CVE-2013-5570: XSS
Published Aug 23, 2013
·Updated
Cross-site scripting (XSS) vulnerability in the Javascript and CSS Optimizer extension before 1.1.14 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
12 affected components
Axel Jung Js Css Optimizer<=1.0.4
Axel Jung Js Css Optimizer=0.0.1
Axel Jung Js Css Optimizer=0.1.0
Axel Jung Js Css Optimizer=0.2.0
Axel Jung Js Css Optimizer=0.2.1
Axel Jung Js Css Optimizer=0.2.2
Axel Jung Js Css Optimizer=0.2.3
Axel Jung Js Css Optimizer=1.0.0
Axel Jung Js Css Optimizer=1.0.1
Axel Jung Js Css Optimizer=1.0.2
Axel Jung Js Css Optimizer=1.0.3
Typo3 TYPO3
Remediation
Patch Available
Event History
Aug 23, 2013
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-5570?
CVE-2013-5570 has a moderate severity level due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2013-5570?
To mitigate CVE-2013-5570, upgrade the Javascript and CSS Optimizer extension to version 1.1.14 or later.
3
What types of attacks can CVE-2013-5570 enable?
CVE-2013-5570 can allow remote attackers to perform cross-site scripting attacks by injecting arbitrary web scripts or HTML.
4
Which TYPO3 versions are affected by CVE-2013-5570?
CVE-2013-5570 affects all versions of the Javascript and CSS Optimizer extension prior to 1.1.14.
5
Who is the vendor for CVE-2013-5570?
The vendor associated with CVE-2013-5570 is Axel Jung, the developer of the Javascript and CSS Optimizer extension.