Security advisories

high2024-05-30

TYPO3 Security Misconfiguration in Frontend Session Handling

typo3-cms/core · GHSA-82vp-jr39-4j2j

medium2024-05-30

TYPO3 Information Disclosure in Backend User Interface

typo3-cms/core · GHSA-rv8r-8mh5-5376

medium2024-05-30

TYPO3 Information Disclosure in User Authentication

typo3-cms/core · GHSA-wj85-rg5g-v8jm

medium2024-05-30

TYPO3 Information Disclosure in Page Tree

typo3-cms/core · GHSA-wvvp-jwf5-qcpc

medium2024-05-30

TYPO3 Security Misconfiguration in User Session Handling

typo3-cms/core · GHSA-xmgr-jff3-fcfv

medium2024-05-30

TYPO3 Cross-Site Scripting in Form Framework

typo3-cms/core · GHSA-4459-qrcc-vfcf

medium2024-05-30

TYPO3 Cross-Site Scripting in Language Pack Handling

typo3-cms/core · GHSA-76r3-m635-p3vc

high2024-05-30

TYPO3 Arbitrary Code Execution via File List Module

typo3-cms/core · GHSA-f9hr-7cfq-mjg2

medium2024-05-30

TYPO3 Broken Access Control in Localization Handling

typo3-cms/core · GHSA-9rx9-7fmh-gj3g

medium2024-05-30

TYPO3 Cross-Site Scripting in Fluid ViewHelpers

typo3-cms/fluid · GHSA-22q7-cg4r-p9mx

high2024-05-30

TYPO3 Security Misconfiguration for Backend User Accounts

typo3-cms/core · GHSA-rxc9-f2x6-qh4w

high2024-05-30

TYPO3 Denial of Service in Frontend Record Registration

typo3-cms/core · GHSA-hjx5-v9xg-7h25

medium2024-05-30

TYPO3 Information Disclosure in Install Tool

typo3-cms/core · GHSA-66c2-7g4p-wx4p

high2024-05-30

TYPO3 Security Misconfiguration in Install Tool Cookie

typo3-cms/core · GHSA-ppvg-hw62-6ph9

medium2024-05-30

TYPO3 Cross-Site Scripting in Frontend User Login

typo3-cms/core · GHSA-8c25-vj2w-p72j

medium2024-05-30

TYPO3 Cross-Site Scripting in Backend Modal Component

typo3-cms/core · GHSA-g4c9-qfvw-fmr4

high2024-05-30

TYPO3 CMS Insecure Deserialization

typo3-cms/core · GHSA-96jg-pmc4-cx39

medium2024-05-30

TYPO3 Cross-Site Scripting in Online Media Asset Rendering

typo3-cms/core · GHSA-wg8h-gxf4-g4gh

high2024-05-30

TYPO3 CMS Privilege Escalation and SQL Injection

typo3-cms/core · GHSA-45wj-jv2h-jwrf

critical2024-05-30

TYPO3 CMS Insecure Deserialization & Arbitrary Code Execution

typo3-cms/core · GHSA-cc97-g92w-jm65