p PatchFirst

CVE-2020-8091

CVE-2020-8091

This page contains facts from public vulnerability sources. Check the original advisory before updating.

svg.swf in TYPO3 6.2.0 to 6.2.38 ELTS and 7.0.0 to 7.1.0 could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack on a targeted system. This may be at a contrib/websvg/svg.swf pathname.

CVSS 4.8 · Medium · EPSS 5.2% · Fix available

Published
Updated

Stack: php

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • typo3/cms Packagist

    Versions
    • 7.0.0
    • 7.0.1
    • 7.0.2
    • 7.1.0
    Affected ranges
    • ECOSYSTEM: ≥ 7.0.0, < 7.2.0

    Update to 7.2.0

  • typo3/cms Packagist

    Versions
    • 6.2.0
    • 6.2.1
    • 6.2.10
    • 6.2.10-rc1
    • 6.2.11
    • 6.2.12
    • 6.2.13
    • 6.2.14
    • 6.2.15
    • 6.2.16
    • 6.2.17
    • 6.2.18
    • 6.2.19
    • 6.2.2
    • 6.2.20
    • 6.2.21
    • 6.2.22
    • 6.2.23
    • 6.2.24
    • 6.2.25
    • 6.2.26
    • 6.2.27
    • 6.2.28
    • 6.2.29
    • 6.2.3
    • 6.2.30
    • 6.2.31
    • 6.2.4
    • 6.2.5
    • 6.2.6
    • 6.2.7
    • 6.2.8
    • 6.2.9
    Affected ranges
    • ECOSYSTEM: ≥ 6.2.0, < 6.2.39

    Update to 6.2.39

Original sources

Check your server →