Project

General

Profile

Actions
Copy link

Bug #93335

closed

XSS in access permission module

Added by Oliver Hader almost 4 years ago. Updated over 3 years ago.

Status:
Closed
Priority:
Should have
Assignee:
-
Category:
-
Target version:
-
Start date:
2021-01-21
Due date:
% Done:

100%

Estimated time:
TYPO3 Version:
11
PHP Version:
Tags:
Complexity:
Is Regression:
Sprint Focus:

Description

Steps

  • having be_groups.title containing XSS
Group<img src="x" onerror="alert(1)">
  • open System > Access module for a particular page
  • click on groupname element
  • change to group containing XSS in title (prerequisite) & save
  • click on groupname element again
  • change to different group
  • click on "x" icon in order to revert change

XSS is executed

Reasons

buttonSelector.innerHTML = groupnameHtml;

Related issues 1 (0 open — 1 closed)

Related to TYPO3 Core - Task #93301: Remove jQuery from Permissions moduleClosed2021-01-16

Actions
Actions
Copy link

Also available in: Atom PDF