CVE-2013-4744: PHPUnit extension for TYPO3 vulnerable to Cross-site Scripting
Cross-site scripting (XSS) vulnerability in the PHPUnit extension before 3.5.15 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Other sources
PHPUnit extension for TYPO3 vulnerable to Cross-site Scripting
— Packagist
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/oliverklee/phpunitto a version that resolves this vulnerability.Fixed in 3.5.15
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4744?
CVE-2013-4744 is considered a medium severity vulnerability due to its potential for exploitation through XSS.
How do I fix CVE-2013-4744?
To fix CVE-2013-4744, upgrade to PHPUnit version 3.5.15 or later.
What type of vulnerability is CVE-2013-4744?
CVE-2013-4744 is a cross-site scripting (XSS) vulnerability.
Who is affected by CVE-2013-4744?
CVE-2013-4744 affects users of the PHPUnit extension before version 3.5.15 for TYPO3.
Can CVE-2013-4744 be exploited remotely?
Yes, CVE-2013-4744 can be exploited remotely by attackers to inject arbitrary web scripts or HTML.