CVE-2020-8091
1 advisory.
Packagist/typo3/cms CVE-2020-8091: medium 6.1
Typo3 Cross-Site Scripting in Flash component (ELTS)
Action: Upgrade typo3/cms to 6.2.39 or later.
composer require typo3/cms:7.2.0composer require typo3/cms:6.2.39Affected
| introduced | fixed | last affected |
|---|---|---|
| 7.0.0 | 7.2.0 | - |
| 6.2.0 | 6.2.39 | - |
Fixed versions
| 7.2.0 | 6.2.39 |
Sources
- osv: GHSA-qvhv-pwww-53jj
- https://nvd.nist.gov/vuln/detail/CVE-2020-8091
- https://github.com/TYPO3/typo3/commit/482e2e992f80f5e38cb48fcaea40fd9812a5252c
- https://github.com/TYPO3/typo3
- https://github.com/TYPO3/typo3/blob/4cb53e828bd5138d180cdf9cac1ccf7fd31086d2/typo3/sysext/core/Documentation/Changelog/7.2/Breaking-65962-WebSVGLibraryAndAPIRemoved.rst
- https://typo3.org/security/advisory/typo3-psa-2019-003
- https://www.purplemet.com/blog/typo3-xss-vulnerability
CVE-2020-8091 · published · modified · JSON