Security advisories

medium2025-09-09

TYPO3 CMS exposes sensitive information in an error message

GHSA-cvm2-5f78-g9m8 · CVE-2025-59016

medium2025-09-09

TYPO3 CMS uses insufficient entropy when generating passwords

GHSA-p5jq-5383-qvc7 · CVE-2025-59015

medium2025-09-09

TYPO3 CMS has an open‑redirect vulnerability

GHSA-72jf-5fg5-3cw3 · CVE-2025-59013

high2025-05-20

TYPO3 Allows Privilege Escalation to System Maintainer

GHSA-6frx-j292-c844 · CVE-2025-47940

medium2025-05-20

TYPO3 Allows Unrestricted File Upload in File Abstraction Layer

GHSA-9hq9-cr36-4wpj · CVE-2025-47939

low2025-05-20

TYPO3 Allows Information Disclosure via DBAL Restriction Handling

GHSA-x8pv-fgxp-8v3x · CVE-2025-47937

high2024-05-30

TYPO3 Possible Insecure Deserialization in Extbase Request Handling

GHSA-5h5v-m596-r6rf

medium2024-05-30

TYPO3 Cross-Site Scripting in Filelist Module

GHSA-6xwf-7rfm-4gwc

medium2024-05-30

TYPO3 Cross-Site Scripting in Link Handling

GHSA-4ppr-jw47-9qm5

medium2024-05-30

TYPO3 Cross-Site Scripting in Form Framework validation handling

GHSA-95qm-3xp7-vfj5

high2024-05-30

TYPO3 Arbitrary Code Execution and Cross-Site Scripting in Backend API

GHSA-x428-565f-8xj2

medium2024-05-30

TYPO3 Broken Access Control in Import Module

GHSA-g776-759r-pf6x

high2024-05-30

TYPO3 Security Misconfiguration in Frontend Session Handling

GHSA-82vp-jr39-4j2j

medium2024-05-30

TYPO3 Information Disclosure in Backend User Interface

GHSA-rv8r-8mh5-5376

medium2024-05-30

TYPO3 Information Disclosure in User Authentication

GHSA-wj85-rg5g-v8jm

medium2024-05-30

TYPO3 Information Disclosure in Page Tree

GHSA-wvvp-jwf5-qcpc

medium2024-05-30

TYPO3 Security Misconfiguration in User Session Handling

GHSA-xmgr-jff3-fcfv

medium2024-05-30

TYPO3 Cross-Site Scripting in Form Framework

GHSA-4459-qrcc-vfcf

medium2024-05-30

TYPO3 Cross-Site Scripting in Language Pack Handling

GHSA-76r3-m635-p3vc

high2024-05-30

TYPO3 Arbitrary Code Execution via File List Module

GHSA-f9hr-7cfq-mjg2