CVE-2008-5656: XSS
Cross-site scripting (XSS) vulnerability in the frontend plugin for the felogin system extension in TYPO3 4.2.0, 4.2.1 and 4.2.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/typo3/cms-feloginto a version that resolves this vulnerability.Fixed in 4.2.3
Event History
Frequently Asked Questions
What is the severity of CVE-2008-5656?
CVE-2008-5656 is considered a medium severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2008-5656?
To mitigate CVE-2008-5656, upgrade to TYPO3 version 4.2.3 or later, which addresses this vulnerability.
Which TYPO3 versions are affected by CVE-2008-5656?
CVE-2008-5656 affects TYPO3 versions 4.2.0, 4.2.1, and 4.2.2.
What type of vulnerability is CVE-2008-5656?
CVE-2008-5656 is a cross-site scripting (XSS) vulnerability.
Can remote attackers exploit CVE-2008-5656?
Yes, remote attackers can exploit CVE-2008-5656 to inject arbitrary web scripts or HTML.