CVE-2014-3943
Summary
| CVE | CVE-2014-3943 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2014-06-03 14:55:11 UTC |
| Updated | 2026-05-06 22:30:45 UTC |
| Description | Multiple cross-site scripting (XSS) vulnerabilities in unspecified backend components in TYPO3 4.5.0 before 4.5.34, 4.7.0 before 4.7.19, 6.0.0 before 6.0.14, 6.1.0 before 6.1.9, and 6.2.0 before 6.2.3 allow remote authenticated editors to inject arbitrary web script or HTML via unknown parameters. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
MediumAuthentication
SingleConfidentiality
NoneIntegrity
PartialAvailability
NoneAV:N/AC:M/Au:S/C:N/I:P/A:N
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Typo3 | Typo3 | 4.5.0 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.1 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.10 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.11 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.12 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.13 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.14 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.15 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.16 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.17 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.18 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.19 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.2 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.20 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.21 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.22 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.23 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.24 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.25 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.26 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.27 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.28 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.29 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.3 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.30 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.31 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.32 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.33 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.4 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.5 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.6 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.7 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.8 | All | All | All |
| Application | Typo3 | Typo3 | 4.5.9 | All | All | All |
| Application | Typo3 | Typo3 | 4.7.0 | All | All | All |
| Application | Typo3 | Typo3 | 4.7.1 | All | All | All |
| Application | Typo3 | Typo3 | 4.7.10 | All | All | All |
| Application | Typo3 | Typo3 | 4.7.11 | All | All | All |
| Application | Typo3 | Typo3 | 4.7.12 | All | All | All |
| Application | Typo3 | Typo3 | 4.7.13 | All | All | All |
| Application | Typo3 | Typo3 | 4.7.14 | All | All | All |
| Application | Typo3 | Typo3 | 4.7.15 | All | All | All |
| Application | Typo3 | Typo3 | 4.7.16 | All | All | All |
| Application | Typo3 | Typo3 | 4.7.17 | All | All | All |
| Application | Typo3 | Typo3 | 4.7.18 | All | All | All |
| Application | Typo3 | Typo3 | 4.7.2 | All | All | All |
| Application | Typo3 | Typo3 | 4.7.3 | All | All | All |
| Application | Typo3 | Typo3 | 4.7.4 | All | All | All |
| Application | Typo3 | Typo3 | 4.7.5 | All | All | All |
| Application | Typo3 | Typo3 | 4.7.6 | All | All | All |
| Application | Typo3 | Typo3 | 4.7.7 | All | All | All |
| Application | Typo3 | Typo3 | 4.7.8 | All | All | All |
| Application | Typo3 | Typo3 | 4.7.9 | All | All | All |
| Application | Typo3 | Typo3 | 6.0 | All | All | All |
| Application | Typo3 | Typo3 | 6.0.1 | All | All | All |
| Application | Typo3 | Typo3 | 6.0.10 | All | All | All |
| Application | Typo3 | Typo3 | 6.0.11 | All | All | All |
| Application | Typo3 | Typo3 | 6.0.12 | All | All | All |
| Application | Typo3 | Typo3 | 6.0.13 | All | All | All |
| Application | Typo3 | Typo3 | 6.0.2 | All | All | All |
| Application | Typo3 | Typo3 | 6.0.3 | All | All | All |
| Application | Typo3 | Typo3 | 6.0.4 | All | All | All |
| Application | Typo3 | Typo3 | 6.0.5 | All | All | All |
| Application | Typo3 | Typo3 | 6.0.6 | All | All | All |
| Application | Typo3 | Typo3 | 6.0.7 | All | All | All |
| Application | Typo3 | Typo3 | 6.0.8 | All | All | All |
| Application | Typo3 | Typo3 | 6.0.9 | All | All | All |
| Application | Typo3 | Typo3 | 6.1 | All | All | All |
| Application | Typo3 | Typo3 | 6.1.1 | All | All | All |
| Application | Typo3 | Typo3 | 6.1.2 | All | All | All |
| Application | Typo3 | Typo3 | 6.1.3 | All | All | All |
| Application | Typo3 | Typo3 | 6.1.4 | All | All | All |
| Application | Typo3 | Typo3 | 6.1.5 | All | All | All |
| Application | Typo3 | Typo3 | 6.1.6 | All | All | All |
| Application | Typo3 | Typo3 | 6.1.7 | All | All | All |
| Application | Typo3 | Typo3 | 6.1.8 | All | All | All |
| Application | Typo3 | Typo3 | 6.2 | All | All | All |
| Application | Typo3 | Typo3 | 6.2.0 | beta1 | All | All |
| Application | Typo3 | Typo3 | 6.2.0 | beta2 | All | All |
| Application | Typo3 | Typo3 | 6.2.0 | beta3 | All | All |
| Application | Typo3 | Typo3 | 6.2.1 | All | All | All |
| Application | Typo3 | Typo3 | 6.2.2 | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Debian -- Security Information -- DSA-2942-1 typo3-src | af854a3a-2127-422b-91ae-364da2661108 | www.debian.org | |
| openSUSE-SU-2014:0813-1: moderate: typo3-cms-4_5: Update to 4.5.34 to fi | af854a3a-2127-422b-91ae-364da2661108 | lists.opensuse.org | |
| TYPO3 Backend Subcomponent Unspecified Cross Site Scripting Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| Multiple Vulnerabilities in TYPO3 CMS - - TYPO3 - The Enterprise Open Source CMS | af854a3a-2127-422b-91ae-364da2661108 | typo3.org | Vendor Advisory |
| oss-security - Re: CVE ID request: typo3 | af854a3a-2127-422b-91ae-364da2661108 | www.openwall.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 994898 PHP (Composer) Security Update for typo3/cms (GHSA-qqh2-h6gw-6x8x)