CVE-2015-8758: XSS
Published Jan 8, 2016
·Updated
Multiple cross-site scripting (XSS) vulnerabilities in unspecified frontend components in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allow remote authenticated editors to inject arbitrary web script or HTML via unknown vectors.
Affected Software
39 affected components
Typo3 TYPO3=6.2.0-alpha1
Typo3 TYPO3=6.2.0-alpha2
Typo3 TYPO3=6.2.0-alpha3
Typo3 TYPO3=6.2.0-beta1
Typo3 TYPO3=6.2.0-beta2
Typo3 TYPO3=6.2.0-beta3
Typo3 TYPO3=6.2.0-beta4
Typo3 TYPO3=6.2.0-beta5
Typo3 TYPO3=6.2.0-beta6
Typo3 TYPO3=6.2.0-beta7
Typo3 TYPO3=6.2.0-rc1
Typo3 TYPO3=6.2.0-rc2
Typo3 TYPO3=6.2.1
Typo3 TYPO3=6.2.2
Typo3 TYPO3=6.2.3
Typo3 TYPO3=6.2.4
Typo3 TYPO3=6.2.5
Typo3 TYPO3=6.2.6
Typo3 TYPO3=6.2.7
Typo3 TYPO3=6.2.8
Typo3 TYPO3=6.2.9
Typo3 TYPO3=6.2.10
Typo3 TYPO3=6.2.10-rc1
Typo3 TYPO3=6.2.11
Typo3 TYPO3=6.2.12
Typo3 TYPO3=6.2.13
Typo3 TYPO3=6.2.14
Typo3 TYPO3=6.2.15
Typo3 TYPO3=7.0.0
Typo3 TYPO3=7.0.1
Typo3 TYPO3=7.0.2
Typo3 TYPO3=7.1.0
Typo3 TYPO3=7.2.0
Typo3 TYPO3=7.3.0
Typo3 TYPO3=7.3.1
Typo3 TYPO3=7.4.0
Typo3 TYPO3=7.5.0
Typo3 TYPO3=7.6.0
Typo3 TYPO3=7.6.1
Event History
Jan 8, 2016
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-8758?
CVE-2015-8758 is classified as a moderate severity cross-site scripting (XSS) vulnerability.
2
How do I fix CVE-2015-8758?
To resolve CVE-2015-8758, upgrade TYPO3 to version 6.2.16 or 7.6.1 or later.
3
What types of systems are affected by CVE-2015-8758?
CVE-2015-8758 affects TYPO3 versions 6.2.x prior to 6.2.16 and 7.x prior to 7.6.1.
4
Who can exploit CVE-2015-8758?
CVE-2015-8758 can be exploited by remote authenticated editors with access to the frontend components of TYPO3.
5
What are the consequences of CVE-2015-8758?
Exploitation of CVE-2015-8758 can allow attackers to inject arbitrary web scripts or HTML into the affected TYPO3 installations.