CVE-2023-38500: By-passing Cross-Site Scripting Protection in HTML Sanitizer
Vulnerability summary
CVE-2023-38500 is a medium (CVSS 6.1) vulnerability in typo3 html_sanitizer. EPSS estimates a 0.51% chance of exploitation in the next 30 days, higher than 43.4% of scored vulnerabilities.
Not severe (CVSS 4.7, network access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Timeline
- 25-07-2023PublishedVulnerability first disclosed.
- 10-10-2024Last modifiedVulnerability information updated.
Description
TYPO3 HTML Sanitizer is an HTML sanitizer, written in PHP, aiming to provide cross-site-scripting-safe markup based on explicitly allowed tags, attributes and values. Starting in version 1.0.0 and prior to versions 1.5.1 and 2.1.2, due to an encoding issue in the serialization layer, malicious markup nested in a `noscript` element was not encoded correctly. `noscript` is disabled in the default configuration, but might have been enabled in custom scenarios. This allows bypassing the cross-site scripting mechanism of TYPO3 HTML Sanitizer. Versions 1.5.1 and 2.1.2 fix the problem.
CVSS metrics
2 scores · 2 sources · 1 version- CVE.orgCNA4.7MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:NDiffers
EPSS trend
Probability
0.51%
Chance of exploitation in the next 30 days
Percentile
43%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.51% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: network-reachable, no authentication, user interaction (CVSS vector). Other conditions: not stated in public data.
Typo32 products
- html_sanitizer≥ 1.0.0, < 1.5.1 | ≥ 2.0.0, < 2.1.2
- html-sanitizer≥ 1.0.0, < 1.5.1 | ≥ 2.0.0, < 2.1.2
1 vendor · 2 products
References
3 links- github.com/TYPO3/html-sanitizer/security/advisories/GHSA-59jf-3q9v-rh6gX Refsource CONFIRMVendor Advisory
- github.com/TYPO3/html-sanitizer/commit/e3026f589fef0be8c3574ee3f0a0bfbe33d7ebdbX Refsource MISCPatch