{"action":"Upgrade typo3/cms-install to 4.2.16 or later.","affected":[{"fixed":"4.2.16","introduced":"4.2.0"},{"fixed":"4.3.9","introduced":"4.3.0"},{"fixed":"4.4.5","introduced":"4.4.0"}],"component":"typo3/cms-install","cve_ids":["CVE-2010-5100"],"ecosystem":"Packagist","epss":0.01107,"exploited":false,"fixed_versions":["4.2.16","4.3.9","4.4.5"],"ghsa_id":"GHSA-9hh2-8cw6-hfv7","id":"tcs_01M5KF02KGZ82HT4HG78AZ5D24","modified_at":"2024-02-08T00:11:46.942717Z","published_at":"2022-05-17T01:55:58Z","references":["https://osv.dev/vulnerability/GHSA-9hh2-8cw6-hfv7","https://nvd.nist.gov/vuln/detail/CVE-2010-5100","https://github.com/TYPO3/typo3/commit/9bb2fe60d8938048c9049e2d660c0ae8409b21d4","https://github.com/TYPO3/typo3/commit/cf974942d1738b6b38c506a30a808c5e405d3ca2","https://github.com/TYPO3/typo3/commit/e892f0a17f40d703fd71ee66490dee15b132909c","https://exchange.xforce.ibmcloud.com/vulnerabilities/64181","https://github.com/TYPO3-CMS/install","http://secunia.com/advisories/35770","http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-sa-2010-022","http://www.openwall.com/lists/oss-security/2011/01/13/2","http://www.openwall.com/lists/oss-security/2012/05/10/7","http://www.openwall.com/lists/oss-security/2012/05/11/3","http://www.osvdb.org/70120","http://www.securityfocus.com/bid/45470"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-9hh2-8cw6-hfv7","url":"https://osv.dev/vulnerability/GHSA-9hh2-8cw6-hfv7"}],"summary":"TYPO3 Cross-Site Scripting vulnerability in the Install Tool"}