PT-2022-21717 · Typo3 · Typo3 Libconnect Extension

Torben Hansen · Published 2022-07-12 · Updated 2022-07-20 · CVE-2022-33157

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions TYPO3 libconnect extension versions prior to 7.0.8 TYPO3 libconnect extension versions 8.x prior to 8.1.0

Description The issue allows for XSS.

Recommendations For versions prior to 7.0.8, update to version 7.0.8 or later. For versions 8.x prior to 8.1.0, update to version 8.1.0 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-33157

GHSA-C8F2-5H29-8J2H

Affected Products

Typo3 Libconnect Extension

References · 5

• https://osv.dev/vulnerability/CVE-2022-33157 · Vendor Advisory
• https://typo3.org/security/advisory/typo3-ext-sa-2022-010 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-33157 · Security Note
• https://osv.dev/vulnerability/GHSA-c8f2-5h29-8j2h · Vendor Advisory
• https://github.com/subhh/libconnect/commit/8c582f3f6575f8744bf29f99bc1697ab8b7bd3af · Note