CVE-2012-2112

Summary

Cross-site scripting (XSS) vulnerability in the Exception Handler in TYPO3 4.4.x before 4.4.15, 4.5.x before 4.5.15, 4.6.x before 4.6.8, and 4.7 allows remote attackers to inject arbitrary web script or HTML via exception messages.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://lists.typo3.org/pipermail/typo3-announce/2012/000241.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/74920
• http://www.securityfocus.com/bid/53047
• http://lists.typo3.org/pipermail/typo3-announce/2012/000242.html
• http://www.openwall.com/lists/oss-security/2012/04/17/5
• http://www.openwall.com/lists/oss-security/2012/04/18/1
• http://www.debian.org/security/2012/dsa-2455
• http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-002/

References

• http://lists.typo3.org/pipermail/typo3-announce/2012/000241.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/74920
• http://www.securityfocus.com/bid/53047
• http://lists.typo3.org/pipermail/typo3-announce/2012/000242.html
• http://www.openwall.com/lists/oss-security/2012/04/17/5
• http://www.openwall.com/lists/oss-security/2012/04/18/1
• http://www.debian.org/security/2012/dsa-2455
• http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-002/

• ←Previous
• Next→