Skip to content

TYPO3 is susceptible to Cross-Site Flashing

Moderate severity GitHub Reviewed Published Jun 3, 2024 to the GitHub Advisory Database • Updated Jun 3, 2024

Package

composer typo3/cms (Composer)

Affected versions

>= 6.2.0, < 6.2.16

Patched versions

6.2.16

Description

The flashplayer misses to validate flash and image files. Therefore it is possible to embed flash videos from external domains.

References

Published to the GitHub Advisory Database Jun 3, 2024
Reviewed Jun 3, 2024
Last updated Jun 3, 2024

Severity

Moderate

EPSS score

Weaknesses

No CWEs

CVE ID

No known CVE

GHSA ID

GHSA-qrxh-46mr-pr7q

Source code

Loading Checking history
See something to contribute? Suggest improvements for this vulnerability.