{"id":"GHSA-7gg8-3r6j-5g55","aliases":["CVE-2012-3529"],"title":"Typo3 Backend Configuration XSS Vulnerability","titleSource":"OSV","descriptionSource":"OSV","declaredSeverity":"LOW","description":"The configuration module in the backend in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 and 4.7.x before 4.7.4 allows remote authenticated backend users to obtain the encryption key via unspecified vectors.","severity":"low","score":null,"published":"2022-05-17T01:43:54.000Z","modified":"2024-01-12T18:26:37.144Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"typo3/cms","sources":[{"name":"OSV · GHSA-7gg8-3r6j-5g55","url":"https://osv.dev/vulnerability/GHSA-7gg8-3r6j-5g55"}],"ranges":[{"events":[{"introduced":"4.5"},{"fixed":"4.5.19"}],"type":"ECOSYSTEM"}],"versions":[],"fixed":["4.5.19"]},{"ecosystem":"Packagist","name":"typo3/cms","sources":[{"name":"OSV · GHSA-7gg8-3r6j-5g55","url":"https://osv.dev/vulnerability/GHSA-7gg8-3r6j-5g55"}],"ranges":[{"events":[{"introduced":"4.6"},{"fixed":"4.6.12"}],"type":"ECOSYSTEM"}],"versions":[],"fixed":["4.6.12"]},{"ecosystem":"Packagist","name":"typo3/cms","sources":[{"name":"OSV · GHSA-7gg8-3r6j-5g55","url":"https://osv.dev/vulnerability/GHSA-7gg8-3r6j-5g55"}],"ranges":[{"events":[{"introduced":"4.7"},{"fixed":"4.7.4"}],"type":"ECOSYSTEM"}],"versions":[],"fixed":["4.7.4"]}],"sourceAffected":[],"references":["https://nvd.nist.gov/vuln/detail/CVE-2012-3529","https://exchange.xforce.ibmcloud.com/vulnerabilities/77793","http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-004","http://www.debian.org/security/2012/dsa-2537","http://www.openwall.com/lists/oss-security/2012/08/22/8"],"sources":[{"name":"OSV","id":"GHSA-7gg8-3r6j-5g55","modified":"2024-01-12T18:26:37.144295Z","url":"https://osv.dev/vulnerability/GHSA-7gg8-3r6j-5g55"}],"assessments":[],"products":[],"remediation":[],"kev":{"status":"not-listed","checkedAt":"2026-10-29T03:30:33.923Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[]}