Publish Advisories

GHSA-4mm3-xgc2-656r GHSA-4mm3-xgc2-656r
2026-05-22 18:04:22 -07:00 · 2025-04-12 03:37:32 +00:00
parent c8f6c7dfca
commit fe5ee04a06
2 changed files with 73 additions and 51 deletions
@@ -0,0 +1,73 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-4mm3-xgc2-656r",
+  "modified": "2025-04-12T03:35:35Z",
+  "published": "2022-05-17T01:32:35Z",
+  "aliases": [
+    "CVE-2013-5100"
+  ],
+  "summary": "Static Methods since 2007 (div2007) extension for TYPO3 vulnerable to Cross-site Scripting",
+  "details": "Cross-site scripting (XSS) vulnerability in the Static Methods since 2007 (div2007) extension before 0.10.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to the t3lib_div::quoteJSvalue function.",
+  "severity": [
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U"
+    }
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "Packagist",
+        "name": "jambagecom/div2007"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "0.10.2"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-5100"
+    },
+    {
+      "type": "WEB",
+      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/81195"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/franzholz/div2007"
+    },
+    {
+      "type": "WEB",
+      "url": "https://web.archive.org/web/20130314000411/http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-001"
+    },
+    {
+      "type": "WEB",
+      "url": "https://web.archive.org/web/20130815054813/http://www.securityfocus.com/bid/57288"
+    },
+    {
+      "type": "WEB",
+      "url": "http://typo3.org/extensions/repository/view/div2007"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "LOW",
+    "github_reviewed": true,
+    "github_reviewed_at": "2025-04-12T03:35:34Z",
+    "nvd_published_at": "2013-08-09T22:55:00Z"
+  }
+}
@@ -1,51 +0,0 @@
-{
-  "schema_version": "1.4.0",
-  "id": "GHSA-4mm3-xgc2-656r",
-  "modified": "2025-04-11T04:12:46Z",
-  "published": "2022-05-17T01:32:35Z",
-  "aliases": [
-    "CVE-2013-5100"
-  ],
-  "details": "Cross-site scripting (XSS) vulnerability in the Static Methods since 2007 (div2007) extension before 0.10.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to the t3lib_div::quoteJSvalue function.",
-  "severity": [],
-  "affected": [],
-  "references": [
-    {
-      "type": "ADVISORY",
-      "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-5100"
-    },
-    {
-      "type": "WEB",
-      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/81195"
-    },
-    {
-      "type": "WEB",
-      "url": "http://osvdb.org/89131"
-    },
-    {
-      "type": "WEB",
-      "url": "http://secunia.com/advisories/51836"
-    },
-    {
-      "type": "WEB",
-      "url": "http://typo3.org/extensions/repository/view/div2007"
-    },
-    {
-      "type": "WEB",
-      "url": "http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-001"
-    },
-    {
-      "type": "WEB",
-      "url": "http://www.securityfocus.com/bid/57288"
-    }
-  ],
-  "database_specific": {
-    "cwe_ids": [
-      "CWE-79"
-    ],
-    "severity": "MODERATE",
-    "github_reviewed": false,
-    "github_reviewed_at": null,
-    "nvd_published_at": "2013-08-09T22:55:00Z"
-  }
-}