GHSA-22q7-cg4r-p9mx: TYPO3 Cross-Site Scripting in Fluid ViewHelpers

May 30, 2024

Failing to properly encode user input, templates using built-in Fluid ViewHelpers are vulnerable to cross-site scripting.

References

github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2019-01-22-4.yaml
github.com/TYPO3-CMS/core
github.com/advisories/GHSA-22q7-cg4r-p9mx
typo3.org/security/advisory/typo3-core-sa-2019-005

Detect and mitigate GHSA-22q7-cg4r-p9mx with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →