CVE-2011-4629: XSS
Published Nov 6, 2019
·Updated
Cross-site Scripting (XSS) in TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to inject arbitrary web script or HTML via the admin panel.
Affected Software
4 affected components
debian/typo3-src
Typo3 TYPO3>=4.5.0<4.5.4
Typo3 TYPO3>=4.3.0<4.3.12
Typo3 TYPO3>=4.4.0<4.4.9
Event History
Nov 6, 2019
CVE Published
via MITRE·04:30 PM
Data Sourced
via MITRE·04:30 PM
DescriptionWeakness
Aug 7, 2024
Data Sourced
via Debian·12:18 AM
DescriptionAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2011-4629?
The severity of CVE-2011-4629 is medium (5.4).
2
How does CVE-2011-4629 affect TYPO3?
CVE-2011-4629 affects TYPO3 versions before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4.
3
How does CVE-2011-4629 allow attackers to exploit TYPO3?
CVE-2011-4629 allows remote attackers to inject arbitrary web script or HTML via the admin panel in TYPO3.
4
What is the Common Vulnerabilities and Exposures (CVE) ID for this vulnerability?
The Common Vulnerabilities and Exposures (CVE) ID for this vulnerability is CVE-2011-4629.
5
Where can I find more information about CVE-2011-4629?
You can find more information about CVE-2011-4629 at the following references: [1](https://security-tracker.debian.org/tracker/CVE-2011-4629) and [2](https://typo3.org/security/advisory/typo3-core-sa-2011-001/#XSS).