Description
The Typo3 version branches 6.x, 7.x and 4.x are vulnerable to an authenticated,
non-persistent Cross-Site Scripting vulnerability when user-supplied input
is processed by the sanitizeLocalUrl() function. While there is already a
XSS filter in place, it is possible to mitigate it by using a data URI with
a base64 encoded payload.
Affected versions:
- Versions 4.0.0 to 4.5.40
- Versions 6.2.0 to 6.2.14
- Versions 7.0.0 to 7.3.0
Remediation
Update to TYPO3 versions 6.2.15 or 7.4.0 that fix the problem described.
References
Related Vulnerabilities
WordPress Plugin Elementor Pro Cross-Site Scripting (2.0.9)
WordPress Plugin Bookings Cross-Site Scripting (1.8.2)
WordPress Plugin Opening Hours Cross-Site Scripting (2.3.0)
WordPress Plugin WP No External Links Cross-Site Scripting (3.5.15)
WordPress Plugin AdWizz 'link' Parameter Cross-Site Scripting (1.0)