Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2020-8091

svg.swf in TYPO3 6.2.0 to 6.2.38 ELTS and 7.0.0 to 7.1.0 could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack on a targeted system. This may be at a contrib/websvg/svg.swf pathname.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.209
EPSS Ranking 95.3%
CVSS Severity
CVSS v3 Score 4.8
CVSS v2 Score 4.3
Products affected by CVE-2020-8091
  • Typo3 » Typo3 » Version: 6.2.32
    cpe:2.3:a:typo3:typo3:6.2.32
  • Typo3 » Typo3 » Version: 6.2.33
    cpe:2.3:a:typo3:typo3:6.2.33
  • Typo3 » Typo3 » Version: 6.2.34
    cpe:2.3:a:typo3:typo3:6.2.34
  • Typo3 » Typo3 » Version: 6.2.35
    cpe:2.3:a:typo3:typo3:6.2.35
  • Typo3 » Typo3 » Version: 6.2.36
    cpe:2.3:a:typo3:typo3:6.2.36
  • Typo3 » Typo3 » Version: 6.2.37
    cpe:2.3:a:typo3:typo3:6.2.37
  • Typo3 » Typo3 » Version: 6.2.38
    cpe:2.3:a:typo3:typo3:6.2.38
  • Typo3 » Typo3 » Version: 7.0.0
    cpe:2.3:a:typo3:typo3:7.0.0
  • Typo3 » Typo3 » Version: 7.0.1
    cpe:2.3:a:typo3:typo3:7.0.1
  • Typo3 » Typo3 » Version: 7.0.2
    cpe:2.3:a:typo3:typo3:7.0.2
  • Typo3 » Typo3 » Version: 7.1.0
    cpe:2.3:a:typo3:typo3:7.1.0


Contact Us

Shodan ® - All rights reserved