Skip to contentTypo3 vulnerabilities
Newest
- typo3 html sanitizer, html-sanitizer +1 moreBy-passing Cross-Site Scripting Protection in HTML SanitizerCVE-2023-38500Fix available4.7 Medium
- typo3typo3/cms-core Information Disclosure due to Out-of-scope Site ResolutionCVE-2023-38499Fix available3.7 Low
- ckeditor-wordcount-plugin project ckeditor-wordcount-plugin, typo3 cms-rte-ckeditor +1 moreCross-site Scripting (XSS) in Source Mode of Editor in ckeditor-wordcount-pluginCVE-2023-37905Fix available6.1 Medium
- typo3Persisted Cross-Site Scripting in Frontend Rendering in typo3CVE-2023-24814Fix available8.8 High
- typo3TYPO3 contains Sensitive Information Disclosure via YAML Placeholder Expressions in Site ConfigurationCVE-2022-23504Fix available5.7 Medium
- typo3TYPO3 vulnerable to Arbitrary Code Execution via Form FrameworkCVE-2022-23503Fix available7.5 High
- typo3TYPO3 contains Insufficient Session Expiration after Password ResetCVE-2022-23502Fix available5.4 Medium
- typo3TYPO3 vulnerable to Improper Authentication in Frontend LoginCVE-2022-23501Fix available5.9 Medium
- typo3TYPO3 subject to Uncontrolled Recursion resulting in Denial of ServiceCVE-2022-23500Fix available5.9 Medium
- typo3 html-sanitizer, html sanitizer +1 moreCross-Site Scripting Protection bypass in HTML SanitizerCVE-2022-23499Fix available6.1 Medium
- typo3User Enumeration via Response Timing in TYPO3CVE-2022-36105Fix available5.3 Medium
- typo3Missing check for expiration time of password reset token in TYPO3CVE-2022-36106Fix available5.4 Medium
- typo3Stored Cross-Site Scripting via FileDumpControllerCVE-2022-36107Fix available6.5 Medium
- typo3Denial of Service via Page Error Handling in TYPO3/cmsCVE-2022-36104Fix available5.9 Medium
- typo3Cross-Site Scripting in typo3/cms-coreCVE-2022-36108Fix available6.5 Medium
- typo3 html-sanitizer, html sanitizer +1 moreBypass of Cross-Site Scripting Protection in typo3/html-sanitizerCVE-2022-36020Fix available6.1 Medium
- typo3Insufficient Session Expiration in TYPO3 Admin ToolCVE-2022-31050Fix available6.0 Medium
- typo3Cross-Site Scripting in Form FrameworkCVE-2022-31048Fix available5.4 Medium
- typo3Cross-Site Scripting in Frontend Login MailerCVE-2022-31049Fix available5.4 Medium
- typo3Information Disclosure via Export Module in TYPO3 CMSCVE-2022-31046Fix available4.3 Medium
- typo3Insertion of Sensitive Information into Log File in typo3/cms-coreCVE-2022-31047Fix available5.3 Medium
- typo3Cross-Site-Request-Forgery in Backend URI Handling in Typo3CVE-2021-41113Fix available8.8 High
- typo3HTTP Host Header Injection in Request Handling in Typo3CVE-2021-41114Fix available4.8 Medium
- typo3, typo3 typo3.cms +1 moreCross-Site Scripting via Rich-Text ContentCVE-2021-32768Fix available6.1 Medium
- typo3, typo3 typo3.cms +1 moreInformation Disclosure in User AuthenticationCVE-2021-32767Fix available5.3 Medium
- typo3, typo3 typo3.cms +1 moreCross-Site Scripting in Backend Grid ViewCVE-2021-32669Fix available6.4 Medium
- typo3, typo3 typo3.cms +1 moreCross-Site Scripting in Query Generator & Query ViewCVE-2021-32668Fix available6.4 Medium
- typo3, typo3 typo3.cms +1 moreCross-Site Scripting in Page PreviewCVE-2021-32667Fix available6.4 Medium
- benjaminkott bootstrap package, typo3 +1 moreCross-Site Scripting in Content RenderingCVE-2021-21365Fix available5.4 Medium
- typo3, typo3 typo3.cms +1 moreCross-Site Scripting in Content Preview (CType menu)CVE-2021-21370Fix available5.4 Medium
- typo3, typo3 typo3.cms +1 moreDenial of Service in Page Error HandlingCVE-2021-21359Fix available5.9 Medium
- typo3, typo3 typo3.cms +1 moreCleartext storage of session identifierCVE-2021-21339Fix available5.9 Medium
- typo3, typo3 typo3.cms +1 moreCross-Site Scripting in Content PreviewCVE-2021-21340Fix available5.4 Medium
- typo3, typo3 typo3.cms +1 moreUnrestricted File Upload in Form FrameworkCVE-2021-21355Fix available8.6 High
- typo3, typo3 typo3.cms +1 moreBroken Access Control in Form FrameworkCVE-2021-21357Fix available8.3 High
- typo3, typo3 typo3.cms +1 moreImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in typo3/cms-formCVE-2021-21358Fix available5.4 Medium
- typo3, typo3 typo3.cms +1 moreOpen Redirection in Login HandlingCVE-2021-21338Fix available4.7 Medium
- typo3, typo3 typo3.cms +1 moreXML External Entity in Dashboard WidgetCVE-2020-26229Fix available3.7 Low
- typo3, typo3 typo3.cms +1 moreCleartext storage of session identifierCVE-2020-26228Fix available8.1 High
- typo3, typo3 typo3.cms +1 moreCross-Site Scripting in Fluid view helpersCVE-2020-26227Fix available6.1 Medium
- fluid-cloudnative fluidCross-Site Scripting in TYPO3 FluidCVE-2020-26216Fix available8.0 High
- fluid-cloudnative fluid, typo3 fluid engine, typo3 +2 moreCross-Site Scripting in TYPO3 Fluid EngineCVE-2020-15241Fix available4.7 Medium
- typo3, typo3 cms +1 moreMissing Required Cryptographic Step Leading to Sensitive Information Disclosure in TYPO3 CMSCVE-2020-15098Fix available8.8 High
- typo3, typo3 cms +1 moreExposure of Sensitive Information to an Unauthorized Actor in TYPO3 CMSCVE-2020-15099Fix available8.1 High
- friendsoftypo3 mediacePotential Remote Code Execution in TYPO3 with mediace extensionCVE-2020-15086Fix available9.8 Critical
- typo3, typo3 cms +1 moreCross-Site Request Forgery in TYPO3 CMSCVE-2020-11069Fix available8.0 High
- typo3, typo3 cms +1 moreDeserialization of Untrusted Data in TYPO3 CMSCVE-2020-11067Fix available8.8 High
- typo3, typo3 cms +1 moreImproperly Controlled Modification of Dynamically-Determined Object Attributes in TYPO3 CMSCVE-2020-11066Fix available8.7 High
- typo3, typo3 cms +1 moreCross-Site Scripting in TYPO3 CMSCVE-2020-11065Fix available5.4 Medium
- typo3, typo3 cms +1 moreCross-Site Scripting in TYPO3 CMSCVE-2020-11064Fix available5.4 Medium
- Show moreLoading…