PT-2022-19721 · Unknown · Gridelements

Oliver Hader · Published 2022-07-12 · Updated 2022-07-19 · CVE-2022-29602

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions gridelements extension versions 7.6.1 and earlier gridelements extension versions 8.x through 8.7.0 gridelements extension versions 9.x through 9.7.0 gridelements extension versions 10.x through 10.2.0

Description The issue allows for XSS.

Recommendations For gridelements extension versions 7.6.1 and earlier, update to a version later than 7.6.1. For gridelements extension versions 8.x through 8.7.0, update to a version later than 8.7.0. For gridelements extension versions 9.x through 9.7.0, update to a version later than 9.7.0. For gridelements extension versions 10.x through 10.2.0, update to a version later than 10.2.0.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-29602

Affected Products

Gridelements

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2022-29602 · Security Note
• https://osv.dev/vulnerability/CVE-2022-29602 · Vendor Advisory
• https://typo3.org/security/advisory/typo3-ext-sa-2022-009 · Patch
• https://t.me/cvenotify/32978 · Telegram Post
• https://typo3.org/help/security-advisories · Note