Ubuntu.comUB:CVE-2023-38500CVE-2023-38500
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
33.7%
TYPO3 HTML Sanitizer is an HTML sanitizer, written in PHP, aiming to
provide cross-site-scripting-safe markup based on explicitly allowed tags,
attributes and values. Starting in version 1.0.0 and prior to versions
1.5.1 and 2.1.2, due to an encoding issue in the serialization layer,
malicious markup nested in a noscript element was not encoded correctly.
noscript is disabled in the default configuration, but might have been
enabled in custom scenarios. This allows bypassing the cross-site scripting
mechanism of TYPO3 HTML Sanitizer. Versions 1.5.1 and 2.1.2 fix the
problem.
References
github.com/TYPO3/html-sanitizer/commit/e3026f589fef0be8c3574ee3f0a0bfbe33d7ebdb
github.com/TYPO3/html-sanitizer/security/advisories/GHSA-59jf-3q9v-rh6g
launchpad.net/bugs/cve/CVE-2023-38500
nvd.nist.gov/vuln/detail/CVE-2023-38500
security-tracker.debian.org/tracker/CVE-2023-38500
typo3.org/security/advisory/typo3-core-sa-2023-002
www.cve.org/CVERecord?id=CVE-2023-38500
Related
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
33.7%