CVE-2023-35783

Packagist/tpwd/ke_search CVE-2023-35783: medium 6.3

ke_search (aka Faceted Search) vulnerable to Cross-Site Scripting

Action: Upgrade tpwd/ke_search to 4.0.3 or later.

composer require tpwd/ke_search:5.0.2

composer require tpwd/ke_search:4.6.6

composer require tpwd/ke_search:4.0.3

Affected

Fixed versions

Sources

• osv: GHSA-f4m6-x2xj-jc7w
• https://nvd.nist.gov/vuln/detail/CVE-2023-35783
• https://github.com/tpwd/ke_search/commit/14fa0703c2469e04eb398be4ae6268ec6ad6e720
• https://github.com/tpwd/ke_search/commit/b0f05d7e7e207bc0d5051bd96f3ff43c5c3658c6
• https://github.com/tpwd/ke_search/commit/d81a1f2f3dcb612220d505b495bc2851b87f6f74
• https://github.com/FriendsOfPHP/security-advisories/blob/master/tpwd/ke_search/CVE-2023-35783.yaml
• https://github.com/tpwd/ke_search
• https://typo3.org/security/advisory/typo3-ext-sa-2023-004

CVE-2023-35783 · published 2023-06-16T15:30:19Z · modified 2024-02-16T08:18:03.992437Z · JSON