GHSA-f4m6-x2xj-jc7w

Suggest an improvement
Source
https://github.com/advisories/GHSA-f4m6-x2xj-jc7w
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/06/GHSA-f4m6-x2xj-jc7w/GHSA-f4m6-x2xj-jc7w.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-f4m6-x2xj-jc7w
Aliases
  • CVE-2023-35783
Published
2023-06-16T15:30:19Z
Modified
2024-02-16T08:18:03.992437Z
Severity
  • 6.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L CVSS Calculator
Summary
ke_search (aka Faceted Search) vulnerable to Cross-Site Scripting
Details

The ke_search (aka Faceted Search) extension before 4.0.3, 4.1.x through 4.6.x before 4.6.6, and 5.x before 5.0.2 for TYPO3 allows XSS via indexed data.

Database specific 
{
    "nvd_published_at": "2023-06-16T15:15:10Z",
    "cwe_ids": [
        "CWE-79"
    ],
    "severity": "MODERATE",
    "github_reviewed": true,
    "github_reviewed_at": "2023-06-16T19:50:28Z"
}
References

Affected packages

Packagist / tpwd/ke_search

Package

Name
tpwd/ke_search
Purl
pkg:composer/tpwd/ke_search

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.0.0
Fixed
5.0.2

Affected versions

v5.*

v5.0.0
v5.0.1

Packagist / tpwd/ke_search

Package

Name
tpwd/ke_search
Purl
pkg:composer/tpwd/ke_search

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.1.0
Fixed
4.6.6

Affected versions

v4.*

v4.1.0
v4.2.0
v4.3.0
v4.3.1
v4.4.0
v4.4.1
v4.4.2
v4.4.3
v4.4.4
v4.4.5
v4.5.0
v4.5.1
v4.6.0
v4.6.1
v4.6.2
v4.6.3
v4.6.4
v4.6.5

Packagist / tpwd/ke_search

Package

Name
tpwd/ke_search
Purl
pkg:composer/tpwd/ke_search

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.0.3

Affected versions

1.*

1.99.0
1.99.2
1.99.4
1.99.5
1.99.7

2.*

2.0.0
2.0.1
2.0.2
2.0.3
2.0.4
2.1.0
2.2.0
2.2.1

v2.*

v2.3.0
v2.3.1
v2.4.0
v2.4.1
v2.4.2
v2.5.0
v2.6.0
v2.6.1
v2.6.2
v2.6.3
v2.7.0
v2.8.0
v2.8.1
v2.8.2
v2.8.3
v2.8.4

v3.*

v3.0.0
v3.0.1
v3.0.2
v3.0.3
v3.0.4
v3.0.5
v3.0.6
v3.1.0
v3.1.1
v3.1.2
v3.1.3
v3.1.4
v3.1.5
v3.1.6
v3.2.0
v3.3.0
v3.3.1
v3.4.0
v3.4.1
v3.4.2
v3.5.0
v3.6.0
v3.6.1
v3.7.0
v3.7.1
v3.7.2
v3.8.0
v3.8.1
v3.9.0

v4.*

v4.0.0
v4.0.1

4.*

4.0.2