-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability explicitly references the function menu() API as the source of XSS. TYPO3's security bulletin (SA-2012-005) states that the function menu() API lacked proper input encoding. The ModuleMenu class is central to backend menu generation in TYPO3, and methods like generateFunctionMenu would handle rendering menu items. While exact code isn't provided, the component and vulnerability type align with insufficient output encoding in menu rendering logic. The confidence is high due to the direct match between the described API and TYPO3's core backend structure.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| typo3/cms | composer | >= 4.5.0, < 4.5.21 | 4.5.21 |
| typo3/cms | composer | >= 4.6.0, < 4.6.14 | 4.6.14 |
| typo3/cms | composer | >= 4.7.0, < 4.7.6 | 4.7.6 |