CVE-2015-5956: XSS
First published: Tue Sep 08 2015(Updated: )
Backend: Non-Persistent Cross-Site Scripting
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| composer/typo3/cms | >=6.2.0<6.2.15>=7.0.0<7.1.0>=7.1.0<7.2.0>=7.2.0<7.3.0>=7.3.0<7.4.0 | |
| Typo3 Typo3 | <=4.5.40 | |
| Typo3 Typo3 | =6.0 | |
| Typo3 Typo3 | =6.0.1 | |
| Typo3 Typo3 | =6.0.2 | |
| Typo3 Typo3 | =6.0.3 | |
| Typo3 Typo3 | =6.0.4 | |
| Typo3 Typo3 | =6.0.5 | |
| Typo3 Typo3 | =6.0.6 | |
| Typo3 Typo3 | =6.0.7 | |
| Typo3 Typo3 | =6.0.8 | |
| Typo3 Typo3 | =6.0.9 | |
| Typo3 Typo3 | =6.0.10 | |
| Typo3 Typo3 | =6.0.11 | |
| Typo3 Typo3 | =6.0.12 | |
| Typo3 Typo3 | =6.0.13 | |
| Typo3 Typo3 | =6.0.14 | |
| Typo3 Typo3 | =6.1 | |
| Typo3 Typo3 | =6.1.1 | |
| Typo3 Typo3 | =6.1.2 | |
| Typo3 Typo3 | =6.1.3 | |
| Typo3 Typo3 | =6.1.4 | |
| Typo3 Typo3 | =6.1.5 | |
| Typo3 Typo3 | =6.1.6 | |
| Typo3 Typo3 | =6.1.7 | |
| Typo3 Typo3 | =6.1.8 | |
| Typo3 Typo3 | =6.1.9 | |
| Typo3 Typo3 | =6.2 | |
| Typo3 Typo3 | =6.2.0-beta1 | |
| Typo3 Typo3 | =6.2.0-beta2 | |
| Typo3 Typo3 | =6.2.0-beta3 | |
| Typo3 Typo3 | =6.2.1 | |
| Typo3 Typo3 | =6.2.2 | |
| Typo3 Typo3 | =6.2.3 | |
| Typo3 Typo3 | =6.2.4 | |
| Typo3 Typo3 | =6.2.5 | |
| Typo3 Typo3 | =6.2.6 | |
| Typo3 Typo3 | =6.2.7 | |
| Typo3 Typo3 | =6.2.8 | |
| Typo3 Typo3 | =6.2.9 | |
| Typo3 Typo3 | =6.2.10 | |
| Typo3 Typo3 | =6.2.11 | |
| Typo3 Typo3 | =6.2.12 | |
| Typo3 Typo3 | =6.2.13 | |
| Typo3 Typo3 | =6.2.14 | |
| Typo3 Typo3 | =7.0.0 | |
| Typo3 Typo3 | =7.1.0 | |
| Typo3 Typo3 | =7.2.0 | |
| Typo3 Typo3 | =7.3.0 | |
| composer/typo3/cms | >=4.0<=4.5.40 | |
| composer/typo3/cms | >=7.0<7.4.0 | 7.4.0 |
| composer/typo3/cms | >=6.0<6.2.15 | 6.2.15 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-009/
- http://packetstormsecurity.com/files/133551/Typo3-CMS-6.2.14-4.5.40-Cross-Site-Scripting.html
- http://seclists.org/fulldisclosure/2015/Sep/57
- http://www.securityfocus.com/archive/1/536464/100/0/threaded
- http://www.securitytracker.com/id/1033551
- https://nvd.nist.gov/vuln/detail/CVE-2015-5956
- https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2015-5956.yaml
- https://github.com/advisories/GHSA-989h-wv8x-933p (Advisory)
- collector/friends-of-php
- collector/nvd-index
- agent/type
- agent/first-publish-date
- collector/github-advisory-latest
- source/GitHub
- alias/GHSA-989h-wv8x-933p
- alias/CVE-2015-5956
- agent/software-canonical-lookup
- agent/severity
- agent/references
- agent/weakness
- agent/softwarecombine
- agent/description
- collector/nvd-cve
- source/NVD
- agent/author
- collector/github-advisory
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/tags
- agent/event
- agent/trending
- package-manager/composer
- vendor/typo3
- canonical/typo3 typo3
- version/typo3 typo3/4.5.40
- version/typo3 typo3/6.0
- version/typo3 typo3/6.0.1
- version/typo3 typo3/6.0.2
- version/typo3 typo3/6.0.3
- version/typo3 typo3/6.0.4
- version/typo3 typo3/6.0.5
- version/typo3 typo3/6.0.6
- version/typo3 typo3/6.0.7
- version/typo3 typo3/6.0.8
- version/typo3 typo3/6.0.9
- version/typo3 typo3/6.0.10
- version/typo3 typo3/6.0.11
- version/typo3 typo3/6.0.12
- version/typo3 typo3/6.0.13
- version/typo3 typo3/6.0.14
- version/typo3 typo3/6.1
- version/typo3 typo3/6.1.1
- version/typo3 typo3/6.1.2
- version/typo3 typo3/6.1.3
- version/typo3 typo3/6.1.4
- version/typo3 typo3/6.1.5
- version/typo3 typo3/6.1.6
- version/typo3 typo3/6.1.7
- version/typo3 typo3/6.1.8
- version/typo3 typo3/6.1.9
- version/typo3 typo3/6.2
- version/typo3 typo3/6.2.0-beta1
- version/typo3 typo3/6.2.0-beta2
- version/typo3 typo3/6.2.0-beta3
- version/typo3 typo3/6.2.1
- version/typo3 typo3/6.2.2
- version/typo3 typo3/6.2.3
- version/typo3 typo3/6.2.4
- version/typo3 typo3/6.2.5
- version/typo3 typo3/6.2.6
- version/typo3 typo3/6.2.7
- version/typo3 typo3/6.2.8
- version/typo3 typo3/6.2.9
- version/typo3 typo3/6.2.10
- version/typo3 typo3/6.2.11
- version/typo3 typo3/6.2.12
- version/typo3 typo3/6.2.13
- version/typo3 typo3/6.2.14
- version/typo3 typo3/7.0.0
- version/typo3 typo3/7.1.0
- version/typo3 typo3/7.2.0
- version/typo3 typo3/7.3.0