TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected versions DOM processing instructions are not handled correctly. This allows bypassing the cross-site scripting mechanism of typo3/html-sanitizer. This vulnerability has been addressed in versions 1.5.3 and 2.1.4. Users are advised to upgrade. There are no known workarounds for this vulnerability.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected
    versions DOM processing instructions are not handled correctly. This allows bypassing the cross-site
    scripting mechanism of typo3/html-sanitizer. This vulnerability has been addressed in versions 1.5.3 and
    2.1.4. Users are advised to upgrade. There are no known workarounds for this vulnerability.
    (CVE-2023-47125)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 7cc003cb-83b9-11ee-957d-b42e991fc52e advisory.

  - TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected     versions DOM processing instructions are not handled correctly. This allows bypassing the cross-site     scripting mechanism of typo3/html-sanitizer. This vulnerability has been addressed in versions 1.5.3 and     2.1.4. Users are advised to upgrade. There are no known workarounds for this vulnerability.
    (CVE-2023-47125)

  - TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected     versions the login screen of the standalone install tool discloses the full path of the transient data     directory (e.g. /var/www/html/var/transient/). This applies to composer-based scenarios only - classic     non-composer installations are not affected. This issue has been addressed in version 12.4.8. Users are     advised to upgrade. There are no known workarounds for this vulnerability. (CVE-2023-47126)

  - TYPO3 is an open source PHP based web content management system released under the GNU GPL. In typo3     installations there are always at least two different sites. Eg. first.example.org and second.example.com.
    In affected versions a session cookie generated for the first site can be reused on the second site     without requiring additional authentication. This vulnerability has been addressed in versions 8.7.55,     9.5.44, 10.4.41, 11.5.33, and 12.4.8. Users are advised to upgrade. There are no known workarounds for     this vulnerability. (CVE-2023-47127)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of TYPO3 installed on the remote host is prior to 8.7.42 < 8.7.55 ELTS / 9.5.29 < 9.5.44 ELTS / 10.4.19 < 10.4.41 ELTS / 11.3.2 < 11.5.33 / 12.0.0 < 12.4.8. It is, therefore, affected by a vulnerability as referenced in the TYPO3-CORE-SA-2023-007 advisory.

  - DOM processing instructions are not handled correctly. This allows bypassing the cross-site scripting     mechanism of typo3/html-sanitizer. (CVE-2023-47125)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
417026	SCA: security update for typo3/html-sanitizer (GHSA-mm79-jhqm-9j54)	Tenable Cloud Security	SCA Checks	medium
417026	SCA: security update for typo3/html-sanitizer (GHSA-mm79-jhqm-9j54)	Tenable Self-Hosted Container Security	SCA Checks	medium
185775	FreeBSD : typo3 -- Multiple vulnerabilities (7cc003cb-83b9-11ee-957d-b42e991fc52e)	Nessus	FreeBSD Local Security Checks	medium
185513	TYPO3 8.7.42 < 8.7.55 ELTS / 9.5.29 < 9.5.44 ELTS / 10.4.19 < 10.4.41 ELTS / 11.3.2 < 11.5.33 / 12.0.0 < 12.4.8 XSS (TYPO3-CORE-SA-2023-007)	Nessus	CGI abuses	medium

Detections

Analytics

CVE-2023-47125

medium

Tenable Plugins

medium

medium

medium

medium