CVE-2020-8091
svg.swf in TYPO3 6.2.0 to 6.2.38 ELTS and 7.0.0 to 7.1.0 could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack on a targeted system. This may be at a contrib/websvg/svg.swf pathname.
- Score
- CVSS 3.1 6.1 Medium
- Status
- Modified - cve@mitre.org
- Published
- 2020-01-27
- Last modified
- 2024-08-04
- Weaknesses
- CWE-79
Affected products
References
- https://typo3.org/security/advisory/typo3-psa-2019-003/
- https://www.purplemet.com/blog/typo3-xss-vulnerability
