Home > Vulnerability Database > WS-2019-0141

WhiteSource Vulnerability Database

New vulnerability? Tell us about it!

WS-2019-0141

Good to know:

Date: March 6, 2019

It has been discovered, that TYPO3 CMS is vulnerable to cross-site scripting. It has been discovered that the Fluid Engine (package typo3fluid/fluid) is vulnerable to cross-site scripting when making use of the ternary conditional operator. Affected Versions: 8.0.0-8.7.24 and 9.0.0-9.5.5.

Language: PHP

Severity Score

0.0

Related Resources (3)

Url: https://typo3.org/security/advisory/typo3-core-sa-2019-013/

Url: https://github.com/TYPO3/TYPO3.CMS/commit/3d048b3065ba0c902ddfe99356b45bdd1f8014b1#diff-1da2c7edc898c70e5a79a9997c98cecc,https://github.com/TYPO3/Fluid/commit/9ef6a8ffff2e812025fc0701b4ce72eea6911a3d

Url: https://www.whitesourcesoftware.com/vulnerability-database/WS-2019-0141

Weakness Type (CWE)

Cross-Site Scripting (XSS)

CWE-79

Top Fix

Upgrade Version

Upgrade to version TYPO3.CMS - 8.7.25,9.5.6;Fluid - 2.6.1

Do you need more information?

Contact Us