add advisory

Author: Yaniv-git

source/_posts/By-passing Cross-Site Scripting Protection in HTML Sanitizer.md renamed to source/_posts/Typo3 HTML Sanitizer By-passing via the noscript tag.md

@@ -1,5 +1,5 @@
 ---
-title: "By-passing Cross-Site Scripting Protection in HTML Sanitizer"
+title: "Typo3 HTML Sanitizer By-passing via the noscript tag"
 date: 2023-07-26
 tags:
 	- "xss"
@@ -16,7 +16,7 @@ ghsas:
 Due to an encoding issue in the serialization layer, malicious markup nested in a noscript element was not encoded correctly. noscript is disabled in the default configuration, but might have been enabled in custom scenarios. This allows bypassing the cross-site scripting mechanism of typo3/html-sanitizer.
 
 # Solution
-Update to typo3/html-sanitizer versions 1.5.1 or 2.1.2 that fix the problem described.
+Update to `typo3/html-sanitizer` versions 1.5.1 or 2.1.2 that fix the problem described.
 
 # Credits
 Thanks to David Klein and Yaniv Nizry who reported this issue, and to TYPO3 security team members Oliver Hader and Benjamin Franzke who fixed the issue.

source/_posts/Typo3 HTML Sanitizer By-passing via the processing instructions.md

@@ -0,0 +1,26 @@
+---
+title: "Typo3 HTML Sanitizer By-passing via the processing instructions"
+date: 2023-11-14
+tags:
+	- "xss"
+	- "bypass"
+advisory: true
+origin: https://github.com/advisories/GHSA-mm79-jhqm-9j54
+cves: 
+	- CVE-2023-47125
+ghsas:
+	- "GHSA-mm79-jhqm-9j54"
+---
+# Problem
+DOM processing instructions are not handled correctly. This allows bypassing the cross-site scripting mechanism of [typo3/html-sanitizer](https://packagist.org/packages/typo3/html-sanitizer).
+
+
+# Solution
+Update to `typo3/html-sanitizer` versions 1.5.3 or 2.1.4 that fix the problem described.
+
+# Credits
+Thanks to Yaniv Nizry and Niels Dossche who reported this issue, and to TYPO3 core & security team member Oliver Hader who fixed the issue.
+
+# References
+* [TYPO3-CORE-SA-2023-007](https://typo3.org/security/advisory/typo3-core-sa-2023-007)
+* [Disclosure & PoC](https://github.com/TYPO3/html-sanitizer/security/advisories/GHSA-652v-xw37-rvw7) (embargoed +90 days)