{"action":"Upgrade typo3/cms-frontend to 4.1.14 or later.","affected":[{"fixed":"4.1.14","introduced":"0"},{"fixed":"4.2.13","introduced":"4.2.0"},{"fixed":"4.3.4","introduced":"4.3.0"},{"fixed":"4.4.1","introduced":"4.4.0"}],"component":"typo3/cms-frontend","cve_ids":["CVE-2010-3667"],"ecosystem":"Packagist","epss":0.0115,"exploited":false,"fixed_versions":["4.1.14","4.2.13","4.3.4","4.4.1"],"ghsa_id":"GHSA-48ww-8h7g-4hwq","id":"tcs_01M5KETTTWST9E9WP87GND1D46","modified_at":"2024-02-06T23:56:35.637090Z","published_at":"2022-04-21T01:57:47Z","references":["https://osv.dev/vulnerability/GHSA-48ww-8h7g-4hwq","https://nvd.nist.gov/vuln/detail/CVE-2010-3667","https://github.com/TYPO3/typo3/commit/34da374183dd472fa7987ee25b47544a06bd2173","https://github.com/TYPO3/typo3/commit/5eb60976cea268b879e02811208e6a1777674cbb","https://github.com/TYPO3/typo3/commit/78dbe326df7ebc612f40882920a426c82b2ca9d3","https://github.com/TYPO3/typo3/commit/f82696c7d62842edb0bf79ef21a85d56735a1527","https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590719","https://github.com/TYPO3-CMS/frontend","https://security-tracker.debian.org/tracker/CVE-2010-3667","https://typo3.org/security/advisory/typo3-sa-2010-012/#Spam_Abuse"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-48ww-8h7g-4hwq","url":"https://osv.dev/vulnerability/GHSA-48ww-8h7g-4hwq"}],"summary":"TYPO3 is vulnerable to Spam Abuse in the native form content element"}