What is GHSA-7gg8-3r6j-5g55?

GHSA-7gg8-3r6j-5g55 is a security advisory published by GitHub Security Advisories with Low severity. Typo3 Backend Configuration XSS Vulnerability

Which CVE IDs does GHSA-7gg8-3r6j-5g55 cover?

GHSA-7gg8-3r6j-5g55 covers the following CVE IDs: CVE-2012-3529. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-7gg8-3r6j-5g55?

GHSA-7gg8-3r6j-5g55 affects 3 products, including: composer/typo3/cms:\u003e= 4.5, \u003c 4.5.19; composer/typo3/cms:\u003e= 4.6, \u003c 4.6.12; composer/typo3/cms:\u003e= 4.7, \u003c 4.7.4.

GHSA-7gg8-3r6j-5g55Low

Typo3 Backend Configuration XSS Vulnerability

Vendor

GitHub Security Advisories

Published

May 17, 2022

Last Modified

January 12, 2024

🔗 CVE IDs covered (1)

CVE-2012-3529 →

📋 Description

The configuration module in the backend in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 and 4.7.x before 4.7.4 allows remote authenticated backend users to obtain the encryption key via unspecified vectors.

🎯 Affected products3

composer/typo3/cms:>= 4.5, < 4.5.19
composer/typo3/cms:>= 4.6, < 4.6.12
composer/typo3/cms:>= 4.7, < 4.7.4

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2012-3529
https://exchange.xforce.ibmcloud.com/vulnerabilities/77793
http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-004/
http://www.debian.org/security/2012/dsa-2537
http://www.openwall.com/lists/oss-security/2012/08/22/8
https://github.com/advisories/GHSA-7gg8-3r6j-5g55