CVE-2021-32668: Cross-site Scripting

July 20, 2021 (updated July 29, 2021)

TYPO3 contains a cross-site scripting vulnerability. When error messages are not properly encoded, the components _QueryGenerator_ and _QueryView_ are vulnerable to both reflected and persistent cross-site scripting. A valid backend user account having administrator privileges is needed to exploit this vulnerability. TYPO3 contain a patch for this issue.

References

nvd.nist.gov/vuln/detail/CVE-2021-32668
typo3.org/security/advisory/typo3-core-sa-2021-010

Code Behaviors & Features

Detect and mitigate CVE-2021-32668 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →