CVE-2020-8091

svg.swf in TYPO3 6.2.0 to 6.2.38 ELTS and 7.0.0 to 7.1.0 could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack on a…

Medium · published January 27, 2020

CVSS v3.0
4.8
EPSS
5%
Percentile
92.5
In the wild
Unconfirmed
What it is

svg.swf in TYPO3 6.2.0 to 6.2.38 ELTS and 7.0.0 to 7.1.0 could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack on a targeted system. This may be at a contrib/websvg/svg.swf pathname.

The record
Technical detail
CVSS v3.0
4.8 · MEDIUM
Vector
CVSS:3.0/AC:H/AV:N/A:N/C:L/I:L/PR:N/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.05214 · 92.5th percentile
Published
2020-01-27T21:48Z
EPSS history
Timeline
  • 27 JAN 21:48Z
    svg.swf in TYPO3 6.2.0 to 6.2.38 ELTS and 7.0.0 to 7.1.0 could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack on a…
    cvelistv5