CVE-2018-6905 Typo3 XSS Vulnerability
MediumCVSS 4.8
EPSS 2.2%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
The page module in TYPO3 before 8.7.11, and 9.1.0, has XSS via $GLOBALS['TYPO3_CONF_VARS']['SYS']['sitename'], as demonstrated by an admin entering a crafted site name during the installation process.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| typo3/cms(Packagist) | < 9.2.0 | 9.2.0 |
| typo3/cms(Packagist) | = 6.2.0 | No fix listed |
| typo3/cms(Packagist) | = 6.2.1 | No fix listed |
| typo3/cms(Packagist) | = 6.2.10 | No fix listed |
| typo3/cms(Packagist) | = 6.2.10-rc1 | No fix listed |
| typo3/cms(Packagist) | = 6.2.11 | No fix listed |
| typo3/cms(Packagist) | = 6.2.12 | No fix listed |
| typo3/cms(Packagist) | = 6.2.13 | No fix listed |
| typo3/cms(Packagist) | = 6.2.14 | No fix listed |
| typo3/cms(Packagist) | = 6.2.15 | No fix listed |
| typo3/cms(Packagist) | = 6.2.16 | No fix listed |
| typo3/cms(Packagist) | = 6.2.17 | No fix listed |
| typo3/cms(Packagist) | = 6.2.18 | No fix listed |
| typo3/cms(Packagist) | = 6.2.19 | No fix listed |
| typo3/cms(Packagist) | = 6.2.2 | No fix listed |
| typo3/cms(Packagist) | = 6.2.20 | No fix listed |
| typo3/cms(Packagist) | = 6.2.21 | No fix listed |
| typo3/cms(Packagist) | = 6.2.22 | No fix listed |
| typo3/cms(Packagist) | = 6.2.23 | No fix listed |
| typo3/cms(Packagist) | = 6.2.24 | No fix listed |
| typo3/cms(Packagist) | = 6.2.25 | No fix listed |
| typo3/cms(Packagist) | = 6.2.26 | No fix listed |
| typo3/cms(Packagist) | = 6.2.27 | No fix listed |
| typo3/cms(Packagist) | = 6.2.28 | No fix listed |
| typo3/cms(Packagist) | = 6.2.29 | No fix listed |
Show 103 more
| Product | Affected versions | Fixed in |
|---|---|---|
| typo3/cms(Packagist) | = 6.2.3 | No fix listed |
| typo3/cms(Packagist) | = 6.2.30 | No fix listed |
| typo3/cms(Packagist) | = 6.2.31 | No fix listed |
| typo3/cms(Packagist) | = 6.2.4 | No fix listed |
| typo3/cms(Packagist) | = 6.2.5 | No fix listed |
| typo3/cms(Packagist) | = 6.2.6 | No fix listed |
| typo3/cms(Packagist) | = 6.2.7 | No fix listed |
| typo3/cms(Packagist) | = 6.2.8 | No fix listed |
| typo3/cms(Packagist) | = 6.2.9 | No fix listed |
| typo3/cms(Packagist) | = 7.0.0 | No fix listed |
| typo3/cms(Packagist) | = 7.0.1 | No fix listed |
| typo3/cms(Packagist) | = 7.0.2 | No fix listed |
| typo3/cms(Packagist) | = 7.1.0 | No fix listed |
| typo3/cms(Packagist) | = 7.2.0 | No fix listed |
| typo3/cms(Packagist) | = 7.3.0 | No fix listed |
| typo3/cms(Packagist) | = 7.3.1 | No fix listed |
| typo3/cms(Packagist) | = 7.4.0 | No fix listed |
| typo3/cms(Packagist) | = 7.5.0 | No fix listed |
| typo3/cms(Packagist) | = 7.6.0 | No fix listed |
| typo3/cms(Packagist) | = 7.6.1 | No fix listed |
| typo3/cms(Packagist) | = 7.6.10 | No fix listed |
| typo3/cms(Packagist) | = 7.6.11 | No fix listed |
| typo3/cms(Packagist) | = 7.6.12 | No fix listed |
| typo3/cms(Packagist) | = 7.6.13 | No fix listed |
| typo3/cms(Packagist) | = 7.6.14 | No fix listed |
| typo3/cms(Packagist) | = 7.6.15 | No fix listed |
| typo3/cms(Packagist) | = 7.6.16 | No fix listed |
| typo3/cms(Packagist) | = 7.6.17 | No fix listed |
| typo3/cms(Packagist) | = 7.6.18 | No fix listed |
| typo3/cms(Packagist) | = 7.6.19 | No fix listed |
| typo3/cms(Packagist) | = 7.6.2 | No fix listed |
| typo3/cms(Packagist) | = 7.6.3 | No fix listed |
| typo3/cms(Packagist) | = 7.6.4 | No fix listed |
| typo3/cms(Packagist) | = 7.6.5 | No fix listed |
| typo3/cms(Packagist) | = 7.6.6 | No fix listed |
| typo3/cms(Packagist) | = 7.6.7 | No fix listed |
| typo3/cms(Packagist) | = 7.6.8 | No fix listed |
| typo3/cms(Packagist) | = 7.6.9 | No fix listed |
| typo3/cms(Packagist) | = 8.0.0 | No fix listed |
| typo3/cms(Packagist) | = 8.0.1 | No fix listed |
| typo3/cms(Packagist) | = 8.1.0 | No fix listed |
| typo3/cms(Packagist) | = 8.1.1 | No fix listed |
| typo3/cms(Packagist) | = 8.1.2 | No fix listed |
| typo3/cms(Packagist) | = 8.2.0 | No fix listed |
| typo3/cms(Packagist) | = 8.2.1 | No fix listed |
| typo3/cms(Packagist) | = 8.3.0 | No fix listed |
| typo3/cms(Packagist) | = 8.3.1 | No fix listed |
| typo3/cms(Packagist) | = 8.4.0 | No fix listed |
| typo3/cms(Packagist) | = 8.4.1 | No fix listed |
| typo3/cms(Packagist) | = 8.5.0 | No fix listed |
| typo3/cms(Packagist) | = 8.5.1 | No fix listed |
| typo3/cms(Packagist) | = 8.6.0 | No fix listed |
| typo3/cms(Packagist) | = 8.6.1 | No fix listed |
| typo3/cms(Packagist) | = 8.7.0 | No fix listed |
| typo3/cms(Packagist) | = 8.7.1 | No fix listed |
| typo3/cms(Packagist) | = 8.7.2 | No fix listed |
| typo3/cms(Packagist) | = v7.6.20 | No fix listed |
| typo3/cms(Packagist) | = v7.6.21 | No fix listed |
| typo3/cms(Packagist) | = v7.6.22 | No fix listed |
| typo3/cms(Packagist) | = v7.6.23 | No fix listed |
| typo3/cms(Packagist) | = v7.6.24 | No fix listed |
| typo3/cms(Packagist) | = v7.6.25 | No fix listed |
| typo3/cms(Packagist) | = v7.6.26 | No fix listed |
| typo3/cms(Packagist) | = v7.6.27 | No fix listed |
| typo3/cms(Packagist) | = v7.6.28 | No fix listed |
| typo3/cms(Packagist) | = v7.6.29 | No fix listed |
| typo3/cms(Packagist) | = v7.6.30 | No fix listed |
| typo3/cms(Packagist) | = v7.6.31 | No fix listed |
| typo3/cms(Packagist) | = v7.6.32 | No fix listed |
| typo3/cms(Packagist) | = v8.7.10 | No fix listed |
| typo3/cms(Packagist) | = v8.7.11 | No fix listed |
| typo3/cms(Packagist) | = v8.7.12 | No fix listed |
| typo3/cms(Packagist) | = v8.7.13 | No fix listed |
| typo3/cms(Packagist) | = v8.7.14 | No fix listed |
| typo3/cms(Packagist) | = v8.7.15 | No fix listed |
| typo3/cms(Packagist) | = v8.7.16 | No fix listed |
| typo3/cms(Packagist) | = v8.7.17 | No fix listed |
| typo3/cms(Packagist) | = v8.7.18 | No fix listed |
| typo3/cms(Packagist) | = v8.7.19 | No fix listed |
| typo3/cms(Packagist) | = v8.7.20 | No fix listed |
| typo3/cms(Packagist) | = v8.7.21 | No fix listed |
| typo3/cms(Packagist) | = v8.7.22 | No fix listed |
| typo3/cms(Packagist) | = v8.7.23 | No fix listed |
| typo3/cms(Packagist) | = v8.7.24 | No fix listed |
| typo3/cms(Packagist) | = v8.7.25 | No fix listed |
| typo3/cms(Packagist) | = v8.7.26 | No fix listed |
| typo3/cms(Packagist) | = v8.7.27 | No fix listed |
| typo3/cms(Packagist) | = v8.7.28 | No fix listed |
| typo3/cms(Packagist) | = v8.7.29 | No fix listed |
| typo3/cms(Packagist) | = v8.7.3 | No fix listed |
| typo3/cms(Packagist) | = v8.7.30 | No fix listed |
| typo3/cms(Packagist) | = v8.7.31 | No fix listed |
| typo3/cms(Packagist) | = v8.7.32 | No fix listed |
| typo3/cms(Packagist) | = v8.7.4 | No fix listed |
| typo3/cms(Packagist) | = v8.7.5 | No fix listed |
| typo3/cms(Packagist) | = v8.7.6 | No fix listed |
| typo3/cms(Packagist) | = v8.7.7 | No fix listed |
| typo3/cms(Packagist) | = v8.7.8 | No fix listed |
| typo3/cms(Packagist) | = v8.7.9 | No fix listed |
| typo3/cms(Packagist) | = v9.0.0 | No fix listed |
| typo3/cms(Packagist) | = v9.1.0 | No fix listed |
| typo3 | < 8.7.11 | 8.7.11 |
| typo3 | >= 9.0.0, < 9.1.0 | 9.1.0 |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com patch
- forge.typo3.org patch vendor-advisory
- github.com exploit third-party-advisory
- 1040755 third-party-advisory vdb-entry
- github.com