Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-eyk1-hqju-cfc2
Summary
XSS Vulnerabilities
Neos is vulnerable to several XSS attacks. Through these vulnerabilities, an attacker could tamper with page rendering, redirect victims to a fake login page, or capture user credentials (such as cookies). With the potential backdoor upload an attacker could gain access to the server itself, to an extent mainly limited by the server setup.
Aliases
0
alias GMS-2015-46
Fixed_packages
0
url pkg:composer/typo3/neos@2.0.0-RC1
purl pkg:composer/typo3/neos@2.0.0-RC1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/neos@2.0.0-RC1
1
url pkg:composer/typo3/neos@2.3.3
purl pkg:composer/typo3/neos@2.3.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/neos@2.3.3
2
url pkg:composer/typo3/neos@1.2.13
purl pkg:composer/typo3/neos@1.2.13
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/neos@1.2.13
3
url pkg:composer/typo3/neos@2.0.4
purl pkg:composer/typo3/neos@2.0.4
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/neos@2.0.4
Affected_packages
0
url pkg:composer/typo3/neos@1.2.0-beta2
purl pkg:composer/typo3/neos@1.2.0-beta2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bh6n-n4s6-13gt
1
vulnerability VCID-eyk1-hqju-cfc2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/neos@1.2.0-beta2
1
url pkg:composer/typo3/neos@1.2.0-beta3
purl pkg:composer/typo3/neos@1.2.0-beta3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bh6n-n4s6-13gt
1
vulnerability VCID-eyk1-hqju-cfc2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/neos@1.2.0-beta3
2
url pkg:composer/typo3/neos@1.2.1
purl pkg:composer/typo3/neos@1.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-56z1-xe5m-yugk
1
vulnerability VCID-bh6n-n4s6-13gt
2
vulnerability VCID-eyk1-hqju-cfc2
3
vulnerability VCID-kftp-w8kn-9ybx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/neos@1.2.1
3
url pkg:composer/typo3/neos@1.2.10
purl pkg:composer/typo3/neos@1.2.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eyk1-hqju-cfc2
1
vulnerability VCID-kftp-w8kn-9ybx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/neos@1.2.10
4
url pkg:composer/typo3/neos@1.2.11
purl pkg:composer/typo3/neos@1.2.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eyk1-hqju-cfc2
1
vulnerability VCID-kftp-w8kn-9ybx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/neos@1.2.11
5
url pkg:composer/typo3/neos@1.2.12
purl pkg:composer/typo3/neos@1.2.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eyk1-hqju-cfc2
1
vulnerability VCID-kftp-w8kn-9ybx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/neos@1.2.12
6
url pkg:composer/typo3/neos@1.2.2
purl pkg:composer/typo3/neos@1.2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-56z1-xe5m-yugk
1
vulnerability VCID-bh6n-n4s6-13gt
2
vulnerability VCID-eyk1-hqju-cfc2
3
vulnerability VCID-kftp-w8kn-9ybx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/neos@1.2.2
7
url pkg:composer/typo3/neos@1.2.4
purl pkg:composer/typo3/neos@1.2.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eyk1-hqju-cfc2
1
vulnerability VCID-kftp-w8kn-9ybx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/neos@1.2.4
8
url pkg:composer/typo3/neos@1.2.5
purl pkg:composer/typo3/neos@1.2.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eyk1-hqju-cfc2
1
vulnerability VCID-kftp-w8kn-9ybx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/neos@1.2.5
9
url pkg:composer/typo3/neos@1.2.6
purl pkg:composer/typo3/neos@1.2.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eyk1-hqju-cfc2
1
vulnerability VCID-kftp-w8kn-9ybx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/neos@1.2.6
10
url pkg:composer/typo3/neos@1.2.7
purl pkg:composer/typo3/neos@1.2.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eyk1-hqju-cfc2
1
vulnerability VCID-kftp-w8kn-9ybx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/neos@1.2.7
11
url pkg:composer/typo3/neos@1.2.8
purl pkg:composer/typo3/neos@1.2.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eyk1-hqju-cfc2
1
vulnerability VCID-kftp-w8kn-9ybx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/neos@1.2.8
12
url pkg:composer/typo3/neos@1.2.9
purl pkg:composer/typo3/neos@1.2.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eyk1-hqju-cfc2
1
vulnerability VCID-kftp-w8kn-9ybx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/neos@1.2.9
13
url pkg:composer/typo3/neos@2.0.0-beta1
purl pkg:composer/typo3/neos@2.0.0-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eyk1-hqju-cfc2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/neos@2.0.0-beta1
14
url pkg:composer/typo3/neos@2.0.0-beta2
purl pkg:composer/typo3/neos@2.0.0-beta2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eyk1-hqju-cfc2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/neos@2.0.0-beta2
15
url pkg:composer/typo3/neos@2.0.0-beta3
purl pkg:composer/typo3/neos@2.0.0-beta3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eyk1-hqju-cfc2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/neos@2.0.0-beta3
16
url pkg:composer/typo3/neos@2.0.0-beta4
purl pkg:composer/typo3/neos@2.0.0-beta4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eyk1-hqju-cfc2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/neos@2.0.0-beta4
17
url pkg:composer/typo3/neos@2.0.0-beta5
purl pkg:composer/typo3/neos@2.0.0-beta5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eyk1-hqju-cfc2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/neos@2.0.0-beta5
18
url pkg:composer/typo3/neos@2.0.0-beta6
purl pkg:composer/typo3/neos@2.0.0-beta6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eyk1-hqju-cfc2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/neos@2.0.0-beta6
19
url pkg:composer/typo3/neos@2.0.1
purl pkg:composer/typo3/neos@2.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eyk1-hqju-cfc2
1
vulnerability VCID-kftp-w8kn-9ybx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/neos@2.0.1
20
url pkg:composer/typo3/neos@2.0.2
purl pkg:composer/typo3/neos@2.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eyk1-hqju-cfc2
1
vulnerability VCID-kftp-w8kn-9ybx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/neos@2.0.2
21
url pkg:composer/typo3/neos@2.0.3
purl pkg:composer/typo3/neos@2.0.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eyk1-hqju-cfc2
1
vulnerability VCID-kftp-w8kn-9ybx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/neos@2.0.3
22
url pkg:composer/typo3/neos@1.2.0-alpha
purl pkg:composer/typo3/neos@1.2.0-alpha
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eyk1-hqju-cfc2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/neos@1.2.0-alpha
23
url pkg:composer/typo3/neos@1.2.0-beta1
purl pkg:composer/typo3/neos@1.2.0-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bh6n-n4s6-13gt
1
vulnerability VCID-eyk1-hqju-cfc2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/neos@1.2.0-beta1
24
url pkg:composer/typo3/neos@1.2.0
purl pkg:composer/typo3/neos@1.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3gkh-89k9-4ybn
1
vulnerability VCID-56z1-xe5m-yugk
2
vulnerability VCID-9hvu-jc3r-jyd5
3
vulnerability VCID-bh6n-n4s6-13gt
4
vulnerability VCID-eyk1-hqju-cfc2
5
vulnerability VCID-kftp-w8kn-9ybx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/neos@1.2.0
25
url pkg:composer/typo3/neos@1.2.3
purl pkg:composer/typo3/neos@1.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eyk1-hqju-cfc2
1
vulnerability VCID-kftp-w8kn-9ybx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/neos@1.2.3
26
url pkg:composer/typo3/neos@2.0.0-alpha
purl pkg:composer/typo3/neos@2.0.0-alpha
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eyk1-hqju-cfc2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/neos@2.0.0-alpha
27
url pkg:composer/typo3/neos@2.0.0
purl pkg:composer/typo3/neos@2.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3gkh-89k9-4ybn
1
vulnerability VCID-eyk1-hqju-cfc2
2
vulnerability VCID-kftp-w8kn-9ybx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/neos@2.0.0
References
0
reference_url https://www.neos.io/news/neos-sa-2015-002.html
reference_id
reference_type
scores
url https://www.neos.io/news/neos-sa-2015-002.html
Weaknesses
0
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
1
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
Exploits
Severity_range_scorenull
Exploitability0.5
Weighted_severity0.0
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-eyk1-hqju-cfc2