-6905
1 advisory.
Packagist/typo3/cms CVE-2018-6905: medium 4.8
Typo3 XSS Vulnerability
Action: Upgrade typo3/cms to 9.2.0 or later.
composer require typo3/cms:9.2.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 9.2.0 | - |
Fixed versions
| 9.2.0 |
Sources
- osv: GHSA-3w22-wrwx-2r75
- https://nvd.nist.gov/vuln/detail/CVE-2018-6905
- https://github.com/TYPO3/typo3/commit/d2c0ea7db3b31a796a82f9d39f77f9983beb7c35
- https://forge.typo3.org/issues/84191
- https://github.com/pradeepjairamani/TYPO3-XSS-POC
- http://www.securitytracker.com/id/1040755
CVE-2018-6905 · published · modified · JSON