TYPO3 allows remote attackers to embed Flash videos from external domain
The Flvplayer component in TYPO3 6.2.x before 6.2.16 allows remote attackers to embed Flash videos from external domains via unspecified vectors, aka "Cross-Site Flashing."
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2015-8760US | medium6.1 | — | ||
The Flvplayer component in TYPO3 6.2.x before 6.2.16 allows remote attackers to embed Flash videos from external domains via unspecified vectors, aka "Cross-Site Flashing." | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://github.com/TYPO3/typo3PACKAGE
- https://github.com/TYPO3/typo3/commit/29ae05c04cb48d4031d323f17d8f2b68b27af353WEB
- https://nvd.nist.gov/vuln/detail/CVE-2015-8760ADVISORY
- https://typo3.org/security/advisory/typo3-core-sa-2015-014WEB
- https://web.archive.org/web/20160621232021/http://www.securityfocus.com/bid/79210WEB
- https://web.archive.org/web/20161012163613/http://www.securitytracker.com/id/1034485WEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan