Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS1tbTc5LWpocW0tOWo1NM4AA3Hu

Bypassing Cross-Site Scripting Protection in TYPO3 HTML Sanitizer

CVSS: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N/E:F/RL:O/RC:C (4.4)

Problem

DOM processing instructions are not handled correctly. This allows bypassing the cross-site scripting mechanism of typo3/html-sanitizer.

Solution

Update to typo3/html-sanitizer versions 1.5.3 or 2.1.4 that fix the problem described.

Credits

Thanks to Yaniv Nizry and Niels Dossche who reported this issue, and to TYPO3 core & security team member Oliver Hader who fixed the issue.

References

• TYPO3-CORE-SA-2023-007
• Context & Details at masterminds/html5

Permalink: https://github.com/advisories/GHSA-mm79-jhqm-9j54
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1tbTc5LWpocW0tOWo1NM4AA3Hu
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: 14 days ago
Updated: 13 days ago

CVSS Score: 4.7
CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N

Identifiers: GHSA-mm79-jhqm-9j54, CVE-2023-47125
References:

• https://github.com/TYPO3/html-sanitizer/security/advisories/GHSA-mm79-jhqm-9j54
• https://nvd.nist.gov/vuln/detail/CVE-2023-47125
• https://github.com/TYPO3/html-sanitizer/commit/b8f90717251d968c49dc77f8c1e5912e2fbe0dff
• https://typo3.org/security/advisory/typo3-core-sa-2023-007
• https://github.com/advisories/GHSA-mm79-jhqm-9j54

Affected Packages