4.3

CVE-2009-3633

Cross-site scripting (XSS) vulnerability in the t3lib_div::quoteJSvalue API function in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the sanitizing algorithm.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Typo3 ≫ Typo3 Version <= 4.0.12
Typo3 ≫ Typo3 Version0.1.2
Typo3 ≫ Typo3 Version1.0.14
Typo3 ≫ Typo3 Version1.1
Typo3 ≫ Typo3 Version1.1.1
Typo3 ≫ Typo3 Version1.1.09
Typo3 ≫ Typo3 Version1.1.10
Typo3 ≫ Typo3 Version1.2.0
Typo3 ≫ Typo3 Version1.3.0
Typo3 ≫ Typo3 Version1.3.2
Typo3 ≫ Typo3 Version3.0
Typo3 ≫ Typo3 Version3.3.x
Typo3 ≫ Typo3 Version3.5
Typo3 ≫ Typo3 Version3.5.x
Typo3 ≫ Typo3 Version3.6.x
Typo3 ≫ Typo3 Version3.7.0
Typo3 ≫ Typo3 Version3.7.1
Typo3 ≫ Typo3 Version3.7.x
Typo3 ≫ Typo3 Version3.8
Typo3 ≫ Typo3 Version3.8.x
Typo3 ≫ Typo3 Version4.0
Typo3 ≫ Typo3 Version4.0.1
Typo3 ≫ Typo3 Version4.0.2
Typo3 ≫ Typo3 Version4.0.3
Typo3 ≫ Typo3 Version4.0.4
Typo3 ≫ Typo3 Version4.0.5
Typo3 ≫ Typo3 Version4.0.6
Typo3 ≫ Typo3 Version4.0.7
Typo3 ≫ Typo3 Version4.0.8
Typo3 ≫ Typo3 Version4.0.9
Typo3 ≫ Typo3 Version4.0.10
Typo3 ≫ Typo3 Version4.0.11
Typo3 ≫ Typo3 Version4.1.0
Typo3 ≫ Typo3 Version4.1.0 Updatebeta1
Typo3 ≫ Typo3 Version4.1.0 Updaterc1
Typo3 ≫ Typo3 Version4.1.1
Typo3 ≫ Typo3 Version4.1.2
Typo3 ≫ Typo3 Version4.1.3
Typo3 ≫ Typo3 Version4.1.4
Typo3 ≫ Typo3 Version4.1.5
Typo3 ≫ Typo3 Version4.1.6
Typo3 ≫ Typo3 Version4.1.7
Typo3 ≫ Typo3 Version4.1.8
Typo3 ≫ Typo3 Version4.1.9
Typo3 ≫ Typo3 Version4.1.10
Typo3 ≫ Typo3 Version4.1.11
Typo3 ≫ Typo3 Version4.1.12
Typo3 ≫ Typo3 Version4.2.0
Typo3 ≫ Typo3 Version4.2.1
Typo3 ≫ Typo3 Version4.2.2
Typo3 ≫ Typo3 Version4.2.3
Typo3 ≫ Typo3 Version4.2.4
Typo3 ≫ Typo3 Version4.2.5
Typo3 ≫ Typo3 Version4.2.6
Typo3 ≫ Typo3 Version4.2.7
Typo3 ≫ Typo3 Version4.2.8
Typo3 ≫ Typo3 Version4.2.9
Typo3 ≫ Typo3 Version4.3
Typo3 ≫ Typo3 Version4.3 Updatealpha1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.38% 0.566
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
CWE-352 Cross-Site Request Forgery (CSRF)

The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.