{"action":"Upgrade typo3/cms to 8.7.30 or later.","affected":[{"fixed":"10.2.1","introduced":"10.0.0"},{"fixed":"8.7.30","introduced":"8.0.0"},{"fixed":"9.5.12","introduced":"9.0.0"}],"component":"typo3/cms","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["10.2.1","8.7.30","9.5.12"],"ghsa_id":"GHSA-v8m4-3w37-ghxx","id":"tcs_01M5KF8ZS53AX52Q9J4S7H76MV","modified_at":"2024-12-04T05:41:30.350747Z","published_at":"2024-06-07T18:26:07Z","references":["https://osv.dev/vulnerability/GHSA-v8m4-3w37-ghxx","https://github.com/TYPO3/typo3/commit/966a0038c16c04d484c1703fba9fdc13f3e7a95c","https://github.com/TYPO3/typo3/commit/9692bf83f8310cca17c9a968c4fe92ffe0deb59d","https://github.com/TYPO3/typo3/commit/e971b012c837f1e64c1498b567ef6eec304febe5","https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2019-12-17-1.yaml","https://github.com/TYPO3/typo3","https://typo3.org/security/advisory/typo3-core-sa-2019-021"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-v8m4-3w37-ghxx","url":"https://osv.dev/vulnerability/GHSA-v8m4-3w37-ghxx"}],"summary":"TYPO3 Cross-Site Scripting in Form Framework validation handling"}