{"id":"GHSA-qfr3-29w6-hwpg","aliases":["CVE-2012-2112"],"title":"Typo3 Exception Handler XSS","description":"Cross-site scripting (XSS) vulnerability in the Exception Handler in TYPO3 4.4.x before 4.4.15, 4.5.x before 4.5.15, 4.6.x before 4.6.8, and 4.7 allows remote attackers to inject arbitrary web script or HTML via exception messages.","severity":"medium","score":null,"published":"2022-05-17T01:46:40.000Z","modified":"2024-01-12T18:26:36.936Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"typo3/cms","ranges":[{"events":[{"introduced":"4.4"},{"fixed":"4.4.15"}],"type":"ECOSYSTEM"}],"versions":[],"fixed":["4.4.15"]},{"ecosystem":"Packagist","name":"typo3/cms","ranges":[{"events":[{"introduced":"4.5"},{"fixed":"4.5.15"}],"type":"ECOSYSTEM"}],"versions":[],"fixed":["4.5.15"]},{"ecosystem":"Packagist","name":"typo3/cms","ranges":[{"events":[{"introduced":"4.6"},{"fixed":"4.6.8"}],"type":"ECOSYSTEM"}],"versions":[],"fixed":["4.6.8"]},{"ecosystem":"Packagist","name":"typo3/cms","ranges":[],"versions":["4.7"],"fixed":[]}],"references":["https://nvd.nist.gov/vuln/detail/CVE-2012-2112","https://exchange.xforce.ibmcloud.com/vulnerabilities/74920","https://web.archive.org/web/20120421201555/http://www.securityfocus.com/bid/53047","http://lists.typo3.org/pipermail/typo3-announce/2012/000241.html","http://lists.typo3.org/pipermail/typo3-announce/2012/000242.html","http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-002","http://www.debian.org/security/2012/dsa-2455","http://www.openwall.com/lists/oss-security/2012/04/17/5","http://www.openwall.com/lists/oss-security/2012/04/18/1"],"sources":[{"name":"OSV","id":"GHSA-qfr3-29w6-hwpg","modified":"2024-01-12T18:26:36.936187Z","url":"https://osv.dev/vulnerability/GHSA-qfr3-29w6-hwpg"}],"assessments":[]}