[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2020-8091":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":20,"cwes":21,"cpes":23,"technologies":41,"references":44,"score":52,"epss_score":53,"epss_percentile":54,"is_kev":55,"cisa_kev_date_added":56,"cisa_kev_due_date":56,"cisa_ssvc":57,"attack_mappings":63,"exploits":70},264903,"CVE-2020-8091","EUVD-2022-5035","Typo3 Cross-Site Scripting in Flash component (ELTS)\n\nTYPO3 6.2.0 to 6.2.38 ELTS and 7.0.0 to 7.1.0 included a vulnerable external component, which could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack on a targeted system.","2022-05-24T17:07:00Z",{"cvss_v3.1":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":17,"userInteraction":18,"attackComplexity":17,"availabilityImpact":19,"privilegesRequired":19,"confidentialityImpact":17},"CHANGED","3.1",6.1,"NETWORK","MEDIUM","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N","LOW","REQUIRED","NONE",true,[22],"CWE-79",[24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40],"cpe:2.3:a:typo3:typo3:6.2.35:*:*:*:elts:*:*:*","cpe:2.3:a:typo3:typo3:6.2.38:*:*:*:elts:*:*:*","cpe:2.3:a:typo3:typo3:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:typo3:typo3:6.2.32:*:*:*:elts:*:*:*","cpe:2.3:a:typo3:typo3:6.2.33:*:*:*:elts:*:*:*","cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","cpe:2.3:a:typo3:typo3:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:typo3:typo3:6.2.34:*:*:*:elts:*:*:*","cpe:2.3:a:typo3:typo3:7.0.0:*:*:*:elts:*:*:*","cpe:2.3:a:typo3:typo3:6.2.37:*:*:*:elts:*:*:*","cpe:2.3:a:typo3:typo3:7.1.0:*:*:*:*:*:*:*","cpe:2.3:a:typo3:typo3:6.2.36:*:*:*:elts:*:*:*","cpe:2.3:a:typo3:typo3:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:typo3:typo3:*:*:*:*:elts:*:*:*","cpe:2.3:a:typo3:cms:*:*:*:*:*:*:*:*","cpe:2.3:a:typo3:cms:6.2.38:*:*:*:*:*:*:*","cpe:2.3:a:typo3:cms:7.1.0:*:*:*:*:*:*:*",[42,43],"Typo3 Typo3","Typo3 Cms",[45,46,47,48,49,50,51],"https:\u002F\u002Ftypo3.org\u002Fsecurity\u002Fadvisory\u002Ftypo3-psa-2019-003\u002F","https:\u002F\u002Fwww.purplemet.com\u002Fblog\u002Ftypo3-xss-vulnerability","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2020-8091","https:\u002F\u002Fgithub.com\u002FTYPO3\u002Ftypo3\u002Fcommit\u002F482e2e992f80f5e38cb48fcaea40fd9812a5252c","https:\u002F\u002Fgithub.com\u002FTYPO3\u002Ftypo3","https:\u002F\u002Fgithub.com\u002FTYPO3\u002Ftypo3\u002Fblob\u002F4cb53e828bd5138d180cdf9cac1ccf7fd31086d2\u002Ftypo3\u002Fsysext\u002Fcore\u002FDocumentation\u002FChangelog\u002F7.2\u002FBreaking-65962-WebSVGLibraryAndAPIRemoved.rst","https:\u002F\u002Ftypo3.org\u002Fsecurity\u002Fadvisory\u002Ftypo3-psa-2019-003",0.66,0.05214,0.92487,false,null,{"timestamp":56,"automatable":58,"tech_impact":59,"exploitation":60,"cisa_decision":61,"cisa_remediation_timeline":62},"no","partial","none",{},"FSU",[64],{"name":65,"source":66,"tactics":67,"technique_id":69},"Exploit Public-Facing Application","attack_vector",[68],"initial-access","T1190",[71],{"link":46}]