• info
• discussion
• exploit
• solution
• references

TYPO3 Cross Site Scripting and Information Disclosure Vulnerabilities

Solution:
The vendor has released an update. Please see the references for more information.


Debian Linux 4.0 arm

• Debian typo3-src-4.0_4.0.2+debian-8_all.deb
  http://security.debian.org/pool/updates/main/t/typo3-src/typo3-src-4.0 _4.0.2+debian-8_all.deb


• Debian typo3_4.0.2+debian-8_all.deb
  http://security.debian.org/pool/updates/main/t/typo3-src/typo3_4.0.2+d ebian-8_all.deb

Debian Linux 4.0 powerpc

• Debian typo3-src-4.0_4.0.2+debian-8_all.deb
  http://security.debian.org/pool/updates/main/t/typo3-src/typo3-src-4.0 _4.0.2+debian-8_all.deb


• Debian typo3_4.0.2+debian-8_all.deb
  http://security.debian.org/pool/updates/main/t/typo3-src/typo3_4.0.2+d ebian-8_all.deb

Debian Linux 4.0 m68k

• Debian typo3-src-4.0_4.0.2+debian-8_all.deb
  http://security.debian.org/pool/updates/main/t/typo3-src/typo3-src-4.0 _4.0.2+debian-8_all.deb


• Debian typo3_4.0.2+debian-8_all.deb
  http://security.debian.org/pool/updates/main/t/typo3-src/typo3_4.0.2+d ebian-8_all.deb

Debian Linux 4.0 amd64

• Debian typo3-src-4.0_4.0.2+debian-8_all.deb
  http://security.debian.org/pool/updates/main/t/typo3-src/typo3-src-4.0 _4.0.2+debian-8_all.deb


• Debian typo3_4.0.2+debian-8_all.deb
  http://security.debian.org/pool/updates/main/t/typo3-src/typo3_4.0.2+d ebian-8_all.deb

Debian Linux 4.0 ia-32

• Debian typo3-src-4.0_4.0.2+debian-8_all.deb
  http://security.debian.org/pool/updates/main/t/typo3-src/typo3-src-4.0 _4.0.2+debian-8_all.deb


• Debian typo3_4.0.2+debian-8_all.deb
  http://security.debian.org/pool/updates/main/t/typo3-src/typo3_4.0.2+d ebian-8_all.deb

Debian Linux 4.0 hppa

• Debian typo3-src-4.0_4.0.2+debian-8_all.deb
  http://security.debian.org/pool/updates/main/t/typo3-src/typo3-src-4.0 _4.0.2+debian-8_all.deb


• Debian typo3_4.0.2+debian-8_all.deb
  http://security.debian.org/pool/updates/main/t/typo3-src/typo3_4.0.2+d ebian-8_all.deb

Debian Linux 4.0 sparc

• Debian typo3-src-4.0_4.0.2+debian-8_all.deb
  http://security.debian.org/pool/updates/main/t/typo3-src/typo3-src-4.0 _4.0.2+debian-8_all.deb


• Debian typo3_4.0.2+debian-8_all.deb
  http://security.debian.org/pool/updates/main/t/typo3-src/typo3_4.0.2+d ebian-8_all.deb

Debian Linux 4.0 s/390

• Debian typo3-src-4.0_4.0.2+debian-8_all.deb
  http://security.debian.org/pool/updates/main/t/typo3-src/typo3-src-4.0 _4.0.2+debian-8_all.deb


• Debian typo3_4.0.2+debian-8_all.deb
  http://security.debian.org/pool/updates/main/t/typo3-src/typo3_4.0.2+d ebian-8_all.deb

Debian Linux 4.0 alpha

• Debian typo3-src-4.0_4.0.2+debian-8_all.deb
  http://security.debian.org/pool/updates/main/t/typo3-src/typo3-src-4.0 _4.0.2+debian-8_all.deb


• Debian typo3_4.0.2+debian-8_all.deb
  http://security.debian.org/pool/updates/main/t/typo3-src/typo3_4.0.2+d ebian-8_all.deb

Debian Linux 4.0

• Debian typo3-src-4.0_4.0.2+debian-8_all.deb
  http://security.debian.org/pool/updates/main/t/typo3-src/typo3-src-4.0 _4.0.2+debian-8_all.deb


• Debian typo3_4.0.2+debian-8_all.deb
  http://security.debian.org/pool/updates/main/t/typo3-src/typo3_4.0.2+d ebian-8_all.deb

Debian Linux 4.0 mipsel

• Debian typo3-src-4.0_4.0.2+debian-8_all.deb
  http://security.debian.org/pool/updates/main/t/typo3-src/typo3-src-4.0 _4.0.2+debian-8_all.deb


• Debian typo3_4.0.2+debian-8_all.deb
  http://security.debian.org/pool/updates/main/t/typo3-src/typo3_4.0.2+d ebian-8_all.deb

Debian Linux 4.0 ia-64

• Debian typo3-src-4.0_4.0.2+debian-8_all.deb
  http://security.debian.org/pool/updates/main/t/typo3-src/typo3-src-4.0 _4.0.2+debian-8_all.deb


• Debian typo3_4.0.2+debian-8_all.deb
  http://security.debian.org/pool/updates/main/t/typo3-src/typo3_4.0.2+d ebian-8_all.deb

Debian Linux 4.0 mips

• Debian typo3-src-4.0_4.0.2+debian-8_all.deb
  http://security.debian.org/pool/updates/main/t/typo3-src/typo3-src-4.0 _4.0.2+debian-8_all.deb


• Debian typo3_4.0.2+debian-8_all.deb
  http://security.debian.org/pool/updates/main/t/typo3-src/typo3_4.0.2+d ebian-8_all.deb