Release Date: January 26, 2011
Component Type: Third party extension. This extension is not a part of the TYPO3 default installation.
Affected Versions: Version 1.1.7 and all versions below
Vulnerability Type: Cross-Site Scripting
Problem Description: DAM Backend module fails to escape the output before
performing file rename operations. Thus Cross-Site Scripting becomes possible. Exploitation requires an authenticated TYPO3 editor, who wants to rename the file with a specially created title.
Solution: An updated version 1.1.8 is available from the TYPO3 extension manager and athttp://typo3.org/extensions/repository/view/dam/1.1.8/. Users of the extension are advised to update the extension as soon as possible.
Credits: Credits go to Christian Müller who discovered and reported the issue.