DeutschShown in its original language — a full translation is planned for a future version.
TYPO3 Core: Mehrere Schwachstellen
view advisory published 2022-12-12
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in TYPO3 Core ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial of Service Zustand herzustellen.
01
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-23504US | medium4.9 | — | ||
TYPO3 is an open source PHP based web content management system. Versions prior to 9.5.38, 10.4.33, 11.5.20, and 12.1.1 are subject to Sensitive Information Disclosure. Due to the… | ||||
| CVE-2022-23503US | high8.8 | — | ||
TYPO3 is an open source PHP based web content management system. Versions prior to 8.7.49, 9.5.38, 10.4.33, 11.5.20, and 12.1.1 are vulnerable to Code Injection. Due to the lack of… | ||||
| CVE-2022-23502US | medium5.4 | — | ||
TYPO3 is an open source PHP based web content management system. In versions prior to 10.4.33, 11.5.20, and 12.1.1, When users reset their password using the corresponding password… | ||||
| CVE-2022-23501US | medium6.5 | — | ||
TYPO3 is an open source PHP based web content management system. In versions prior to 8.7.49, 9.5.38, 10.4.33, 11.5.20, and 12.1.1 TYPO3 is vulnerable to Improper Authentication. R… | ||||
| CVE-2022-23500US | high7.5 | — | ||
TYPO3 is an open source PHP based web content management system. In versions prior to 9.5.38, 10.4.33, 11.5.20, and 12.1.1, requesting invalid or non-existing resources via HTTP tr… | ||||
| CVE-2022-23499US | medium6.1 | — | ||
HTML sanitizer is written in PHP, aiming to provide XSS-safe markup based on explicitly allowed tags, attributes and values. In versions prior to 1.5.0 or 2.1.1, malicious markup… | ||||
02
references
External citations — patches, advisories, analysis.
- TYPO3 12.1.1, 11.5.20 and 10.4.33 security releases published vom 2022-12-12external
- TYPO3 Security Advisory vom 2022-12-12external
- TYPO3 Security Advisory vom 2022-12-12external
- TYPO3 Security Advisory vom 2022-12-12external
- TYPO3 Security Advisory vom 2022-12-12external
- TYPO3 Security Advisory vom 2022-12-12external
- TYPO3 Security Advisory vom 2022-12-12external
- WID-SEC-W-2022-2299 - CSAF Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan