typo3/cms-form (Packagist)
Advisories
21
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 14.3.3 or later clears every advisory below that has a fix.
Upgrade commands
composer
composer require typo3/cms-form:^14.3.3Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-jh32-v29g-68pq TYPO3 CMS has Privilege Escalation & SQL Injection in its Form Framework |
High EPSS 0.24% |
>= 14.0.0, < 14.3.3 | 14.3.3 |
| GHSA-hwvq-2w67-rvxp TYPO3 CMS has Broken Access Control in its Form Framework |
High EPSS 0.25% |
< 10.4.57 | 10.4.57 |
| GHSA-hwvq-2w67-rvxp TYPO3 CMS has Broken Access Control in its Form Framework |
High EPSS 0.25% |
>= 14.0.0, < 14.3.3 | 14.3.3 |
| GHSA-hwvq-2w67-rvxp TYPO3 CMS has Broken Access Control in its Form Framework |
High EPSS 0.25% |
>= 13.0.0, < 13.4.31 | 13.4.31 |
| GHSA-hwvq-2w67-rvxp TYPO3 CMS has Broken Access Control in its Form Framework |
High EPSS 0.25% |
>= 12.0.0, < 12.4.46 | 12.4.46 |
| GHSA-hwvq-2w67-rvxp TYPO3 CMS has Broken Access Control in its Form Framework |
High EPSS 0.25% |
>= 11.0.0, < 11.5.51 | 11.5.51 |
| GHSA-pjpj-v387-x4vq TYPO3 CMS has Broken Access Control in its Form Framework |
High EPSS 0.24% |
>= 14.0.0, < 14.3.3 | 14.3.3 |
| GHSA-pjpj-v387-x4vq TYPO3 CMS has Broken Access Control in its Form Framework |
High EPSS 0.24% |
< 10.4.57 | 10.4.57 |
| GHSA-pjpj-v387-x4vq TYPO3 CMS has Broken Access Control in its Form Framework |
High EPSS 0.24% |
>= 11.0.0, < 11.5.51 | 11.5.51 |
| GHSA-pjpj-v387-x4vq TYPO3 CMS has Broken Access Control in its Form Framework |
High EPSS 0.24% |
>= 12.0.0, < 12.4.46 | 12.4.46 |
| GHSA-pjpj-v387-x4vq TYPO3 CMS has Broken Access Control in its Form Framework |
High EPSS 0.24% |
>= 13.0.0, < 13.4.31 | 13.4.31 |
| GHSA-x79j-wgqv-g8h2 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in typo3/cms-form |
Medium EPSS 0.87% |
>= 11.0.0, < 11.1.1 | 11.1.1 |
| GHSA-x79j-wgqv-g8h2 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in typo3/cms-form |
Medium EPSS 0.87% |
>= 10.2.0, < 10.4.14 | 10.4.14 |
| GHSA-3vg7-jw9m-pc3f Broken Access Control in Form Framework |
High EPSS 1.61% |
>= 9.0.0, < 9.5.25 | 9.5.25 |
| GHSA-3vg7-jw9m-pc3f Broken Access Control in Form Framework |
High EPSS 1.61% |
>= 8.0.0, < 8.7.40 | 8.7.40 |
| GHSA-3vg7-jw9m-pc3f Broken Access Control in Form Framework |
High EPSS 1.61% |
>= 11.0.0, < 11.1.1 | 11.1.1 |
| GHSA-3vg7-jw9m-pc3f Broken Access Control in Form Framework |
High EPSS 1.61% |
>= 10.0.0, < 10.4.14 | 10.4.14 |
| GHSA-2r6j-862c-m2v2 Unrestricted File Upload in Form Framework |
High EPSS 1.63% |
>= 11.0.0, < 11.1.1 | 11.1.1 |
| GHSA-2r6j-862c-m2v2 Unrestricted File Upload in Form Framework |
High EPSS 1.63% |
>= 10.0.0, < 10.4.14 | 10.4.14 |
| GHSA-2r6j-862c-m2v2 Unrestricted File Upload in Form Framework |
High EPSS 1.63% |
>= 9.0.0, < 9.5.25 | 9.5.25 |
| GHSA-2r6j-862c-m2v2 Unrestricted File Upload in Form Framework |
High EPSS 1.63% |
>= 8.0.0, < 8.7.40 | 8.7.40 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor