typo3 vulnerabilities (Bitnami)
50 vulnerabilities.
-
typo3Bitnami Path Traversal in TYPO3 File Abstraction Layer Storages 4.9 Medium -
typo3Bitnami By-passing Cross-Site Scripting Protection in HTML Sanitizer 4.7 Medium -
typo3Bitnami Information Disclosure in Install Tool in typo3/cms-install 3.7 Low -
typo3Bitnami Weak Authentication in Session Handling in typo3/cms-core 4.2 Medium -
typo3Bitnami typo3/cms-core Information Disclosure due to Out-of-scope Site Resolution 3.7 Low -
typo3Bitnami Persisted Cross-Site Scripting in Frontend Rendering in typo3 8.8 High -
typo3Bitnami TYPO3 contains Sensitive Information Disclosure via YAML Placeholder Expressions in Site Configuration 5.7 Medium -
typo3Bitnami TYPO3 vulnerable to Arbitrary Code Execution via Form Framework 7.5 High -
typo3Bitnami TYPO3 contains Insufficient Session Expiration after Password Reset 5.4 Medium -
typo3Bitnami TYPO3 vulnerable to Improper Authentication in Frontend Login 5.9 Medium -
typo3Bitnami TYPO3 subject to Uncontrolled Recursion resulting in Denial of Service 5.9 Medium -
typo3Bitnami User Enumeration via Response Timing in TYPO3 5.3 Medium -
typo3Bitnami Missing check for expiration time of password reset token in TYPO3 5.4 Medium -
typo3Bitnami Stored Cross-Site Scripting via FileDumpController 6.5 Medium -
typo3Bitnami Denial of Service via Page Error Handling in TYPO3/cms 5.9 Medium -
typo3Bitnami Cross-Site Scripting in typo3/cms-core 6.5 Medium -
typo3Bitnami Insufficient Session Expiration in TYPO3 Admin Tool 6.0 Medium -
typo3Bitnami Cross-Site Scripting in Form Framework 5.4 Medium -
typo3Bitnami Cross-Site Scripting in Frontend Login Mailer 5.4 Medium -
typo3Bitnami Information Disclosure via Export Module in TYPO3 CMS 4.3 Medium -
typo3Bitnami Insertion of Sensitive Information into Log File in typo3/cms-core 5.3 Medium -
typo3Bitnami Cross-Site-Request-Forgery in Backend URI Handling in Typo3 8.8 High -
typo3Bitnami HTTP Host Header Injection in Request Handling in Typo3 4.8 Medium -
typo3Bitnami Cross-Site Scripting via Rich-Text Content 6.1 Medium -
typo3Bitnami Information Disclosure in User Authentication 5.3 Medium -
typo3Bitnami Cross-Site Scripting in Backend Grid View 6.4 Medium -
typo3Bitnami Cross-Site Scripting in Query Generator & Query View 6.4 Medium -
typo3Bitnami Cross-Site Scripting in Page Preview 6.4 Medium -
typo3Bitnami Cross-Site Scripting in Content Rendering 5.4 Medium -
typo3Bitnami Cross-Site Scripting in Content Preview (CType menu) 5.4 Medium -
typo3Bitnami Denial of Service in Page Error Handling 5.9 Medium -
typo3Bitnami Cleartext storage of session identifier 5.9 Medium -
typo3Bitnami Cross-Site Scripting in Content Preview 5.4 Medium -
typo3Bitnami Unrestricted File Upload in Form Framework 8.6 High -
typo3Bitnami Broken Access Control in Form Framework 8.3 High -
typo3Bitnami Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in typo3/cms-form 5.4 Medium -
typo3Bitnami Open Redirection in Login Handling 4.7 Medium -
typo3Bitnami XML External Entity in Dashboard Widget 3.7 Low -
typo3Bitnami Cleartext storage of session identifier 8.1 High -
typo3Bitnami Cross-Site Scripting in Fluid view helpers 6.1 Medium -
typo3Bitnami Cross-Site Scripting in TYPO3 Fluid Engine 4.7 Medium -
typo3Bitnami Missing Required Cryptographic Step Leading to Sensitive Information Disclosure in TYPO3 CMS 8.8 High -
typo3Bitnami Exposure of Sensitive Information to an Unauthorized Actor in TYPO3 CMS 8.1 High -
typo3Bitnami Cross-Site Request Forgery in TYPO3 CMS 8.0 High -
typo3Bitnami Deserialization of Untrusted Data in TYPO3 CMS 8.8 High -
typo3Bitnami Improperly Controlled Modification of Dynamically-Determined Object Attributes in TYPO3 CMS 8.7 High -
typo3Bitnami Cross-Site Scripting in TYPO3 CMS 5.4 Medium -
typo3Bitnami Cross-Site Scripting in TYPO3 CMS 5.4 Medium -
typo3Bitnami Observable Response Discrepancy in TYPO3 CMS 3.7 Low -
typo3Bitnami Typo3 Cross-Site Scripting in Flash component (ELTS) 4.8 Medium