Merge pull request #671 from ohader/sec/typo3-february-2023

Add security advisories for TYPO3's February 2023 releases
FriendsOfPHP · Feb 7, 2023 · 49a93d6 · 49a93d6
2 parents 60c3f6c + f556882
commit 49a93d6
Show file tree

Hide file tree

Showing 2 changed files with 28 additions and 0 deletions.
diff --git a/typo3/cms-core/CVE-2023-24814.yaml b/typo3/cms-core/CVE-2023-24814.yaml
@@ -0,0 +1,14 @@
+title: 'TYPO3-CORE-SA-2023-001: Persisted Cross-Site Scripting in Frontend Rendering'
+link: 'https://typo3.org/security/advisory/typo3-core-sa-2023-001'
+cve: CVE-2023-24814
+branches:
+    10.x:
+        time: '2023-02-07 09:24:54'
+        versions: ['>=10.0.0', '<10.4.35']
+    11.x:
+        time: '2023-02-07 09:25:02'
+        versions: ['>=11.0.0', '<11.5.23']
+    12.x:
+        time: '2023-02-07 09:25:10'
+        versions: ['>=12.0.0', '<12.2.0']
+reference: 'composer://typo3/cms-core'
diff --git a/typo3/cms/CVE-2023-24814.yaml b/typo3/cms/CVE-2023-24814.yaml
@@ -0,0 +1,14 @@
+title: 'TYPO3-CORE-SA-2023-001: Persisted Cross-Site Scripting in Frontend Rendering'
+link: 'https://typo3.org/security/advisory/typo3-core-sa-2023-001'
+cve: CVE-2023-24814
+branches:
+    10.x:
+        time: '2023-02-07 09:24:54'
+        versions: ['>=10.0.0', '<10.4.35']
+    11.x:
+        time: '2023-02-07 09:25:02'
+        versions: ['>=11.0.0', '<11.5.23']
+    12.x:
+        time: '2023-02-07 09:25:10'
+        versions: ['>=12.0.0', '<12.2.0']
+reference: 'composer://typo3/cms'