CVE-2021-32668: Cross-Site Scripting in Query Generator & Query View
### Meta CVSS: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N/E:F/RL:O/RC:C (4.5)
Problem Failing to properly encode error messages, the components QueryGenerator and QueryView are vulnerable to both reflected and persistent cross-site scripting. A valid backend user account having administrator privileges is needed to exploit this vulnerability.
Solution Update to TYPO3 versions 8.7.41 ELTS, 9.5.28, 10.4.18, 11.3.1 that fix the problem described.
Credits Thanks to Richie Lee who reported this issue and to TYPO3 security team member Oliver Hader who fixed the issue.
References TYPO3-CORE-SA-2021-010
Other sources
TYPO3 is an open source PHP based web content management system. Versions 9.0.0 through 9.5.28, 10.0.0 through 10.4.17, and 11.0.0 through 11.3.0 have a cross-site scripting vulnerability. When error messages are not properly encoded, the components QueryGenerator and QueryView are vulnerable to both reflected and persistent cross-site scripting. A valid backend user account having administrator privileges is needed to exploit this vulnerability. TYPO3 versions 9.5.29, 10.4.18, 11.3.1 contain a patch for this issue.
TYPO3-CORE-SA-2021-010: Cross-Site Scripting in Query Generator & Query View
Affected Software
Event History
Frequently Asked Questions
What is TYPO3-CORE-SA-2021-010?
TYPO3-CORE-SA-2021-010 is a vulnerability in TYPO3, an open source PHP based web content management system, that allows for cross-site scripting in the Query Generator and Query View components.
What versions of TYPO3 are affected by TYPO3-CORE-SA-2021-010?
Versions 9.0.0 through 9.5.28, 10.0.0 through 10.4.17, and 11.0.0 through 11.3.0 are affected by TYPO3-CORE-SA-2021-010.
How severe is typo3-core-sa-2021-010?
TYPO3-CORE-SA-2021-010 has a severity keyword of 'medium' and a severity value of 4.8.
How can I fix TYPO3-CORE-SA-2021-010?
To fix TYPO3-CORE-SA-2021-010, it is recommended to upgrade TYPO3 to versions 9.5.29, 10.4.18, or 11.3.1.
Where can I find more information about TYPO3-CORE-SA-2021-010?
More information about TYPO3-CORE-SA-2021-010 can be found at the following references: [Typo3 Security Advisory](https://typo3.org/security/advisory/typo3-core-sa-2021-010) and [TYPO3.CMS Security Advisories](https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-6mh3-j5r5-2379).