Lucene search
GoogleOSV:CVE-2020-11070HistoryMay 13, 2020 - 7:15 p.m.
CVE-2020-11070
2020-05-1319:15:11
Google
osv.dev
1
0.001 Low
EPSS
Percentile
21.4%
The SVG Sanitizer extension for TYPO3 has a cross-site scripting vulnerability in versions before 1.0.3. Slightly invalid or incomplete SVG markup is not correctly processed and thus not sanitized at all. Albeit the markup is not valid it still is evaluated in browsers and leads to cross-site scripting. This is fixed in version 1.0.3.
| CPE | Name | Operator | Version |
|---|---|---|---|
| svg_sanitizer | eq | 1.0.1 | |
| svg_sanitizer | eq | 1.0.0 | |
| svg_sanitizer | eq | 1.0.2 |
Related
typo3
typo3
Cross-Site Scripting in "SVG Sanitizer" (svg_sanitizer)
2020-05-12 00:00:00
cve
cve
CVE-2020-11070
2020-05-13 19:15:11
osv
osv
Cross-Site Scripting in SVG Sanitizer
2020-05-13 22:17:34
cvelist
cvelist
CVE-2020-11070 Cross-Site Scripting in SVG Sanitizer
2020-05-13 18:40:11
github
github
Cross-Site Scripting in SVG Sanitizer
2020-05-13 22:17:34
veracode
veracode
Cross-Site Scripting (XSS)
2020-05-14 03:58:42
prion
prion
Cross site scripting
2020-05-13 19:15:00
nvd
nvd
CVE-2020-11070
2020-05-13 19:15:11