CVE-2023-47125
1 advisory.
Packagist/typo3/html-sanitizer CVE-2023-47125: medium 4.7, EPSS 0.57%
Bypassing Cross-Site Scripting Protection in TYPO3 HTML Sanitizer
Action: Upgrade typo3/html-sanitizer to 1.5.3 or later.
composer require typo3/html-sanitizer:1.5.3composer require typo3/html-sanitizer:2.1.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.0 | 1.5.3 | - |
| 2.0.0 | 2.1.4 | - |
Fixed versions
| 1.5.3 | 2.1.4 |
Sources
- osv: GHSA-mm79-jhqm-9j54
- https://github.com/TYPO3/html-sanitizer/security/advisories/GHSA-mm79-jhqm-9j54
- https://nvd.nist.gov/vuln/detail/CVE-2023-47125
- https://github.com/TYPO3/html-sanitizer/commit/b8f90717251d968c49dc77f8c1e5912e2fbe0dff
- https://github.com/TYPO3/html-sanitizer
- https://typo3.org/security/advisory/typo3-core-sa-2023-007
CVE-2023-47125 · published · modified · JSON