Skip to content

typo3/cms-backend (Packagist)

Advisories
18
Latest version
—
License
—
OpenSSF Scorecard
—

How to fix

Upgrading to 14.3.3 or later clears every advisory below that has a fix.

Upgrade commands
composer
composer require typo3/cms-backend:^14.3.3

Known vulnerabilities

AdvisorySeverityAffectedFixed in
GHSA-68jx-f42c-7599
TYPO3 CMS - Broken Access Control in Backend and Install Tool
High
EPSS 0.24%
>= 13.0.0, < 13.4.34
13.4.34
GHSA-2j54-93q2-3hjq
TYPO3 CMS has Broken Access Control in Backend API
Medium
EPSS 0.24%
>= 11.0.0, < 11.5.51
11.5.51
GHSA-2j54-93q2-3hjq
TYPO3 CMS has Broken Access Control in Backend API
Medium
EPSS 0.24%
< 10.4.57
10.4.57
GHSA-2j54-93q2-3hjq
TYPO3 CMS has Broken Access Control in Backend API
Medium
EPSS 0.24%
>= 12.0.0, < 12.4.46
12.4.46
GHSA-2j54-93q2-3hjq
TYPO3 CMS has Broken Access Control in Backend API
Medium
EPSS 0.24%
>= 13.0.0, < 13.4.31
13.4.31
GHSA-2j54-93q2-3hjq
TYPO3 CMS has Broken Access Control in Backend API
Medium
EPSS 0.24%
>= 14.0.0, < 14.3.3
14.3.3
GHSA-q93m-25xv-94hh
TYPO3 CMS: Broken Access Control in Media Module
Medium
EPSS 0.24%
>= 13.0.0, < 13.4.31
13.4.31
GHSA-q93m-25xv-94hh
TYPO3 CMS: Broken Access Control in Media Module
Medium
EPSS 0.24%
>= 14.0.0, < 14.3.3
14.3.3
GHSA-q93m-25xv-94hh
TYPO3 CMS: Broken Access Control in Media Module
Medium
EPSS 0.24%
>= 11.0.0, < 11.5.51
11.5.51
GHSA-q93m-25xv-94hh
TYPO3 CMS: Broken Access Control in Media Module
Medium
EPSS 0.24%
< 10.4.57
10.4.57
GHSA-q93m-25xv-94hh
TYPO3 CMS: Broken Access Control in Media Module
Medium
EPSS 0.24%
>= 12.0.0, < 12.4.46
12.4.46
GHSA-x7hc-x7fm-f7qh
Cross-Site Scripting in Content Preview (CType menu)
Medium
EPSS 0.87%
>= 9.0.0, < 9.5.25
9.5.25
GHSA-x7hc-x7fm-f7qh
Cross-Site Scripting in Content Preview (CType menu)
Medium
EPSS 0.87%
>= 11.0.0, < 11.1.1
11.1.1
GHSA-x7hc-x7fm-f7qh
Cross-Site Scripting in Content Preview (CType menu)
Medium
EPSS 0.87%
>= 8.0.0, < 8.7.40
8.7.40
GHSA-x7hc-x7fm-f7qh
Cross-Site Scripting in Content Preview (CType menu)
Medium
EPSS 0.87%
>= 10.0.0, < 10.4.14
10.4.14
GHSA-x7hc-x7fm-f7qh
Cross-Site Scripting in Content Preview (CType menu)
Medium
EPSS 0.87%
>= 7.0.0, < 7.6.51
7.6.51
GHSA-fjh3-g8gq-9q92
Cross-Site Scripting in Content Preview
Medium
EPSS 0.87%
>= 10.0.0, < 10.4.14
10.4.14
GHSA-fjh3-g8gq-9q92
Cross-Site Scripting in Content Preview
Medium
EPSS 0.87%
>= 11.0.0, < 11.1.1
11.1.1
Is this in your code?

MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.

Check your repos with MergeHarbor