typo3/cms-core vulnerabilities (Packagist)
128 vulnerabilities.
-
typo3/cms-corePackagist TYPO3 CMS - Broken Access Control in Backend and Install Tool 7.3 High -
typo3/cms-corePackagist TYPO3 CMS - Broken Access Control in Media Module 7.1 High -
typo3/cms-corePackagist TYPO3 CMS - Privilege Escalation & SQL Injection in Form Framework 8.7 High -
typo3/cms-corePackagist TYPO3 CMS - Insecure Deserialization in Core API 6.3 Medium -
typo3/cms-corePackagist TYPO3 CMS - Broken Access Control in File Abstraction Layer 2.1 Low -
typo3/cms-corePackagist TYPO3 CMS - Broken Access Control in Backend API 5.3 Medium -
typo3/cms-corePackagist TYPO3 CMS - Broken Access Control in Clipboard 5.3 Medium -
typo3/cms-corePackagist TYPO3 CMS - Broken Access Control in DataHandler 5.3 Medium -
typo3/cms-corePackagist TYPO3 CMS - Broken Access Control in Recycler 5.3 Medium -
typo3/cms-corePackagist TYPO3 CMS - Cross-Site Scripting in Indexed Search 5.1 Medium -
typo3/cms-corePackagist TYPO3 CMS - Open Redirect in Core Utilities 5.3 Medium -
typo3/cms-corePackagist TYPO3 CMS - Broken Access Control in Form Framework 7.6 High -
typo3/cms-corePackagist TYPO3 CMS - Destructive Actions on File Mount Folders 7.2 High -
typo3/cms-corePackagist TYPO3 CMS - Broken Access Control in Form Framework 7.6 High -
typo3/cms-corePackagist TYPO3 CMS Allows Insecure Deserialization via Mailer File Spool 5.2 Medium -
typo3/cms-corePackagist Information Disclosure via File Abstraction Layer 5.3 Medium -
typo3/cms-corePackagist Insufficient Entropy in Password Generation 6.3 Medium -
typo3/cms-corePackagist Open Redirect in TYPO3 CMS 5.3 Medium -
typo3/cms-corePackagist TYPO3 CMS Vulnerable to Privilege Escalation to System Maintainer 7.2 High -
typo3/cms-corePackagist TYPO3 CMS Vulnerable to Unrestricted File Upload in File Abstraction Layer 5.4 Medium -
typo3/cms-corePackagist TYPO3 Vulnerable to Unverified Password Change for Backend Users 3.8 Low -
typo3/cms-corePackagist TYPO3 Vulnerable to Information Disclosure via DBAL Restriction Handling 3.7 Low -
typo3/cms-corePackagist Potential Open Redirect via Parsing Differences in TYPO3 4.8 Medium -
typo3/cms-corePackagist TYPO3 Possible Insecure Deserialization in Extbase Request Handling 8.1 High -
typo3/cms-corePackagist TYPO3 Cross-Site Scripting in Filelist Module 6.1 Medium -
typo3/cms-corePackagist TYPO3 Cross-Site Scripting in Link Handling 6.1 Medium -
typo3/cms-corePackagist TYPO3 Cross-Site Scripting in Form Framework validation handling 6.1 Medium -
typo3/cms-corePackagist TYPO3 Arbitrary Code Execution and Cross-Site Scripting in Backend API 8.8 High -
typo3/cms-corePackagist TYPO3 Broken Access Control in Import Module 4.3 Medium -
typo3/cms-corePackagist TYPO3 Security Misconfiguration in Frontend Session Handling 8.2 High -
typo3/cms-corePackagist TYPO3 Information Disclosure in Backend User Interface 5.4 Medium -
typo3/cms-corePackagist TYPO3 Information Disclosure in User Authentication 5.3 Medium -
typo3/cms-corePackagist TYPO3 Disclosure of Information about Installed Extensions 5.3 Medium -
typo3/cms-corePackagist TYPO3 Information Disclosure in Page Tree 4.3 Medium -
typo3/cms-corePackagist TYPO3 Security Misconfiguration in User Session Handling 6.5 Medium -
typo3/cms-corePackagist TYPO3 Cross-Site Scripting in Form Framework 6.1 Medium -
typo3/cms-corePackagist TYPO3 Cross-Site Scripting in Language Pack Handling 6.1 Medium -
typo3/cms-corePackagist TYPO3 Arbitrary Code Execution via File List Module 8.8 High -
typo3/cms-corePackagist TYPO3 Broken Access Control in Localization Handling 6.5 Medium -
typo3/cms-corePackagist TYPO3 Security Misconfiguration for Backend User Accounts 7.5 High -
typo3/cms-corePackagist TYPO3 Denial of Service in Frontend Record Registration 7.5 High -
typo3/cms-corePackagist TYPO3 Denial of Service in Online Media Asset Handling 5.3 Medium -
typo3/cms-corePackagist TYPO3 Information Disclosure in Install Tool 5.3 Medium -
typo3/cms-corePackagist TYPO3 Security Misconfiguration in Install Tool Cookie 7.5 High -
typo3/cms-corePackagist TYPO3 Cross-Site Scripting in Frontend User Login 6.1 Medium -
typo3/cms-corePackagist TYPO3 Cross-Site Scripting in Backend Modal Component 6.1 Medium -
typo3/cms-corePackagist TYPO3 CMS Insecure Deserialization 7.5 High -
typo3/cms-corePackagist TYPO3 Cross-Site Scripting in Online Media Asset Rendering 6.1 Medium -
typo3/cms-corePackagist TYPO3 CMS Privilege Escalation and SQL Injection 7.5 High -
typo3/cms-corePackagist TYPO3 CMS Insecure Deserialization & Arbitrary Code Execution 9.8 Critical - Show olderLoading…