CVE-2009-3629: XSS

Q: What is the severity of CVE-2009-3629?

CVE-2009-3629 has been classified as a vulnerability that allows cross-site scripting (XSS), which can lead to unauthorized access or manipulation of web content.

Q: How do I fix CVE-2009-3629?

To fix CVE-2009-3629, upgrade to TYPO3 versions 4.1.13, 4.2.10, or 4.3beta2 or later.

Q: What systems are affected by CVE-2009-3629?

CVE-2009-3629 affects TYPO3 versions 4.0.13 and earlier, as well as specific 4.1.x, 4.2.x, and 4.3.x versions before the listed remedies.

Q: Can CVE-2009-3629 be exploited remotely?

Yes, CVE-2009-3629 can be exploited remotely by authenticated users to inject arbitrary HTML or scripts.

Q: Who is impacted by CVE-2009-3629?

Any remote authenticated users of TYPO3 versions vulnerable to CVE-2009-3629 may be able to exploit this vulnerability.

Published Nov 2, 2009

Updated

Multiple cross-site scripting (XSS) vulnerabilities in the Backend subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

Affected Software

50 affected componentsFixes available

composer/typo3/cms-backend>=4.3alpha1<4.3beta2

4.3beta2

composer/typo3/cms-backend>=4.2.0<4.2.10

4.2.10

composer/typo3/cms-backend>=4.1.0<4.1.13

4.1.13

composer/typo3/cms-backend<=4.0.13

Typo3 TYPO3=4.3-alpha1

Typo3 TYPO3=4.1.11

Typo3 TYPO3=4.1.1

Typo3 TYPO3=4.1.0-beta1

Typo3 TYPO3=4.1-beta

Typo3 TYPO3=4.2.4

Typo3 TYPO3=4.2.5

Typo3 TYPO3=4.1.8

Typo3 TYPO3=4.1.6

Typo3 TYPO3=4.0.10

Typo3 TYPO3=4.2.0

Typo3 TYPO3=4.0.5

Typo3 TYPO3=4.2.8

Typo3 TYPO3=4.1.12

Typo3 TYPO3=4.0.3

Typo3 TYPO3<=4.0.13

Typo3 TYPO3=4.2.3

Typo3 TYPO3=4.1.4

Typo3 TYPO3=4.3-beta1

Typo3 TYPO3=4.0.4

Typo3 TYPO3=4.2.1

Typo3 TYPO3=4.0.1

Typo3 TYPO3=4.11

Typo3 TYPO3=4.3

Typo3 TYPO3=4.1.7

Typo3 TYPO3=4.1.0

Typo3 TYPO3=4.1.0-rc1

Typo3 TYPO3=4.0.12

Typo3 TYPO3=4.0.2

Typo3 TYPO3=4.2.6

Typo3 TYPO3=4.0.7

Typo3 TYPO3=4.0

Typo3 TYPO3=4.1.9

Typo3 TYPO3=4.1-rc1

Typo3 TYPO3=4.2.2

Typo3 TYPO3=4.0.8

Typo3 TYPO3=4.1.3

Typo3 TYPO3=4.10

Typo3 TYPO3=4.2.7

Typo3 TYPO3=4.0.6

Typo3 TYPO3=4.0.9

Typo3 TYPO3=4.1.5

Typo3 TYPO3=4.1.10

Typo3 TYPO3=4.1.2

Typo3 TYPO3=4.2.9

Typo3 TYPO3=4.0.11

Event History

Nov 2, 2009

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

May 2, 2022

Advisory Published

via GitHub·03:46 AM

Frequently Asked Questions

What is the severity of CVE-2009-3629?

CVE-2009-3629 has been classified as a vulnerability that allows cross-site scripting (XSS), which can lead to unauthorized access or manipulation of web content.

How do I fix CVE-2009-3629?

To fix CVE-2009-3629, upgrade to TYPO3 versions 4.1.13, 4.2.10, or 4.3beta2 or later.

What systems are affected by CVE-2009-3629?