CVE-2009-4397: XSS
Published Dec 22, 2009
·Updated
Cross-site scripting (XSS) vulnerability in the Diocese of Portsmouth Resources Database (pdresources) extension 0.1.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
2 affected components
Fr.simon Rundell Pd Resources<=0.1.1
Typo3 TYPO3
Event History
Dec 22, 2009
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Data Sourced
11:30 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2009-4397?
CVE-2009-4397 is classified as a moderate severity cross-site scripting (XSS) vulnerability.
2
How does CVE-2009-4397 affect TYPO3 users?
CVE-2009-4397 allows remote attackers to inject arbitrary web scripts or HTML into TYPO3 installations using the pd_resources extension.
3
What versions of pd_resources are affected by CVE-2009-4397?
CVE-2009-4397 affects pd_resources versions 0.1.1 and earlier.
4
How do I fix CVE-2009-4397?
To fix CVE-2009-4397, upgrade the pd_resources extension to a version later than 0.1.1.
5
What is the main attack vector for CVE-2009-4397?
The main attack vector for CVE-2009-4397 is through unspecified user input that can be exploited for XSS.