CVE-2023-38500
1 advisory.
Packagist/typo3/html-sanitizer CVE-2023-38500: medium 4.7, EPSS 0.51%
By-passing Cross-Site Scripting Protection in HTML Sanitizer
Action: Upgrade typo3/html-sanitizer to 1.5.1 or later.
composer require typo3/html-sanitizer:1.5.1composer require typo3/html-sanitizer:2.1.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.0 | 1.5.1 | - |
| 2.0.0 | 2.1.2 | - |
Fixed versions
| 1.5.1 | 2.1.2 |
Sources
- osv: GHSA-59jf-3q9v-rh6g
- https://github.com/TYPO3/html-sanitizer/security/advisories/GHSA-59jf-3q9v-rh6g
- https://nvd.nist.gov/vuln/detail/CVE-2023-38500
- https://github.com/TYPO3/html-sanitizer/commit/e3026f589fef0be8c3574ee3f0a0bfbe33d7ebdb
- https://github.com/TYPO3/html-sanitizer
- https://typo3.org/security/advisory/typo3-core-sa-2023-002
CVE-2023-38500 · published · modified · JSON