CVE-2014-3943 in TYPO3
摘要 (英语)
Multiple cross-site scripting (XSS) vulnerabilities in unspecified backend components in TYPO3 4.5.0 before 4.5.34, 4.7.0 before 4.7.19, 6.0.0 before 6.0.14, 6.1.0 before 6.1.9, and 6.2.0 before 6.2.3 allow remote authenticated editors to inject arbitrary web script or HTML via unknown parameters.
预定
2014-06-03
披露
2014-06-03
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 69912 | TYPO3 跨网站脚本 | 79 | 未定义 | 官方修复 | CVE-2014-3943 |
| 13343 | TYPO3 Backend 跨网站脚本 | 79 | 高 | 官方修复 | CVE-2014-3943 |