CVE-2015-8760

MEDIUM6.1EPSS 0.27%

TYPO3 allows remote attackers to embed Flash videos from external domain

發布日:2022/5/17修改日:2025/4/14

描述

The Flvplayer component in TYPO3 6.2.x before 6.2.16 allows remote attackers to embed Flash videos from external domains via unspecified vectors, aka "Cross-Site Flashing."

受影響套件(1)

Packagist/typo3/cms>= 6.2.0, < 6.2.16

CVSS 分數

來源	版本	嚴重程度	向量
osv	CVSS 3.1	MEDIUM6.1	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

參考連結(6)

ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2015-8760
PATCHhttps://github.com/TYPO3/typo3
WEBhttps://github.com/TYPO3/typo3/commit/29ae05c04cb48d4031d323f17d8f2b68b27af353
WEBhttps://typo3.org/security/advisory/typo3-core-sa-2015-014
WEBhttps://web.archive.org/web/20160621232021/http://www.securityfocus.com/bid/79210
WEBhttps://web.archive.org/web/20161012163613/http://www.securitytracker.com/id/1034485