Lucene search

Ubuntu.comUB:CVE-2012-3530

HistorySep 05, 2012 - 12:00 a.m.

CVE-2012-3530

2012-09-0500:00:00

ubuntu.com

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

71.7%

JSON

Incomplete blacklist vulnerability in the t3lib_div::quoteJSvalue API
function in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 and 4.7.x before
4.7.4 allows remote attackers to conduct cross-site scripting (XSS) attacks
via certain HTML5 JavaScript events.

Bugs

<http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=685011>

OSVersionArchitecturePackageVersionFilename
ubuntu11.04noarchtypo3-src< 4.3.9+dfsg1-1+squeeze5build0.11.04.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	11.04	noarch	typo3-src	< 4.3.9+dfsg1-1+squeeze5build0.11.04.1	UNKNOWN

References

typo3.org/support/teams-security-security-bulletins/security-bulletins-single-view/article/several-vulnerabilities-in-typo3-core/

launchpad.net/bugs/cve/CVE-2012-3530

nvd.nist.gov/vuln/detail/CVE-2012-3530

security-tracker.debian.org/tracker/CVE-2012-3530

www.cve.org/CVERecord?id=CVE-2012-3530

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

71.7%

JSON

Related for UB:CVE-2012-3530