logo

Database

Reflected cross-site scripting (XSS) In typo3/html-sanitizer

Description

Bypassing Cross-Site Scripting Protection in TYPO3 HTML Sanitizer

CVSS: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N/E:F/RL:O/RC:C (4.4)

Problem

DOM processing instructions are not handled correctly. This allows bypassing the cross-site scripting mechanism of typo3/html-sanitizer.

Solution

Update to typo3/html-sanitizer versions 1.5.3 or 2.1.4 that fix the problem described.

Credits

Thanks to Yaniv Nizry and Niels Dossche who reported this issue, and to TYPO3 core & security team member Oliver Hader who fixed the issue.

References

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version
Patched versions

Aliases

1. CVE-2023-471252. NVD-2023-471253. OSV-2023-471254. GHSA-mm79-jhqm-9j545. GCVE-2023-47125

References

1. https://github.com/TYPO3/html-sanitizer/security/advisories/GHSA-mm79-jhqm-9j542. https://github.com/TYPO3/html-sanitizer/commit/b8f90717251d968c49dc77f8c1e5912e2fbe0dff3. https://typo3.org/security/advisory/typo3-core-sa-2023-0074. https://github.com/nikn0laty/TYPO3-HTML-Sanitizer-XSS-CVE-2023-47125

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.