typo3/cms-core (Packagist)
Advisories
419
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 14.3.6 or later clears every advisory below that has a fix.
Upgrade commands
composer
composer require typo3/cms-core:^14.3.6Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-4f2f-jr2m-j7p4 Duplicate Advisory: TYPO3-CORE-SA-2026-021: Broken Access Control in Backend and Install Tool Withdrawn |
High | >= 14.0.0, < 14.3.6 | 14.3.6 |
| GHSA-4f2f-jr2m-j7p4 Duplicate Advisory: TYPO3-CORE-SA-2026-021: Broken Access Control in Backend and Install Tool Withdrawn |
High | >= 13.0.0, < 13.4.34 | 13.4.34 |
| GHSA-68jx-f42c-7599 TYPO3 CMS - Broken Access Control in Backend and Install Tool |
High EPSS 0.24% |
>= 14.0.0, < 14.3.6 | 14.3.6 |
| GHSA-chm7-4vch-h8vr TYPO3 CMS has Broken Access Control in its Media Module |
High EPSS 0.31% |
>= 11.0.0, < 11.5.51 | 11.5.51 |
| GHSA-chm7-4vch-h8vr TYPO3 CMS has Broken Access Control in its Media Module |
High EPSS 0.31% |
>= 12.0.0, < 12.4.46 | 12.4.46 |
| GHSA-chm7-4vch-h8vr TYPO3 CMS has Broken Access Control in its Media Module |
High EPSS 0.31% |
>= 13.0.0, < 13.4.31 | 13.4.31 |
| GHSA-chm7-4vch-h8vr TYPO3 CMS has Broken Access Control in its Media Module |
High EPSS 0.31% |
>= 14.0.0, < 14.3.3 | 14.3.3 |
| GHSA-jh32-v29g-68pq TYPO3 CMS has Privilege Escalation & SQL Injection in its Form Framework |
High EPSS 0.24% |
>= 14.0.0, < 14.3.3 | 14.3.3 |
| GHSA-c78m-c52x-jgwp TYPO3 CMS has Insecure Deserialization via Core API |
Medium EPSS 0.21% |
< 10.4.57 | 10.4.57 |
| GHSA-c78m-c52x-jgwp TYPO3 CMS has Insecure Deserialization via Core API |
Medium EPSS 0.21% |
>= 14.0.0, < 14.3.3 | 14.3.3 |
| GHSA-c78m-c52x-jgwp TYPO3 CMS has Insecure Deserialization via Core API |
Medium EPSS 0.21% |
>= 13.0.0, < 13.4.31 | 13.4.31 |
| GHSA-c78m-c52x-jgwp TYPO3 CMS has Insecure Deserialization via Core API |
Medium EPSS 0.21% |
>= 12.0.0, < 12.4.46 | 12.4.46 |
| GHSA-c78m-c52x-jgwp TYPO3 CMS has Insecure Deserialization via Core API |
Medium EPSS 0.21% |
>= 11.0.0, < 11.5.51 | 11.5.51 |
| GHSA-jf56-v8jc-jcc5 TYPO3 CMS has Broken Access Control in its File Abstraction Layer |
Low EPSS 0.36% |
>= 14.0.0, < 14.3.3 | 14.3.3 |
| GHSA-jf56-v8jc-jcc5 TYPO3 CMS has Broken Access Control in its File Abstraction Layer |
Low EPSS 0.36% |
>= 12.0.0, < 12.4.46 | 12.4.46 |
| GHSA-jf56-v8jc-jcc5 TYPO3 CMS has Broken Access Control in its File Abstraction Layer |
Low EPSS 0.36% |
>= 11.0.0, < 11.5.51 | 11.5.51 |
| GHSA-jf56-v8jc-jcc5 TYPO3 CMS has Broken Access Control in its File Abstraction Layer |
Low EPSS 0.36% |
< 10.4.57 | 10.4.57 |
| GHSA-jf56-v8jc-jcc5 TYPO3 CMS has Broken Access Control in its File Abstraction Layer |
Low EPSS 0.36% |
>= 13.0.0, < 13.4.31 | 13.4.31 |
| GHSA-2j54-93q2-3hjq TYPO3 CMS has Broken Access Control in Backend API |
Medium EPSS 0.24% |
>= 12.0.0, < 12.4.46 | 12.4.46 |
| GHSA-2j54-93q2-3hjq TYPO3 CMS has Broken Access Control in Backend API |
Medium EPSS 0.24% |
>= 14.0.0, < 14.3.3 | 14.3.3 |
| GHSA-2j54-93q2-3hjq TYPO3 CMS has Broken Access Control in Backend API |
Medium EPSS 0.24% |
< 10.4.57 | 10.4.57 |
| GHSA-2j54-93q2-3hjq TYPO3 CMS has Broken Access Control in Backend API |
Medium EPSS 0.24% |
>= 11.0.0, < 11.5.51 | 11.5.51 |
| GHSA-2j54-93q2-3hjq TYPO3 CMS has Broken Access Control in Backend API |
Medium EPSS 0.24% |
>= 13.0.0, < 13.4.31 | 13.4.31 |
| GHSA-q93m-25xv-94hh TYPO3 CMS: Broken Access Control in Media Module |
Medium EPSS 0.24% |
< 10.4.57 | 10.4.57 |
| GHSA-q93m-25xv-94hh TYPO3 CMS: Broken Access Control in Media Module |
Medium EPSS 0.24% |
>= 14.0.0, < 14.3.3 | 14.3.3 |
| GHSA-q93m-25xv-94hh TYPO3 CMS: Broken Access Control in Media Module |
Medium EPSS 0.24% |
>= 11.0.0, < 11.5.51 | 11.5.51 |
| GHSA-q93m-25xv-94hh TYPO3 CMS: Broken Access Control in Media Module |
Medium EPSS 0.24% |
>= 12.0.0, < 12.4.46 | 12.4.46 |
| GHSA-q93m-25xv-94hh TYPO3 CMS: Broken Access Control in Media Module |
Medium EPSS 0.24% |
>= 13.0.0, < 13.4.31 | 13.4.31 |
| GHSA-qcmw-6rm2-5x78 TYPO3 CMS has Broken Access Control in its DataHandler |
Medium EPSS 0.24% |
>= 14.0.0, < 14.3.3 | 14.3.3 |
| GHSA-qcmw-6rm2-5x78 TYPO3 CMS has Broken Access Control in its DataHandler |
Medium EPSS 0.24% |
>= 13.0.0, < 13.4.31 | 13.4.31 |
| GHSA-f34x-rx2w-7pm3 TYPO3 CMS has Broken Access Control in the Recycler Module |
Medium EPSS 0.24% |
>= 11.0.0, < 11.5.51 | 11.5.51 |
| GHSA-f34x-rx2w-7pm3 TYPO3 CMS has Broken Access Control in the Recycler Module |
Medium EPSS 0.24% |
>= 13.0.0, < 13.4.31 | 13.4.31 |
| GHSA-f34x-rx2w-7pm3 TYPO3 CMS has Broken Access Control in the Recycler Module |
Medium EPSS 0.24% |
>= 14.0.0, < 14.3.3 | 14.3.3 |
| GHSA-f34x-rx2w-7pm3 TYPO3 CMS has Broken Access Control in the Recycler Module |
Medium EPSS 0.24% |
< 10.4.57 | 10.4.57 |
| GHSA-f34x-rx2w-7pm3 TYPO3 CMS has Broken Access Control in the Recycler Module |
Medium EPSS 0.24% |
>= 12.0.0, < 12.4.46 | 12.4.46 |
| GHSA-cg75-qfg2-w9hj TYPO3 CMS has Cross-Site Scripting in Indexed Search |
Medium EPSS 0.27% |
>= 14.0.0, < 14.3.3 | 14.3.3 |
| GHSA-cg75-qfg2-w9hj TYPO3 CMS has Cross-Site Scripting in Indexed Search |
Medium EPSS 0.27% |
>= 13.0.0, < 13.4.31 | 13.4.31 |
| GHSA-3p42-w5ch-gg42 TYPO3 CMS has an Open Redirect Vulnerability via Core Utilities |
Medium EPSS 0.29% |
>= 13.0.0, < 13.4.31 | 13.4.31 |
| GHSA-3p42-w5ch-gg42 TYPO3 CMS has an Open Redirect Vulnerability via Core Utilities |
Medium EPSS 0.29% |
< 10.4.57 | 10.4.57 |
| GHSA-3p42-w5ch-gg42 TYPO3 CMS has an Open Redirect Vulnerability via Core Utilities |
Medium EPSS 0.29% |
>= 11.0.0, < 11.5.51 | 11.5.51 |
| GHSA-3p42-w5ch-gg42 TYPO3 CMS has an Open Redirect Vulnerability via Core Utilities |
Medium EPSS 0.29% |
>= 12.0.0, < 12.4.46 | 12.4.46 |
| GHSA-3p42-w5ch-gg42 TYPO3 CMS has an Open Redirect Vulnerability via Core Utilities |
Medium EPSS 0.29% |
>= 14.0.0, < 14.3.3 | 14.3.3 |
| GHSA-hwvq-2w67-rvxp TYPO3 CMS has Broken Access Control in its Form Framework |
High EPSS 0.25% |
>= 11.0.0, < 11.5.51 | 11.5.51 |
| GHSA-hwvq-2w67-rvxp TYPO3 CMS has Broken Access Control in its Form Framework |
High EPSS 0.25% |
>= 14.0.0, < 14.3.3 | 14.3.3 |
| GHSA-hwvq-2w67-rvxp TYPO3 CMS has Broken Access Control in its Form Framework |
High EPSS 0.25% |
< 10.4.57 | 10.4.57 |
| GHSA-hwvq-2w67-rvxp TYPO3 CMS has Broken Access Control in its Form Framework |
High EPSS 0.25% |
>= 13.0.0, < 13.4.31 | 13.4.31 |
| GHSA-hwvq-2w67-rvxp TYPO3 CMS has Broken Access Control in its Form Framework |
High EPSS 0.25% |
>= 12.0.0, < 12.4.46 | 12.4.46 |
| GHSA-3v8v-4wg6-r7qh TYPO3 CMS: Destructive Actions on File Mount Folders |
High EPSS 0.24% |
< 10.4.57 | 10.4.57 |
| GHSA-3v8v-4wg6-r7qh TYPO3 CMS: Destructive Actions on File Mount Folders |
High EPSS 0.24% |
>= 14.0.0, < 14.3.3 | 14.3.3 |
| GHSA-3v8v-4wg6-r7qh TYPO3 CMS: Destructive Actions on File Mount Folders |
High EPSS 0.24% |
>= 13.0.0, < 13.4.31 | 13.4.31 |
| GHSA-3v8v-4wg6-r7qh TYPO3 CMS: Destructive Actions on File Mount Folders |
High EPSS 0.24% |
>= 12.0.0, < 12.4.46 | 12.4.46 |
| GHSA-3v8v-4wg6-r7qh TYPO3 CMS: Destructive Actions on File Mount Folders |
High EPSS 0.24% |
>= 11.0.0, < 11.5.51 | 11.5.51 |
| GHSA-pjpj-v387-x4vq TYPO3 CMS has Broken Access Control in its Form Framework |
High EPSS 0.24% |
>= 11.0.0, < 11.5.51 | 11.5.51 |
| GHSA-pjpj-v387-x4vq TYPO3 CMS has Broken Access Control in its Form Framework |
High EPSS 0.24% |
< 10.4.57 | 10.4.57 |
| GHSA-pjpj-v387-x4vq TYPO3 CMS has Broken Access Control in its Form Framework |
High EPSS 0.24% |
>= 14.0.0, < 14.3.3 | 14.3.3 |
| GHSA-pjpj-v387-x4vq TYPO3 CMS has Broken Access Control in its Form Framework |
High EPSS 0.24% |
>= 13.0.0, < 13.4.31 | 13.4.31 |
| GHSA-pjpj-v387-x4vq TYPO3 CMS has Broken Access Control in its Form Framework |
High EPSS 0.24% |
>= 12.0.0, < 12.4.46 | 12.4.46 |
| GHSA-7vp9-x248-9vr9 TYPO3 CMS Allows Insecure Deserialization via Mailer File Spool |
High EPSS 0.18% |
>= 11.0.0, < 11.5.49 | 11.5.49 |
| GHSA-7vp9-x248-9vr9 TYPO3 CMS Allows Insecure Deserialization via Mailer File Spool |
High EPSS 0.18% |
>= 10.0.0, < 10.4.55 | 10.4.55 |
| GHSA-7vp9-x248-9vr9 TYPO3 CMS Allows Insecure Deserialization via Mailer File Spool |
High EPSS 0.18% |
>= 14.0.0, < 14.0.2 | 14.0.2 |
| GHSA-7vp9-x248-9vr9 TYPO3 CMS Allows Insecure Deserialization via Mailer File Spool |
High EPSS 0.18% |
>= 13.0.0, < 13.4.23 | 13.4.23 |
| GHSA-7vp9-x248-9vr9 TYPO3 CMS Allows Insecure Deserialization via Mailer File Spool |
High EPSS 0.18% |
>= 12.0.0, < 12.4.41 | 12.4.41 |
| GHSA-cvm2-5f78-g9m8 TYPO3 CMS exposes sensitive information in an error message |
Medium EPSS 0.24% |
>= 13.0.0, < 13.4.18 | 13.4.18 |
| GHSA-cvm2-5f78-g9m8 TYPO3 CMS exposes sensitive information in an error message |
Medium EPSS 0.24% |
>= 11.0.0, < 12.4.37 | 12.4.37 |
| GHSA-cvm2-5f78-g9m8 TYPO3 CMS exposes sensitive information in an error message |
Medium EPSS 0.24% |
>= 12.0.0, < 12.4.37 | 12.4.37 |
| GHSA-cvm2-5f78-g9m8 TYPO3 CMS exposes sensitive information in an error message |
Medium EPSS 0.24% |
>= 9.0.0, < 12.4.37 | 12.4.37 |
| GHSA-cvm2-5f78-g9m8 TYPO3 CMS exposes sensitive information in an error message |
Medium EPSS 0.24% |
>= 10.0.0, < 12.4.37 | 12.4.37 |
| GHSA-p5jq-5383-qvc7 TYPO3 CMS uses insufficient entropy when generating passwords |
Medium EPSS 0.19% |
>= 13.0.0, < 13.4.18 | 13.4.18 |
| GHSA-p5jq-5383-qvc7 TYPO3 CMS uses insufficient entropy when generating passwords |
Medium EPSS 0.19% |
>= 12.0.0, < 12.4.37 | 12.4.37 |
| GHSA-72jf-5fg5-3cw3 TYPO3 CMS has an open‑redirect vulnerability |
Medium EPSS 0.18% |
>= 12.0.0, < 12.4.37 | 12.4.37 |
| GHSA-72jf-5fg5-3cw3 TYPO3 CMS has an open‑redirect vulnerability |
Medium EPSS 0.18% |
>= 13.0.0, < 13.4.18 | 13.4.18 |
| GHSA-72jf-5fg5-3cw3 TYPO3 CMS has an open‑redirect vulnerability |
Medium EPSS 0.18% |
>= 11.0.0, < 12.4.37 | 12.4.37 |
| GHSA-72jf-5fg5-3cw3 TYPO3 CMS has an open‑redirect vulnerability |
Medium EPSS 0.18% |
>= 10.0.0, < 12.4.37 | 12.4.37 |
| GHSA-72jf-5fg5-3cw3 TYPO3 CMS has an open‑redirect vulnerability |
Medium EPSS 0.18% |
>= 9.0.0, < 12.4.37 | 12.4.37 |
| GHSA-6frx-j292-c844 TYPO3 Allows Privilege Escalation to System Maintainer |
High EPSS 0.46% |
>= 13.0.0, < 13.4.12 | 13.4.12 |
| GHSA-6frx-j292-c844 TYPO3 Allows Privilege Escalation to System Maintainer |
High EPSS 0.46% |
>= 12.0.0, < 12.4.31 | 12.4.31 |
| GHSA-6frx-j292-c844 TYPO3 Allows Privilege Escalation to System Maintainer |
High EPSS 0.46% |
>= 10.4.0, < 10.4.50 | 10.4.50 |
| GHSA-6frx-j292-c844 TYPO3 Allows Privilege Escalation to System Maintainer |
High EPSS 0.46% |
>= 11.0.0, < 11.5.44 | 11.5.44 |
| GHSA-9hq9-cr36-4wpj TYPO3 Allows Unrestricted File Upload in File Abstraction Layer |
Medium EPSS 0.18% |
>= 9.0.0, < 9.5.51 | 9.5.51 |
| GHSA-9hq9-cr36-4wpj TYPO3 Allows Unrestricted File Upload in File Abstraction Layer |
Medium EPSS 0.18% |
>= 13.0.0, < 13.4.12 | 13.4.12 |
| GHSA-9hq9-cr36-4wpj TYPO3 Allows Unrestricted File Upload in File Abstraction Layer |
Medium EPSS 0.18% |
>= 12.0.0, < 12.4.31 | 12.4.31 |
| GHSA-9hq9-cr36-4wpj TYPO3 Allows Unrestricted File Upload in File Abstraction Layer |
Medium EPSS 0.18% |
>= 11.0.0, < 11.5.44 | 11.5.44 |
| GHSA-9hq9-cr36-4wpj TYPO3 Allows Unrestricted File Upload in File Abstraction Layer |
Medium EPSS 0.18% |
>= 10.0.0, < 10.4.50 | 10.4.50 |
| GHSA-3jrg-97f3-rqh9 TYPO3 Unverified Password Change for Backend Users |
Low EPSS 0.27% |
>= 10.0.0, < 10.4.50 | 10.4.50 |
| GHSA-3jrg-97f3-rqh9 TYPO3 Unverified Password Change for Backend Users |
Low EPSS 0.27% |
>= 11.0.0, < 11.5.44 | 11.5.44 |
| GHSA-3jrg-97f3-rqh9 TYPO3 Unverified Password Change for Backend Users |
Low EPSS 0.27% |
>= 9.0.0, < 9.5.51 | 9.5.51 |
| GHSA-3jrg-97f3-rqh9 TYPO3 Unverified Password Change for Backend Users |
Low EPSS 0.27% |
>= 12.0.0, < 12.4.31 | 12.4.31 |
| GHSA-3jrg-97f3-rqh9 TYPO3 Unverified Password Change for Backend Users |
Low EPSS 0.27% |
>= 13.0.0, < 13.4.12 | 13.4.12 |
| GHSA-x8pv-fgxp-8v3x TYPO3 Allows Information Disclosure via DBAL Restriction Handling |
Medium EPSS 0.30% |
>= 9.0.0, < 9.5.51 | 9.5.51 |
| GHSA-x8pv-fgxp-8v3x TYPO3 Allows Information Disclosure via DBAL Restriction Handling |
Medium EPSS 0.30% |
>= 12.0.0, < 12.4.31 | 12.4.31 |
| GHSA-x8pv-fgxp-8v3x TYPO3 Allows Information Disclosure via DBAL Restriction Handling |
Medium EPSS 0.30% |
>= 11.0.0, < 11.5.44 | 11.5.44 |
| GHSA-x8pv-fgxp-8v3x TYPO3 Allows Information Disclosure via DBAL Restriction Handling |
Medium EPSS 0.30% |
>= 10.0.0, < 10.4.50 | 10.4.50 |
| GHSA-x8pv-fgxp-8v3x TYPO3 Allows Information Disclosure via DBAL Restriction Handling |
Medium EPSS 0.30% |
>= 13.0.0, < 13.4.12 | 13.4.12 |
| GHSA-2fx5-pggv-6jjr TYPO3 Potential Open Redirect via Parsing Differences |
Medium EPSS 0.25% |
>= 13.0.0, < 13.4.3 | 13.4.3 |
| GHSA-2fx5-pggv-6jjr TYPO3 Potential Open Redirect via Parsing Differences |
Medium EPSS 0.25% |
>= 12.0.0, < 12.4.25 | 12.4.25 |
| GHSA-2fx5-pggv-6jjr TYPO3 Potential Open Redirect via Parsing Differences |
Medium EPSS 0.25% |
>= 11.0.0, < 11.5.42 | 11.5.42 |
| GHSA-2fx5-pggv-6jjr TYPO3 Potential Open Redirect via Parsing Differences |
Medium EPSS 0.25% |
>= 10.0.0, < 10.4.48 | 10.4.48 |
| GHSA-2fx5-pggv-6jjr TYPO3 Potential Open Redirect via Parsing Differences |
Medium EPSS 0.25% |
>= 9.0.0, < 9.5.49 | 9.5.49 |
| GHSA-5h5v-m596-r6rf TYPO3 Possible Insecure Deserialization in Extbase Request Handling |
High | >= 8.0.0, < 8.7.30 | 8.7.30 |
| GHSA-5h5v-m596-r6rf TYPO3 Possible Insecure Deserialization in Extbase Request Handling |
High | >= 9.0.0, < 9.5.12 | 9.5.12 |
| GHSA-6xwf-7rfm-4gwc TYPO3 Cross-Site Scripting in Filelist Module |
Medium | >= 10.0.0, < 10.2.1 | 10.2.1 |
| GHSA-6xwf-7rfm-4gwc TYPO3 Cross-Site Scripting in Filelist Module |
Medium | >= 9.0.0, < 9.5.12 | 9.5.12 |
| GHSA-6xwf-7rfm-4gwc TYPO3 Cross-Site Scripting in Filelist Module |
Medium | >= 8.0.0, < 8.7.30 | 8.7.30 |
| GHSA-4ppr-jw47-9qm5 TYPO3 Cross-Site Scripting in Link Handling |
Medium | >= 10.0.0, < 10.2.1 | 10.2.1 |
| GHSA-4ppr-jw47-9qm5 TYPO3 Cross-Site Scripting in Link Handling |
Medium | >= 8.0.0, < 8.7.30 | 8.7.30 |
| GHSA-4ppr-jw47-9qm5 TYPO3 Cross-Site Scripting in Link Handling |
Medium | >= 9.0.0, < 9.5.12 | 9.5.12 |
| GHSA-95qm-3xp7-vfj5 TYPO3 Cross-Site Scripting in Form Framework validation handling |
Medium | >= 9.0.0, < 9.5.12 | 9.5.12 |
| GHSA-95qm-3xp7-vfj5 TYPO3 Cross-Site Scripting in Form Framework validation handling |
Medium | >= 10.0.0, < 10.2.1 | 10.2.1 |
| GHSA-95qm-3xp7-vfj5 TYPO3 Cross-Site Scripting in Form Framework validation handling |
Medium | >= 8.0.0, < 8.7.30 | 8.7.30 |
| GHSA-x428-565f-8xj2 TYPO3 Arbitrary Code Execution and Cross-Site Scripting in Backend API |
High | >= 8.0.0, < 8.7.27 | 8.7.27 |
| GHSA-x428-565f-8xj2 TYPO3 Arbitrary Code Execution and Cross-Site Scripting in Backend API |
High | >= 9.0.0, < 9.5.8 | 9.5.8 |
| GHSA-g776-759r-pf6x TYPO3 Broken Access Control in Import Module |
Medium | >= 9.3.0, < 9.5.8 | 9.5.8 |
| GHSA-82vp-jr39-4j2j TYPO3 Security Misconfiguration in Frontend Session Handling |
High | >= 9.0.0, < 9.5.8 | 9.5.8 |
| GHSA-82vp-jr39-4j2j TYPO3 Security Misconfiguration in Frontend Session Handling |
High | >= 8.0.0, < 8.7.27 | 8.7.27 |
| GHSA-rv8r-8mh5-5376 TYPO3 Information Disclosure in Backend User Interface |
Medium | >= 8.0.0, < 8.7.27 | 8.7.27 |
| GHSA-rv8r-8mh5-5376 TYPO3 Information Disclosure in Backend User Interface |
Medium | >= 9.0.0, < 9.5.8 | 9.5.8 |
| GHSA-wj85-rg5g-v8jm TYPO3 Information Disclosure in User Authentication |
Medium | >= 9.0.0, < 9.5.6 | 9.5.6 |
| GHSA-p2h4-7fp3-cmh8 TYPO3 Disclosure of Information about Installed Extensions |
Medium | >= 8.0.0, < 8.7.23 | 8.7.23 |
| GHSA-p2h4-7fp3-cmh8 TYPO3 Disclosure of Information about Installed Extensions |
Medium | >= 9.0.0, < 9.5.4 | 9.5.4 |
| GHSA-wvvp-jwf5-qcpc TYPO3 Information Disclosure in Page Tree |
Medium | >= 9.0.0, < 9.5.6 | 9.5.6 |
| GHSA-xmgr-jff3-fcfv TYPO3 Security Misconfiguration in User Session Handling |
Medium | >= 9.0.0, < 9.5.6 | 9.5.6 |
| GHSA-xmgr-jff3-fcfv TYPO3 Security Misconfiguration in User Session Handling |
Medium | >= 8.0.0, < 8.7.25 | 8.7.25 |
| GHSA-4459-qrcc-vfcf TYPO3 Cross-Site Scripting in Form Framework |
Medium | >= 9.0.0, < 9.5.4 | 9.5.4 |
| GHSA-4459-qrcc-vfcf TYPO3 Cross-Site Scripting in Form Framework |
Medium | >= 8.5.0, < 8.7.23 | 8.7.23 |
| GHSA-76r3-m635-p3vc TYPO3 Cross-Site Scripting in Language Pack Handling |
Medium | >= 9.2.0, < 9.5.4 | 9.5.4 |
| GHSA-f9hr-7cfq-mjg2 TYPO3 Arbitrary Code Execution via File List Module |
High | >= 9.0.0, < 9.5.4 | 9.5.4 |
| GHSA-f9hr-7cfq-mjg2 TYPO3 Arbitrary Code Execution via File List Module |
High | >= 8.0.0, < 8.7.23 | 8.7.23 |
| GHSA-9rx9-7fmh-gj3g TYPO3 Broken Access Control in Localization Handling |
Medium | >= 8.0.0, < 8.7.23 | 8.7.23 |
| GHSA-rxc9-f2x6-qh4w TYPO3 Security Misconfiguration for Backend User Accounts |
High | >= 8.0.0, < 8.7.23 | 8.7.23 |
| GHSA-rxc9-f2x6-qh4w TYPO3 Security Misconfiguration for Backend User Accounts |
High | >= 9.0.0, < 9.5.4 | 9.5.4 |
| GHSA-hjx5-v9xg-7h25 TYPO3 Denial of Service in Frontend Record Registration |
High | >= 8.0.0, < 8.7.21 | 8.7.21 |
| GHSA-hjx5-v9xg-7h25 TYPO3 Denial of Service in Frontend Record Registration |
High | >= 7.0.0, < 7.6.32 | 7.6.32 |
| GHSA-29m4-mx89-3mjg TYPO3 Denial of Service in Online Media Asset Handling |
Medium | >= 7.0.0, < 7.6.32 | 7.6.32 |
| GHSA-29m4-mx89-3mjg TYPO3 Denial of Service in Online Media Asset Handling |
Medium | >= 8.0.0, < 8.7.21 | 8.7.21 |
| GHSA-29m4-mx89-3mjg TYPO3 Denial of Service in Online Media Asset Handling |
Medium | >= 9.0.0, < 9.5.2 | 9.5.2 |
| GHSA-66c2-7g4p-wx4p TYPO3 Information Disclosure in Install Tool |
Medium | >= 8.0.0, < 8.7.21 | 8.7.21 |
| GHSA-66c2-7g4p-wx4p TYPO3 Information Disclosure in Install Tool |
Medium | >= 9.0.0, < 9.5.2 | 9.5.2 |
| GHSA-66c2-7g4p-wx4p TYPO3 Information Disclosure in Install Tool |
Medium | >= 7.0.0, < 7.6.32 | 7.6.32 |
| GHSA-ppvg-hw62-6ph9 TYPO3 Security Misconfiguration in Install Tool Cookie |
High | >= 7.0.0, < 7.6.32 | 7.6.32 |
| GHSA-ppvg-hw62-6ph9 TYPO3 Security Misconfiguration in Install Tool Cookie |
High | >= 9.0.0, < 9.5.2 | 9.5.2 |
| GHSA-ppvg-hw62-6ph9 TYPO3 Security Misconfiguration in Install Tool Cookie |
High | >= 8.0.0, < 8.7.21 | 8.7.21 |
| GHSA-8c25-vj2w-p72j TYPO3 Cross-Site Scripting in Frontend User Login |
Medium | >= 9.0.0, < 9.5.2 | 9.5.2 |
| GHSA-8c25-vj2w-p72j TYPO3 Cross-Site Scripting in Frontend User Login |
Medium | >= 8.0.0, < 8.7.21 | 8.7.21 |
| GHSA-8c25-vj2w-p72j TYPO3 Cross-Site Scripting in Frontend User Login |
Medium | >= 7.1.0, < 7.6.32 | 7.6.32 |
| GHSA-g4c9-qfvw-fmr4 TYPO3 Cross-Site Scripting in Backend Modal Component |
Medium | >= 9.0.0, < 9.5.2 | 9.5.2 |
| GHSA-g4c9-qfvw-fmr4 TYPO3 Cross-Site Scripting in Backend Modal Component |
Medium | >= 7.1.0, < 7.6.32 | 7.6.32 |
| GHSA-g4c9-qfvw-fmr4 TYPO3 Cross-Site Scripting in Backend Modal Component |
Medium | >= 8.0.0, < 8.7.21 | 8.7.21 |
| GHSA-96jg-pmc4-cx39 TYPO3 CMS Insecure Deserialization |
High | >= 9.0.0, < 9.3.1 | 9.3.1 |
| GHSA-96jg-pmc4-cx39 TYPO3 CMS Insecure Deserialization |
High | >= 8.5.0, < 8.7.17 | 8.7.17 |
| GHSA-wg8h-gxf4-g4gh TYPO3 Cross-Site Scripting in Online Media Asset Rendering |
Medium | >= 9.0.0, < 9.5.2 | 9.5.2 |
| GHSA-wg8h-gxf4-g4gh TYPO3 Cross-Site Scripting in Online Media Asset Rendering |
Medium | >= 8.0.0, < 8.7.21 | 8.7.21 |
| GHSA-45wj-jv2h-jwrf TYPO3 CMS Privilege Escalation and SQL Injection |
High | >= 8.5.0, < 8.7.17 | 8.7.17 |
| GHSA-45wj-jv2h-jwrf TYPO3 CMS Privilege Escalation and SQL Injection |
High | >= 9.0.0, < 9.3.2 | 9.3.2 |
| GHSA-cc97-g92w-jm65 TYPO3 CMS Insecure Deserialization & Arbitrary Code Execution |
Critical | >= 8.0.0, < 8.7.17 | 8.7.17 |
| GHSA-cc97-g92w-jm65 TYPO3 CMS Insecure Deserialization & Arbitrary Code Execution |
Critical | >= 7.0.0, < 7.6.30 | 7.6.30 |
| GHSA-cc97-g92w-jm65 TYPO3 CMS Insecure Deserialization & Arbitrary Code Execution |
Critical | >= 9.0.0, < 9.3.2 | 9.3.2 |
| GHSA-x4rj-f7m6-42c3 TYPO3 CMS Authentication Bypass vulnerability |
High | >= 8.0.0, < 8.7.17 | 8.7.17 |
| GHSA-x4rj-f7m6-42c3 TYPO3 CMS Authentication Bypass vulnerability |
High | >= 7.0.0, < 7.6.30 | 7.6.30 |
| GHSA-x4rj-f7m6-42c3 TYPO3 CMS Authentication Bypass vulnerability |
High | >= 9.0.0, < 9.3.2 | 9.3.2 |
| GHSA-36g8-62qv-5957 TYPO3 vulnerable to an Uncontrolled Resource Consumption in the ShowImageController |
Medium EPSS 0.47% |
>= 10.0.0, < 10.4.45 | 10.4.45 |
| GHSA-36g8-62qv-5957 TYPO3 vulnerable to an Uncontrolled Resource Consumption in the ShowImageController |
Medium EPSS 0.47% |
>= 12.0.0, < 12.4.15 | 12.4.15 |
| GHSA-36g8-62qv-5957 TYPO3 vulnerable to an Uncontrolled Resource Consumption in the ShowImageController |
Medium EPSS 0.47% |
>= 13.0.0, < 13.1.1 | 13.1.1 |
| GHSA-36g8-62qv-5957 TYPO3 vulnerable to an Uncontrolled Resource Consumption in the ShowImageController |
Medium EPSS 0.47% |
>= 9.0.0, < 9.5.48 | 9.5.48 |
| GHSA-36g8-62qv-5957 TYPO3 vulnerable to an Uncontrolled Resource Consumption in the ShowImageController |
Medium EPSS 0.47% |
>= 11.0.0, < 11.5.37 | 11.5.37 |
| GHSA-hw6c-6gwq-3m3m TYPO3 vulnerable to Cross-Site Scripting in the ShowImageController |
Medium EPSS 0.50% |
>= 13.0.0, < 13.1.1 | 13.1.1 |
| GHSA-hw6c-6gwq-3m3m TYPO3 vulnerable to Cross-Site Scripting in the ShowImageController |
Medium EPSS 0.50% |
>= 9.0.0, < 9.5.48 | 9.5.48 |
| GHSA-hw6c-6gwq-3m3m TYPO3 vulnerable to Cross-Site Scripting in the ShowImageController |
Medium EPSS 0.50% |
>= 10.0.0, < 10.4.45 | 10.4.45 |
| GHSA-hw6c-6gwq-3m3m TYPO3 vulnerable to Cross-Site Scripting in the ShowImageController |
Medium EPSS 0.50% |
>= 11.0.0, < 11.5.37 | 11.5.37 |
| GHSA-hw6c-6gwq-3m3m TYPO3 vulnerable to Cross-Site Scripting in the ShowImageController |
Medium EPSS 0.50% |
>= 12.0.0, < 12.4.15 | 12.4.15 |
| GHSA-v6mw-h7w6-59w3 TYPO3 vulnerable to Cross-Site Scripting in the Form Manager Module |
Medium EPSS 0.50% |
>= 9.0.0, < 9.5.48 | 9.5.48 |
| GHSA-v6mw-h7w6-59w3 TYPO3 vulnerable to Cross-Site Scripting in the Form Manager Module |
Medium EPSS 0.50% |
>= 13.0.0, < 13.1.1 | 13.1.1 |
| GHSA-v6mw-h7w6-59w3 TYPO3 vulnerable to Cross-Site Scripting in the Form Manager Module |
Medium EPSS 0.50% |
>= 12.0.0, < 12.4.15 | 12.4.15 |
| GHSA-v6mw-h7w6-59w3 TYPO3 vulnerable to Cross-Site Scripting in the Form Manager Module |
Medium EPSS 0.50% |
>= 11.0.0, < 11.5.37 | 11.5.37 |
| GHSA-v6mw-h7w6-59w3 TYPO3 vulnerable to Cross-Site Scripting in the Form Manager Module |
Medium EPSS 0.50% |
>= 10.0.0, < 10.4.45 | 10.4.45 |
| GHSA-xjwx-78x7-q6jc TYPO3 vulnerable to an HTML Injection in the History Module |
Medium EPSS 0.59% |
>= 13.0.0, < 13.1.1 | 13.1.1 |
| GHSA-5w2h-59j3-8x5w TYPO3 Install Tool vulnerable to Code Execution |
High EPSS 2.02% |
>= 10.0.0, < 10.4.43 | 10.4.43 |
| GHSA-5w2h-59j3-8x5w TYPO3 Install Tool vulnerable to Code Execution |
High EPSS 2.02% |
>= 8.0.0, < 8.7.57 | 8.7.57 |
| GHSA-5w2h-59j3-8x5w TYPO3 Install Tool vulnerable to Code Execution |
High EPSS 2.02% |
>= 9.0.0, < 9.5.46 | 9.5.46 |
| GHSA-5w2h-59j3-8x5w TYPO3 Install Tool vulnerable to Code Execution |
High EPSS 2.02% |
>= 11.0.0, < 11.5.35 | 11.5.35 |
| GHSA-5w2h-59j3-8x5w TYPO3 Install Tool vulnerable to Code Execution |
High EPSS 2.02% |
>= 12.0.0, < 12.4.11 | 12.4.11 |
| GHSA-5w2h-59j3-8x5w TYPO3 Install Tool vulnerable to Code Execution |
High EPSS 2.02% |
>= 13.0.0, < 13.0.1 | 13.0.1 |
| GHSA-rj3x-wvc6-5j66 TYPO3 vulnerable to Improper Access Control Persisting File Abstraction Layer Entities via Data Handler |
High EPSS 0.50% |
>= 11.0.0, < 11.5.35 | 11.5.35 |
| GHSA-rj3x-wvc6-5j66 TYPO3 vulnerable to Improper Access Control Persisting File Abstraction Layer Entities via Data Handler |
High EPSS 0.50% |
>= 10.0.0, < 10.4.43 | 10.4.43 |
| GHSA-rj3x-wvc6-5j66 TYPO3 vulnerable to Improper Access Control Persisting File Abstraction Layer Entities via Data Handler |
High EPSS 0.50% |
>= 9.0.0, < 9.5.46 | 9.5.46 |
| GHSA-rj3x-wvc6-5j66 TYPO3 vulnerable to Improper Access Control Persisting File Abstraction Layer Entities via Data Handler |
High EPSS 0.50% |
>= 8.0.0, < 8.7.57 | 8.7.57 |
| GHSA-rj3x-wvc6-5j66 TYPO3 vulnerable to Improper Access Control Persisting File Abstraction Layer Entities via Data Handler |
High EPSS 0.50% |
>= 13.0.0, < 13.0.1 | 13.0.1 |
| GHSA-rj3x-wvc6-5j66 TYPO3 vulnerable to Improper Access Control Persisting File Abstraction Layer Entities via Data Handler |
High EPSS 0.50% |
>= 12.0.0, < 12.4.11 | 12.4.11 |
| GHSA-wf85-8hx9-gj7c TYPO3 vulnerable to Improper Access Control of Resources Referenced by t3:// URI Scheme |
Medium EPSS 0.55% |
>= 11.0.0, < 11.5.35 | 11.5.35 |
| GHSA-wf85-8hx9-gj7c TYPO3 vulnerable to Improper Access Control of Resources Referenced by t3:// URI Scheme |
Medium EPSS 0.55% |
>= 10.0.0, < 10.4.43 | 10.4.43 |
| GHSA-wf85-8hx9-gj7c TYPO3 vulnerable to Improper Access Control of Resources Referenced by t3:// URI Scheme |
Medium EPSS 0.55% |
>= 9.0.0, < 9.5.46 | 9.5.46 |
| GHSA-wf85-8hx9-gj7c TYPO3 vulnerable to Improper Access Control of Resources Referenced by t3:// URI Scheme |
Medium EPSS 0.55% |
>= 13.0.0, < 13.0.1 | 13.0.1 |
| GHSA-wf85-8hx9-gj7c TYPO3 vulnerable to Improper Access Control of Resources Referenced by t3:// URI Scheme |
Medium EPSS 0.55% |
>= 8.0.0, < 8.7.57 | 8.7.57 |
| GHSA-wf85-8hx9-gj7c TYPO3 vulnerable to Improper Access Control of Resources Referenced by t3:// URI Scheme |
Medium EPSS 0.55% |
>= 12.0.0, < 12.4.11 | 12.4.11 |
| GHSA-h47m-3f78-qp9g TYPO3 Install Tool vulnerable to Information Disclosure of Encryption Key |
Medium EPSS 0.36% |
>= 8.0.0, < 8.7.57 | 8.7.57 |
| GHSA-h47m-3f78-qp9g TYPO3 Install Tool vulnerable to Information Disclosure of Encryption Key |
Medium EPSS 0.36% |
>= 12.0.0, < 12.4.11 | 12.4.11 |
| GHSA-h47m-3f78-qp9g TYPO3 Install Tool vulnerable to Information Disclosure of Encryption Key |
Medium EPSS 0.36% |
>= 10.0.0, < 10.4.43 | 10.4.43 |
| GHSA-h47m-3f78-qp9g TYPO3 Install Tool vulnerable to Information Disclosure of Encryption Key |
Medium EPSS 0.36% |
>= 13.0.0, < 13.0.1 | 13.0.1 |
| GHSA-h47m-3f78-qp9g TYPO3 Install Tool vulnerable to Information Disclosure of Encryption Key |
Medium EPSS 0.36% |
>= 9.0.0, < 9.5.46 | 9.5.46 |
| GHSA-h47m-3f78-qp9g TYPO3 Install Tool vulnerable to Information Disclosure of Encryption Key |
Medium EPSS 0.36% |
>= 11.0.0, < 11.5.35 | 11.5.35 |
| GHSA-38r2-5695-334w TYPO3 Backend Forms vulnerable to Information Disclosure of Hashed Passwords |
Medium EPSS 0.56% |
>= 11.0.0, < 11.5.35 | 11.5.35 |
| GHSA-38r2-5695-334w TYPO3 Backend Forms vulnerable to Information Disclosure of Hashed Passwords |
Medium EPSS 0.56% |
>= 13.0.0, < 13.0.1 | 13.0.1 |
| GHSA-38r2-5695-334w TYPO3 Backend Forms vulnerable to Information Disclosure of Hashed Passwords |
Medium EPSS 0.56% |
>= 12.0.0, < 12.4.11 | 12.4.11 |
| GHSA-38r2-5695-334w TYPO3 Backend Forms vulnerable to Information Disclosure of Hashed Passwords |
Medium EPSS 0.56% |
>= 10.0.0, < 10.4.43 | 10.4.43 |
| GHSA-38r2-5695-334w TYPO3 Backend Forms vulnerable to Information Disclosure of Hashed Passwords |
Medium EPSS 0.56% |
>= 9.0.0, < 9.5.46 | 9.5.46 |
| GHSA-38r2-5695-334w TYPO3 Backend Forms vulnerable to Information Disclosure of Hashed Passwords |
Medium EPSS 0.56% |
>= 8.0.0, < 8.7.57 | 8.7.57 |
| GHSA-3gjc-mp82-fj4q Duplicate Advisory: TYPO3 Arbitrary File Read via Directory Traversal Withdrawn |
Medium | No fix yet | |
| GHSA-w6x2-jg8h-p6mp Path Traversal in TYPO3 File Abstraction Layer Storages |
Medium EPSS 1.16% |
>= 10.0.0, < 10.4.43 | 10.4.43 |
| GHSA-w6x2-jg8h-p6mp Path Traversal in TYPO3 File Abstraction Layer Storages |
Medium EPSS 1.16% |
>= 11.0.0, < 11.5.35 | 11.5.35 |
| GHSA-w6x2-jg8h-p6mp Path Traversal in TYPO3 File Abstraction Layer Storages |
Medium EPSS 1.16% |
>= 9.0.0, < 9.5.46 | 9.5.46 |
| GHSA-w6x2-jg8h-p6mp Path Traversal in TYPO3 File Abstraction Layer Storages |
Medium EPSS 1.16% |
>= 13.0.0, < 13.0.1 | 13.0.1 |
| GHSA-w6x2-jg8h-p6mp Path Traversal in TYPO3 File Abstraction Layer Storages |
Medium EPSS 1.16% |
>= 12.0.0, < 12.4.11 | 12.4.11 |
| GHSA-w6x2-jg8h-p6mp Path Traversal in TYPO3 File Abstraction Layer Storages |
Medium EPSS 1.16% |
>= 8.0.0, < 8.7.57 | 8.7.57 |
| GHSA-3vmm-7h4j-69rm TYPO3 vulnerable to Weak Authentication in Session Handling |
Medium EPSS 0.56% |
>= 9.0.0, < 9.5.44 | 9.5.44 |
| GHSA-3vmm-7h4j-69rm TYPO3 vulnerable to Weak Authentication in Session Handling |
Medium EPSS 0.56% |
>= 8.0.0, < 8.7.55 | 8.7.55 |
| GHSA-3vmm-7h4j-69rm TYPO3 vulnerable to Weak Authentication in Session Handling |
Medium EPSS 0.56% |
>= 12.0.0, < 12.4.8 | 12.4.8 |
| GHSA-3vmm-7h4j-69rm TYPO3 vulnerable to Weak Authentication in Session Handling |
Medium EPSS 0.56% |
>= 11.0.0, < 11.5.33 | 11.5.33 |
| GHSA-3vmm-7h4j-69rm TYPO3 vulnerable to Weak Authentication in Session Handling |
Medium EPSS 0.56% |
>= 10.0.0, < 10.4.41 | 10.4.41 |
| GHSA-jq6g-4v5m-wm9r Information Disclosure due to Out-of-scope Site Resolution |
Medium EPSS 1.07% |
>= 10.0.0, < 10.4.39 | 10.4.39 |
| GHSA-jq6g-4v5m-wm9r Information Disclosure due to Out-of-scope Site Resolution |
Medium EPSS 1.07% |
>= 11.0.0, < 11.5.30 | 11.5.30 |
| GHSA-jq6g-4v5m-wm9r Information Disclosure due to Out-of-scope Site Resolution |
Medium EPSS 1.07% |
>= 12.0.0, < 12.4.4 | 12.4.4 |
| GHSA-jq6g-4v5m-wm9r Information Disclosure due to Out-of-scope Site Resolution |
Medium EPSS 1.07% |
>= 9.4.0, < 9.5.42 | 9.5.42 |
| GHSA-r4f8-f93x-5qh3 TYPO3 is vulnerable to Cross-Site Scripting via frontend rendering |
Medium EPSS 0.83% |
>= 11.0.0, < 11.5.23 | 11.5.23 |
| GHSA-r4f8-f93x-5qh3 TYPO3 is vulnerable to Cross-Site Scripting via frontend rendering |
Medium EPSS 0.83% |
>= 8.7.0, < 8.7.51 | 8.7.51 |
| GHSA-r4f8-f93x-5qh3 TYPO3 is vulnerable to Cross-Site Scripting via frontend rendering |
Medium EPSS 0.83% |
>= 10.0.0, < 10.4.36 | 10.4.36 |
| GHSA-r4f8-f93x-5qh3 TYPO3 is vulnerable to Cross-Site Scripting via frontend rendering |
Medium EPSS 0.83% |
>= 12.0.0, < 12.2.0 | 12.2.0 |
| GHSA-r4f8-f93x-5qh3 TYPO3 is vulnerable to Cross-Site Scripting via frontend rendering |
Medium EPSS 0.83% |
>= 9.0.0, < 9.5.40 | 9.5.40 |
| GHSA-8w3p-qh3x-6gjr TYPO3 CMS vulnerable to Sensitive Information Disclosure via YAML Placeholder Expressions in Site Configuration |
Medium EPSS 0.55% |
>= 11.0.0, < 11.5.20 | 11.5.20 |
| GHSA-8w3p-qh3x-6gjr TYPO3 CMS vulnerable to Sensitive Information Disclosure via YAML Placeholder Expressions in Site Configuration |
Medium EPSS 0.55% |
>= 10.0.0, < 10.4.33 | 10.4.33 |
| GHSA-8w3p-qh3x-6gjr TYPO3 CMS vulnerable to Sensitive Information Disclosure via YAML Placeholder Expressions in Site Configuration |
Medium EPSS 0.55% |
>= 9.0.0, < 9.5.38 | 9.5.38 |
| GHSA-8w3p-qh3x-6gjr TYPO3 CMS vulnerable to Sensitive Information Disclosure via YAML Placeholder Expressions in Site Configuration |
Medium EPSS 0.55% |
>= 12.0.0, < 12.1.1 | 12.1.1 |
| GHSA-c5wx-6c2c-f7rm TYPO3 CMS vulnerable to Arbitrary Code Execution via Form Framework |
High EPSS 0.84% |
>= 10.0.0, < 10.4.33 | 10.4.33 |
| GHSA-c5wx-6c2c-f7rm TYPO3 CMS vulnerable to Arbitrary Code Execution via Form Framework |
High EPSS 0.84% |
>= 11.0.0, < 11.5.20 | 11.5.20 |
| GHSA-c5wx-6c2c-f7rm TYPO3 CMS vulnerable to Arbitrary Code Execution via Form Framework |
High EPSS 0.84% |
>= 12.0.0, < 12.1.1 | 12.1.1 |
| GHSA-c5wx-6c2c-f7rm TYPO3 CMS vulnerable to Arbitrary Code Execution via Form Framework |
High EPSS 0.84% |
>= 8.0.0, < 8.7.49 | 8.7.49 |
| GHSA-c5wx-6c2c-f7rm TYPO3 CMS vulnerable to Arbitrary Code Execution via Form Framework |
High EPSS 0.84% |
>= 9.0.0, < 9.5.38 | 9.5.38 |
| GHSA-mgj2-q8wp-29rr TYPO3 CMS vulnerable to Insufficient Session Expiration after Password Reset |
Medium EPSS 0.43% |
>= 12.0.0, < 12.1.1 | 12.1.1 |
| GHSA-mgj2-q8wp-29rr TYPO3 CMS vulnerable to Insufficient Session Expiration after Password Reset |
Medium EPSS 0.43% |
>= 10.0.0, < 10.4.33 | 10.4.33 |
| GHSA-mgj2-q8wp-29rr TYPO3 CMS vulnerable to Insufficient Session Expiration after Password Reset |
Medium EPSS 0.43% |
>= 11.0.0, < 11.5.20 | 11.5.20 |
| GHSA-jfp7-79g7-89rf TYPO3 CMS vulnerable to Weak Authentication in Frontend Login |
Medium EPSS 0.51% |
>= 11.0.0, < 11.5.20 | 11.5.20 |
| GHSA-jfp7-79g7-89rf TYPO3 CMS vulnerable to Weak Authentication in Frontend Login |
Medium EPSS 0.51% |
>= 12.0.0, < 12.1.1 | 12.1.1 |
| GHSA-jfp7-79g7-89rf TYPO3 CMS vulnerable to Weak Authentication in Frontend Login |
Medium EPSS 0.51% |
< 8.7.49 | 8.7.49 |
| GHSA-jfp7-79g7-89rf TYPO3 CMS vulnerable to Weak Authentication in Frontend Login |
Medium EPSS 0.51% |
>= 9.0.0, < 9.5.38 | 9.5.38 |
| GHSA-jfp7-79g7-89rf TYPO3 CMS vulnerable to Weak Authentication in Frontend Login |
Medium EPSS 0.51% |
>= 10.0.0, < 10.4.33 | 10.4.33 |
| GHSA-8c28-5mp7-v24h TYPO3 CMS vulnerable to Denial of Service in Page Error Handling |
Medium EPSS 0.73% |
>= 9.0.0, < 9.5.38 | 9.5.38 |
| GHSA-8c28-5mp7-v24h TYPO3 CMS vulnerable to Denial of Service in Page Error Handling |
Medium EPSS 0.73% |
>= 10.0.0, < 10.4.33 | 10.4.33 |
| GHSA-8c28-5mp7-v24h TYPO3 CMS vulnerable to Denial of Service in Page Error Handling |
Medium EPSS 0.73% |
>= 11.0.0, < 11.5.20 | 11.5.20 |
| GHSA-47m6-46mj-p235 TYPO3 HTML Sanitizer Bypasses Cross-Site Scripting Protection |
Medium EPSS 0.82% |
>= 10.0.0, < 10.4.32 | 10.4.32 |
| GHSA-47m6-46mj-p235 TYPO3 HTML Sanitizer Bypasses Cross-Site Scripting Protection |
Medium EPSS 0.82% |
>= 11.0.0, < 11.5.16 | 11.5.16 |
| GHSA-fffr-7x4x-f98q TYPO3 CMS vulnerable to Denial of Service in Page Error Handling |
Medium EPSS 1.61% |
>= 11.4.0, < 11.5.16 | 11.5.16 |
| GHSA-m392-235j-9r7r TYPO3 CMS vulnerable to User Enumeration via Response Timing |
Medium EPSS 1.26% |
>= 7.0.0, < 7.6.58 | 7.6.58 |
| GHSA-m392-235j-9r7r TYPO3 CMS vulnerable to User Enumeration via Response Timing |
Medium EPSS 1.26% |
>= 10.0.0, < 10.4.32 | 10.4.32 |
| GHSA-m392-235j-9r7r TYPO3 CMS vulnerable to User Enumeration via Response Timing |
Medium EPSS 1.26% |
>= 11.0.0, < 11.5.16 | 11.5.16 |
| GHSA-m392-235j-9r7r TYPO3 CMS vulnerable to User Enumeration via Response Timing |
Medium EPSS 1.26% |
>= 9.0.0, < 9.5.37 | 9.5.37 |
| GHSA-m392-235j-9r7r TYPO3 CMS vulnerable to User Enumeration via Response Timing |
Medium EPSS 1.26% |
>= 8.0.0, < 8.7.48 | 8.7.48 |
| GHSA-5959-4x58-r8c2 TYPO3 CMS missing check for expiration time of password reset token for backend users |
Medium EPSS 0.95% |
>= 11.0.0, < 11.5.16 | 11.5.16 |
| GHSA-5959-4x58-r8c2 TYPO3 CMS missing check for expiration time of password reset token for backend users |
Medium EPSS 0.95% |
>= 10.4.0, < 10.4.32 | 10.4.32 |
| GHSA-9c6w-55cp-5w25 TYPO3 CMS Stored Cross-Site Scripting via FileDumpController |
Medium EPSS 0.93% |
>= 8.0.0, < 8.7.48 | 8.7.48 |
| GHSA-9c6w-55cp-5w25 TYPO3 CMS Stored Cross-Site Scripting via FileDumpController |
Medium EPSS 0.93% |
>= 9.0.0, < 9.5.37 | 9.5.37 |
| GHSA-9c6w-55cp-5w25 TYPO3 CMS Stored Cross-Site Scripting via FileDumpController |
Medium EPSS 0.93% |
>= 11.0.0, < 11.5.16 | 11.5.16 |
| GHSA-9c6w-55cp-5w25 TYPO3 CMS Stored Cross-Site Scripting via FileDumpController |
Medium EPSS 0.93% |
>= 7.0.0, < 7.6.58 | 7.6.58 |
| GHSA-9c6w-55cp-5w25 TYPO3 CMS Stored Cross-Site Scripting via FileDumpController |
Medium EPSS 0.93% |
>= 10.0.0, < 10.4.32 | 10.4.32 |
| GHSA-fv2m-9249-qx85 TYPO3 CMS vulnerable to Cross-Site Scripting in <f:asset.css> view helper |
Medium EPSS 0.93% |
>= 10.3.0, < 10.4.32 | 10.4.32 |
| GHSA-fv2m-9249-qx85 TYPO3 CMS vulnerable to Cross-Site Scripting in <f:asset.css> view helper |
Medium EPSS 0.93% |
>= 11.0.0, < 11.5.16 | 11.5.16 |
| GHSA-gqqf-g5r7-84vf TYPO3 HTML Sanitizer Bypasses Cross-Site Scripting Protection |
Medium | >= 9.0.0, < 9.5.37 | 9.5.37 |
| GHSA-gqqf-g5r7-84vf TYPO3 HTML Sanitizer Bypasses Cross-Site Scripting Protection |
Medium | >= 8.0.0, < 8.7.48 | 8.7.48 |
| GHSA-gqqf-g5r7-84vf TYPO3 HTML Sanitizer Bypasses Cross-Site Scripting Protection |
Medium | >= 7.0.0, < 7.6.58 | 7.6.58 |
| GHSA-gqqf-g5r7-84vf TYPO3 HTML Sanitizer Bypasses Cross-Site Scripting Protection |
Medium | >= 10.0.0, < 10.4.32 | 10.4.32 |
| GHSA-gqqf-g5r7-84vf TYPO3 HTML Sanitizer Bypasses Cross-Site Scripting Protection |
Medium | >= 11.0.0, < 11.5.16 | 11.5.16 |
| GHSA-wwjw-r3gj-39fq Insufficient Session Expiration in TYPO3's Admin Tool |
Medium EPSS 1.26% |
>= 9.0.0, < 9.5.35 | 9.5.35 |
| GHSA-wwjw-r3gj-39fq Insufficient Session Expiration in TYPO3's Admin Tool |
Medium EPSS 1.26% |
>= 11.0.0, < 11.5.11 | 11.5.11 |
| GHSA-wwjw-r3gj-39fq Insufficient Session Expiration in TYPO3's Admin Tool |
Medium EPSS 1.26% |
>= 10.0.0, < 10.4.29 | 10.4.29 |
| GHSA-h4mx-xv96-2jgm Cross-Site Scripting in TYPO3's Frontend Login Mailer |
Medium EPSS 0.77% |
>= 10.0.0, < 10.4.29 | 10.4.29 |
| GHSA-h4mx-xv96-2jgm Cross-Site Scripting in TYPO3's Frontend Login Mailer |
Medium EPSS 0.77% |
>= 9.0.0, < 9.5.35 | 9.5.35 |
| GHSA-h4mx-xv96-2jgm Cross-Site Scripting in TYPO3's Frontend Login Mailer |
Medium EPSS 0.77% |
>= 11.0.0, < 11.5.11 | 11.5.11 |
| GHSA-3r95-23jp-mhvg Cross-Site Scripting in TYPO3's Form Framework |
Medium EPSS 0.77% |
>= 9.0.0, < 9.5.35 | 9.5.35 |
| GHSA-3r95-23jp-mhvg Cross-Site Scripting in TYPO3's Form Framework |
Medium EPSS 0.77% |
>= 11.0.0, < 11.5.11 | 11.5.11 |
| GHSA-3r95-23jp-mhvg Cross-Site Scripting in TYPO3's Form Framework |
Medium EPSS 0.77% |
>= 8.0.0, < 8.7.47 | 8.7.47 |
| GHSA-3r95-23jp-mhvg Cross-Site Scripting in TYPO3's Form Framework |
Medium EPSS 0.77% |
>= 10.0.0, < 10.4.29 | 10.4.29 |
| GHSA-fh99-4pgr-8j99 Insertion of Sensitive Information into Log File in typo3/cms-core |
Medium EPSS 1.13% |
>= 7.0.0, < 7.6.57 | 7.6.57 |
| GHSA-fh99-4pgr-8j99 Insertion of Sensitive Information into Log File in typo3/cms-core |
Medium EPSS 1.13% |
>= 11.0.0, < 11.5.11 | 11.5.11 |
| GHSA-fh99-4pgr-8j99 Insertion of Sensitive Information into Log File in typo3/cms-core |
Medium EPSS 1.13% |
>= 10.0.0, < 10.4.29 | 10.4.29 |
| GHSA-fh99-4pgr-8j99 Insertion of Sensitive Information into Log File in typo3/cms-core |
Medium EPSS 1.13% |
>= 9.0.0, < 9.5.35 | 9.5.35 |
| GHSA-fh99-4pgr-8j99 Insertion of Sensitive Information into Log File in typo3/cms-core |
Medium EPSS 1.13% |
>= 8.0.0, < 8.7.47 | 8.7.47 |
| GHSA-8gmv-9hwg-w89g Information Disclosure via Export Module |
Medium EPSS 0.63% |
>= 7.0.0, < 7.6.57 | 7.6.57 |
| GHSA-8gmv-9hwg-w89g Information Disclosure via Export Module |
Medium EPSS 0.63% |
>= 8.0.0, < 8.7.47 | 8.7.47 |
| GHSA-8gmv-9hwg-w89g Information Disclosure via Export Module |
Medium EPSS 0.63% |
>= 9.0.0, < 9.5.35 | 9.5.35 |
| GHSA-8gmv-9hwg-w89g Information Disclosure via Export Module |
Medium EPSS 0.63% |
>= 10.0.0, < 10.4.29 | 10.4.29 |
| GHSA-8gmv-9hwg-w89g Information Disclosure via Export Module |
Medium EPSS 0.63% |
>= 11.0.0, < 11.5.11 | 11.5.11 |
| GHSA-r6fv-56gp-j3r4 Typo3 Cross-Site Scripting in Link Handling |
Medium EPSS 0.69% |
>= 9.0.0, < 9.5.8 | 9.5.8 |
| GHSA-86hp-xrhj-fhpq TYPO3 Vulnerable to Insecure Deserialization |
High EPSS 1.53% |
>= 8.0.0, < 8.7.27 | 8.7.27 |
| GHSA-86hp-xrhj-fhpq TYPO3 Vulnerable to Insecure Deserialization |
High EPSS 1.53% |
>= 9.0.0, < 9.5.8 | 9.5.8 |
| GHSA-r6fv-56gp-j3r4 Typo3 Cross-Site Scripting in Link Handling |
Medium EPSS 0.69% |
>= 8.0.0, < 8.7.27 | 8.7.27 |
| GHSA-3w4h-r27h-4r2w TYPO3 Image Processing susceptible to Code Execution |
High EPSS 3.92% |
>= 9.0.0, < 9.5.6 | 9.5.6 |
| GHSA-3w4h-r27h-4r2w TYPO3 Image Processing susceptible to Code Execution |
High EPSS 3.92% |
>= 8.0.0, < 8.7.25 | 8.7.25 |
| GHSA-59pj-7mjh-4465 TYPO3 SQL Injection in low-level Query Generator |
Medium EPSS 0.87% |
>= 8.0, < 8.7.30 | 8.7.30 |
| GHSA-59pj-7mjh-4465 TYPO3 SQL Injection in low-level Query Generator |
Medium EPSS 0.87% |
>= 10.0, < 10.2.2 | 10.2.2 |
| GHSA-59pj-7mjh-4465 TYPO3 SQL Injection in low-level Query Generator |
Medium EPSS 0.87% |
>= 9.0, < 9.5.12 | 9.5.12 |
| GHSA-rcgc-4xfc-564v TYPO3 Insecure Deserialization in Query Generator & Query View |
High EPSS 1.27% |
>= 10.0.0, < 10.2.1 | 10.2.1 |
| GHSA-rcgc-4xfc-564v TYPO3 Insecure Deserialization in Query Generator & Query View |
High EPSS 1.27% |
>= 8.0.0, < 8.7.30 | 8.7.30 |
| GHSA-77p4-wfr8-977w TYPO3 Directory Traversal on ZIP extraction |
Medium EPSS 1.45% |
>= 10.0.0, < 10.2.2 | 10.2.2 |
| GHSA-rcgc-4xfc-564v TYPO3 Insecure Deserialization in Query Generator & Query View |
High EPSS 1.27% |
>= 9.0.0, < 9.5.12 | 9.5.12 |
| GHSA-77p4-wfr8-977w TYPO3 Directory Traversal on ZIP extraction |
Medium EPSS 1.45% |
>= 8.0.0, < 8.7.30 | 8.7.30 |
| GHSA-77p4-wfr8-977w TYPO3 Directory Traversal on ZIP extraction |
Medium EPSS 1.45% |
>= 9.0.0, < 9.5.12 | 9.5.12 |
| GHSA-m64j-j252-jxmr TYPO3 SQL injection vulnerability in the Extbase Framework |
High EPSS 3.12% |
>= 4.7.0, < 4.7.9 | 4.7.9 |
| GHSA-m64j-j252-jxmr TYPO3 SQL injection vulnerability in the Extbase Framework |
High EPSS 3.12% |
>= 6.0.0, < 6.0.3 | 6.0.3 |
| GHSA-m64j-j252-jxmr TYPO3 SQL injection vulnerability in the Extbase Framework |
High EPSS 3.12% |
>= 4.5.0, < 4.5.24 | 4.5.24 |
| GHSA-m64j-j252-jxmr TYPO3 SQL injection vulnerability in the Extbase Framework |
High EPSS 3.12% |
>= 4.6.0, < 4.6.17 | 4.6.17 |
| GHSA-7gxq-5qqc-v3fc TYPO3 Open redirect vulnerability in the Access tracking mechanism |
Medium EPSS 2.42% |
>= 4.7.0, < 4.7.9 | 4.7.9 |
| GHSA-7gxq-5qqc-v3fc TYPO3 Open redirect vulnerability in the Access tracking mechanism |
Medium EPSS 2.42% |
>= 4.6.0, < 4.6.17 | 4.6.17 |
| GHSA-7gxq-5qqc-v3fc TYPO3 Open redirect vulnerability in the Access tracking mechanism |
Medium EPSS 2.42% |
>= 6.0.0, < 6.0.3 | 6.0.3 |
| GHSA-7gxq-5qqc-v3fc TYPO3 Open redirect vulnerability in the Access tracking mechanism |
Medium EPSS 2.42% |
>= 4.5.0, < 4.5.24 | 4.5.24 |
| GHSA-r674-mc9p-hvw5 TYPO3 Improper Access Control vulnerability |
Medium EPSS 1.02% |
>= 6.0.0, < 6.0.11 | 6.0.11 |
| GHSA-5fj8-wh3g-qvq2 TYPO3 is vulnerable to Mass Assignment in the Extension table administration library |
Medium EPSS 1.21% |
>= 6.0.0, < 6.0.11 | 6.0.11 |
| GHSA-5fj8-wh3g-qvq2 TYPO3 is vulnerable to Mass Assignment in the Extension table administration library |
Medium EPSS 1.21% |
>= 4.6.0, < 4.7.16 | 4.7.16 |
| GHSA-5fj8-wh3g-qvq2 TYPO3 is vulnerable to Mass Assignment in the Extension table administration library |
Medium EPSS 1.21% |
>= 4.5.0, < 4.5.31 | 4.5.31 |
| GHSA-r674-mc9p-hvw5 TYPO3 Improper Access Control vulnerability |
Medium EPSS 1.02% |
>= 6.1.0, < 6.1.6 | 6.1.6 |
| GHSA-r674-mc9p-hvw5 TYPO3 Improper Access Control vulnerability |
Medium EPSS 1.02% |
>= 4.7.0, < 4.7.16 | 4.7.16 |
| GHSA-r674-mc9p-hvw5 TYPO3 Improper Access Control vulnerability |
Medium EPSS 1.02% |
>= 4.5.0, < 4.5.31 | 4.5.31 |
| GHSA-p9jg-9w87-6rg4 TYPO3 Improper Access Management in the File Abstraction Layer |
Medium EPSS 0.98% |
>= 6.1, < 6.1.4 | 6.1.4 |
| GHSA-p9jg-9w87-6rg4 TYPO3 Improper Access Management in the File Abstraction Layer |
Medium EPSS 0.98% |
>= 6.0, < 6.0.9 | 6.0.9 |
| GHSA-xgc2-q928-27wv TYPO3 Sensitive Information Disclosure via escapeStrForLike method |
Medium EPSS 1.65% |
>= 4.4.0, < 4.4.5 | 4.4.5 |
| GHSA-xgc2-q928-27wv TYPO3 Sensitive Information Disclosure via escapeStrForLike method |
Medium EPSS 1.65% |
>= 4.2.0, < 4.2.16 | 4.2.16 |
| GHSA-xgc2-q928-27wv TYPO3 Sensitive Information Disclosure via escapeStrForLike method |
Medium EPSS 1.65% |
>= 4.3.0, < 4.3.9 | 4.3.9 |
| GHSA-qj69-chjp-g4f5 TYPO3 Cross-site scripting (XSS) vulnerability in the Extbase Framework |
Low EPSS 1.64% |
>= 6.0.0, < 6.0.11 | 6.0.11 |
| GHSA-qj69-chjp-g4f5 TYPO3 Cross-site scripting (XSS) vulnerability in the Extbase Framework |
Low EPSS 1.64% |
>= 4.5.0, < 4.5.31 | 4.5.31 |
| GHSA-qj69-chjp-g4f5 TYPO3 Cross-site scripting (XSS) vulnerability in the Extbase Framework |
Low EPSS 1.64% |
>= 4.7.0, < 4.7.16 | 4.7.16 |
| GHSA-qj69-chjp-g4f5 TYPO3 Cross-site scripting (XSS) vulnerability in the Extbase Framework |
Low EPSS 1.64% |
>= 6.1.0, < 6.1.6 | 6.1.6 |
| GHSA-5cmc-r23m-hvrr TYPO3 Cross-site scripting (XSS) vulnerability in the Backend User Administration Module |
Medium EPSS 1.19% |
>= 6.1, < 6.1.7 | 6.1.7 |
| GHSA-5cmc-r23m-hvrr TYPO3 Cross-site scripting (XSS) vulnerability in the Backend User Administration Module |
Medium EPSS 1.19% |
>= 6.0, < 6.0.12 | 6.0.12 |
| GHSA-m7rg-85g8-28m9 TYPO3 API function vulnerable to Cross-site Scripting |
Medium EPSS 0.95% |
>= 4.1.0, < 4.1.13 | 4.1.13 |
| GHSA-m7rg-85g8-28m9 TYPO3 API function vulnerable to Cross-site Scripting |
Medium EPSS 0.95% |
>= 4.3alpha1, < 4.3beta2 | 4.3beta2 |
| GHSA-m7rg-85g8-28m9 TYPO3 API function vulnerable to Cross-site Scripting |
Medium EPSS 0.95% |
>= 4.2.0, < 4.2.10 | 4.2.10 |
| GHSA-m7rg-85g8-28m9 TYPO3 API function vulnerable to Cross-site Scripting |
Medium EPSS 0.95% |
<= 4.0.13 | No fix yet |
| GHSA-f35p-hcwf-9f9f TYPO3 Unrestricted File Upload vulnerability |
Medium EPSS 3.02% |
>= 4.1.0, < 4.1.7 | 4.1.7 |
| GHSA-f35p-hcwf-9f9f TYPO3 Unrestricted File Upload vulnerability |
Medium EPSS 3.02% |
>= 4.2.0, < 4.2.1 | 4.2.1 |
| GHSA-f35p-hcwf-9f9f TYPO3 Unrestricted File Upload vulnerability |
Medium EPSS 3.02% |
>= 4.0.0, < 4.0.9 | 4.0.9 |
| GHSA-5f2f-hr23-j59j TYPO3 is vulnerable to Information Disclosure in the HTML mailing API |
Medium EPSS 1.20% |
>= 4.4, < 4.4.1 | 4.4.1 |
| GHSA-5f2f-hr23-j59j TYPO3 is vulnerable to Information Disclosure in the HTML mailing API |
Medium EPSS 1.20% |
< 4.2.13 | 4.2.13 |
| GHSA-5f2f-hr23-j59j TYPO3 is vulnerable to Information Disclosure in the HTML mailing API |
Medium EPSS 1.20% |
>= 4.3, < 4.3.4 | 4.3.4 |
| GHSA-657m-v5vm-f6rw Cross-Site-Request-Forgery in Backend |
High EPSS 0.64% |
>= 11.2.0, < 11.5.0 | 11.5.0 |
| GHSA-m2jh-fxw4-gphm HTTP Host Header Injection |
Medium EPSS 1.22% |
>= 11.0.0, < 11.5.0 | 11.5.0 |
| GHSA-c5c9-8c6m-727v Cross-Site Scripting via Rich-Text Content |
Medium EPSS 0.73% |
>= 11.0.0, < 11.3.2 | 11.3.2 |
| GHSA-c5c9-8c6m-727v Cross-Site Scripting via Rich-Text Content |
Medium EPSS 0.73% |
>= 8.0.0, < 8.7.42 | 8.7.42 |
| GHSA-c5c9-8c6m-727v Cross-Site Scripting via Rich-Text Content |
Medium EPSS 0.73% |
>= 7.0.0, < 7.6.53 | 7.6.53 |
| GHSA-c5c9-8c6m-727v Cross-Site Scripting via Rich-Text Content |
Medium EPSS 0.73% |
>= 10.0.0, < 10.4.19 | 10.4.19 |
| GHSA-c5c9-8c6m-727v Cross-Site Scripting via Rich-Text Content |
Medium EPSS 0.73% |
>= 9.0.0, < 9.5.29 | 9.5.29 |
| GHSA-34fr-fhqr-7235 Information Disclosure in User Authentication |
Medium EPSS 0.83% |
>= 9.0.0, < 9.5.28 | 9.5.28 |
| GHSA-34fr-fhqr-7235 Information Disclosure in User Authentication |
Medium EPSS 0.83% |
>= 7.0.0, < 7.6.52 | 7.6.52 |
| GHSA-34fr-fhqr-7235 Information Disclosure in User Authentication |
Medium EPSS 0.83% |
>= 8.0.0, < 8.7.41 | 8.7.41 |
| GHSA-34fr-fhqr-7235 Information Disclosure in User Authentication |
Medium EPSS 0.83% |
>= 10.0.0, < 10.4.18 | 10.4.18 |
| GHSA-34fr-fhqr-7235 Information Disclosure in User Authentication |
Medium EPSS 0.83% |
>= 11.0.0, < 11.3.1 | 11.3.1 |
| GHSA-rgcg-28xm-8mmw Cross-Site Scripting in Backend Grid View |
Medium EPSS 0.60% |
>= 10.0.0, < 10.4.18 | 10.4.18 |
| GHSA-rgcg-28xm-8mmw Cross-Site Scripting in Backend Grid View |
Medium EPSS 0.60% |
>= 8.0.0, < 8.7.41 | 8.7.41 |
| GHSA-rgcg-28xm-8mmw Cross-Site Scripting in Backend Grid View |
Medium EPSS 0.60% |
>= 11.0.0, < 11.3.1 | 11.3.1 |
| GHSA-rgcg-28xm-8mmw Cross-Site Scripting in Backend Grid View |
Medium EPSS 0.60% |
>= 9.0.0, < 9.5.28 | 9.5.28 |
| GHSA-6mh3-j5r5-2379 Cross-Site Scripting in Query Generator & Query View |
Medium EPSS 0.60% |
>= 10.0.0, < 10.4.18 | 10.4.18 |
| GHSA-6mh3-j5r5-2379 Cross-Site Scripting in Query Generator & Query View |
Medium EPSS 0.60% |
>= 9.0.0, < 9.5.28 | 9.5.28 |
| GHSA-6mh3-j5r5-2379 Cross-Site Scripting in Query Generator & Query View |
Medium EPSS 0.60% |
>= 11.0.0, < 11.3.1 | 11.3.1 |
| GHSA-6mh3-j5r5-2379 Cross-Site Scripting in Query Generator & Query View |
Medium EPSS 0.60% |
>= 8.0.0, < 8.7.41 | 8.7.41 |
| GHSA-8mq9-fqv8-59wf Cross-Site Scripting in Page Preview |
Medium EPSS 0.60% |
>= 9.0.0, < 9.5.28 | 9.5.28 |
| GHSA-8mq9-fqv8-59wf Cross-Site Scripting in Page Preview |
Medium EPSS 0.60% |
>= 10.0.0, < 10.4.18 | 10.4.18 |
| GHSA-8mq9-fqv8-59wf Cross-Site Scripting in Page Preview |
Medium EPSS 0.60% |
>= 11.0.0, < 11.3.1 | 11.3.1 |
| GHSA-x7hc-x7fm-f7qh Cross-Site Scripting in Content Preview (CType menu) |
Medium EPSS 0.87% |
>= 10.0.0, < 10.4.14 | 10.4.14 |
| GHSA-x7hc-x7fm-f7qh Cross-Site Scripting in Content Preview (CType menu) |
Medium EPSS 0.87% |
>= 11.0.0, < 11.1.1 | 11.1.1 |
| GHSA-x7hc-x7fm-f7qh Cross-Site Scripting in Content Preview (CType menu) |
Medium EPSS 0.87% |
>= 9.0.0, < 9.5.25 | 9.5.25 |
| GHSA-4p9g-qgx9-397p Denial of Service in Page Error Handling |
Medium EPSS 1.73% |
>= 9.0.0, < 9.5.25 | 9.5.25 |
| GHSA-4p9g-qgx9-397p Denial of Service in Page Error Handling |
Medium EPSS 1.73% |
>= 11.0.0, < 11.1.1 | 11.1.1 |
| GHSA-4p9g-qgx9-397p Denial of Service in Page Error Handling |
Medium EPSS 1.73% |
>= 10.0.0, < 10.4.14 | 10.4.14 |
| GHSA-x79j-wgqv-g8h2 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in typo3/cms-form |
Medium EPSS 0.87% |
>= 10.0.0, < 10.4.14 | 10.4.14 |
| GHSA-x79j-wgqv-g8h2 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in typo3/cms-form |
Medium EPSS 0.87% |
>= 11.0.0, < 11.1.1 | 11.1.1 |
| GHSA-3vg7-jw9m-pc3f Broken Access Control in Form Framework |
High EPSS 1.61% |
>= 11.0.0, < 11.1.1 | 11.1.1 |
| GHSA-3vg7-jw9m-pc3f Broken Access Control in Form Framework |
High EPSS 1.61% |
>= 10.0.0, < 10.4.14 | 10.4.14 |
| GHSA-3vg7-jw9m-pc3f Broken Access Control in Form Framework |
High EPSS 1.61% |
>= 9.0.0, < 9.5.25 | 9.5.25 |
| GHSA-2r6j-862c-m2v2 Unrestricted File Upload in Form Framework |
High EPSS 1.63% |
>= 10.0.0, < 10.4.14 | 10.4.14 |
| GHSA-2r6j-862c-m2v2 Unrestricted File Upload in Form Framework |
High EPSS 1.63% |
>= 9.0.0, < 9.5.25 | 9.5.25 |
| GHSA-2r6j-862c-m2v2 Unrestricted File Upload in Form Framework |
High EPSS 1.63% |
>= 11.0.0, < 11.1.1 | 11.1.1 |
| GHSA-fjh3-g8gq-9q92 Cross-Site Scripting in Content Preview |
Medium EPSS 0.87% |
>= 10.0.0, < 10.4.14 | 10.4.14 |
| GHSA-fjh3-g8gq-9q92 Cross-Site Scripting in Content Preview |
Medium EPSS 0.87% |
>= 11.0.0, < 11.1.1 | 11.1.1 |
| GHSA-qx3w-4864-94ch Cleartext storage of session identifier |
Medium EPSS 0.92% |
>= 8.0.0, < 8.7.40 | 8.7.40 |
| GHSA-qx3w-4864-94ch Cleartext storage of session identifier |
Medium EPSS 0.92% |
>= 9.0.0, < 9.5.25 | 9.5.25 |
| GHSA-qx3w-4864-94ch Cleartext storage of session identifier |
Medium EPSS 0.92% |
>= 10.0.0, < 10.4.14 | 10.4.14 |
| GHSA-qx3w-4864-94ch Cleartext storage of session identifier |
Medium EPSS 0.92% |
>= 7.0.0, < 7.6.51 | 7.6.51 |
| GHSA-qx3w-4864-94ch Cleartext storage of session identifier |
Medium EPSS 0.92% |
>= 6.2.0, < 6.2.57 | 6.2.57 |
| GHSA-qx3w-4864-94ch Cleartext storage of session identifier |
Medium EPSS 0.92% |
>= 11.0.0, < 11.1.1 | 11.1.1 |
| GHSA-4jhw-2p6j-5wmp Open Redirection in Login Handling |
Medium EPSS 1.10% |
>= 8.0.0, < 8.7.40 | 8.7.40 |
| GHSA-4jhw-2p6j-5wmp Open Redirection in Login Handling |
Medium EPSS 1.10% |
>= 9.0.0, < 9.5.25 | 9.5.25 |
| GHSA-4jhw-2p6j-5wmp Open Redirection in Login Handling |
Medium EPSS 1.10% |
>= 11.0.0, < 11.1.1 | 11.1.1 |
| GHSA-4jhw-2p6j-5wmp Open Redirection in Login Handling |
Medium EPSS 1.10% |
>= 10.0.0, < 10.4.14 | 10.4.14 |
| GHSA-4jhw-2p6j-5wmp Open Redirection in Login Handling |
Medium EPSS 1.10% |
>= 7.0.0, < 7.6.51 | 7.6.51 |
| GHSA-4jhw-2p6j-5wmp Open Redirection in Login Handling |
Medium EPSS 1.10% |
>= 6.2.0, < 6.2.57 | 6.2.57 |
| GHSA-vqqx-jw6p-q3rf Cross-Site Scripting in Fluid view helpers |
Medium EPSS 0.72% |
>= 8.7.0, < 8.7.38 | 8.7.38 |
| GHSA-vqqx-jw6p-q3rf Cross-Site Scripting in Fluid view helpers |
Medium EPSS 0.72% |
>= 10.0.0, < 10.4.10 | 10.4.10 |
| GHSA-vqqx-jw6p-q3rf Cross-Site Scripting in Fluid view helpers |
Medium EPSS 0.72% |
>= 9.0.0, < 9.5.23 | 9.5.23 |
| GHSA-q9cp-mc96-m4w2 XML External Entity in Dashboard Widget |
Low EPSS 0.64% |
>= 10.0.0, < 10.4.10 | 10.4.10 |
| GHSA-954j-f27r-cj52 Cleartext storage of session identifier |
High EPSS 0.68% |
>= 10.0.0, < 10.4.10 | 10.4.10 |
| GHSA-954j-f27r-cj52 Cleartext storage of session identifier |
High EPSS 0.68% |
>= 9.0.0, < 9.5.23 | 9.5.23 |
| GHSA-954j-f27r-cj52 Cleartext storage of session identifier |
High EPSS 0.68% |
>= 8.7.0, < 8.7.38 | 8.7.38 |
| GHSA-7733-hjv6-4h47 Cross-Site Scripting in ternary conditional operator |
Medium EPSS 0.97% |
>= 9.0.0, < 9.5.6 | 9.5.6 |
| GHSA-7733-hjv6-4h47 Cross-Site Scripting in ternary conditional operator |
Medium EPSS 0.97% |
>= 8.0.0, < 8.7.25 | 8.7.25 |
| GHSA-3x94-fv5h-5q2c Exposure of Sensitive Information to an Unauthorized Actor in TYPO3 CMS |
High EPSS 1.79% |
>= 10.0.0, < 10.4.6 | 10.4.6 |
| GHSA-3x94-fv5h-5q2c Exposure of Sensitive Information to an Unauthorized Actor in TYPO3 CMS |
High EPSS 1.79% |
>= 9.0.0, < 9.5.20 | 9.5.20 |
| GHSA-m5vr-3m74-jwxp Missing Required Cryptographic Step Leading to Sensitive Information Disclosure in TYPO3 CMS |
High EPSS 2.23% |
>= 9.0.0, < 9.5.20 | 9.5.20 |
| GHSA-m5vr-3m74-jwxp Missing Required Cryptographic Step Leading to Sensitive Information Disclosure in TYPO3 CMS |
High EPSS 2.23% |
>= 10.0.0, < 10.4.6 | 10.4.6 |
| GHSA-pqg8-crx9-g8m4 Backend Same-Site Request Forgery in TYPO3 CMS |
High EPSS 0.74% |
>= 9.0.0, < 9.5.17 | 9.5.17 |
| GHSA-pqg8-crx9-g8m4 Backend Same-Site Request Forgery in TYPO3 CMS |
High EPSS 0.74% |
>= 10.0.0, < 10.4.2 | 10.4.2 |
| GHSA-2wj9-434x-9hvp Insecure Deserialization in Backend User Settings in TYPO3 CMS |
High EPSS 1.99% |
>= 9.0.0, < 9.5.17 | 9.5.17 |
| GHSA-2wj9-434x-9hvp Insecure Deserialization in Backend User Settings in TYPO3 CMS |
High EPSS 1.99% |
>= 10.0.0, < 10.4.2 | 10.4.2 |
| GHSA-2rxh-h6h9-qrqc Class destructors causing side-effects when being unserialized in TYPO3 CMS |
High EPSS 1.51% |
>= 9.0.0, < 9.5.17 | 9.5.17 |
| GHSA-2rxh-h6h9-qrqc Class destructors causing side-effects when being unserialized in TYPO3 CMS |
High EPSS 1.51% |
>= 10.0.0, < 10.4.2 | 10.4.2 |
| GHSA-4j77-gg36-9864 Cross-Site Scripting in TYPO3 CMS Link Handling |
Medium EPSS 0.54% |
>= 9.0.0, < 9.5.17 | 9.5.17 |
| GHSA-4j77-gg36-9864 Cross-Site Scripting in TYPO3 CMS Link Handling |
Medium EPSS 0.54% |
>= 10.0.0, < 10.4.2 | 10.4.2 |
| GHSA-43gj-mj2w-wh46 Cross-Site Scripting in TYPO3 CMS Form Engine |
Medium EPSS 0.54% |
>= 10.0.0, < 10.4.2 | 10.4.2 |
| GHSA-43gj-mj2w-wh46 Cross-Site Scripting in TYPO3 CMS Form Engine |
Medium EPSS 0.54% |
>= 9.0.0, < 9.5.17 | 9.5.17 |
| GHSA-347x-877p-hcwx Information Disclosure in Password Reset |
Low EPSS 1.22% |
>= 10.0.0, < 10.4.2 | 10.4.2 |
| GHSA-w2fr-65vp-mxw3 Deserialization of untrusted data in Symfony |
High EPSS 2.26% |
>= 9.0.0, < 9.5.8 | 9.5.8 |
| GHSA-g68x-vvqq-pvw3 Ckeditor XSS Vulnerability |
Medium EPSS 1.95% |
>= 8.0.0, < 8.7.21 | 8.7.21 |
| GHSA-g68x-vvqq-pvw3 Ckeditor XSS Vulnerability |
Medium EPSS 1.95% |
>= 9.0.0, < 9.5.2 | 9.5.2 |
| GHSA-pj7m-g53m-7638 Bootstrap Cross-site Scripting vulnerability |
Medium EPSS 4.31% |
>= 9.0.0, < 9.5.4 | 9.5.4 |
| GHSA-pj7m-g53m-7638 Bootstrap Cross-site Scripting vulnerability |
Medium EPSS 4.31% |
>= 8.0.0, < 8.7.23 | 8.7.23 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor