PT-2024-40062 · Neos · Neos

Published 2024-06-05 · Updated 2024-06-05

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Neos (affected versions not specified)

Description The issue allows for several XSS attacks, enabling an attacker to interfere with page rendering, redirect users to a fake login page, or capture user credentials such as cookies. Additionally, an attacker could potentially gain access to the server, with the extent of access mainly limited by the server setup.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

GHSA-4542-P56H-8XWW

Affected Products

Neos

References · 4

• https://osv.dev/vulnerability/GHSA-4542-p56h-8xww · Vendor Advisory
• https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/neos/2015-11-23.yaml · Note
• https://github.com/mneuhaus/TYPO3.Neos · Note
• https://neos.io/blog/neos-sa-2015-002.html · Note