Advisories for packages from typo3

Listing reported advisories for packages from typo3 sorted by their report date.

Typo3 Backend Configuration XSS Vulnerability
GitHub

typo3/cms

>= 4.6, < 4.6.12 · >= 4.5, < 4.5.19 · >= 4.7, < 4.7.4

2024-01-12 18:12:28
Typo3 Backend XSS Vulnerability
GitHub

typo3/cms

>= 4.6, < 4.6.12 · >= 4.5, < 4.5.19 · >= 4.7, < 4.7.4

2024-01-12 18:12:08
Typo3 Exception Handler XSS
GitHub

typo3/cms

>= 4.5, < 4.5.15 · >= 4.4, < 4.4.15 · >= 4.6, < 4.6.8 · = 4.7

2024-01-12 18:01:24
Typo3 Backend History Module Vulnerable to SQL Injection
GitHub

typo3/cms

>= 4.6.0, <= 4.6.13 · >= 4.5.0, <= 4.5.20 · >= 4.7.0, <= 4.7.5

2024-01-12 18:00:16
Typo3 Function Menu API XSS Vulnerability
GitHub

typo3/cms

>= 4.6.0, < 4.6.14 · >= 4.5.0, < 4.5.21 · >= 4.7.0, < 4.7.6

2024-01-12 17:59:46
Typo3 Backend History Module Vulnerable to XSS
GitHub

typo3/cms

>= 4.6.0, < 4.6.14 · >= 4.5.0, < 4.5.21 · >= 4.7.0, < 4.7.6

2024-01-12 17:59:22
Typo3 Backend API XSS Vulnerability
GitHub

typo3/cms

>= 4.6.0, < 4.6.14 · >= 4.5.0, < 4.5.21 · >= 4.7.0, < 4.7.6

2024-01-12 17:58:36
Information Disclosure in typo3/cms-install tool
GitHub

typo3/cms-install

>= 12.2.0, < 12.4.8

2023-11-14 20:34:27
Bypassing Cross-Site Scripting Protection in TYPO3 HTML Sanitizer
GitHub

typo3/html-sanitizer

>= 2.0.0, <= 2.1.3 · >= 1.0.0, <= 1.5.2

2023-11-14 20:33:28
TYPO3 vulnerable to Weak Authentication in Session Handling
GitHub

typo3/cms-core

>= 11.0.0, <= 11.5.32 · >= 10.0.0, <= 10.4.40 · >= 12.0.0, <= 12.4.7 · >= 9.0.0, <= 9.5.43 · >= 8.0.0, <= 8.7.54

2023-11-14 18:30:27
TYPO3-CORE-SA-2023-006: Weak Authentication in Session Handling
FriendsOfPHP

typo3/cms-core

>=11.0.0, <11.5.33 · >=10.0.0, <10.4.41 · >=12.0.0, <12.4.8 · >=9.0.0, <9.5.44 · >=8.0.0, <8.7.55

2023-11-14 09:58:00
Typo3 XSS Vulnerability
GitHub

typo3/cms

<= 8.7.11 · < 9.2.0

2023-09-21 09:52:43
Typo3 Extbase Framework Unsafe Deserialization
GitHub

typo3/cms

>= 4.5.0, < 4.5.14 · >= 4.4.0, < 4.4.14 · >= 4.6, <= 4.6.6

2023-08-29 23:30:38
Typo3 Backend XSS Vulnerabilities
GitHub

typo3/cms

>= 4.5.0, <= 4.5.13 · >= 4.4.0, <= 4.4.13 · >= 4.6.0, <= 4.6.6

2023-08-29 23:29:33
Typo3 API XSS Vulnerabilities
GitHub

typo3/cms

>= 4.5.0, <= 4.5.13 · >= 4.4.0, <= 4.4.13 · >= 4.6.0, <= 4.6.6

2023-08-29 23:29:29
TYPO3 vulnerable to Insecure Unserialize via Content Editing Wizards component
GitHub

typo3/cms

>= 6.0.0, <= 6.0.11 · >= 4.7.0, <= 4.7.16 · >= 4.5.0, <= 4.5.31 · >= 6.1.0, <= 6.1.6

2023-08-29 19:02:20
TYPO3 is vulnerable to Mass Assignment in the Extension table administration library
GitHub

typo3/cms-core

>= 6.0.0, < 6.0.11 · >= 4.6.0, < 4.7.16 · >= 4.5.0, < 4.5.31

2023-08-29 19:02:14
TYPO3 Improper Access Control vulnerability
GitHub

typo3/cms-core

>= 6.0.0, < 6.0.11 · >= 4.7.0, < 4.7.16 · >= 4.5.0, < 4.5.31 · >= 6.1.0, < 6.1.6

2023-08-29 19:02:11
TYPO3 SQL injection vulnerability in the Extbase Framework
GitHub

typo3/cms-core

>= 4.5.0, <= 4.5.23 · >= 4.6.0, < 4.6.17 · >= 6.0.0, < 6.0.3 · >= 4.7.0, < 4.7.9

2023-08-29 18:51:53
TYPO3 Open redirect vulnerability in the Access tracking mechanism
GitHub

typo3/cms-core

>= 4.6.0, < 4.6.17 · >= 4.5.0, < 4.5.24 · >= 6.0.0, < 6.0.3 · >= 4.7.0, < 4.7.9

2023-08-28 23:52:29
TYPO3 vulnerable to Information Disclosure via Content Editing Wizards component
GitHub

typo3/cms

>= 6.0.0, <= 6.0.11 · >= 4.7.0, <= 4.7.16 · >= 4.5.0, <= 4.5.31 · >= 6.1.0, <= 6.1.6

2023-08-28 23:47:49
TYPO3 Cross-Site Scripting (XSS) vulnerabilities in Content Editing Wizards component
GitHub

typo3/cms

>= 6.0.0, <= 6.0.11 · >= 4.7.0, <= 4.7.16 · >= 4.5.0, <= 4.5.31 · >= 6.1.0, <= 6.1.6

2023-08-28 23:36:29
TYPO3 Cross-site scripting (XSS) vulnerability in the Extbase Framework
GitHub

typo3/cms-core

>= 6.0.0, < 6.0.11 · >= 4.7.0, < 4.7.16 · >= 4.5.0, < 4.5.31 · >= 6.1.0, < 6.1.6

2023-08-28 23:36:20
TYPO3 Cross-site scripting (XSS) vulnerability in the Backend User Administration Module
GitHub

typo3/cms-core

>= 6.0, < 6.0.12 · >= 6.1, < 6.1.7

2023-08-28 23:35:37
TYPO3 Improper Access Management in the File Abstraction Layer
GitHub

typo3/cms-core

>= 6.1, < 6.1.4 · >= 6.0, < 6.0.9

2023-08-28 23:35:06
Typo3 Cross-Site Scripting in Flash component (ELTS)
GitHub

typo3/cms

>= 6.2.0, <= 6.2.38 · >= 7.0.0, <= 7.1.0 · >= 7.0.0, < 7.1.0

2023-08-18 05:02:55
Typo3 Vulnerable to Cache Poisoning
GitHub

typo3/cms

>= 6.1.0, <= 6.1.12 · >= 6.0.0, <= 6.0.14 · >= 4.7.0, <= 4.7.20 · >= 4.6.0, <= 4.6.18 · >= 4.5.0, < 4.5.39 · >= 7.0.0, < 7.0.2 · >= 6.2.0, < 6.2.9

2023-08-16 23:14:21
Typo3 XSS Vulnerability
GitHub

typo3/cms

>= 6.2, < 6.2.16 · >= 7.0, < 7.6.1

2023-08-04 23:08:50
Extbase for TYPO3 allows RCE
GitHub

typo3/cms-extbase

>= 7.0, < 7.6.8 · < 6.2.24 · = 8.1.1

2023-07-31 21:01:25
Cross-Site Scripting in CKEditor4 WordCount Plugin
GitHub

typo3/cms-rte-ckeditor

>= 11.0.0, < 11.5.30 · >= 10.0.0, < 10.4.39 · >= 12.0.0, < 12.4.4 · >= 9.5.0, < 9.5.42

2023-07-25 19:11:44
By-passing Cross-Site Scripting Protection in HTML Sanitizer
GitHub

typo3/html-sanitizer

>= 2.0.0, < 2.1.2 · >= 1.0.0, < 1.5.1

2023-07-25 18:27:19
Information Disclosure due to Out-of-scope Site Resolution
GitHub

typo3/cms-core

>= 11.0.0, < 11.5.30 · >= 10.0.0, < 10.4.39 · >= 12.0.0, < 12.4.4 · >= 9.4.0, < 9.5.42

2023-07-25 18:25:53
TYPO3 is vulnerable to Cross-Site Scripting via frontend rendering
GitHub

typo3/cms-core

>= 11.0.0, < 11.5.23 · >= 10.0.0, < 10.4.36 · >= 10.0.0, < 10.4.35 · >= 12.0.0, < 12.2.0 · >= 9.0.0, < 9.5.40 · >= 8.7.0, < 8.7.51

2023-02-08 21:33:25
TYPO3-CORE-SA-2023-001: Persisted Cross-Site Scripting in Frontend Rendering
FriendsOfPHP

typo3/cms

>=11.0.0, <11.5.23 · >=10.0.0, <10.4.35 · >=12.0.0, <12.2.0

2023-02-07 09:25:10
TYPO3-CORE-SA-2023-001: Persisted Cross-Site Scripting in Frontend Rendering
FriendsOfPHP

typo3/cms-core

>=11.0.0, <11.5.23 · >=10.0.0, <10.4.35 · >=12.0.0, <12.2.0

2023-02-07 09:25:10
TYPO3 vulnerable to Insufficient Session Expiration
GitHub

typo3/cms

>= 3.0.0, < 3.0.3 · < 2.0.5

2022-12-19 21:10:09
TYPO3 HTML Sanitizer vulnerable to Cross-Site Scripting
GitHub

typo3/html-sanitizer

>= 11.0.0, < 11.5.20 · >= 10.0.0, < 10.4.33 · >= 12.0.0, < 12.1.1 · >= 2.0.0, < 2.1.1 · >= 1.0.0, < 1.5.0

2022-12-13 18:32:47
TYPO3 CMS vulnerable to Sensitive Information Disclosure via YAML Placeholder Expressions in Site Configuration
GitHub

typo3/cms-core

>= 11.0.0, < 11.5.20 · >= 10.0.0, < 10.4.33 · >= 12.0.0, < 12.1.1 · >= 9.0.0, < 9.5.38

2022-12-13 17:13:39
TYPO3 CMS vulnerable to Arbitrary Code Execution via Form Framework
GitHub

typo3/cms-core

>= 11.0.0, < 11.5.20 · >= 10.0.0, < 10.4.33 · >= 12.0.0, < 12.1.1 · >= 9.0.0, < 9.5.38 · >= 8.0.0, < 8.7.49

2022-12-13 17:11:46
TYPO3 CMS vulnerable to Insufficient Session Expiration after Password Reset
GitHub

typo3/cms-core

>= 11.0.0, < 11.5.20 · >= 10.0.0, < 10.4.33 · >= 12.0.0, < 12.1.1

2022-12-13 17:06:09
TYPO3 CMS vulnerable to Weak Authentication in Frontend Login
GitHub

typo3/cms-core

>= 11.0.0, < 11.5.20 · >= 10.0.0, < 10.4.33 · >= 12.0.0, < 12.1.1 · >= 9.0.0, < 9.5.38 · < 8.7.49

2022-12-13 17:04:04
TYPO3 CMS vulnerable to Denial of Service in Page Error Handling
GitHub

typo3/cms-core

>= 11.0.0, < 11.5.20 · >= 10.0.0, < 10.4.33 · >= 9.0.0, < 9.5.38

2022-12-13 17:02:10
TYPO3-CORE-SA-2022-017: By-passing Cross-Site Scripting Protection in HTML Sanitizer
FriendsOfPHP

typo3/cms

>=11.0.0, <11.5.20 · >=10.0.0, <10.4.33 · >=12.0.0, <12.1.1

2022-12-13 09:21:15
TYPO3-CORE-SA-2022-017: By-passing Cross-Site Scripting Protection in HTML Sanitizer
FriendsOfPHP

typo3/cms-core

>=11.0.0, <11.5.20 · >=10.0.0, <10.4.33 · >=12.0.0, <12.1.1

2022-12-13 09:21:15
TYPO3-CORE-SA-2022-016: Sensitive Information Disclosure via YAML Placeholder Expressions in Site Configuration
FriendsOfPHP

typo3/cms

>=11.0.0, <11.5.20 · >=10.0.0, <10.4.33 · >=12.0.0, <12.1.1

2022-12-13 09:21:07
TYPO3-CORE-SA-2022-016: Sensitive Information Disclosure via YAML Placeholder Expressions in Site Configuration
FriendsOfPHP

typo3/cms-core

>=11.0.0, <11.5.20 · >=10.0.0, <10.4.33 · >=12.0.0, <12.1.1

2022-12-13 09:21:07
TYPO3-CORE-SA-2022-015: Arbitrary Code Execution via Form Framework
FriendsOfPHP

typo3/cms

>=11.0.0, <11.5.20 · >=10.0.0, <10.4.33 · >=12.0.0, <12.1.1

2022-12-13 09:20:59
TYPO3-CORE-SA-2022-015: Arbitrary Code Execution via Form Framework
FriendsOfPHP

typo3/cms-core

>=11.0.0, <11.5.20 · >=10.0.0, <10.4.33 · >=12.0.0, <12.1.1

2022-12-13 09:20:59
TYPO3-CORE-SA-2022-014: Insufficient Session Expiration after Password Reset
FriendsOfPHP

typo3/cms

>=11.0.0, <11.5.20 · >=10.0.0, <10.4.33 · >=12.0.0, <12.1.1

2022-12-13 09:20:51
TYPO3-CORE-SA-2022-014: Insufficient Session Expiration after Password Reset
FriendsOfPHP

typo3/cms-core

>=11.0.0, <11.5.20 · >=10.0.0, <10.4.33 · >=12.0.0, <12.1.1

2022-12-13 09:20:51
« Previous Next »

Showing 201 to 250 of 493 results

1 2 3 4 5 6 7 8 9 10