Security advisories

medium2024-05-30

TYPO3 Broken Access Control in Localization Handling

GHSA-9rx9-7fmh-gj3g

high2024-05-30

TYPO3 Security Misconfiguration for Backend User Accounts

GHSA-rxc9-f2x6-qh4w

high2024-05-30

TYPO3 Denial of Service in Frontend Record Registration

GHSA-hjx5-v9xg-7h25

medium2024-05-30

TYPO3 Information Disclosure in Install Tool

GHSA-66c2-7g4p-wx4p

high2024-05-30

TYPO3 Security Misconfiguration in Install Tool Cookie

GHSA-ppvg-hw62-6ph9

medium2024-05-30

TYPO3 Cross-Site Scripting in Frontend User Login

GHSA-8c25-vj2w-p72j

medium2024-05-30

TYPO3 Cross-Site Scripting in Backend Modal Component

GHSA-g4c9-qfvw-fmr4

high2024-05-30

TYPO3 CMS Insecure Deserialization

GHSA-96jg-pmc4-cx39

medium2024-05-30

TYPO3 Cross-Site Scripting in Online Media Asset Rendering

GHSA-wg8h-gxf4-g4gh

high2024-05-30

TYPO3 CMS Privilege Escalation and SQL Injection

GHSA-45wj-jv2h-jwrf

critical2024-05-30

TYPO3 CMS Insecure Deserialization & Arbitrary Code Execution

GHSA-cc97-g92w-jm65

high2024-05-30

TYPO3 CMS Authentication Bypass vulnerability

GHSA-x4rj-f7m6-42c3

medium2022-06-17

Insufficient Session Expiration in TYPO3's Admin Tool

GHSA-wwjw-r3gj-39fq · CVE-2022-31050

medium2022-06-17

Cross-Site Scripting in TYPO3's Frontend Login Mailer

GHSA-h4mx-xv96-2jgm · CVE-2022-31049

medium2022-06-17

Cross-Site Scripting in TYPO3's Form Framework

GHSA-3r95-23jp-mhvg · CVE-2022-31048

medium2022-06-17

Insertion of Sensitive Information into Log File in typo3/cms-core

GHSA-fh99-4pgr-8j99 · CVE-2022-31047

medium2022-06-17

Information Disclosure via Export Module

GHSA-8gmv-9hwg-w89g · CVE-2022-31046

medium2022-05-24

Typo3 Cross-Site Scripting in Link Handling

GHSA-r6fv-56gp-j3r4 · CVE-2019-12748

high2022-05-24

TYPO3 Vulnerable to Insecure Deserialization

GHSA-86hp-xrhj-fhpq · CVE-2019-12747

high2022-05-17

TYPO3 SQL injection vulnerability in the Extbase Framework

GHSA-m64j-j252-jxmr · CVE-2013-1842