Junglewise Threat Intelligence

CVE-2008-5644: TYPO3 Cross-site Scripting vulnerability in the file backend module

CVE-2008-5644 · Severity: info · Published 2022-05-17

Technologies: typo3/cms-backend (Packagist). Vendors: Packagist.

Executive brief

TYPO3 Cross-site Scripting vulnerability in the file backend module

Affected products

Packagist typo3/cms-backend

Related threats

The referrer enforcement introduced with TYPO3-CORE-SA-2020-006 became ineffective in TYPO3 v13.0, where TYPO3 CMS started
TYPO3 CMS Stores Cleartext Password in User Settings Module