What is GHSA-c8f2-5h29-8j2h?

GHSA-c8f2-5h29-8j2h is a security advisory published by GitHub Security Advisories with Medium severity. libconnect Extension for Typo3 Vulnerable to XSS

Which CVE IDs does GHSA-c8f2-5h29-8j2h cover?

GHSA-c8f2-5h29-8j2h covers the following CVE IDs: CVE-2022-33157. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-c8f2-5h29-8j2h?

GHSA-c8f2-5h29-8j2h has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

Which products are affected by GHSA-c8f2-5h29-8j2h?

GHSA-c8f2-5h29-8j2h affects 2 products, including: composer/subhh/libconnect:\u003c 7.0.8; composer/subhh/libconnect:\u003e= 8.0.0, \u003c 8.1.0.

GHSA-c8f2-5h29-8j2hMediumCVSS 6.1

libconnect Extension for Typo3 Vulnerable to XSS

Vendor

GitHub Security Advisories

Published

July 13, 2022

Last Modified

July 11, 2023

🔗 CVE IDs covered (1)

CVE-2022-33157 →

📋 Description

The libconnect extension before 7.0.8 and 8.x before 8.1.0 for TYPO3 allows XSS.

🎯 Affected products2

composer/subhh/libconnect:< 7.0.8
composer/subhh/libconnect:>= 8.0.0, < 8.1.0

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2022-33157
https://typo3.org/security/advisory/typo3-ext-sa-2022-010
https://github.com/subhh/libconnect/commit/8c582f3f6575f8744bf29f99bc1697ab8b7bd3af
https://github.com/advisories/GHSA-c8f2-5h29-8j2h