daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

References

patch-1
Noam Rathaus 2021-03-18 15:32:30 +02:00
parent 8c551f93ce
commit 0cee4bc7e9
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
cves/2020/CVE-2020-8091.yaml
View File

@ -6,6 +6,9 @@ info:
severity: medium
description: svg.swf in TYPO3 6.2.0 to 6.2.38 ELTS and 7.0.0 to 7.1.0 could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack on a targeted system. This may be at a contrib/websvg/svg.swf pathname.
tags: cve,cve2020,xss
reference:
- https://typo3.org/security/advisory/typo3-psa-2019-003/
- https://www.purplemet.com/blog/typo3-xss-vulnerability
requests:
- method: GET