p PatchFirst

PatchFirst · Latest vulnerabilities

neos/media-browser vulnerabilities

Vulnerabilities published for neos/media-browser in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerability: 1

  1. CVE-2023-37611

    Medium · CVSS 5.4EPSS 0.71%Fix available

    CVE-2023-37611

    Cross Site Scripting (XSS) vulnerability in Neos CMS 8.3.3 allows a remote authenticated attacker to execute arbitrary code via a crafted SVG file to the neos/management/media component.

    neos/media-browser neos/media-browser neos/media-browser neos/media-browser neos/media-browserPHP
    • Update to 7.3.19
    • Update to 8.0.16
    • Update to 8.1.11
    • Update to 8.2.11
    • Update to 8.3.9
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →