Advisories for packages from typo3

Listing reported advisories for packages from typo3 sorted by their report date.

TYPO3 is vulnerable to insecure randomness during hash generation in forgot password function
GitHub

typo3/cms-frontend

>= 4.4.0, < 4.4.1 · < 4.3.4

2024-02-07 21:31:26
TYPO3 is vulnerable to Session Fixation
GitHub

typo3/cms-install

>= 4.2.0, < 4.2.13 · >= 4.4.0, < 4.4.1 · >= 4.3.0, < 4.3.4 · < 4.1.14

2024-02-07 21:28:53
Cross-Site Scripting via Rich-Text Content
GitHub

typo3/cms-core

>= 10.0.0, <= 10.4.18 · >= 11.0.0, <= 11.3.1 · >= 10.0.0, < 10.4.19 · >= 9.0.0, <= 9.5.28 · >= 8.0.0, <= 8.7.41 · >= 7.0.0, <= 7.6.52 · >= 11.0.0, < 11.3.2 · >= 9.0.0, < 9.5.29 · >= 8.0.0, < 8.7.42 · >= 7.0.0, < 7.6.53

2024-02-07 18:51:56
Denial of Service in Page Error Handling
GitHub

typo3/cms-core

>= 10.0.0, <= 10.4.13 · >= 11.0.0, <= 11.1.0 · >= 10.0.0, < 10.4.14 · >= 9.0.0, <= 9.5.24 · >= 11.0.0, < 11.1.1 · >= 9.0.0, < 9.5.25

2024-02-07 18:50:36
Typo3 Cross-Site Scripting in Link Handling
GitHub

typo3/cms-core

>= 8.3.0, <= 8.7.26 · >= 9.0.0, <= 9.5.7 · >= 8.0.0, < 8.7.27 · >= 9.0.0, < 9.5.8

2024-02-07 18:50:01
Typo3 Vulnerable to Insecure Deserialization
GitHub

typo3/cms-core

>= 8.0.0, < 8.7.27 · >= 9.0.0, < 9.5.8 · >= 8.0, <= 8.7.26 · >= 9.0, <= 9.5.7

2024-02-07 18:49:46
TYPO3 is vulnerable to Spam Abuse in the native form content element
GitHub

typo3/cms-frontend

>= 4.2.0, < 4.2.13 · >= 4.4.0, < 4.4.1 · >= 4.3.0, < 4.3.4 · < 4.1.14

2024-02-06 23:33:25
TYPO3 is vulnerable to Information Disclosure on the backend
GitHub

typo3/cms-backend

>= 4.2.0, < 4.2.13 · >= 4.4.0, < 4.4.1 · >= 4.3.0, < 4.3.4 · < 4.1.14

2024-02-06 23:22:33
TYPO3 is vulnerable to Insecure randomness in uniqid function
GitHub

typo3/cms-install

>= 4.2.0, < 4.2.13 · >= 4.4.0, < 4.4.1 · >= 4.3.0, < 4.3.4 · < 4.1.14

2024-02-06 23:21:48
TYPO3 Arbitrary Code Execution vulnerability on the backend
GitHub

typo3/cms-backend

>= 4.2, < 4.2.13 · >= 4.4, < 4.4.1 · >= 4.3, < 4.3.4 · < 4.1.14

2024-02-06 23:03:55
TYPO3 Open Redirection vulnerability on the backend
GitHub

typo3/cms-backend

>= 4.2.0, < 4.2.13 · >= 4.4.0, < 4.4.1 · >= 4.3.0, < 4.3.4 · < 4.1.14

2024-02-06 23:03:15
TYPO3 is vulnerable to Cross-Site Scripting (XSS) on the backend
GitHub

typo3/cms-backend

>= 4.2.0, < 4.2.13 · >= 4.4.0, < 4.4.1 · >= 4.3.0, < 4.3.4 · < 4.1.14

2024-02-06 22:58:31
TYPO3 vulnerable to Cross-Site Scripting in the textarea view helper
GitHub

typo3/cms-fluid

>= 4.4.0, < 4.4.1 · < 4.3.4

2024-02-06 20:56:17
Directory Traversal in typo3/phar-stream-wrapper
GitHub

typo3/phar-stream-wrapper

>= 8.0.0, < 8.6.16 · >= 7.0.0, < 7.67.0 · >= 8.7.0, < 8.7.1 · >= 3.0.0, < 3.1.1 · >= 2.0.0, < 2.1.1

2024-02-06 11:55:18
PharStreamWrapper for Typo3 unsafe deserialization vulnerability
GitHub

typo3/phar-stream-wrapper

>= 3.0.0, <= 3.1.0 · >= 2.0.0, <= 2.1.0 · >= 3.0.0, < 3.1.1 · >= 2.0.0, < 2.1.1

2024-02-05 15:35:41
Ckeditor XSS Vulnerability
GitHub

typo3/cms-core

>= 8.0.0, < 8.7.21 · >= 9.0.0, < 9.5.2

2024-02-05 15:34:05
Typo3 Information Disclosure
GitHub

typo3/cms

>= 6.2.0, <= 6.2.2 · >= 6.2.0, < 6.2.3

2024-02-05 15:32:59
Typo3 Open Redirect In Frontend Rendering
GitHub

typo3/cms

>= 4.5.0, <= 4.5.38 · >= 7.0.0, <= 7.0.1 · >= 4.6.0, <= 6.2.8 · >= 4.5.0, < 4.5.39 · >= 7.0.0, < 7.0.2 · >= 4.6.0, < 6.2.9

2024-02-05 15:27:11
Typo3 Host Header Spoofing Vulnerability
GitHub

typo3/cms

>= 6.0.0, <= 6.0.13 · >= 4.7.0, <= 4.7.18 · >= 4.5.0, <= 4.5.33 · >= 6.2.0, <= 6.2.2 · >= 6.1.0, <= 6.1.8 · >= 6.2.0, < 6.2.3

2024-02-05 15:24:43
Typo3 XSS Vulnerabilities
GitHub

typo3/cms

>= 6.0.0, <= 6.0.13 · >= 4.7.0, <= 4.7.18 · >= 4.5.0, <= 4.5.33 · >= 6.2.0, <= 6.2.2 · >= 6.1.0, <= 6.1.8 · >= 6.2.0, < 6.2.3

2024-02-05 15:24:23
Cross-Site-Request-Forgery in Backend
GitHub

typo3/cms-core

>= 11.2.0, < 11.5.0

2024-02-05 11:18:01
Cross-Site Scripting in Query Generator & Query View
GitHub

typo3/cms-core

>= 10.0.0, < 10.4.18 · >= 11.0.0, < 11.3.1 · >= 11.0.0, < 11.3.0 · >= 9.0.0, < 9.5.28 · >= 8.0.0, < 8.7.41

2024-02-05 11:17:35
XML External Entity in Dashboard Widget
GitHub

typo3/cms-core

>= 10.4.0, < 10.4.10 · >= 10.0.0, < 10.4.10

2024-02-05 11:16:11
Cleartext storage of session identifier
GitHub

typo3/cms-core

>= 10.0.0, < 10.4.10 · >= 9.0.0, < 9.5.23 · >= 8.7.0, < 8.7.38

2024-02-05 11:15:55
Cross-Site Scripting in TYPO3 CMS Link Handling
GitHub

typo3/cms-core

>= 9.5.12, < 9.5.17 · >= 10.2.0, < 10.4.2 · >= 10.0.0, < 10.4.2 · >= 9.0.0, < 9.5.17

2024-02-05 11:12:21
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in typo3/cms-form
GitHub

typo3/cms-form

>= 10.2.0, <= 10.4.13 · >= 11.0.0, <= 11.1.0 · >= 10.0.0, < 10.4.14 · >= 11.0.0, < 11.1.1

2024-02-02 16:46:33
Cleartext storage of session identifier
GitHub

typo3/cms-core

>= 10.0.0, <= 10.4.13 · >= 11.0.0, <= 11.1.0 · >= 10.0.0, < 10.4.14 · >= 9.0.0, <= 9.5.24 · >= 8.0.0, <= 8.7.39 · >= 7.0.0, <= 7.6.50 · >= 6.2.0, <= 6.2.56 · >= 11.0.0, < 11.1.1 · >= 9.0.0, < 9.5.25

2024-02-02 16:46:24
Cross-Site Scripting in Content Preview
GitHub

typo3/cms-backend

>= 10.0.0, <= 10.4.13 · >= 11.0.0, <= 11.1.0 · >= 10.0.0, < 10.4.14 · >= 11.0.0, < 11.1.1

2024-02-02 16:44:48
Unrestricted File Upload in Form Framework
GitHub

typo3/cms-form

>= 10.0.0, <= 10.4.13 · >= 11.0.0, <= 11.1.0 · >= 10.0.0, < 10.4.14 · >= 9.0.0, <= 9.5.24 · >= 8.0.0, <= 8.7.39 · >= 11.0.0, < 11.1.1 · >= 9.0.0, < 9.5.25

2024-02-02 16:44:27
Cross-Site Scripting in Content Preview (CType menu)
GitHub

typo3/cms-backend

>= 10.0.0, <= 10.4.13 · >= 11.0.0, <= 11.1.0 · >= 10.0.0, < 10.4.14 · >= 9.0.0, <= 9.5.24 · >= 8.0.0, <= 8.7.39 · >= 7.0.0, <= 7.6.50 · >= 11.0.0, < 11.1.1 · >= 9.0.0, < 9.5.25

2024-02-02 16:44:15
Open Redirection in Login Handling
GitHub

typo3/cms-core

>= 10.0.0, <= 10.4.13 · >= 11.0.0, <= 11.1.0 · >= 10.0.0, < 10.4.14 · >= 9.0.0, <= 9.5.24 · >= 8.0.0, <= 8.7.39 · >= 7.0.0, <= 7.6.50 · >= 6.2.0, <= 6.2.56 · >= 11.0.0, < 11.1.1 · >= 9.0.0, < 9.5.25

2024-02-01 19:01:31
Broken Access Control in Form Framework
GitHub

typo3/cms-form

>= 10.0.0, <= 10.4.13 · >= 11.0.0, <= 11.1.0 · >= 10.0.0, < 10.4.14 · >= 9.0.0, <= 9.5.24 · >= 8.0.0, <= 8.7.39 · >= 11.0.0, < 11.1.1 · >= 9.0.0, < 9.5.25

2024-02-01 18:56:02
Cross-Site Scripting in Fluid view helpers
GitHub

typo3/cms-core

>= 10.0.0, < 10.4.10 · >= 9.0.0, < 9.5.23 · >= 8.7.0, < 8.7.38

2024-02-01 18:55:57
Typo3 Backend XSS Vulnerability
GitHub

typo3/cms

>= 4.1.0, < 4.1.10 · >= 4.2.0, < 4.2.6 · >= 3.3.0, < 3.9.0 · >= 4.0, < 4.0.12 · = 4.3alpha1

2024-01-23 18:24:10
Indexed Search Engine for TYPO3 Command Execution via Metacharacter Injection
GitHub

typo3/cms

>= 4.2.0, <= 4.2.3 · >= 4.1.0, <= 4.1.7 · >= 4.0.0, <= 4.0.9

2024-01-23 18:11:53
Authentication library in TYPO3 vulnerable to session fixation
GitHub

typo3/cms

>= 4.2.0, <= 4.2.3 · >= 4.1.0, <= 4.1.7 · >= 4.0.0, <= 4.0.9

2024-01-23 15:13:25
TYPO3 is vulnerable to Information Disclosure in the HTML mailing API
GitHub

typo3/cms-core

>= 4.4, < 4.4.1 · >= 4.3, < 4.3.4 · < 4.2.13

2024-01-19 21:36:54
Typo3 SQL injection due to faulty prepared statements
GitHub

typo3/cms

>= 4.5.0, <= 4.5.5

2024-01-12 20:44:15
Typo3 Authentication Bypass
GitHub

typo3/cms

>= 4.5.0, < 4.5.4 · >= 4.4.0, < 4.4.9 · < 4.3.12

2024-01-12 20:43:34
Typo3 XSS Vulnerability
GitHub

typo3/cms

>= 4.5.0, < 4.5.4 · >= 4.4.0, < 4.4.9 · < 4.3.12

2024-01-12 20:43:11
Typo3 XSS Vulnerabilities
GitHub

typo3/cms

>= 4.5.0, < 4.5.4 · >= 4.4.0, < 4.4.9 · < 4.3.12

2024-01-12 20:42:45
Typo3 Information Disclosure
GitHub

typo3/cms

< 4.5.4

2024-01-12 20:42:18
Typo3 Arbitrary Information Disclosure
GitHub

typo3/cms

>= 4.5.0, < 4.5.4 · >= 4.4.0, < 4.4.9 · < 4.3.12

2024-01-12 20:41:56
Typo3 Arbitrary File Delete
GitHub

typo3/cms

>= 4.5.0, < 4.5.4 · >= 4.4.0, < 4.4.9 · < 4.3.12

2024-01-12 20:41:30
Typo3 Improper Access Control
GitHub

typo3/cms

>= 4.5.0, < 4.5.4 · < 4.4.9

2024-01-12 20:41:09
Typo3 XSS in RemoveXSS function
GitHub

typo3/cms

>= 4.5.0, < 4.5.4 · >= 4.4.0, < 4.4.9 · < 4.3.12

2024-01-12 20:41:08
Typo3 Information Disclosure
GitHub

typo3/cms

>= 4.5.0, < 4.5.4 · >= 4.4.0, < 4.4.9 · < 4.3.12

2024-01-12 20:41:08
Typo3 Backend History Module Vulnerable to XSS
GitHub

typo3/cms

>= 4.6, < 4.6.14 · >= 4.5, < 4.5.21 · >= 4.7, < 4.7.6

2024-01-12 18:14:42
Typo3 Install Tool XSS Vulnerability
GitHub

typo3/cms

>= 4.6, < 4.6.12 · >= 4.5, < 4.5.19 · >= 4.7, < 4.7.4

2024-01-12 18:14:18
Typo3 API XSS Vulnerability
GitHub

typo3/cms

>= 4.6, < 4.6.12 · >= 4.5, < 4.5.19 · >= 4.7, < 4.7.4

2024-01-12 18:12:58
« Previous Next »

Showing 151 to 200 of 493 results

1 2 3 4 5 6 7 8 9 10