CVE-2022-33155: Cross site scripting in ameos_tarteaucitron

July 13, 2022 (updated October 28, 2024)

The ameos_tarteaucitron (aka AMEOS - TarteAuCitron GDPR cookie banner and tracking management / French RGPD compatible) extension before 1.2.23 for TYPO3 allows XSS.

References

github.com/advisories/GHSA-4vr9-33fv-mg6r
github.com/ameos/ameos_tarteaucitron
nvd.nist.gov/vuln/detail/CVE-2022-33155
typo3.org/security/advisory/typo3-ext-sa-2022-013

Code Behaviors & Features

Detect and mitigate CVE-2022-33155 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →