GHSA-qrxh-46mr-pr7q
TYPO3 is susceptible to Cross-Site Flashing
No scoreFix available
The flashplayer misses to validate flash and image files. Therefore it is possible to embed flash videos from external domains.
What each source reports
GitHub AdvisoriesNo score
TYPO3 is susceptible to Cross-Site Flashing
The flashplayer misses to validate flash and image files. Therefore it is possible to embed flash videos from external domains.
- Record
GHSA-qrxh-46mr-pr7q- Updated
- 2026-11-02
OSVNo score
TYPO3 is susceptible to Cross-Site Flashing
The flashplayer misses to validate flash and image files. Therefore it is possible to embed flash videos from external domains.
- Record
GHSA-qrxh-46mr-pr7q- Updated
- 2026-11-02
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
GHSA-qrxh-46mr-pr7q is a vulnerability with no CVSS score yet in typo3/cms, published June 3, 2024. No source lists public exploit code. Fixed in typo3/cms 6.2.16.