Advisories for packages from typo3

Listing reported advisories for packages from typo3 sorted by their report date.

Cleartext storage of session identifier
GitHub

typo3/cms-core

>= 10.0.0, < 10.4.10 · >= 9.0.0, < 9.5.23 · >= 8.7.0, < 8.7.38

2024-02-05 11:15:55
Cross-Site Scripting in TYPO3 CMS Link Handling
GitHub

typo3/cms-core

>= 9.5.12, < 9.5.17 · >= 10.2.0, < 10.4.2 · >= 10.0.0, < 10.4.2 · >= 9.0.0, < 9.5.17

2024-02-05 11:12:21
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in typo3/cms-form
GitHub

typo3/cms-form

>= 10.2.0, <= 10.4.13 · >= 11.0.0, <= 11.1.0 · >= 10.0.0, < 10.4.14 · >= 11.0.0, < 11.1.1

2024-02-02 16:46:33
Cleartext storage of session identifier
GitHub

typo3/cms-core

>= 10.0.0, <= 10.4.13 · >= 11.0.0, <= 11.1.0 · >= 10.0.0, < 10.4.14 · >= 9.0.0, <= 9.5.24 · >= 8.0.0, <= 8.7.39 · >= 7.0.0, <= 7.6.50 · >= 6.2.0, <= 6.2.56 · >= 11.0.0, < 11.1.1 · >= 9.0.0, < 9.5.25

2024-02-02 16:46:24
Cross-Site Scripting in Content Preview
GitHub

typo3/cms-backend

>= 10.0.0, <= 10.4.13 · >= 11.0.0, <= 11.1.0 · >= 10.0.0, < 10.4.14 · >= 11.0.0, < 11.1.1

2024-02-02 16:44:48
Unrestricted File Upload in Form Framework
GitHub

typo3/cms-form

>= 10.0.0, <= 10.4.13 · >= 11.0.0, <= 11.1.0 · >= 10.0.0, < 10.4.14 · >= 9.0.0, <= 9.5.24 · >= 8.0.0, <= 8.7.39 · >= 11.0.0, < 11.1.1 · >= 9.0.0, < 9.5.25

2024-02-02 16:44:27
Cross-Site Scripting in Content Preview (CType menu)
GitHub

typo3/cms-backend

>= 10.0.0, <= 10.4.13 · >= 11.0.0, <= 11.1.0 · >= 10.0.0, < 10.4.14 · >= 9.0.0, <= 9.5.24 · >= 8.0.0, <= 8.7.39 · >= 7.0.0, <= 7.6.50 · >= 11.0.0, < 11.1.1 · >= 9.0.0, < 9.5.25

2024-02-02 16:44:15
Open Redirection in Login Handling
GitHub

typo3/cms-core

>= 10.0.0, <= 10.4.13 · >= 11.0.0, <= 11.1.0 · >= 10.0.0, < 10.4.14 · >= 9.0.0, <= 9.5.24 · >= 8.0.0, <= 8.7.39 · >= 7.0.0, <= 7.6.50 · >= 6.2.0, <= 6.2.56 · >= 11.0.0, < 11.1.1 · >= 9.0.0, < 9.5.25

2024-02-01 19:01:31
Broken Access Control in Form Framework
GitHub

typo3/cms-form

>= 10.0.0, <= 10.4.13 · >= 11.0.0, <= 11.1.0 · >= 10.0.0, < 10.4.14 · >= 9.0.0, <= 9.5.24 · >= 8.0.0, <= 8.7.39 · >= 11.0.0, < 11.1.1 · >= 9.0.0, < 9.5.25

2024-02-01 18:56:02
Cross-Site Scripting in Fluid view helpers
GitHub

typo3/cms-core

>= 10.0.0, < 10.4.10 · >= 9.0.0, < 9.5.23 · >= 8.7.0, < 8.7.38

2024-02-01 18:55:57
Typo3 Backend XSS Vulnerability
GitHub

typo3/cms

>= 4.1.0, < 4.1.10 · >= 4.2.0, < 4.2.6 · >= 3.3.0, < 3.9.0 · >= 4.0, < 4.0.12 · = 4.3alpha1

2024-01-23 18:24:10
Indexed Search Engine for TYPO3 Command Execution via Metacharacter Injection
GitHub

typo3/cms

>= 4.2.0, <= 4.2.3 · >= 4.1.0, <= 4.1.7 · >= 4.0.0, <= 4.0.9

2024-01-23 18:11:53
Authentication library in TYPO3 vulnerable to session fixation
GitHub

typo3/cms

>= 4.2.0, <= 4.2.3 · >= 4.1.0, <= 4.1.7 · >= 4.0.0, <= 4.0.9

2024-01-23 15:13:25
TYPO3 is vulnerable to Information Disclosure in the HTML mailing API
GitHub

typo3/cms-core

>= 4.4, < 4.4.1 · >= 4.3, < 4.3.4 · < 4.2.13

2024-01-19 21:36:54
Typo3 SQL injection due to faulty prepared statements
GitHub

typo3/cms

>= 4.5.0, <= 4.5.5

2024-01-12 20:44:15
Typo3 Authentication Bypass
GitHub

typo3/cms

>= 4.5.0, < 4.5.4 · >= 4.4.0, < 4.4.9 · < 4.3.12

2024-01-12 20:43:34
Typo3 XSS Vulnerability
GitHub

typo3/cms

>= 4.5.0, < 4.5.4 · >= 4.4.0, < 4.4.9 · < 4.3.12

2024-01-12 20:43:11
Typo3 XSS Vulnerabilities
GitHub

typo3/cms

>= 4.5.0, < 4.5.4 · >= 4.4.0, < 4.4.9 · < 4.3.12

2024-01-12 20:42:45
Typo3 Information Disclosure
GitHub

typo3/cms

< 4.5.4

2024-01-12 20:42:18
Typo3 Arbitrary Information Disclosure
GitHub

typo3/cms

>= 4.5.0, < 4.5.4 · >= 4.4.0, < 4.4.9 · < 4.3.12

2024-01-12 20:41:56
Typo3 Arbitrary File Delete
GitHub

typo3/cms

>= 4.5.0, < 4.5.4 · >= 4.4.0, < 4.4.9 · < 4.3.12

2024-01-12 20:41:30
Typo3 Improper Access Control
GitHub

typo3/cms

>= 4.5.0, < 4.5.4 · < 4.4.9

2024-01-12 20:41:09
Typo3 Information Disclosure
GitHub

typo3/cms

>= 4.5.0, < 4.5.4 · >= 4.4.0, < 4.4.9 · < 4.3.12

2024-01-12 20:41:08
Typo3 XSS in RemoveXSS function
GitHub

typo3/cms

>= 4.5.0, < 4.5.4 · >= 4.4.0, < 4.4.9 · < 4.3.12

2024-01-12 20:41:08
Typo3 Backend History Module Vulnerable to XSS
GitHub

typo3/cms

>= 4.6, < 4.6.14 · >= 4.5, < 4.5.21 · >= 4.7, < 4.7.6

2024-01-12 18:14:42
Typo3 Install Tool XSS Vulnerability
GitHub

typo3/cms

>= 4.6, < 4.6.12 · >= 4.5, < 4.5.19 · >= 4.7, < 4.7.4

2024-01-12 18:14:18
Typo3 API XSS Vulnerability
GitHub

typo3/cms

>= 4.6, < 4.6.12 · >= 4.5, < 4.5.19 · >= 4.7, < 4.7.4

2024-01-12 18:12:58
Typo3 Backend Configuration XSS Vulnerability
GitHub

typo3/cms

>= 4.6, < 4.6.12 · >= 4.5, < 4.5.19 · >= 4.7, < 4.7.4

2024-01-12 18:12:28
Typo3 Backend XSS Vulnerability
GitHub

typo3/cms

>= 4.6, < 4.6.12 · >= 4.5, < 4.5.19 · >= 4.7, < 4.7.4

2024-01-12 18:12:08
Typo3 Exception Handler XSS
GitHub

typo3/cms

>= 4.5, < 4.5.15 · >= 4.4, < 4.4.15 · >= 4.6, < 4.6.8 · = 4.7

2024-01-12 18:01:24
Typo3 Backend History Module Vulnerable to SQL Injection
GitHub

typo3/cms

>= 4.6.0, <= 4.6.13 · >= 4.5.0, <= 4.5.20 · >= 4.7.0, <= 4.7.5

2024-01-12 18:00:16
Typo3 Function Menu API XSS Vulnerability
GitHub

typo3/cms

>= 4.6.0, < 4.6.14 · >= 4.5.0, < 4.5.21 · >= 4.7.0, < 4.7.6

2024-01-12 17:59:46
Typo3 Backend History Module Vulnerable to XSS
GitHub

typo3/cms

>= 4.6.0, < 4.6.14 · >= 4.5.0, < 4.5.21 · >= 4.7.0, < 4.7.6

2024-01-12 17:59:22
Typo3 Backend API XSS Vulnerability
GitHub

typo3/cms

>= 4.6.0, < 4.6.14 · >= 4.5.0, < 4.5.21 · >= 4.7.0, < 4.7.6

2024-01-12 17:58:36
Information Disclosure in typo3/cms-install tool
GitHub

typo3/cms-install

>= 12.2.0, < 12.4.8

2023-11-14 20:34:27
Bypassing Cross-Site Scripting Protection in TYPO3 HTML Sanitizer
GitHub

typo3/html-sanitizer

>= 2.0.0, <= 2.1.3 · >= 1.0.0, <= 1.5.2

2023-11-14 20:33:28
TYPO3 vulnerable to Weak Authentication in Session Handling
GitHub

typo3/cms-core

>= 11.0.0, <= 11.5.32 · >= 10.0.0, <= 10.4.40 · >= 12.0.0, <= 12.4.7 · >= 9.0.0, <= 9.5.43 · >= 8.0.0, <= 8.7.54

2023-11-14 18:30:27
TYPO3-CORE-SA-2023-006: Weak Authentication in Session Handling
FriendsOfPHP

typo3/cms-core

>=11.0.0, <11.5.33 · >=10.0.0, <10.4.41 · >=12.0.0, <12.4.8 · >=9.0.0, <9.5.44 · >=8.0.0, <8.7.55

2023-11-14 09:58:00
Typo3 XSS Vulnerability
GitHub

typo3/cms

<= 8.7.11 · < 9.2.0

2023-09-21 09:52:43
Typo3 Extbase Framework Unsafe Deserialization
GitHub

typo3/cms

>= 4.5.0, < 4.5.14 · >= 4.4.0, < 4.4.14 · >= 4.6, <= 4.6.6

2023-08-29 23:30:38
Typo3 Backend XSS Vulnerabilities
GitHub

typo3/cms

>= 4.5.0, <= 4.5.13 · >= 4.4.0, <= 4.4.13 · >= 4.6.0, <= 4.6.6

2023-08-29 23:29:33
Typo3 API XSS Vulnerabilities
GitHub

typo3/cms

>= 4.5.0, <= 4.5.13 · >= 4.4.0, <= 4.4.13 · >= 4.6.0, <= 4.6.6

2023-08-29 23:29:29
TYPO3 vulnerable to Insecure Unserialize via Content Editing Wizards component
GitHub

typo3/cms

>= 6.0.0, <= 6.0.11 · >= 4.7.0, <= 4.7.16 · >= 4.5.0, <= 4.5.31 · >= 6.1.0, <= 6.1.6

2023-08-29 19:02:20
TYPO3 is vulnerable to Mass Assignment in the Extension table administration library
GitHub

typo3/cms-core

>= 6.0.0, < 6.0.11 · >= 4.6.0, < 4.7.16 · >= 4.5.0, < 4.5.31

2023-08-29 19:02:14
TYPO3 Improper Access Control vulnerability
GitHub

typo3/cms-core

>= 6.0.0, < 6.0.11 · >= 4.7.0, < 4.7.16 · >= 4.5.0, < 4.5.31 · >= 6.1.0, < 6.1.6

2023-08-29 19:02:11
TYPO3 SQL injection vulnerability in the Extbase Framework
GitHub

typo3/cms-core

>= 4.5.0, <= 4.5.23 · >= 4.6.0, < 4.6.17 · >= 6.0.0, < 6.0.3 · >= 4.7.0, < 4.7.9

2023-08-29 18:51:53
TYPO3 Open redirect vulnerability in the Access tracking mechanism
GitHub

typo3/cms-core

>= 4.6.0, < 4.6.17 · >= 4.5.0, < 4.5.24 · >= 6.0.0, < 6.0.3 · >= 4.7.0, < 4.7.9

2023-08-28 23:52:29
TYPO3 vulnerable to Information Disclosure via Content Editing Wizards component
GitHub

typo3/cms

>= 6.0.0, <= 6.0.11 · >= 4.7.0, <= 4.7.16 · >= 4.5.0, <= 4.5.31 · >= 6.1.0, <= 6.1.6

2023-08-28 23:47:49
TYPO3 Cross-Site Scripting (XSS) vulnerabilities in Content Editing Wizards component
GitHub

typo3/cms

>= 6.0.0, <= 6.0.11 · >= 4.7.0, <= 4.7.16 · >= 4.5.0, <= 4.5.31 · >= 6.1.0, <= 6.1.6

2023-08-28 23:36:29
TYPO3 Cross-site scripting (XSS) vulnerability in the Extbase Framework
GitHub

typo3/cms-core

>= 6.0.0, < 6.0.11 · >= 4.7.0, < 4.7.16 · >= 4.5.0, < 4.5.31 · >= 6.1.0, < 6.1.6

2023-08-28 23:36:20
« Previous Next »

Showing 201 to 250 of 520 results

1 2 3 4 5 6 7 8 9 10 11