Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:composer/typo3/cms@7.0.1
Typecomposer
Namespacetypo3
Namecms
Version7.0.1
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version10.4.35
Latest_non_vulnerable_version12.2.0
Affected_by_vulnerabilities
0
url VCID-1ng4-5tkh-g7h5
vulnerability_id VCID-1ng4-5tkh-g7h5
summary 
Multiple Cross-Site Scripting vulnerabilities in backend
Failing to properly encode user input, several backend components are susceptible to Cross-Site Scripting, allowing authenticated editors to inject arbitrary HTML or JavaScript.
references
0
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-011/
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-011/
fixed_packages
0
url pkg:composer/typo3/cms@7.6.1
purl pkg:composer/typo3/cms@7.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bnd-6xsq-nbec
1
vulnerability VCID-1jcy-nx8g-z3d3
2
vulnerability VCID-1qjx-grvf-y7bk
3
vulnerability VCID-25t3-1sm6-3kdn
4
vulnerability VCID-28bf-jvah-zkhw
5
vulnerability VCID-2fs8-bscc-3ye2
6
vulnerability VCID-3m53-kkk2-j7c2
7
vulnerability VCID-435j-f3yx-9yep
8
vulnerability VCID-47px-4d98-ubab
9
vulnerability VCID-5jgb-dsyx-hyb4
10
vulnerability VCID-5paq-5frf-43ed
11
vulnerability VCID-5ppt-avmb-cqb2
12
vulnerability VCID-6b5q-vzs3-pkcc
13
vulnerability VCID-6wsa-4ywc-8fh4
14
vulnerability VCID-7d1g-j3k5-gub8
15
vulnerability VCID-8jp8-a363-67be
16
vulnerability VCID-b715-6z6c-qqar
17
vulnerability VCID-bajy-qbwq-fufn
18
vulnerability VCID-bck9-34jp-6ydx
19
vulnerability VCID-bmj2-4k58-tqa4
20
vulnerability VCID-bnne-7p2q-eqd2
21
vulnerability VCID-bxjw-7426-gyb8
22
vulnerability VCID-c6zq-cfg5-u7d9
23
vulnerability VCID-dbrh-t8zx-nkd9
24
vulnerability VCID-dm97-51uu-r7gw
25
vulnerability VCID-dsu7-jjjq-f3e1
26
vulnerability VCID-ehzg-bzrd-kbcc
27
vulnerability VCID-ep6t-zwd1-4bb3
28
vulnerability VCID-f963-qur3-2qb7
29
vulnerability VCID-fber-yp9q-f7dr
30
vulnerability VCID-fqbx-7xyq-fkav
31
vulnerability VCID-fy3g-uegw-2bew
32
vulnerability VCID-g4ak-ertr-rya6
33
vulnerability VCID-gcnj-6qb6-pbgz
34
vulnerability VCID-gezz-pvpj-p3c6
35
vulnerability VCID-gspd-apwy-efgu
36
vulnerability VCID-h2dd-7b1r-k7bs
37
vulnerability VCID-h63t-9enx-qfdn
38
vulnerability VCID-h958-d3pm-kfcs
39
vulnerability VCID-hpgq-deze-p7dp
40
vulnerability VCID-hv3n-j8ck-1ufx
41
vulnerability VCID-jmu3-5k7e-x7ch
42
vulnerability VCID-jqth-wfgx-87cx
43
vulnerability VCID-jqx9-41zx-dbcy
44
vulnerability VCID-m3nf-1qbv-d3dj
45
vulnerability VCID-mhud-kq57-nka3
46
vulnerability VCID-mnz3-rj21-67ad
47
vulnerability VCID-mqbh-k9n3-nbed
48
vulnerability VCID-mqk6-z77g-bfdv
49
vulnerability VCID-mub5-s7h1-57cy
50
vulnerability VCID-n15v-ta9h-6ffb
51
vulnerability VCID-n61z-6v8a-hygf
52
vulnerability VCID-n78p-x7hh-gqcf
53
vulnerability VCID-nnh9-udcj-m7fv
54
vulnerability VCID-npn5-rand-q3dg
55
vulnerability VCID-nt6a-5zkv-pbcm
56
vulnerability VCID-nwxj-3ajk-rkh5
57
vulnerability VCID-p1u9-66hm-47er
58
vulnerability VCID-p545-vwe6-9kfr
59
vulnerability VCID-pk8d-8u15-5bfq
60
vulnerability VCID-pnfa-cksc-43de
61
vulnerability VCID-prbd-r82t-87dm
62
vulnerability VCID-q9ak-qcq6-qfhy
63
vulnerability VCID-rdrs-mhaw-b3ge
64
vulnerability VCID-rg5d-d8nc-9qfu
65
vulnerability VCID-rkms-w15c-4yb1
66
vulnerability VCID-rzw5-8d1u-sfam
67
vulnerability VCID-sr3p-pdxy-4yhu
68
vulnerability VCID-t3jn-vwbx-u7cr
69
vulnerability VCID-tmrt-6fxw-5ugh
70
vulnerability VCID-tw1y-t4qj-j3d1
71
vulnerability VCID-uckg-j48d-efad
72
vulnerability VCID-uj89-13ub-43fz
73
vulnerability VCID-utpu-q2dv-m3hm
74
vulnerability VCID-vndb-w8e1-4ugv
75
vulnerability VCID-vrt1-aj9v-2kb6
76
vulnerability VCID-w5pn-eb7y-1kdp
77
vulnerability VCID-wge3-kxdq-f3bz
78
vulnerability VCID-wq32-kgff-gke8
79
vulnerability VCID-wr5t-xqnn-gkcj
80
vulnerability VCID-wxps-mnue-6bbh
81
vulnerability VCID-xa4m-xpa9-v7h8
82
vulnerability VCID-xqew-bx7v-1qfk
83
vulnerability VCID-y32z-2d3f-gkgw
84
vulnerability VCID-z5qq-nwn5-tqgm
85
vulnerability VCID-zdq2-dhb2-6kaq
86
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.1
aliases TYPO3-CORE-SA-2015-011
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1ng4-5tkh-g7h5
1
url VCID-28bf-jvah-zkhw
vulnerability_id VCID-28bf-jvah-zkhw
summary 
Improper Authentication
Authentication Bypass in TYPO3 CMS.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-001/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2018-001/
fixed_packages
0
url pkg:composer/typo3/cms@7.6.30
purl pkg:composer/typo3/cms@7.6.30
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5jgb-dsyx-hyb4
1
vulnerability VCID-5paq-5frf-43ed
2
vulnerability VCID-6b5q-vzs3-pkcc
3
vulnerability VCID-bajy-qbwq-fufn
4
vulnerability VCID-bnne-7p2q-eqd2
5
vulnerability VCID-dbrh-t8zx-nkd9
6
vulnerability VCID-dm97-51uu-r7gw
7
vulnerability VCID-dsu7-jjjq-f3e1
8
vulnerability VCID-ehzg-bzrd-kbcc
9
vulnerability VCID-f963-qur3-2qb7
10
vulnerability VCID-gcnj-6qb6-pbgz
11
vulnerability VCID-mnz3-rj21-67ad
12
vulnerability VCID-n15v-ta9h-6ffb
13
vulnerability VCID-n78p-x7hh-gqcf
14
vulnerability VCID-pk8d-8u15-5bfq
15
vulnerability VCID-rdrs-mhaw-b3ge
16
vulnerability VCID-t3jn-vwbx-u7cr
17
vulnerability VCID-tw1y-t4qj-j3d1
18
vulnerability VCID-vndb-w8e1-4ugv
19
vulnerability VCID-wr5t-xqnn-gkcj
20
vulnerability VCID-wxps-mnue-6bbh
21
vulnerability VCID-xa4m-xpa9-v7h8
22
vulnerability VCID-xqew-bx7v-1qfk
23
vulnerability VCID-y32z-2d3f-gkgw
24
vulnerability VCID-zdq2-dhb2-6kaq
25
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.30
1
url pkg:composer/typo3/cms@8.7.17
purl pkg:composer/typo3/cms@8.7.17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18dg-eevv-3ug9
1
vulnerability VCID-1kae-ffj3-xyc7
2
vulnerability VCID-2meq-x4kd-bbdn
3
vulnerability VCID-3gg5-1921-rbfs
4
vulnerability VCID-3n2r-awja-dug9
5
vulnerability VCID-3v4n-fzxa-bfaw
6
vulnerability VCID-4ack-haf2-cfbe
7
vulnerability VCID-4btk-jt5n-2ugf
8
vulnerability VCID-551q-gpyd-ffe8
9
vulnerability VCID-5jgb-dsyx-hyb4
10
vulnerability VCID-5paq-5frf-43ed
11
vulnerability VCID-5qfv-y43v-akdm
12
vulnerability VCID-6487-15z5-pkd4
13
vulnerability VCID-6b5q-vzs3-pkcc
14
vulnerability VCID-9g62-zd1x-3bdg
15
vulnerability VCID-9gpp-ez8w-rqav
16
vulnerability VCID-axaf-45kr-kbfe
17
vulnerability VCID-bajy-qbwq-fufn
18
vulnerability VCID-bnne-7p2q-eqd2
19
vulnerability VCID-c2tm-eqmm-1ugt
20
vulnerability VCID-cm14-t8uv-k3es
21
vulnerability VCID-cmka-8484-27bu
22
vulnerability VCID-dbrh-t8zx-nkd9
23
vulnerability VCID-dj88-f3p8-cfbn
24
vulnerability VCID-dm97-51uu-r7gw
25
vulnerability VCID-dsu7-jjjq-f3e1
26
vulnerability VCID-e72u-tpc3-23g3
27
vulnerability VCID-eajg-ctpd-2bby
28
vulnerability VCID-ehzg-bzrd-kbcc
29
vulnerability VCID-ekfd-wp8z-d7e1
30
vulnerability VCID-f963-qur3-2qb7
31
vulnerability VCID-gcnj-6qb6-pbgz
32
vulnerability VCID-he5m-6wj4-rbhc
33
vulnerability VCID-j77k-hjgx-5kc5
34
vulnerability VCID-jppe-cbgm-k3cz
35
vulnerability VCID-k4h1-mvnf-1ybx
36
vulnerability VCID-k8af-cg9k-87a9
37
vulnerability VCID-m7w6-b2xu-6uee
38
vulnerability VCID-mnz3-rj21-67ad
39
vulnerability VCID-n15v-ta9h-6ffb
40
vulnerability VCID-n78p-x7hh-gqcf
41
vulnerability VCID-pk8d-8u15-5bfq
42
vulnerability VCID-px44-19tj-h7aa
43
vulnerability VCID-q8hy-wjd9-nbgp
44
vulnerability VCID-qb4j-9tz7-m7a2
45
vulnerability VCID-rdrs-mhaw-b3ge
46
vulnerability VCID-s64f-x81f-b7ce
47
vulnerability VCID-shqd-udhm-pff8
48
vulnerability VCID-stzu-sxe6-5yf5
49
vulnerability VCID-t1n7-eswt-73gw
50
vulnerability VCID-t3jn-vwbx-u7cr
51
vulnerability VCID-tqf5-2fsm-8fch
52
vulnerability VCID-tw1y-t4qj-j3d1
53
vulnerability VCID-vndb-w8e1-4ugv
54
vulnerability VCID-vxj6-wvyz-zbaq
55
vulnerability VCID-vxry-uvph-kbfd
56
vulnerability VCID-vybh-pxr3-17hn
57
vulnerability VCID-vyvy-y3cw-hbgr
58
vulnerability VCID-wea9-egep-h7g5
59
vulnerability VCID-wr5t-xqnn-gkcj
60
vulnerability VCID-wxps-mnue-6bbh
61
vulnerability VCID-xa4m-xpa9-v7h8
62
vulnerability VCID-xh7y-56vy-5ud8
63
vulnerability VCID-xqew-bx7v-1qfk
64
vulnerability VCID-y32z-2d3f-gkgw
65
vulnerability VCID-zdq2-dhb2-6kaq
66
vulnerability VCID-zkea-ge1t-z7gn
67
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.17
2
url pkg:composer/typo3/cms@9.3.2
purl pkg:composer/typo3/cms@9.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18dg-eevv-3ug9
1
vulnerability VCID-1kae-ffj3-xyc7
2
vulnerability VCID-2meq-x4kd-bbdn
3
vulnerability VCID-2mn6-mdmz-4yd9
4
vulnerability VCID-3gg5-1921-rbfs
5
vulnerability VCID-3n2r-awja-dug9
6
vulnerability VCID-3v4n-fzxa-bfaw
7
vulnerability VCID-4ack-haf2-cfbe
8
vulnerability VCID-4btk-jt5n-2ugf
9
vulnerability VCID-4mkw-tv16-jyca
10
vulnerability VCID-543x-cnbz-1kb9
11
vulnerability VCID-551q-gpyd-ffe8
12
vulnerability VCID-58js-jzm4-4fc7
13
vulnerability VCID-5jgb-dsyx-hyb4
14
vulnerability VCID-5kzs-ex81-bbaj
15
vulnerability VCID-5paq-5frf-43ed
16
vulnerability VCID-6487-15z5-pkd4
17
vulnerability VCID-6a9t-8dmn-s3bv
18
vulnerability VCID-6b5q-vzs3-pkcc
19
vulnerability VCID-9g62-zd1x-3bdg
20
vulnerability VCID-9gpp-ez8w-rqav
21
vulnerability VCID-a49c-fqrj-nbb3
22
vulnerability VCID-anfj-pmkg-skhe
23
vulnerability VCID-axaf-45kr-kbfe
24
vulnerability VCID-bajy-qbwq-fufn
25
vulnerability VCID-bnne-7p2q-eqd2
26
vulnerability VCID-c2tm-eqmm-1ugt
27
vulnerability VCID-cm14-t8uv-k3es
28
vulnerability VCID-cmka-8484-27bu
29
vulnerability VCID-d8d1-sat6-muhe
30
vulnerability VCID-dbrh-t8zx-nkd9
31
vulnerability VCID-dcy2-efyc-6qgq
32
vulnerability VCID-dj88-f3p8-cfbn
33
vulnerability VCID-dm97-51uu-r7gw
34
vulnerability VCID-dsu7-jjjq-f3e1
35
vulnerability VCID-e72u-tpc3-23g3
36
vulnerability VCID-eajg-ctpd-2bby
37
vulnerability VCID-ekfd-wp8z-d7e1
38
vulnerability VCID-f963-qur3-2qb7
39
vulnerability VCID-gcnj-6qb6-pbgz
40
vulnerability VCID-he5m-6wj4-rbhc
41
vulnerability VCID-jppe-cbgm-k3cz
42
vulnerability VCID-k4h1-mvnf-1ybx
43
vulnerability VCID-k8af-cg9k-87a9
44
vulnerability VCID-kc67-7kf7-s3d7
45
vulnerability VCID-kj9x-psfz-2ug1
46
vulnerability VCID-m7w6-b2xu-6uee
47
vulnerability VCID-mnz3-rj21-67ad
48
vulnerability VCID-n15v-ta9h-6ffb
49
vulnerability VCID-n78p-x7hh-gqcf
50
vulnerability VCID-p715-yexd-jfgc
51
vulnerability VCID-phgh-sd4m-zbdx
52
vulnerability VCID-pk8d-8u15-5bfq
53
vulnerability VCID-px44-19tj-h7aa
54
vulnerability VCID-q8hy-wjd9-nbgp
55
vulnerability VCID-qb4j-9tz7-m7a2
56
vulnerability VCID-raxk-rm9v-hubn
57
vulnerability VCID-rdrs-mhaw-b3ge
58
vulnerability VCID-s64f-x81f-b7ce
59
vulnerability VCID-shqd-udhm-pff8
60
vulnerability VCID-stzu-sxe6-5yf5
61
vulnerability VCID-sw7v-fbjk-13hy
62
vulnerability VCID-t1n7-eswt-73gw
63
vulnerability VCID-t3jn-vwbx-u7cr
64
vulnerability VCID-tqf5-2fsm-8fch
65
vulnerability VCID-tw1y-t4qj-j3d1
66
vulnerability VCID-u9bx-8e86-wbew
67
vulnerability VCID-ve7g-8st5-wffb
68
vulnerability VCID-vndb-w8e1-4ugv
69
vulnerability VCID-vxj6-wvyz-zbaq
70
vulnerability VCID-vxry-uvph-kbfd
71
vulnerability VCID-vybh-pxr3-17hn
72
vulnerability VCID-vyvy-y3cw-hbgr
73
vulnerability VCID-wea9-egep-h7g5
74
vulnerability VCID-wr5t-xqnn-gkcj
75
vulnerability VCID-wxps-mnue-6bbh
76
vulnerability VCID-xa4m-xpa9-v7h8
77
vulnerability VCID-xh7y-56vy-5ud8
78
vulnerability VCID-xtdg-uj46-rkcm
79
vulnerability VCID-xwc2-z7hx-4qa7
80
vulnerability VCID-y32z-2d3f-gkgw
81
vulnerability VCID-zdq2-dhb2-6kaq
82
vulnerability VCID-zkea-ge1t-z7gn
83
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.3.2
aliases 2018-07-12-1
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-28bf-jvah-zkhw
2
url VCID-2rhx-afay-97da
vulnerability_id VCID-2rhx-afay-97da
summary 
Unauthenticated Path Disclosure
It has been discovered, that calling a PHP script which is delivered with TYPO3 for testing purposes, discloses the absolute server path to the TYPO3 installation.
references
0
reference_url https://review.typo3.org/#/c/43120/
reference_id
reference_type
scores
url https://review.typo3.org/#/c/43120/
1
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-008/
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-008/
fixed_packages
0
url pkg:composer/typo3/cms@7.4.0
purl pkg:composer/typo3/cms@7.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ng4-5tkh-g7h5
1
vulnerability VCID-28bf-jvah-zkhw
2
vulnerability VCID-5jgb-dsyx-hyb4
3
vulnerability VCID-5paq-5frf-43ed
4
vulnerability VCID-6b5q-vzs3-pkcc
5
vulnerability VCID-6pvx-1qan-ukef
6
vulnerability VCID-bajy-qbwq-fufn
7
vulnerability VCID-bnne-7p2q-eqd2
8
vulnerability VCID-buax-rz7x-r7c2
9
vulnerability VCID-bxjw-7426-gyb8
10
vulnerability VCID-cczn-x8q7-k7ba
11
vulnerability VCID-cjgc-q6p5-2ydc
12
vulnerability VCID-dbrh-t8zx-nkd9
13
vulnerability VCID-dm97-51uu-r7gw
14
vulnerability VCID-dsu7-jjjq-f3e1
15
vulnerability VCID-ehzg-bzrd-kbcc
16
vulnerability VCID-f4pm-9tq5-q3ch
17
vulnerability VCID-gcnj-6qb6-pbgz
18
vulnerability VCID-h958-d3pm-kfcs
19
vulnerability VCID-jmu3-5k7e-x7ch
20
vulnerability VCID-jqx9-41zx-dbcy
21
vulnerability VCID-kqbk-4q4z-nkec
22
vulnerability VCID-mnz3-rj21-67ad
23
vulnerability VCID-n15v-ta9h-6ffb
24
vulnerability VCID-n78p-x7hh-gqcf
25
vulnerability VCID-nwxj-3ajk-rkh5
26
vulnerability VCID-pgzu-kxuj-j3fh
27
vulnerability VCID-pk8d-8u15-5bfq
28
vulnerability VCID-q6dx-uskc-y3hs
29
vulnerability VCID-qemc-8kj8-r3cd
30
vulnerability VCID-rdrs-mhaw-b3ge
31
vulnerability VCID-sr3p-pdxy-4yhu
32
vulnerability VCID-t3jn-vwbx-u7cr
33
vulnerability VCID-tmrt-6fxw-5ugh
34
vulnerability VCID-tw1y-t4qj-j3d1
35
vulnerability VCID-vndb-w8e1-4ugv
36
vulnerability VCID-wr5t-xqnn-gkcj
37
vulnerability VCID-ww44-zmx7-47ft
38
vulnerability VCID-wxps-mnue-6bbh
39
vulnerability VCID-xa4m-xpa9-v7h8
40
vulnerability VCID-xqew-bx7v-1qfk
41
vulnerability VCID-y32z-2d3f-gkgw
42
vulnerability VCID-zdq2-dhb2-6kaq
43
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.4.0
aliases GMS-2015-25
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2rhx-afay-97da
3
url VCID-37wu-bjfj-k7eg
vulnerability_id VCID-37wu-bjfj-k7eg
summary 
Improper Restriction of Excessive Authentication Attempts
Brute Force Protection Bypass in backend login.
references
0
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-006/
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-006/
fixed_packages
0
url pkg:composer/typo3/cms@7.3.0
purl pkg:composer/typo3/cms@7.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ng4-5tkh-g7h5
1
vulnerability VCID-28bf-jvah-zkhw
2
vulnerability VCID-2rhx-afay-97da
3
vulnerability VCID-5jgb-dsyx-hyb4
4
vulnerability VCID-5paq-5frf-43ed
5
vulnerability VCID-6b5q-vzs3-pkcc
6
vulnerability VCID-6gms-w48j-4ffh
7
vulnerability VCID-6pvx-1qan-ukef
8
vulnerability VCID-6spw-66jg-syb1
9
vulnerability VCID-7zx9-8afq-y3hc
10
vulnerability VCID-b5ht-z6zp-pbht
11
vulnerability VCID-bajy-qbwq-fufn
12
vulnerability VCID-bnne-7p2q-eqd2
13
vulnerability VCID-buax-rz7x-r7c2
14
vulnerability VCID-bxjw-7426-gyb8
15
vulnerability VCID-cczn-x8q7-k7ba
16
vulnerability VCID-cjgc-q6p5-2ydc
17
vulnerability VCID-ck23-cxn6-bbf3
18
vulnerability VCID-dbrh-t8zx-nkd9
19
vulnerability VCID-dm97-51uu-r7gw
20
vulnerability VCID-dsu7-jjjq-f3e1
21
vulnerability VCID-ehzg-bzrd-kbcc
22
vulnerability VCID-f4pm-9tq5-q3ch
23
vulnerability VCID-gcnj-6qb6-pbgz
24
vulnerability VCID-h958-d3pm-kfcs
25
vulnerability VCID-jmu3-5k7e-x7ch
26
vulnerability VCID-jqx9-41zx-dbcy
27
vulnerability VCID-kgcq-paqm-9ya6
28
vulnerability VCID-kqbk-4q4z-nkec
29
vulnerability VCID-mnz3-rj21-67ad
30
vulnerability VCID-n15v-ta9h-6ffb
31
vulnerability VCID-n78p-x7hh-gqcf
32
vulnerability VCID-nwxj-3ajk-rkh5
33
vulnerability VCID-pgzu-kxuj-j3fh
34
vulnerability VCID-pk8d-8u15-5bfq
35
vulnerability VCID-q6dx-uskc-y3hs
36
vulnerability VCID-qemc-8kj8-r3cd
37
vulnerability VCID-rdrs-mhaw-b3ge
38
vulnerability VCID-rwgf-2pfh-ufdz
39
vulnerability VCID-sr3p-pdxy-4yhu
40
vulnerability VCID-t3jn-vwbx-u7cr
41
vulnerability VCID-tmrt-6fxw-5ugh
42
vulnerability VCID-tw1y-t4qj-j3d1
43
vulnerability VCID-vndb-w8e1-4ugv
44
vulnerability VCID-wr5t-xqnn-gkcj
45
vulnerability VCID-ww44-zmx7-47ft
46
vulnerability VCID-wxps-mnue-6bbh
47
vulnerability VCID-xa4m-xpa9-v7h8
48
vulnerability VCID-xkpp-psz2-2kag
49
vulnerability VCID-xqew-bx7v-1qfk
50
vulnerability VCID-y32z-2d3f-gkgw
51
vulnerability VCID-zdq2-dhb2-6kaq
52
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.3.0
aliases 2015-07-01-5
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-37wu-bjfj-k7eg
4
url VCID-4etp-u4pt-v7hm
vulnerability_id VCID-4etp-u4pt-v7hm
summary 
Information Exposure
Frontend: Unauthenticated Path Disclosure.
references
0
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-008/
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-008/
fixed_packages
0
url pkg:composer/typo3/cms@7.3.0
purl pkg:composer/typo3/cms@7.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ng4-5tkh-g7h5
1
vulnerability VCID-28bf-jvah-zkhw
2
vulnerability VCID-2rhx-afay-97da
3
vulnerability VCID-5jgb-dsyx-hyb4
4
vulnerability VCID-5paq-5frf-43ed
5
vulnerability VCID-6b5q-vzs3-pkcc
6
vulnerability VCID-6gms-w48j-4ffh
7
vulnerability VCID-6pvx-1qan-ukef
8
vulnerability VCID-6spw-66jg-syb1
9
vulnerability VCID-7zx9-8afq-y3hc
10
vulnerability VCID-b5ht-z6zp-pbht
11
vulnerability VCID-bajy-qbwq-fufn
12
vulnerability VCID-bnne-7p2q-eqd2
13
vulnerability VCID-buax-rz7x-r7c2
14
vulnerability VCID-bxjw-7426-gyb8
15
vulnerability VCID-cczn-x8q7-k7ba
16
vulnerability VCID-cjgc-q6p5-2ydc
17
vulnerability VCID-ck23-cxn6-bbf3
18
vulnerability VCID-dbrh-t8zx-nkd9
19
vulnerability VCID-dm97-51uu-r7gw
20
vulnerability VCID-dsu7-jjjq-f3e1
21
vulnerability VCID-ehzg-bzrd-kbcc
22
vulnerability VCID-f4pm-9tq5-q3ch
23
vulnerability VCID-gcnj-6qb6-pbgz
24
vulnerability VCID-h958-d3pm-kfcs
25
vulnerability VCID-jmu3-5k7e-x7ch
26
vulnerability VCID-jqx9-41zx-dbcy
27
vulnerability VCID-kgcq-paqm-9ya6
28
vulnerability VCID-kqbk-4q4z-nkec
29
vulnerability VCID-mnz3-rj21-67ad
30
vulnerability VCID-n15v-ta9h-6ffb
31
vulnerability VCID-n78p-x7hh-gqcf
32
vulnerability VCID-nwxj-3ajk-rkh5
33
vulnerability VCID-pgzu-kxuj-j3fh
34
vulnerability VCID-pk8d-8u15-5bfq
35
vulnerability VCID-q6dx-uskc-y3hs
36
vulnerability VCID-qemc-8kj8-r3cd
37
vulnerability VCID-rdrs-mhaw-b3ge
38
vulnerability VCID-rwgf-2pfh-ufdz
39
vulnerability VCID-sr3p-pdxy-4yhu
40
vulnerability VCID-t3jn-vwbx-u7cr
41
vulnerability VCID-tmrt-6fxw-5ugh
42
vulnerability VCID-tw1y-t4qj-j3d1
43
vulnerability VCID-vndb-w8e1-4ugv
44
vulnerability VCID-wr5t-xqnn-gkcj
45
vulnerability VCID-ww44-zmx7-47ft
46
vulnerability VCID-wxps-mnue-6bbh
47
vulnerability VCID-xa4m-xpa9-v7h8
48
vulnerability VCID-xkpp-psz2-2kag
49
vulnerability VCID-xqew-bx7v-1qfk
50
vulnerability VCID-y32z-2d3f-gkgw
51
vulnerability VCID-zdq2-dhb2-6kaq
52
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.3.0
aliases 2015-09-08-1
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-4etp-u4pt-v7hm
5
url VCID-51ba-3ag9-rucn
vulnerability_id VCID-51ba-3ag9-rucn
summary 
Cross-site Scripting
Cross-Site Scripting in 3rd party library Flowplayer.
references
0
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-007/
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-007/
fixed_packages
0
url pkg:composer/typo3/cms@7.3.0
purl pkg:composer/typo3/cms@7.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ng4-5tkh-g7h5
1
vulnerability VCID-28bf-jvah-zkhw
2
vulnerability VCID-2rhx-afay-97da
3
vulnerability VCID-5jgb-dsyx-hyb4
4
vulnerability VCID-5paq-5frf-43ed
5
vulnerability VCID-6b5q-vzs3-pkcc
6
vulnerability VCID-6gms-w48j-4ffh
7
vulnerability VCID-6pvx-1qan-ukef
8
vulnerability VCID-6spw-66jg-syb1
9
vulnerability VCID-7zx9-8afq-y3hc
10
vulnerability VCID-b5ht-z6zp-pbht
11
vulnerability VCID-bajy-qbwq-fufn
12
vulnerability VCID-bnne-7p2q-eqd2
13
vulnerability VCID-buax-rz7x-r7c2
14
vulnerability VCID-bxjw-7426-gyb8
15
vulnerability VCID-cczn-x8q7-k7ba
16
vulnerability VCID-cjgc-q6p5-2ydc
17
vulnerability VCID-ck23-cxn6-bbf3
18
vulnerability VCID-dbrh-t8zx-nkd9
19
vulnerability VCID-dm97-51uu-r7gw
20
vulnerability VCID-dsu7-jjjq-f3e1
21
vulnerability VCID-ehzg-bzrd-kbcc
22
vulnerability VCID-f4pm-9tq5-q3ch
23
vulnerability VCID-gcnj-6qb6-pbgz
24
vulnerability VCID-h958-d3pm-kfcs
25
vulnerability VCID-jmu3-5k7e-x7ch
26
vulnerability VCID-jqx9-41zx-dbcy
27
vulnerability VCID-kgcq-paqm-9ya6
28
vulnerability VCID-kqbk-4q4z-nkec
29
vulnerability VCID-mnz3-rj21-67ad
30
vulnerability VCID-n15v-ta9h-6ffb
31
vulnerability VCID-n78p-x7hh-gqcf
32
vulnerability VCID-nwxj-3ajk-rkh5
33
vulnerability VCID-pgzu-kxuj-j3fh
34
vulnerability VCID-pk8d-8u15-5bfq
35
vulnerability VCID-q6dx-uskc-y3hs
36
vulnerability VCID-qemc-8kj8-r3cd
37
vulnerability VCID-rdrs-mhaw-b3ge
38
vulnerability VCID-rwgf-2pfh-ufdz
39
vulnerability VCID-sr3p-pdxy-4yhu
40
vulnerability VCID-t3jn-vwbx-u7cr
41
vulnerability VCID-tmrt-6fxw-5ugh
42
vulnerability VCID-tw1y-t4qj-j3d1
43
vulnerability VCID-vndb-w8e1-4ugv
44
vulnerability VCID-wr5t-xqnn-gkcj
45
vulnerability VCID-ww44-zmx7-47ft
46
vulnerability VCID-wxps-mnue-6bbh
47
vulnerability VCID-xa4m-xpa9-v7h8
48
vulnerability VCID-xkpp-psz2-2kag
49
vulnerability VCID-xqew-bx7v-1qfk
50
vulnerability VCID-y32z-2d3f-gkgw
51
vulnerability VCID-zdq2-dhb2-6kaq
52
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.3.0
aliases 2015-07-01-6
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-51ba-3ag9-rucn
6
url VCID-5jgb-dsyx-hyb4
vulnerability_id VCID-5jgb-dsyx-hyb4
summary 
Open Redirection in Login Handling
### Problem
It has been discovered that Login Handling is susceptible to open redirection which allows attackers redirecting to arbitrary content, and conducting phishing attacks. No authentication is required in order to exploit this vulnerability.

### Solution
Update to TYPO3 versions 6.2.57, 7.6.51, 8.7.40, 9.5.25, 10.4.14, 11.1.1 that fix the problem described.

### Credits
Thanks to Alexander Kellner who reported this issue and to TYPO3 security team member Torben Hansen who fixed the issue.

### References
* [TYPO3-CORE-SA-2021-001](https://typo3.org/security/advisory/typo3-core-sa-2021-001)
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-21338
reference_id
reference_type
scores
0
value 0.00253
scoring_system epss
scoring_elements 0.48593
published_at 2026-04-08T12:55:00Z
1
value 0.00253
scoring_system epss
scoring_elements 0.48598
published_at 2026-04-21T12:55:00Z
2
value 0.00253
scoring_system epss
scoring_elements 0.4861
published_at 2026-04-11T12:55:00Z
3
value 0.00253
scoring_system epss
scoring_elements 0.48529
published_at 2026-04-01T12:55:00Z
4
value 0.00253
scoring_system epss
scoring_elements 0.48589
published_at 2026-04-09T12:55:00Z
5
value 0.00253
scoring_system epss
scoring_elements 0.48564
published_at 2026-04-02T12:55:00Z
6
value 0.00253
scoring_system epss
scoring_elements 0.48587
published_at 2026-04-04T12:55:00Z
7
value 0.00253
scoring_system epss
scoring_elements 0.48539
published_at 2026-04-07T12:55:00Z
8
value 0.00253
scoring_system epss
scoring_elements 0.48641
published_at 2026-04-18T12:55:00Z
9
value 0.00253
scoring_system epss
scoring_elements 0.48646
published_at 2026-04-16T12:55:00Z
10
value 0.00253
scoring_system epss
scoring_elements 0.48596
published_at 2026-04-13T12:55:00Z
11
value 0.00253
scoring_system epss
scoring_elements 0.48584
published_at 2026-04-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-21338
1
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21338.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21338.yaml
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21338.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21338.yaml
3
reference_url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-4jhw-2p6j-5wmp
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-4jhw-2p6j-5wmp
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-21338
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-21338
5
reference_url https://packagist.org/packages/typo3/cms-core
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://packagist.org/packages/typo3/cms-core
6
reference_url https://typo3.org/security/advisory/typo3-core-sa-2021-001
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2021-001
7
reference_url https://github.com/advisories/GHSA-4jhw-2p6j-5wmp
reference_id GHSA-4jhw-2p6j-5wmp
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-4jhw-2p6j-5wmp
fixed_packages
0
url pkg:composer/typo3/cms@7.6.51
purl pkg:composer/typo3/cms@7.6.51
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-n15v-ta9h-6ffb
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.51
1
url pkg:composer/typo3/cms@8.7.40
purl pkg:composer/typo3/cms@8.7.40
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ekfd-wp8z-d7e1
1
vulnerability VCID-n15v-ta9h-6ffb
2
vulnerability VCID-s64f-x81f-b7ce
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.40
2
url pkg:composer/typo3/cms@9.5.25
purl pkg:composer/typo3/cms@9.5.25
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5paq-5frf-43ed
1
vulnerability VCID-6a9t-8dmn-s3bv
2
vulnerability VCID-bajy-qbwq-fufn
3
vulnerability VCID-ekfd-wp8z-d7e1
4
vulnerability VCID-mnz3-rj21-67ad
5
vulnerability VCID-n15v-ta9h-6ffb
6
vulnerability VCID-s64f-x81f-b7ce
7
vulnerability VCID-t1n7-eswt-73gw
8
vulnerability VCID-ve7g-8st5-wffb
9
vulnerability VCID-vyvy-y3cw-hbgr
10
vulnerability VCID-y32z-2d3f-gkgw
11
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.25
3
url pkg:composer/typo3/cms@10.4.14
purl pkg:composer/typo3/cms@10.4.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1yxw-saf5-wue7
1
vulnerability VCID-4jpa-6fqh-hbfg
2
vulnerability VCID-5paq-5frf-43ed
3
vulnerability VCID-6a9t-8dmn-s3bv
4
vulnerability VCID-8sdd-b1bn-cuhx
5
vulnerability VCID-av8u-rvzq-4fc7
6
vulnerability VCID-bajy-qbwq-fufn
7
vulnerability VCID-e32h-8q61-hbgc
8
vulnerability VCID-ekfd-wp8z-d7e1
9
vulnerability VCID-mnz3-rj21-67ad
10
vulnerability VCID-n15v-ta9h-6ffb
11
vulnerability VCID-remd-55jh-r3g5
12
vulnerability VCID-s55j-8hbt-akhn
13
vulnerability VCID-s64f-x81f-b7ce
14
vulnerability VCID-t1n7-eswt-73gw
15
vulnerability VCID-ve7g-8st5-wffb
16
vulnerability VCID-vwb2-a84s-5qak
17
vulnerability VCID-vyvy-y3cw-hbgr
18
vulnerability VCID-w13x-3rp9-wyej
19
vulnerability VCID-y32z-2d3f-gkgw
20
vulnerability VCID-yj9g-uz1a-jkf2
21
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@10.4.14
4
url pkg:composer/typo3/cms@11.1.1
purl pkg:composer/typo3/cms@11.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1yxw-saf5-wue7
1
vulnerability VCID-4jpa-6fqh-hbfg
2
vulnerability VCID-5paq-5frf-43ed
3
vulnerability VCID-6a9t-8dmn-s3bv
4
vulnerability VCID-8sdd-b1bn-cuhx
5
vulnerability VCID-av8u-rvzq-4fc7
6
vulnerability VCID-bajy-qbwq-fufn
7
vulnerability VCID-e32h-8q61-hbgc
8
vulnerability VCID-ekfd-wp8z-d7e1
9
vulnerability VCID-mnz3-rj21-67ad
10
vulnerability VCID-n15v-ta9h-6ffb
11
vulnerability VCID-remd-55jh-r3g5
12
vulnerability VCID-s55j-8hbt-akhn
13
vulnerability VCID-s64f-x81f-b7ce
14
vulnerability VCID-t1n7-eswt-73gw
15
vulnerability VCID-uyeu-a3xr-fkh4
16
vulnerability VCID-ve7g-8st5-wffb
17
vulnerability VCID-vwb2-a84s-5qak
18
vulnerability VCID-vyvy-y3cw-hbgr
19
vulnerability VCID-w13x-3rp9-wyej
20
vulnerability VCID-y32z-2d3f-gkgw
21
vulnerability VCID-yj9g-uz1a-jkf2
22
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@11.1.1
aliases CVE-2021-21338, GHSA-4jhw-2p6j-5wmp
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5jgb-dsyx-hyb4
7
url VCID-5paq-5frf-43ed
vulnerability_id VCID-5paq-5frf-43ed
summary 
TYPO3 CMS Stored Cross-Site Scripting via FileDumpController
> ### Meta
> * CVSS: `CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N/E:F/RL:O/RC:C` (5.0)

### Problem
It has been discovered that the `FileDumpController` (backend and frontend context) is vulnerable to cross-site scripting when malicious files are displayed using this component. A valid backend user account is needed to exploit this vulnerability.

### Solution
Update to TYPO3 version 7.6.58 ELTS, 8.7.48 ELTS, 9.5.37 ELTS, 10.4.32 or 11.5.16 that fix the problem described above.

### Credits
Thanks to Vautia who reported this issue and to TYPO3 core & security team member Oliver Hader who fixed the issue.

### References
* [TYPO3-CORE-SA-2022-009](https://typo3.org/security/advisory/typo3-core-sa-2022-009)
* [Vulnerability Report on huntr.dev](https://huntr.dev/bounties/51e9b709-193c-41fd-bd4a-833aaca0bd4e/) (embargoed +30 days)
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-36107
reference_id
reference_type
scores
0
value 0.00687
scoring_system epss
scoring_elements 0.71682
published_at 2026-04-02T12:55:00Z
1
value 0.00687
scoring_system epss
scoring_elements 0.7173
published_at 2026-04-12T12:55:00Z
2
value 0.00687
scoring_system epss
scoring_elements 0.71747
published_at 2026-04-11T12:55:00Z
3
value 0.00687
scoring_system epss
scoring_elements 0.71723
published_at 2026-04-09T12:55:00Z
4
value 0.00687
scoring_system epss
scoring_elements 0.71712
published_at 2026-04-08T12:55:00Z
5
value 0.00687
scoring_system epss
scoring_elements 0.71673
published_at 2026-04-07T12:55:00Z
6
value 0.00687
scoring_system epss
scoring_elements 0.717
published_at 2026-04-04T12:55:00Z
7
value 0.00687
scoring_system epss
scoring_elements 0.71744
published_at 2026-04-21T12:55:00Z
8
value 0.00687
scoring_system epss
scoring_elements 0.71762
published_at 2026-04-18T12:55:00Z
9
value 0.00687
scoring_system epss
scoring_elements 0.71756
published_at 2026-04-16T12:55:00Z
10
value 0.00687
scoring_system epss
scoring_elements 0.71713
published_at 2026-04-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-36107
1
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2022-36107.yaml
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2022-36107.yaml
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2022-36107.yaml
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2022-36107.yaml
3
reference_url https://github.com/TYPO3/typo3
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3
4
reference_url https://github.com/TYPO3/typo3/commit/546208428c861a09d62b86cde141eb19a81fae66
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/546208428c861a09d62b86cde141eb19a81fae66
5
reference_url https://github.com/TYPO3/typo3/commit/bd58d2ff2eeef89e63ef754a2389597d22622a39
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/bd58d2ff2eeef89e63ef754a2389597d22622a39
6
reference_url https://github.com/TYPO3/typo3/security/advisories/GHSA-9c6w-55cp-5w25
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/security/advisories/GHSA-9c6w-55cp-5w25
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-36107
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-36107
8
reference_url https://typo3.org/security/advisory/typo3-core-sa-2022-009
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2022-009
9
reference_url https://github.com/advisories/GHSA-9c6w-55cp-5w25
reference_id GHSA-9c6w-55cp-5w25
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-9c6w-55cp-5w25
fixed_packages
0
url pkg:composer/typo3/cms@10.4.32
purl pkg:composer/typo3/cms@10.4.32
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8sdd-b1bn-cuhx
1
vulnerability VCID-t1n7-eswt-73gw
2
vulnerability VCID-ve7g-8st5-wffb
3
vulnerability VCID-vyvy-y3cw-hbgr
4
vulnerability VCID-w13x-3rp9-wyej
5
vulnerability VCID-yj9g-uz1a-jkf2
6
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@10.4.32
1
url pkg:composer/typo3/cms@11.5.16
purl pkg:composer/typo3/cms@11.5.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8sdd-b1bn-cuhx
1
vulnerability VCID-t1n7-eswt-73gw
2
vulnerability VCID-ve7g-8st5-wffb
3
vulnerability VCID-vyvy-y3cw-hbgr
4
vulnerability VCID-w13x-3rp9-wyej
5
vulnerability VCID-yj9g-uz1a-jkf2
6
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@11.5.16
aliases CVE-2022-36107, GHSA-9c6w-55cp-5w25
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5paq-5frf-43ed
8
url VCID-6b5q-vzs3-pkcc
vulnerability_id VCID-6b5q-vzs3-pkcc
summary 
TYPO3 Security Misconfiguration in Install Tool Cookie
It has been discovered that cookies created in the Install Tool are not hardened to be submitted only via HTTP. In combination with other vulnerabilities such as cross-site scripting it can lead to hijacking an active and valid session in the Install Tool.
references
0
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2018-12-11-4.yaml
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2018-12-11-4.yaml
1
reference_url https://github.com/TYPO3/typo3
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3
2
reference_url https://github.com/TYPO3/typo3/commit/13328b0f74ac589a20b021db814dfa672581c26a
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/13328b0f74ac589a20b021db814dfa672581c26a
3
reference_url https://github.com/TYPO3/typo3/commit/918e50e4d20d88c7e40ad3bb134267d07706b0b1
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/918e50e4d20d88c7e40ad3bb134267d07706b0b1
4
reference_url https://github.com/TYPO3/typo3/commit/a5359491e3fb3164a6ba96a66c8e67fbb9971a4c
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/a5359491e3fb3164a6ba96a66c8e67fbb9971a4c
5
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-009
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2018-009
6
reference_url https://github.com/advisories/GHSA-f777-f784-36gm
reference_id GHSA-f777-f784-36gm
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-f777-f784-36gm
fixed_packages
0
url pkg:composer/typo3/cms@7.6.32
purl pkg:composer/typo3/cms@7.6.32
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5jgb-dsyx-hyb4
1
vulnerability VCID-5paq-5frf-43ed
2
vulnerability VCID-bajy-qbwq-fufn
3
vulnerability VCID-dsu7-jjjq-f3e1
4
vulnerability VCID-f963-qur3-2qb7
5
vulnerability VCID-gcnj-6qb6-pbgz
6
vulnerability VCID-mnz3-rj21-67ad
7
vulnerability VCID-n15v-ta9h-6ffb
8
vulnerability VCID-t3jn-vwbx-u7cr
9
vulnerability VCID-xa4m-xpa9-v7h8
10
vulnerability VCID-y32z-2d3f-gkgw
11
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.32
1
url pkg:composer/typo3/cms@8.7.21
purl pkg:composer/typo3/cms@8.7.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18dg-eevv-3ug9
1
vulnerability VCID-1kae-ffj3-xyc7
2
vulnerability VCID-2meq-x4kd-bbdn
3
vulnerability VCID-3n2r-awja-dug9
4
vulnerability VCID-3v4n-fzxa-bfaw
5
vulnerability VCID-4ack-haf2-cfbe
6
vulnerability VCID-551q-gpyd-ffe8
7
vulnerability VCID-5jgb-dsyx-hyb4
8
vulnerability VCID-5paq-5frf-43ed
9
vulnerability VCID-5qfv-y43v-akdm
10
vulnerability VCID-6487-15z5-pkd4
11
vulnerability VCID-9g62-zd1x-3bdg
12
vulnerability VCID-9gpp-ez8w-rqav
13
vulnerability VCID-axaf-45kr-kbfe
14
vulnerability VCID-bajy-qbwq-fufn
15
vulnerability VCID-c2tm-eqmm-1ugt
16
vulnerability VCID-cm14-t8uv-k3es
17
vulnerability VCID-cmka-8484-27bu
18
vulnerability VCID-dj88-f3p8-cfbn
19
vulnerability VCID-dsu7-jjjq-f3e1
20
vulnerability VCID-e72u-tpc3-23g3
21
vulnerability VCID-eajg-ctpd-2bby
22
vulnerability VCID-ekfd-wp8z-d7e1
23
vulnerability VCID-f963-qur3-2qb7
24
vulnerability VCID-gcnj-6qb6-pbgz
25
vulnerability VCID-he5m-6wj4-rbhc
26
vulnerability VCID-j77k-hjgx-5kc5
27
vulnerability VCID-jppe-cbgm-k3cz
28
vulnerability VCID-k4h1-mvnf-1ybx
29
vulnerability VCID-k8af-cg9k-87a9
30
vulnerability VCID-m7w6-b2xu-6uee
31
vulnerability VCID-mnz3-rj21-67ad
32
vulnerability VCID-n15v-ta9h-6ffb
33
vulnerability VCID-px44-19tj-h7aa
34
vulnerability VCID-q8hy-wjd9-nbgp
35
vulnerability VCID-s64f-x81f-b7ce
36
vulnerability VCID-shqd-udhm-pff8
37
vulnerability VCID-stzu-sxe6-5yf5
38
vulnerability VCID-t1n7-eswt-73gw
39
vulnerability VCID-t3jn-vwbx-u7cr
40
vulnerability VCID-tqf5-2fsm-8fch
41
vulnerability VCID-vxj6-wvyz-zbaq
42
vulnerability VCID-vxry-uvph-kbfd
43
vulnerability VCID-vybh-pxr3-17hn
44
vulnerability VCID-vyvy-y3cw-hbgr
45
vulnerability VCID-wea9-egep-h7g5
46
vulnerability VCID-xa4m-xpa9-v7h8
47
vulnerability VCID-xh7y-56vy-5ud8
48
vulnerability VCID-y32z-2d3f-gkgw
49
vulnerability VCID-zdq2-dhb2-6kaq
50
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.21
2
url pkg:composer/typo3/cms@9.5.2
purl pkg:composer/typo3/cms@9.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18dg-eevv-3ug9
1
vulnerability VCID-1kae-ffj3-xyc7
2
vulnerability VCID-2meq-x4kd-bbdn
3
vulnerability VCID-2mn6-mdmz-4yd9
4
vulnerability VCID-3n2r-awja-dug9
5
vulnerability VCID-3v4n-fzxa-bfaw
6
vulnerability VCID-4ack-haf2-cfbe
7
vulnerability VCID-4mkw-tv16-jyca
8
vulnerability VCID-543x-cnbz-1kb9
9
vulnerability VCID-551q-gpyd-ffe8
10
vulnerability VCID-58js-jzm4-4fc7
11
vulnerability VCID-5jgb-dsyx-hyb4
12
vulnerability VCID-5kzs-ex81-bbaj
13
vulnerability VCID-5paq-5frf-43ed
14
vulnerability VCID-6487-15z5-pkd4
15
vulnerability VCID-6a9t-8dmn-s3bv
16
vulnerability VCID-9g62-zd1x-3bdg
17
vulnerability VCID-9gpp-ez8w-rqav
18
vulnerability VCID-a49c-fqrj-nbb3
19
vulnerability VCID-anfj-pmkg-skhe
20
vulnerability VCID-axaf-45kr-kbfe
21
vulnerability VCID-bajy-qbwq-fufn
22
vulnerability VCID-c2tm-eqmm-1ugt
23
vulnerability VCID-cm14-t8uv-k3es
24
vulnerability VCID-cmka-8484-27bu
25
vulnerability VCID-d8d1-sat6-muhe
26
vulnerability VCID-dcy2-efyc-6qgq
27
vulnerability VCID-dj88-f3p8-cfbn
28
vulnerability VCID-dsu7-jjjq-f3e1
29
vulnerability VCID-e72u-tpc3-23g3
30
vulnerability VCID-eajg-ctpd-2bby
31
vulnerability VCID-ekfd-wp8z-d7e1
32
vulnerability VCID-f963-qur3-2qb7
33
vulnerability VCID-gcnj-6qb6-pbgz
34
vulnerability VCID-he5m-6wj4-rbhc
35
vulnerability VCID-jppe-cbgm-k3cz
36
vulnerability VCID-k4h1-mvnf-1ybx
37
vulnerability VCID-k8af-cg9k-87a9
38
vulnerability VCID-kc67-7kf7-s3d7
39
vulnerability VCID-kj9x-psfz-2ug1
40
vulnerability VCID-m7w6-b2xu-6uee
41
vulnerability VCID-mnz3-rj21-67ad
42
vulnerability VCID-n15v-ta9h-6ffb
43
vulnerability VCID-p715-yexd-jfgc
44
vulnerability VCID-phgh-sd4m-zbdx
45
vulnerability VCID-px44-19tj-h7aa
46
vulnerability VCID-q8hy-wjd9-nbgp
47
vulnerability VCID-raxk-rm9v-hubn
48
vulnerability VCID-s64f-x81f-b7ce
49
vulnerability VCID-shqd-udhm-pff8
50
vulnerability VCID-stzu-sxe6-5yf5
51
vulnerability VCID-sw7v-fbjk-13hy
52
vulnerability VCID-t1n7-eswt-73gw
53
vulnerability VCID-t3jn-vwbx-u7cr
54
vulnerability VCID-tqf5-2fsm-8fch
55
vulnerability VCID-u9bx-8e86-wbew
56
vulnerability VCID-ve7g-8st5-wffb
57
vulnerability VCID-vxj6-wvyz-zbaq
58
vulnerability VCID-vxry-uvph-kbfd
59
vulnerability VCID-vybh-pxr3-17hn
60
vulnerability VCID-vyvy-y3cw-hbgr
61
vulnerability VCID-wea9-egep-h7g5
62
vulnerability VCID-xa4m-xpa9-v7h8
63
vulnerability VCID-xh7y-56vy-5ud8
64
vulnerability VCID-xtdg-uj46-rkcm
65
vulnerability VCID-xwc2-z7hx-4qa7
66
vulnerability VCID-y32z-2d3f-gkgw
67
vulnerability VCID-zdq2-dhb2-6kaq
68
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.2
aliases GHSA-f777-f784-36gm
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6b5q-vzs3-pkcc
9
url VCID-6gms-w48j-4ffh
vulnerability_id VCID-6gms-w48j-4ffh
summary 
TYPO3 may allow editors to change, create, or delete metadata of files not within their file mounts
It has been discovered, that editors with access to file meta data table could change, create or delete metadata of files which are not within their file mounts.
references
0
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2015-07-01-1.yaml
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2015-07-01-1.yaml
1
reference_url https://github.com/TYPO3/typo3
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3
2
reference_url https://github.com/TYPO3/typo3/commit/0decbf83c531cab77497429eb2edecf9a1038b25
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/0decbf83c531cab77497429eb2edecf9a1038b25
3
reference_url https://github.com/TYPO3/typo3/commit/bff9fa5945801d1d2c641ddc8eb86c6647549d80
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/bff9fa5945801d1d2c641ddc8eb86c6647549d80
4
reference_url https://typo3.org/security/advisory/typo3-core-sa-2015-002
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2015-002
5
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-002
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-002
6
reference_url https://github.com/advisories/GHSA-4r76-xr68-w7m7
reference_id GHSA-4r76-xr68-w7m7
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-4r76-xr68-w7m7
fixed_packages
0
url pkg:composer/typo3/cms@7.3.1
purl pkg:composer/typo3/cms@7.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ng4-5tkh-g7h5
1
vulnerability VCID-28bf-jvah-zkhw
2
vulnerability VCID-2rhx-afay-97da
3
vulnerability VCID-5jgb-dsyx-hyb4
4
vulnerability VCID-5paq-5frf-43ed
5
vulnerability VCID-6b5q-vzs3-pkcc
6
vulnerability VCID-6pvx-1qan-ukef
7
vulnerability VCID-b5ht-z6zp-pbht
8
vulnerability VCID-bajy-qbwq-fufn
9
vulnerability VCID-bnne-7p2q-eqd2
10
vulnerability VCID-buax-rz7x-r7c2
11
vulnerability VCID-bxjw-7426-gyb8
12
vulnerability VCID-cczn-x8q7-k7ba
13
vulnerability VCID-cjgc-q6p5-2ydc
14
vulnerability VCID-ck23-cxn6-bbf3
15
vulnerability VCID-dbrh-t8zx-nkd9
16
vulnerability VCID-dm97-51uu-r7gw
17
vulnerability VCID-dsu7-jjjq-f3e1
18
vulnerability VCID-ehzg-bzrd-kbcc
19
vulnerability VCID-f4pm-9tq5-q3ch
20
vulnerability VCID-gcnj-6qb6-pbgz
21
vulnerability VCID-h958-d3pm-kfcs
22
vulnerability VCID-jmu3-5k7e-x7ch
23
vulnerability VCID-jqx9-41zx-dbcy
24
vulnerability VCID-kqbk-4q4z-nkec
25
vulnerability VCID-mnz3-rj21-67ad
26
vulnerability VCID-n15v-ta9h-6ffb
27
vulnerability VCID-n78p-x7hh-gqcf
28
vulnerability VCID-nwxj-3ajk-rkh5
29
vulnerability VCID-pgzu-kxuj-j3fh
30
vulnerability VCID-pk8d-8u15-5bfq
31
vulnerability VCID-q6dx-uskc-y3hs
32
vulnerability VCID-qemc-8kj8-r3cd
33
vulnerability VCID-rdrs-mhaw-b3ge
34
vulnerability VCID-sr3p-pdxy-4yhu
35
vulnerability VCID-t3jn-vwbx-u7cr
36
vulnerability VCID-tmrt-6fxw-5ugh
37
vulnerability VCID-tw1y-t4qj-j3d1
38
vulnerability VCID-vndb-w8e1-4ugv
39
vulnerability VCID-wr5t-xqnn-gkcj
40
vulnerability VCID-ww44-zmx7-47ft
41
vulnerability VCID-wxps-mnue-6bbh
42
vulnerability VCID-xa4m-xpa9-v7h8
43
vulnerability VCID-xqew-bx7v-1qfk
44
vulnerability VCID-y32z-2d3f-gkgw
45
vulnerability VCID-zdq2-dhb2-6kaq
46
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.3.1
aliases GHSA-4r76-xr68-w7m7
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6gms-w48j-4ffh
10
url VCID-6pvx-1qan-ukef
vulnerability_id VCID-6pvx-1qan-ukef
summary 
TYPO3 Cross-site Scripting vulnerability
Cross-site scripting (XSS) vulnerability in the typoLink function in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allows remote authenticated editors to inject arbitrary web script or HTML via a link field.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-8759
reference_id
reference_type
scores
0
value 0.00187
scoring_system epss
scoring_elements 0.40583
published_at 2026-04-02T12:55:00Z
1
value 0.00187
scoring_system epss
scoring_elements 0.40495
published_at 2026-04-21T12:55:00Z
2
value 0.00187
scoring_system epss
scoring_elements 0.40572
published_at 2026-04-18T12:55:00Z
3
value 0.00187
scoring_system epss
scoring_elements 0.40582
published_at 2026-04-08T12:55:00Z
4
value 0.00187
scoring_system epss
scoring_elements 0.40532
published_at 2026-04-07T12:55:00Z
5
value 0.00187
scoring_system epss
scoring_elements 0.4061
published_at 2026-04-04T12:55:00Z
6
value 0.00187
scoring_system epss
scoring_elements 0.40502
published_at 2026-04-01T12:55:00Z
7
value 0.00187
scoring_system epss
scoring_elements 0.40602
published_at 2026-04-16T12:55:00Z
8
value 0.00187
scoring_system epss
scoring_elements 0.40554
published_at 2026-04-13T12:55:00Z
9
value 0.00187
scoring_system epss
scoring_elements 0.40574
published_at 2026-04-12T12:55:00Z
10
value 0.00187
scoring_system epss
scoring_elements 0.40611
published_at 2026-04-11T12:55:00Z
11
value 0.00187
scoring_system epss
scoring_elements 0.40592
published_at 2026-04-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-8759
1
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2015-12-15-2.yaml
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2015-12-15-2.yaml
2
reference_url https://github.com/TYPO3/typo3
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3
3
reference_url https://github.com/TYPO3/typo3/commit/25a1473907f0f4b2bb0147c661981940c57a4555
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/25a1473907f0f4b2bb0147c661981940c57a4555
4
reference_url https://github.com/TYPO3/typo3/commit/de1755a6dcff9b037c6d5a1fa340ba100aff054a
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/de1755a6dcff9b037c6d5a1fa340ba100aff054a
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2015-8759
reference_id
reference_type
scores
0
value 3.5
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:S/C:N/I:P/A:N
1
value 5.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
3
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2015-8759
6
reference_url https://typo3.org/security/advisory/typo3-core-sa-2015-012
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2015-012
7
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-012
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-012
8
reference_url https://web.archive.org/web/20200228051548/http://www.securityfocus.com/bid/79250
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20200228051548/http://www.securityfocus.com/bid/79250
9
reference_url http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-012/
reference_id
reference_type
scores
url http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-012/
10
reference_url http://www.securityfocus.com/bid/79250
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/79250
11
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2:*:*:*:*:*:*:*
12
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:alpha1:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.0:alpha1:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:alpha1:*:*:*:*:*:*
13
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:alpha2:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.0:alpha2:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:alpha2:*:*:*:*:*:*
14
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:alpha3:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.0:alpha3:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:alpha3:*:*:*:*:*:*
15
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:beta1:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.0:beta1:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:beta1:*:*:*:*:*:*
16
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:beta2:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.0:beta2:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:beta2:*:*:*:*:*:*
17
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:beta3:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.0:beta3:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:beta3:*:*:*:*:*:*
18
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:beta4:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.0:beta4:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:beta4:*:*:*:*:*:*
19
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:beta5:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.0:beta5:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:beta5:*:*:*:*:*:*
20
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:beta6:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.0:beta6:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:beta6:*:*:*:*:*:*
21
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:beta7:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.0:beta7:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:beta7:*:*:*:*:*:*
22
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:rc1:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.0:rc1:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:rc1:*:*:*:*:*:*
23
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:rc2:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.0:rc2:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:rc2:*:*:*:*:*:*
24
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.1:*:*:*:*:*:*:*
25
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.10:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.10:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.10:*:*:*:*:*:*:*
26
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.10:rc1:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.10:rc1:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.10:rc1:*:*:*:*:*:*
27
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.11:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.11:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.11:*:*:*:*:*:*:*
28
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.12:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.12:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.12:*:*:*:*:*:*:*
29
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.13:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.13:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.13:*:*:*:*:*:*:*
30
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.14:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.14:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.14:*:*:*:*:*:*:*
31
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.15:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.15:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.15:*:*:*:*:*:*:*
32
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.2:*:*:*:*:*:*:*
33
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.3:*:*:*:*:*:*:*
34
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.4:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.4:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.4:*:*:*:*:*:*:*
35
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.5:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.5:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.5:*:*:*:*:*:*:*
36
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.6:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.6:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.6:*:*:*:*:*:*:*
37
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.7:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.7:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.7:*:*:*:*:*:*:*
38
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.8:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.8:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.8:*:*:*:*:*:*:*
39
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.9:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.9:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.9:*:*:*:*:*:*:*
40
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:7.0.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:7.0.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:7.0.0:*:*:*:*:*:*:*
41
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:7.0.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:7.0.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:7.0.2:*:*:*:*:*:*:*
42
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:7.1.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:7.1.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:7.1.0:*:*:*:*:*:*:*
43
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:7.2.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:7.2.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:7.2.0:*:*:*:*:*:*:*
44
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:7.3.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:7.3.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:7.3.0:*:*:*:*:*:*:*
45
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:7.3.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:7.3.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:7.3.1:*:*:*:*:*:*:*
46
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:7.4.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:7.4.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:7.4.0:*:*:*:*:*:*:*
47
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:7.5.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:7.5.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:7.5.0:*:*:*:*:*:*:*
48
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:7.6.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:7.6.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:7.6.0:*:*:*:*:*:*:*
49
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:7.6.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:7.6.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:7.6.1:*:*:*:*:*:*:*
50
reference_url https://github.com/advisories/GHSA-j5v7-9xr5-m7gx
reference_id GHSA-j5v7-9xr5-m7gx
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-j5v7-9xr5-m7gx
fixed_packages
0
url pkg:composer/typo3/cms@7.6.1
purl pkg:composer/typo3/cms@7.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bnd-6xsq-nbec
1
vulnerability VCID-1jcy-nx8g-z3d3
2
vulnerability VCID-1qjx-grvf-y7bk
3
vulnerability VCID-25t3-1sm6-3kdn
4
vulnerability VCID-28bf-jvah-zkhw
5
vulnerability VCID-2fs8-bscc-3ye2
6
vulnerability VCID-3m53-kkk2-j7c2
7
vulnerability VCID-435j-f3yx-9yep
8
vulnerability VCID-47px-4d98-ubab
9
vulnerability VCID-5jgb-dsyx-hyb4
10
vulnerability VCID-5paq-5frf-43ed
11
vulnerability VCID-5ppt-avmb-cqb2
12
vulnerability VCID-6b5q-vzs3-pkcc
13
vulnerability VCID-6wsa-4ywc-8fh4
14
vulnerability VCID-7d1g-j3k5-gub8
15
vulnerability VCID-8jp8-a363-67be
16
vulnerability VCID-b715-6z6c-qqar
17
vulnerability VCID-bajy-qbwq-fufn
18
vulnerability VCID-bck9-34jp-6ydx
19
vulnerability VCID-bmj2-4k58-tqa4
20
vulnerability VCID-bnne-7p2q-eqd2
21
vulnerability VCID-bxjw-7426-gyb8
22
vulnerability VCID-c6zq-cfg5-u7d9
23
vulnerability VCID-dbrh-t8zx-nkd9
24
vulnerability VCID-dm97-51uu-r7gw
25
vulnerability VCID-dsu7-jjjq-f3e1
26
vulnerability VCID-ehzg-bzrd-kbcc
27
vulnerability VCID-ep6t-zwd1-4bb3
28
vulnerability VCID-f963-qur3-2qb7
29
vulnerability VCID-fber-yp9q-f7dr
30
vulnerability VCID-fqbx-7xyq-fkav
31
vulnerability VCID-fy3g-uegw-2bew
32
vulnerability VCID-g4ak-ertr-rya6
33
vulnerability VCID-gcnj-6qb6-pbgz
34
vulnerability VCID-gezz-pvpj-p3c6
35
vulnerability VCID-gspd-apwy-efgu
36
vulnerability VCID-h2dd-7b1r-k7bs
37
vulnerability VCID-h63t-9enx-qfdn
38
vulnerability VCID-h958-d3pm-kfcs
39
vulnerability VCID-hpgq-deze-p7dp
40
vulnerability VCID-hv3n-j8ck-1ufx
41
vulnerability VCID-jmu3-5k7e-x7ch
42
vulnerability VCID-jqth-wfgx-87cx
43
vulnerability VCID-jqx9-41zx-dbcy
44
vulnerability VCID-m3nf-1qbv-d3dj
45
vulnerability VCID-mhud-kq57-nka3
46
vulnerability VCID-mnz3-rj21-67ad
47
vulnerability VCID-mqbh-k9n3-nbed
48
vulnerability VCID-mqk6-z77g-bfdv
49
vulnerability VCID-mub5-s7h1-57cy
50
vulnerability VCID-n15v-ta9h-6ffb
51
vulnerability VCID-n61z-6v8a-hygf
52
vulnerability VCID-n78p-x7hh-gqcf
53
vulnerability VCID-nnh9-udcj-m7fv
54
vulnerability VCID-npn5-rand-q3dg
55
vulnerability VCID-nt6a-5zkv-pbcm
56
vulnerability VCID-nwxj-3ajk-rkh5
57
vulnerability VCID-p1u9-66hm-47er
58
vulnerability VCID-p545-vwe6-9kfr
59
vulnerability VCID-pk8d-8u15-5bfq
60
vulnerability VCID-pnfa-cksc-43de
61
vulnerability VCID-prbd-r82t-87dm
62
vulnerability VCID-q9ak-qcq6-qfhy
63
vulnerability VCID-rdrs-mhaw-b3ge
64
vulnerability VCID-rg5d-d8nc-9qfu
65
vulnerability VCID-rkms-w15c-4yb1
66
vulnerability VCID-rzw5-8d1u-sfam
67
vulnerability VCID-sr3p-pdxy-4yhu
68
vulnerability VCID-t3jn-vwbx-u7cr
69
vulnerability VCID-tmrt-6fxw-5ugh
70
vulnerability VCID-tw1y-t4qj-j3d1
71
vulnerability VCID-uckg-j48d-efad
72
vulnerability VCID-uj89-13ub-43fz
73
vulnerability VCID-utpu-q2dv-m3hm
74
vulnerability VCID-vndb-w8e1-4ugv
75
vulnerability VCID-vrt1-aj9v-2kb6
76
vulnerability VCID-w5pn-eb7y-1kdp
77
vulnerability VCID-wge3-kxdq-f3bz
78
vulnerability VCID-wq32-kgff-gke8
79
vulnerability VCID-wr5t-xqnn-gkcj
80
vulnerability VCID-wxps-mnue-6bbh
81
vulnerability VCID-xa4m-xpa9-v7h8
82
vulnerability VCID-xqew-bx7v-1qfk
83
vulnerability VCID-y32z-2d3f-gkgw
84
vulnerability VCID-z5qq-nwn5-tqgm
85
vulnerability VCID-zdq2-dhb2-6kaq
86
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.1
aliases CVE-2015-8759, GHSA-j5v7-9xr5-m7gx
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6pvx-1qan-ukef
11
url VCID-6spw-66jg-syb1
vulnerability_id VCID-6spw-66jg-syb1
summary 
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Multiple cross-site scripting (XSS) vulnerabilities in Flowplayer Flash before 3.2.17, as used in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2, allow remote attackers to inject arbitrary web script or HTML by (1) providing a crafted playerId or (2) referencing an external domain, a related issue to CVE-2013-7342.
references
0
reference_url http://flash.flowplayer.org/documentation/version-history.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://flash.flowplayer.org/documentation/version-history.html
1
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-43344
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-43344
2
reference_url http://openwall.com/lists/oss-security/2014/03/17/1
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://openwall.com/lists/oss-security/2014/03/17/1
3
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-7341
reference_id
reference_type
scores
0
value 0.00258
scoring_system epss
scoring_elements 0.49272
published_at 2026-04-16T12:55:00Z
1
value 0.00258
scoring_system epss
scoring_elements 0.49226
published_at 2026-04-13T12:55:00Z
2
value 0.00258
scoring_system epss
scoring_elements 0.49221
published_at 2026-04-12T12:55:00Z
3
value 0.00258
scoring_system epss
scoring_elements 0.49248
published_at 2026-04-11T12:55:00Z
4
value 0.00258
scoring_system epss
scoring_elements 0.49231
published_at 2026-04-09T12:55:00Z
5
value 0.00258
scoring_system epss
scoring_elements 0.49234
published_at 2026-04-08T12:55:00Z
6
value 0.00258
scoring_system epss
scoring_elements 0.4918
published_at 2026-04-07T12:55:00Z
7
value 0.00258
scoring_system epss
scoring_elements 0.49229
published_at 2026-04-04T12:55:00Z
8
value 0.00258
scoring_system epss
scoring_elements 0.492
published_at 2026-04-02T12:55:00Z
9
value 0.00258
scoring_system epss
scoring_elements 0.49169
published_at 2026-04-01T12:55:00Z
10
value 0.00258
scoring_system epss
scoring_elements 0.4924
published_at 2026-04-21T12:55:00Z
11
value 0.00258
scoring_system epss
scoring_elements 0.4927
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-7341
4
reference_url https://github.com/flowplayer/flash/issues/121
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/flowplayer/flash/issues/121
5
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
6
reference_url https://github.com/moodle/moodle/commit/98d135fea3006334093efa822205d4b2c3fd8ff9
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/98d135fea3006334093efa822205d4b2c3fd8ff9
7
reference_url https://github.com/moodle/moodle/commit/9f2967e301d123d11625f3b6948e1ee538086791
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/9f2967e301d123d11625f3b6948e1ee538086791
8
reference_url https://github.com/moodle/moodle/commit/c3cd5e1db9de4f1a634492d99990534e30518066
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/c3cd5e1db9de4f1a634492d99990534e30518066
9
reference_url https://github.com/moodle/moodle/commit/d65634044ebaa738f55bdec521beb42844d6916a
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle/commit/d65634044ebaa738f55bdec521beb42844d6916a
10
reference_url https://moodle.org/mod/forum/discuss.php?d=256420
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://moodle.org/mod/forum/discuss.php?d=256420
11
reference_url https://typo3.org/security/advisory/typo3-core-sa-2015-007
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2015-007
12
reference_url https://nvd.nist.gov/vuln/detail/CVE-2013-7341
reference_id CVE-2013-7341
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2013-7341
13
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2013-7341.yaml
reference_id CVE-2013-7341.YAML
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2013-7341.yaml
14
reference_url https://github.com/advisories/GHSA-j6c3-3c4w-qv8p
reference_id GHSA-j6c3-3c4w-qv8p
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-j6c3-3c4w-qv8p
fixed_packages
0
url pkg:composer/typo3/cms@7.3.1
purl pkg:composer/typo3/cms@7.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ng4-5tkh-g7h5
1
vulnerability VCID-28bf-jvah-zkhw
2
vulnerability VCID-2rhx-afay-97da
3
vulnerability VCID-5jgb-dsyx-hyb4
4
vulnerability VCID-5paq-5frf-43ed
5
vulnerability VCID-6b5q-vzs3-pkcc
6
vulnerability VCID-6pvx-1qan-ukef
7
vulnerability VCID-b5ht-z6zp-pbht
8
vulnerability VCID-bajy-qbwq-fufn
9
vulnerability VCID-bnne-7p2q-eqd2
10
vulnerability VCID-buax-rz7x-r7c2
11
vulnerability VCID-bxjw-7426-gyb8
12
vulnerability VCID-cczn-x8q7-k7ba
13
vulnerability VCID-cjgc-q6p5-2ydc
14
vulnerability VCID-ck23-cxn6-bbf3
15
vulnerability VCID-dbrh-t8zx-nkd9
16
vulnerability VCID-dm97-51uu-r7gw
17
vulnerability VCID-dsu7-jjjq-f3e1
18
vulnerability VCID-ehzg-bzrd-kbcc
19
vulnerability VCID-f4pm-9tq5-q3ch
20
vulnerability VCID-gcnj-6qb6-pbgz
21
vulnerability VCID-h958-d3pm-kfcs
22
vulnerability VCID-jmu3-5k7e-x7ch
23
vulnerability VCID-jqx9-41zx-dbcy
24
vulnerability VCID-kqbk-4q4z-nkec
25
vulnerability VCID-mnz3-rj21-67ad
26
vulnerability VCID-n15v-ta9h-6ffb
27
vulnerability VCID-n78p-x7hh-gqcf
28
vulnerability VCID-nwxj-3ajk-rkh5
29
vulnerability VCID-pgzu-kxuj-j3fh
30
vulnerability VCID-pk8d-8u15-5bfq
31
vulnerability VCID-q6dx-uskc-y3hs
32
vulnerability VCID-qemc-8kj8-r3cd
33
vulnerability VCID-rdrs-mhaw-b3ge
34
vulnerability VCID-sr3p-pdxy-4yhu
35
vulnerability VCID-t3jn-vwbx-u7cr
36
vulnerability VCID-tmrt-6fxw-5ugh
37
vulnerability VCID-tw1y-t4qj-j3d1
38
vulnerability VCID-vndb-w8e1-4ugv
39
vulnerability VCID-wr5t-xqnn-gkcj
40
vulnerability VCID-ww44-zmx7-47ft
41
vulnerability VCID-wxps-mnue-6bbh
42
vulnerability VCID-xa4m-xpa9-v7h8
43
vulnerability VCID-xqew-bx7v-1qfk
44
vulnerability VCID-y32z-2d3f-gkgw
45
vulnerability VCID-zdq2-dhb2-6kaq
46
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.3.1
aliases CVE-2013-7341, GHSA-j6c3-3c4w-qv8p
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6spw-66jg-syb1
12
url VCID-7zx9-8afq-y3hc
vulnerability_id VCID-7zx9-8afq-y3hc
summary 
TYPO3 Information Disclosure Vulnerability Exploitable by Editors
It has been discovered, that editors with access to the file list module could list all files names and folder names in the root directory of a TYPO3 installation. Modification of files, listing further nested directories or retrieving file contents was not possible. A valid backend user account is needed to exploit this vulnerability.
references
0
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2015-07-01-4.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2015-07-01-4.yaml
1
reference_url https://github.com/TYPO3/typo3
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3
2
reference_url https://github.com/TYPO3/typo3/commit/d9caccb26c954834e7d43fbbe84a3130cc95524a
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/d9caccb26c954834e7d43fbbe84a3130cc95524a
3
reference_url https://typo3.org/security/advisory/typo3-core-sa-2015-005
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2015-005
4
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-005
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-005
5
reference_url https://github.com/advisories/GHSA-r287-hc8j-w56h
reference_id GHSA-r287-hc8j-w56h
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-r287-hc8j-w56h
fixed_packages
0
url pkg:composer/typo3/cms@7.3.1
purl pkg:composer/typo3/cms@7.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ng4-5tkh-g7h5
1
vulnerability VCID-28bf-jvah-zkhw
2
vulnerability VCID-2rhx-afay-97da
3
vulnerability VCID-5jgb-dsyx-hyb4
4
vulnerability VCID-5paq-5frf-43ed
5
vulnerability VCID-6b5q-vzs3-pkcc
6
vulnerability VCID-6pvx-1qan-ukef
7
vulnerability VCID-b5ht-z6zp-pbht
8
vulnerability VCID-bajy-qbwq-fufn
9
vulnerability VCID-bnne-7p2q-eqd2
10
vulnerability VCID-buax-rz7x-r7c2
11
vulnerability VCID-bxjw-7426-gyb8
12
vulnerability VCID-cczn-x8q7-k7ba
13
vulnerability VCID-cjgc-q6p5-2ydc
14
vulnerability VCID-ck23-cxn6-bbf3
15
vulnerability VCID-dbrh-t8zx-nkd9
16
vulnerability VCID-dm97-51uu-r7gw
17
vulnerability VCID-dsu7-jjjq-f3e1
18
vulnerability VCID-ehzg-bzrd-kbcc
19
vulnerability VCID-f4pm-9tq5-q3ch
20
vulnerability VCID-gcnj-6qb6-pbgz
21
vulnerability VCID-h958-d3pm-kfcs
22
vulnerability VCID-jmu3-5k7e-x7ch
23
vulnerability VCID-jqx9-41zx-dbcy
24
vulnerability VCID-kqbk-4q4z-nkec
25
vulnerability VCID-mnz3-rj21-67ad
26
vulnerability VCID-n15v-ta9h-6ffb
27
vulnerability VCID-n78p-x7hh-gqcf
28
vulnerability VCID-nwxj-3ajk-rkh5
29
vulnerability VCID-pgzu-kxuj-j3fh
30
vulnerability VCID-pk8d-8u15-5bfq
31
vulnerability VCID-q6dx-uskc-y3hs
32
vulnerability VCID-qemc-8kj8-r3cd
33
vulnerability VCID-rdrs-mhaw-b3ge
34
vulnerability VCID-sr3p-pdxy-4yhu
35
vulnerability VCID-t3jn-vwbx-u7cr
36
vulnerability VCID-tmrt-6fxw-5ugh
37
vulnerability VCID-tw1y-t4qj-j3d1
38
vulnerability VCID-vndb-w8e1-4ugv
39
vulnerability VCID-wr5t-xqnn-gkcj
40
vulnerability VCID-ww44-zmx7-47ft
41
vulnerability VCID-wxps-mnue-6bbh
42
vulnerability VCID-xa4m-xpa9-v7h8
43
vulnerability VCID-xqew-bx7v-1qfk
44
vulnerability VCID-y32z-2d3f-gkgw
45
vulnerability VCID-zdq2-dhb2-6kaq
46
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.3.1
aliases GHSA-r287-hc8j-w56h
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7zx9-8afq-y3hc
13
url VCID-99uu-rfrf-bqa7
vulnerability_id VCID-99uu-rfrf-bqa7
summary 
Typo3 Open Redirect In Frontend Rendering
The frontend rendering component in TYPO3 4.5.x before 4.5.39, 4.6.x through 6.2.x before 6.2.9, and 7.x before 7.0.2, allows remote attackers to change URLs to arbitrary domains.

An attacker could forge a request which modifies anchor only links on the homepage of a TYPO3 installation such that they point to arbitrary domains, if the configuration option `config.prefixLocalAnchors` is used with any possible value. TYPO3 versions 4.6.x and higher are only affected if the homepage is not a shortcut to a different page. As an additional pre-condition, URL rewriting must be enabled in the web server (which it typically is) when using extensions like realurl or cooluri.

Installations where `config.absRefPrefix` is additionally set to any value are not affected by this vulnerability.

Example of affected configuration:

```php
config.absRefPrefix =
config.prefixLocalAnchors = all 
page = PAGE 
page.10 = TEXT 
page.10.value = <a href="#skiplinks">Skiplinks</a> 
.htaccess:

RewriteCond %{REQUEST_FILENAME} !-f 
RewriteCond %{REQUEST_FILENAME} !-d 
RewriteCond %{REQUEST_FILENAME} !-l 
RewriteRule .* index.php [L] 
```
references
0
reference_url http://lists.opensuse.org/opensuse-updates/2016-08/msg00106.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-updates/2016-08/msg00106.html
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-9508
reference_id
reference_type
scores
0
value 0.00289
scoring_system epss
scoring_elements 0.52389
published_at 2026-04-21T12:55:00Z
1
value 0.00289
scoring_system epss
scoring_elements 0.52341
published_at 2026-04-09T12:55:00Z
2
value 0.00289
scoring_system epss
scoring_elements 0.52391
published_at 2026-04-11T12:55:00Z
3
value 0.00289
scoring_system epss
scoring_elements 0.52375
published_at 2026-04-12T12:55:00Z
4
value 0.00289
scoring_system epss
scoring_elements 0.52361
published_at 2026-04-13T12:55:00Z
5
value 0.00289
scoring_system epss
scoring_elements 0.524
published_at 2026-04-16T12:55:00Z
6
value 0.00289
scoring_system epss
scoring_elements 0.52406
published_at 2026-04-18T12:55:00Z
7
value 0.00289
scoring_system epss
scoring_elements 0.5226
published_at 2026-04-01T12:55:00Z
8
value 0.00289
scoring_system epss
scoring_elements 0.52302
published_at 2026-04-02T12:55:00Z
9
value 0.00289
scoring_system epss
scoring_elements 0.5233
published_at 2026-04-04T12:55:00Z
10
value 0.00289
scoring_system epss
scoring_elements 0.52293
published_at 2026-04-07T12:55:00Z
11
value 0.00289
scoring_system epss
scoring_elements 0.52346
published_at 2026-04-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-9508
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2014-9508.yaml
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2014-9508.yaml
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2014-9508
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:N/I:P/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2014-9508
4
reference_url https://typo3.org/security/advisory/typo3-core-sa-2014-003
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2014-003
5
reference_url http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2014-003
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2014-003
6
reference_url http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2014-003/
reference_id
reference_type
scores
url http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2014-003/
7
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.0:*:*:*:*:*:*:*
8
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.1:*:*:*:*:*:*:*
9
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.10:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.10:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.10:*:*:*:*:*:*:*
10
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.11:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.11:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.11:*:*:*:*:*:*:*
11
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.12:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.12:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.12:*:*:*:*:*:*:*
12
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.13:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.13:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.13:*:*:*:*:*:*:*
13
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.14:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.14:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.14:*:*:*:*:*:*:*
14
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.15:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.15:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.15:*:*:*:*:*:*:*
15
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.16:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.16:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.16:*:*:*:*:*:*:*
16
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.17:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.17:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.17:*:*:*:*:*:*:*
17
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.18:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.18:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.18:*:*:*:*:*:*:*
18
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.19:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.19:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.19:*:*:*:*:*:*:*
19
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.2:*:*:*:*:*:*:*
20
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.20:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.20:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.20:*:*:*:*:*:*:*
21
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.21:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.21:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.21:*:*:*:*:*:*:*
22
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.22:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.22:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.22:*:*:*:*:*:*:*
23
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.23:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.23:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.23:*:*:*:*:*:*:*
24
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.24:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.24:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.24:*:*:*:*:*:*:*
25
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.25:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.25:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.25:*:*:*:*:*:*:*
26
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.26:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.26:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.26:*:*:*:*:*:*:*
27
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.27:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.27:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.27:*:*:*:*:*:*:*
28
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.28:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.28:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.28:*:*:*:*:*:*:*
29
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.29:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.29:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.29:*:*:*:*:*:*:*
30
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.3:*:*:*:*:*:*:*
31
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.30:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.30:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.30:*:*:*:*:*:*:*
32
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.31:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.31:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.31:*:*:*:*:*:*:*
33
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.32:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.32:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.32:*:*:*:*:*:*:*
34
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.33:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.33:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.33:*:*:*:*:*:*:*
35
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.34:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.34:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.34:*:*:*:*:*:*:*
36
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.35:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.35:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.35:*:*:*:*:*:*:*
37
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.36:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.36:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.36:*:*:*:*:*:*:*
38
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.37:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.37:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.37:*:*:*:*:*:*:*
39
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.38:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.38:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.38:*:*:*:*:*:*:*
40
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.4:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.4:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.4:*:*:*:*:*:*:*
41
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.5:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.5:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.5:*:*:*:*:*:*:*
42
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.6:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.6:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.6:*:*:*:*:*:*:*
43
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.7:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.7:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.7:*:*:*:*:*:*:*
44
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.8:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.8:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.8:*:*:*:*:*:*:*
45
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.9:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.9:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.9:*:*:*:*:*:*:*
46
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.6.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.0:*:*:*:*:*:*:*
47
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.6.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.1:*:*:*:*:*:*:*
48
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.10:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.6.10:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.10:*:*:*:*:*:*:*
49
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.11:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.6.11:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.11:*:*:*:*:*:*:*
50
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.12:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.6.12:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.12:*:*:*:*:*:*:*
51
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.13:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.6.13:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.13:*:*:*:*:*:*:*
52
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.14:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.6.14:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.14:*:*:*:*:*:*:*
53
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.15:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.6.15:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.15:*:*:*:*:*:*:*
54
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.16:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.6.16:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.16:*:*:*:*:*:*:*
55
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.17:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.6.17:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.17:*:*:*:*:*:*:*
56
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.18:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.6.18:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.18:*:*:*:*:*:*:*
57
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.6.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.2:*:*:*:*:*:*:*
58
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.6.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.3:*:*:*:*:*:*:*
59
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.4:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.6.4:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.4:*:*:*:*:*:*:*
60
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.5:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.6.5:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.5:*:*:*:*:*:*:*
61
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.6:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.6.6:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.6:*:*:*:*:*:*:*
62
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.7:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.6.7:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.7:*:*:*:*:*:*:*
63
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.8:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.6.8:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.8:*:*:*:*:*:*:*
64
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.9:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.6.9:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.9:*:*:*:*:*:*:*
65
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.7.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.0:*:*:*:*:*:*:*
66
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.7.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.1:*:*:*:*:*:*:*
67
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.10:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.7.10:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.10:*:*:*:*:*:*:*
68
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.11:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.7.11:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.11:*:*:*:*:*:*:*
69
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.12:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.7.12:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.12:*:*:*:*:*:*:*
70
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.13:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.7.13:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.13:*:*:*:*:*:*:*
71
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.14:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.7.14:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.14:*:*:*:*:*:*:*
72
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.15:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.7.15:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.15:*:*:*:*:*:*:*
73
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.16:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.7.16:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.16:*:*:*:*:*:*:*
74
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.17:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.7.17:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.17:*:*:*:*:*:*:*
75
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.18:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.7.18:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.18:*:*:*:*:*:*:*
76
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.19:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.7.19:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.19:*:*:*:*:*:*:*
77
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.7.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.2:*:*:*:*:*:*:*
78
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.20:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.7.20:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.20:*:*:*:*:*:*:*
79
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.7.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.3:*:*:*:*:*:*:*
80
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.4:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.7.4:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.4:*:*:*:*:*:*:*
81
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.5:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.7.5:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.5:*:*:*:*:*:*:*
82
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.6:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.7.6:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.6:*:*:*:*:*:*:*
83
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.7:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.7.7:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.7:*:*:*:*:*:*:*
84
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.8:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.7.8:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.8:*:*:*:*:*:*:*
85
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.9:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.7.9:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.9:*:*:*:*:*:*:*
86
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0:*:*:*:*:*:*:*
87
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.0.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0.1:*:*:*:*:*:*:*
88
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0.10:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.0.10:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0.10:*:*:*:*:*:*:*
89
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0.11:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.0.11:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0.11:*:*:*:*:*:*:*
90
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0.12:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.0.12:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0.12:*:*:*:*:*:*:*
91
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0.13:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.0.13:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0.13:*:*:*:*:*:*:*
92
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0.14:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.0.14:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0.14:*:*:*:*:*:*:*
93
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.0.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0.2:*:*:*:*:*:*:*
94
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.0.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0.3:*:*:*:*:*:*:*
95
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0.4:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.0.4:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0.4:*:*:*:*:*:*:*
96
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0.5:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.0.5:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0.5:*:*:*:*:*:*:*
97
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0.6:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.0.6:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0.6:*:*:*:*:*:*:*
98
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0.7:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.0.7:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0.7:*:*:*:*:*:*:*
99
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0.8:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.0.8:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0.8:*:*:*:*:*:*:*
100
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0.9:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.0.9:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0.9:*:*:*:*:*:*:*
101
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.1:*:*:*:*:*:*:*
102
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.1.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.1.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.1.1:*:*:*:*:*:*:*
103
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.1.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.1.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.1.2:*:*:*:*:*:*:*
104
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.1.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.1.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.1.3:*:*:*:*:*:*:*
105
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.1.4:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.1.4:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.1.4:*:*:*:*:*:*:*
106
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.1.5:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.1.5:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.1.5:*:*:*:*:*:*:*
107
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.1.6:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.1.6:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.1.6:*:*:*:*:*:*:*
108
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.1.7:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.1.7:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.1.7:*:*:*:*:*:*:*
109
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.1.8:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.1.8:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.1.8:*:*:*:*:*:*:*
110
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.1.9:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.1.9:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.1.9:*:*:*:*:*:*:*
111
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2:*:*:*:*:*:*:*
112
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:beta1:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.0:beta1:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:beta1:*:*:*:*:*:*
113
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:beta2:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.0:beta2:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:beta2:*:*:*:*:*:*
114
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:beta3:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.0:beta3:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:beta3:*:*:*:*:*:*
115
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.1:*:*:*:*:*:*:*
116
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.2:*:*:*:*:*:*:*
117
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.3:*:*:*:*:*:*:*
118
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.4:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.4:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.4:*:*:*:*:*:*:*
119
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.5:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.5:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.5:*:*:*:*:*:*:*
120
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.6:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.6:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.6:*:*:*:*:*:*:*
121
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.7:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.7:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.7:*:*:*:*:*:*:*
122
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.8:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.8:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.8:*:*:*:*:*:*:*
123
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:7.0.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:7.0.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:7.0.0:*:*:*:*:*:*:*
124
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:7.0.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:7.0.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:7.0.1:*:*:*:*:*:*:*
125
reference_url https://github.com/advisories/GHSA-v6xv-rmqc-wcc8
reference_id GHSA-v6xv-rmqc-wcc8
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-v6xv-rmqc-wcc8
fixed_packages
0
url pkg:composer/typo3/cms@7.0.2
purl pkg:composer/typo3/cms@7.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ng4-5tkh-g7h5
1
vulnerability VCID-28bf-jvah-zkhw
2
vulnerability VCID-2rhx-afay-97da
3
vulnerability VCID-37wu-bjfj-k7eg
4
vulnerability VCID-4etp-u4pt-v7hm
5
vulnerability VCID-51ba-3ag9-rucn
6
vulnerability VCID-5jgb-dsyx-hyb4
7
vulnerability VCID-5paq-5frf-43ed
8
vulnerability VCID-6b5q-vzs3-pkcc
9
vulnerability VCID-6gms-w48j-4ffh
10
vulnerability VCID-6pvx-1qan-ukef
11
vulnerability VCID-6spw-66jg-syb1
12
vulnerability VCID-7zx9-8afq-y3hc
13
vulnerability VCID-b5ht-z6zp-pbht
14
vulnerability VCID-bajy-qbwq-fufn
15
vulnerability VCID-bnne-7p2q-eqd2
16
vulnerability VCID-buax-rz7x-r7c2
17
vulnerability VCID-bxjw-7426-gyb8
18
vulnerability VCID-cczn-x8q7-k7ba
19
vulnerability VCID-cjgc-q6p5-2ydc
20
vulnerability VCID-ck23-cxn6-bbf3
21
vulnerability VCID-dbrh-t8zx-nkd9
22
vulnerability VCID-dm97-51uu-r7gw
23
vulnerability VCID-dsu7-jjjq-f3e1
24
vulnerability VCID-ehzg-bzrd-kbcc
25
vulnerability VCID-f4pm-9tq5-q3ch
26
vulnerability VCID-gcnj-6qb6-pbgz
27
vulnerability VCID-h958-d3pm-kfcs
28
vulnerability VCID-jmu3-5k7e-x7ch
29
vulnerability VCID-jqx9-41zx-dbcy
30
vulnerability VCID-kgcq-paqm-9ya6
31
vulnerability VCID-kpze-14jy-xud9
32
vulnerability VCID-kqbk-4q4z-nkec
33
vulnerability VCID-mnz3-rj21-67ad
34
vulnerability VCID-n15v-ta9h-6ffb
35
vulnerability VCID-n78p-x7hh-gqcf
36
vulnerability VCID-ne8w-dpjw-7qf1
37
vulnerability VCID-nwxj-3ajk-rkh5
38
vulnerability VCID-pgzu-kxuj-j3fh
39
vulnerability VCID-pk8d-8u15-5bfq
40
vulnerability VCID-q6dx-uskc-y3hs
41
vulnerability VCID-qemc-8kj8-r3cd
42
vulnerability VCID-rdrs-mhaw-b3ge
43
vulnerability VCID-re9h-ze98-rbhu
44
vulnerability VCID-rwgf-2pfh-ufdz
45
vulnerability VCID-se8w-fv8x-tqde
46
vulnerability VCID-sr3p-pdxy-4yhu
47
vulnerability VCID-t3jn-vwbx-u7cr
48
vulnerability VCID-tmrt-6fxw-5ugh
49
vulnerability VCID-tw1y-t4qj-j3d1
50
vulnerability VCID-vndb-w8e1-4ugv
51
vulnerability VCID-wr5t-xqnn-gkcj
52
vulnerability VCID-ww44-zmx7-47ft
53
vulnerability VCID-wxps-mnue-6bbh
54
vulnerability VCID-xa4m-xpa9-v7h8
55
vulnerability VCID-xhq3-ts9t-sbdy
56
vulnerability VCID-xkpp-psz2-2kag
57
vulnerability VCID-xqew-bx7v-1qfk
58
vulnerability VCID-y32z-2d3f-gkgw
59
vulnerability VCID-zdq2-dhb2-6kaq
60
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.0.2
aliases CVE-2014-9508, GHSA-v6xv-rmqc-wcc8
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-99uu-rfrf-bqa7
14
url VCID-asym-tgh2-1kg8
vulnerability_id VCID-asym-tgh2-1kg8
summary 
TYPO3 possible cache poisoning on the homepage when anchors are used
A request URL with arbitrary arguments, but still pointing to the home page of  a TYPO3 installation can be cached if the configuration option config.prefixLocalAnchors is used with the values "all" or "cached". The impact of this vulnerability is that unfamiliar looking links to the home page can end up in the cache, which leads to a reload of the page in the browser when section links are followed by web page visitors, instead of just directly jumping to the requested section of the page. TYPO3 versions 4.6.x and higher are only affected if the homepage is not a shortcut to a different page.
references
0
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2014-12-09-2.yaml
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2014-12-09-2.yaml
1
reference_url https://github.com/TYPO3/typo3
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3
2
reference_url https://typo3.org/security/advisory/typo3-core-sa-2014-003
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2014-003
3
reference_url https://github.com/advisories/GHSA-p84g-j2gh-83g3
reference_id GHSA-p84g-j2gh-83g3
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-p84g-j2gh-83g3
fixed_packages
0
url pkg:composer/typo3/cms@7.0.2
purl pkg:composer/typo3/cms@7.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ng4-5tkh-g7h5
1
vulnerability VCID-28bf-jvah-zkhw
2
vulnerability VCID-2rhx-afay-97da
3
vulnerability VCID-37wu-bjfj-k7eg
4
vulnerability VCID-4etp-u4pt-v7hm
5
vulnerability VCID-51ba-3ag9-rucn
6
vulnerability VCID-5jgb-dsyx-hyb4
7
vulnerability VCID-5paq-5frf-43ed
8
vulnerability VCID-6b5q-vzs3-pkcc
9
vulnerability VCID-6gms-w48j-4ffh
10
vulnerability VCID-6pvx-1qan-ukef
11
vulnerability VCID-6spw-66jg-syb1
12
vulnerability VCID-7zx9-8afq-y3hc
13
vulnerability VCID-b5ht-z6zp-pbht
14
vulnerability VCID-bajy-qbwq-fufn
15
vulnerability VCID-bnne-7p2q-eqd2
16
vulnerability VCID-buax-rz7x-r7c2
17
vulnerability VCID-bxjw-7426-gyb8
18
vulnerability VCID-cczn-x8q7-k7ba
19
vulnerability VCID-cjgc-q6p5-2ydc
20
vulnerability VCID-ck23-cxn6-bbf3
21
vulnerability VCID-dbrh-t8zx-nkd9
22
vulnerability VCID-dm97-51uu-r7gw
23
vulnerability VCID-dsu7-jjjq-f3e1
24
vulnerability VCID-ehzg-bzrd-kbcc
25
vulnerability VCID-f4pm-9tq5-q3ch
26
vulnerability VCID-gcnj-6qb6-pbgz
27
vulnerability VCID-h958-d3pm-kfcs
28
vulnerability VCID-jmu3-5k7e-x7ch
29
vulnerability VCID-jqx9-41zx-dbcy
30
vulnerability VCID-kgcq-paqm-9ya6
31
vulnerability VCID-kpze-14jy-xud9
32
vulnerability VCID-kqbk-4q4z-nkec
33
vulnerability VCID-mnz3-rj21-67ad
34
vulnerability VCID-n15v-ta9h-6ffb
35
vulnerability VCID-n78p-x7hh-gqcf
36
vulnerability VCID-ne8w-dpjw-7qf1
37
vulnerability VCID-nwxj-3ajk-rkh5
38
vulnerability VCID-pgzu-kxuj-j3fh
39
vulnerability VCID-pk8d-8u15-5bfq
40
vulnerability VCID-q6dx-uskc-y3hs
41
vulnerability VCID-qemc-8kj8-r3cd
42
vulnerability VCID-rdrs-mhaw-b3ge
43
vulnerability VCID-re9h-ze98-rbhu
44
vulnerability VCID-rwgf-2pfh-ufdz
45
vulnerability VCID-se8w-fv8x-tqde
46
vulnerability VCID-sr3p-pdxy-4yhu
47
vulnerability VCID-t3jn-vwbx-u7cr
48
vulnerability VCID-tmrt-6fxw-5ugh
49
vulnerability VCID-tw1y-t4qj-j3d1
50
vulnerability VCID-vndb-w8e1-4ugv
51
vulnerability VCID-wr5t-xqnn-gkcj
52
vulnerability VCID-ww44-zmx7-47ft
53
vulnerability VCID-wxps-mnue-6bbh
54
vulnerability VCID-xa4m-xpa9-v7h8
55
vulnerability VCID-xhq3-ts9t-sbdy
56
vulnerability VCID-xkpp-psz2-2kag
57
vulnerability VCID-xqew-bx7v-1qfk
58
vulnerability VCID-y32z-2d3f-gkgw
59
vulnerability VCID-zdq2-dhb2-6kaq
60
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.0.2
aliases GHSA-p84g-j2gh-83g3
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-asym-tgh2-1kg8
15
url VCID-b5ht-z6zp-pbht
vulnerability_id VCID-b5ht-z6zp-pbht
summary 
Cross-Site Scripting Vulnerability
It has been discovered, that it is possible to forge a link to a backend module, which contains a JavaScript payload. This JavaScript is executed, if an authenticated editor with access to the module follows the link that, is tricked to click on a certain HTML target. Because TYPO3 include a secret token unknown to an attacker in every URL, an exploit would not be feasible for these versions.
references
0
reference_url http://packetstormsecurity.com/files/133551/Typo3-CMS-6.2.14-4.5.40-Cross-Site-Scripting.html
reference_id
reference_type
scores
0
value LOW
scoring_system generic_textual
scoring_elements
url http://packetstormsecurity.com/files/133551/Typo3-CMS-6.2.14-4.5.40-Cross-Site-Scripting.html
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-5956
reference_id
reference_type
scores
0
value 0.00169
scoring_system epss
scoring_elements 0.38086
published_at 2026-04-21T12:55:00Z
1
value 0.00169
scoring_system epss
scoring_elements 0.38157
published_at 2026-04-08T12:55:00Z
2
value 0.00169
scoring_system epss
scoring_elements 0.38165
published_at 2026-04-09T12:55:00Z
3
value 0.00169
scoring_system epss
scoring_elements 0.38184
published_at 2026-04-11T12:55:00Z
4
value 0.00169
scoring_system epss
scoring_elements 0.38149
published_at 2026-04-12T12:55:00Z
5
value 0.00169
scoring_system epss
scoring_elements 0.38124
published_at 2026-04-13T12:55:00Z
6
value 0.00169
scoring_system epss
scoring_elements 0.3817
published_at 2026-04-16T12:55:00Z
7
value 0.00169
scoring_system epss
scoring_elements 0.38151
published_at 2026-04-18T12:55:00Z
8
value 0.00169
scoring_system epss
scoring_elements 0.38035
published_at 2026-04-01T12:55:00Z
9
value 0.00169
scoring_system epss
scoring_elements 0.38215
published_at 2026-04-02T12:55:00Z
10
value 0.00169
scoring_system epss
scoring_elements 0.38238
published_at 2026-04-04T12:55:00Z
11
value 0.00169
scoring_system epss
scoring_elements 0.38107
published_at 2026-04-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-5956
2
reference_url http://seclists.org/fulldisclosure/2015/Sep/57
reference_id
reference_type
scores
0
value LOW
scoring_system generic_textual
scoring_elements
url http://seclists.org/fulldisclosure/2015/Sep/57
3
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2015-5956.yaml
reference_id
reference_type
scores
0
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2015-5956.yaml
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2015-5956
reference_id
reference_type
scores
0
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2015-5956
5
reference_url https://review.typo3.org/#/c/43122/
reference_id
reference_type
scores
url https://review.typo3.org/#/c/43122/
6
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-009
reference_id
reference_type
scores
0
value LOW
scoring_system generic_textual
scoring_elements
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-009
7
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-009/
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-009/
8
reference_url http://www.securityfocus.com/archive/1/536464/100/0/threaded
reference_id
reference_type
scores
0
value LOW
scoring_system generic_textual
scoring_elements
url http://www.securityfocus.com/archive/1/536464/100/0/threaded
9
reference_url http://www.securitytracker.com/id/1033551
reference_id
reference_type
scores
0
value LOW
scoring_system generic_textual
scoring_elements
url http://www.securitytracker.com/id/1033551
10
reference_url https://github.com/advisories/GHSA-989h-wv8x-933p
reference_id GHSA-989h-wv8x-933p
reference_type
scores
0
value LOW
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-989h-wv8x-933p
fixed_packages
0
url pkg:composer/typo3/cms@7.4.0
purl pkg:composer/typo3/cms@7.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ng4-5tkh-g7h5
1
vulnerability VCID-28bf-jvah-zkhw
2
vulnerability VCID-5jgb-dsyx-hyb4
3
vulnerability VCID-5paq-5frf-43ed
4
vulnerability VCID-6b5q-vzs3-pkcc
5
vulnerability VCID-6pvx-1qan-ukef
6
vulnerability VCID-bajy-qbwq-fufn
7
vulnerability VCID-bnne-7p2q-eqd2
8
vulnerability VCID-buax-rz7x-r7c2
9
vulnerability VCID-bxjw-7426-gyb8
10
vulnerability VCID-cczn-x8q7-k7ba
11
vulnerability VCID-cjgc-q6p5-2ydc
12
vulnerability VCID-dbrh-t8zx-nkd9
13
vulnerability VCID-dm97-51uu-r7gw
14
vulnerability VCID-dsu7-jjjq-f3e1
15
vulnerability VCID-ehzg-bzrd-kbcc
16
vulnerability VCID-f4pm-9tq5-q3ch
17
vulnerability VCID-gcnj-6qb6-pbgz
18
vulnerability VCID-h958-d3pm-kfcs
19
vulnerability VCID-jmu3-5k7e-x7ch
20
vulnerability VCID-jqx9-41zx-dbcy
21
vulnerability VCID-kqbk-4q4z-nkec
22
vulnerability VCID-mnz3-rj21-67ad
23
vulnerability VCID-n15v-ta9h-6ffb
24
vulnerability VCID-n78p-x7hh-gqcf
25
vulnerability VCID-nwxj-3ajk-rkh5
26
vulnerability VCID-pgzu-kxuj-j3fh
27
vulnerability VCID-pk8d-8u15-5bfq
28
vulnerability VCID-q6dx-uskc-y3hs
29
vulnerability VCID-qemc-8kj8-r3cd
30
vulnerability VCID-rdrs-mhaw-b3ge
31
vulnerability VCID-sr3p-pdxy-4yhu
32
vulnerability VCID-t3jn-vwbx-u7cr
33
vulnerability VCID-tmrt-6fxw-5ugh
34
vulnerability VCID-tw1y-t4qj-j3d1
35
vulnerability VCID-vndb-w8e1-4ugv
36
vulnerability VCID-wr5t-xqnn-gkcj
37
vulnerability VCID-ww44-zmx7-47ft
38
vulnerability VCID-wxps-mnue-6bbh
39
vulnerability VCID-xa4m-xpa9-v7h8
40
vulnerability VCID-xqew-bx7v-1qfk
41
vulnerability VCID-y32z-2d3f-gkgw
42
vulnerability VCID-zdq2-dhb2-6kaq
43
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.4.0
aliases CVE-2015-5956, GHSA-989h-wv8x-933p
risk_score 1.4
exploitability 0.5
weighted_severity 2.7
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-b5ht-z6zp-pbht
16
url VCID-bajy-qbwq-fufn
vulnerability_id VCID-bajy-qbwq-fufn
summary 
Insertion of Sensitive Information into Log File in typo3/cms-core
> ### Meta
> * CVSS: `CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C` (4.9)

### Problem
It has been discovered that system internal credentials or keys (e.g. database credentials) have been logged as plaintext in exception handlers, when logging the complete exception stack trace.

### Solution
Update to TYPO3 versions 7.6.57 ELTS, 8.7.47 ELTS, 9.5.35 ELTS, 10.4.29, 11.5.11 that fix the problem described above.

### Credits
Thanks to Marco Huber who reported this issue and to TYPO3 security member Torben Hansen who fixed the issue.

### References
* [TYPO3-CORE-SA-2022-002](https://typo3.org/security/advisory/typo3-core-sa-2022-002)
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-31047
reference_id
reference_type
scores
0
value 0.00391
scoring_system epss
scoring_elements 0.60107
published_at 2026-04-02T12:55:00Z
1
value 0.00391
scoring_system epss
scoring_elements 0.60201
published_at 2026-04-18T12:55:00Z
2
value 0.00391
scoring_system epss
scoring_elements 0.60194
published_at 2026-04-16T12:55:00Z
3
value 0.00391
scoring_system epss
scoring_elements 0.60155
published_at 2026-04-13T12:55:00Z
4
value 0.00391
scoring_system epss
scoring_elements 0.60173
published_at 2026-04-12T12:55:00Z
5
value 0.00391
scoring_system epss
scoring_elements 0.60187
published_at 2026-04-21T12:55:00Z
6
value 0.00391
scoring_system epss
scoring_elements 0.60165
published_at 2026-04-09T12:55:00Z
7
value 0.00391
scoring_system epss
scoring_elements 0.60151
published_at 2026-04-08T12:55:00Z
8
value 0.00391
scoring_system epss
scoring_elements 0.60101
published_at 2026-04-07T12:55:00Z
9
value 0.00391
scoring_system epss
scoring_elements 0.60132
published_at 2026-04-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-31047
1
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2022-31047.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2022-31047.yaml
2
reference_url https://github.com/TYPO3-CMS/core
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core
3
reference_url https://github.com/TYPO3/typo3/commit/c93ea692e7dfef03b7c50fe5437487545bee4d6a
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T14:05:23Z/
url https://github.com/TYPO3/typo3/commit/c93ea692e7dfef03b7c50fe5437487545bee4d6a
4
reference_url https://github.com/TYPO3/typo3/security/advisories/GHSA-fh99-4pgr-8j99
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T14:05:23Z/
url https://github.com/TYPO3/typo3/security/advisories/GHSA-fh99-4pgr-8j99
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-31047
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-31047
6
reference_url https://typo3.org/security/advisory/typo3-core-sa-2022-002
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T14:05:23Z/
url https://typo3.org/security/advisory/typo3-core-sa-2022-002
7
reference_url https://github.com/advisories/GHSA-fh99-4pgr-8j99
reference_id GHSA-fh99-4pgr-8j99
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-fh99-4pgr-8j99
fixed_packages
0
url pkg:composer/typo3/cms@10.4.29
purl pkg:composer/typo3/cms@10.4.29
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1yxw-saf5-wue7
1
vulnerability VCID-5paq-5frf-43ed
2
vulnerability VCID-8sdd-b1bn-cuhx
3
vulnerability VCID-av8u-rvzq-4fc7
4
vulnerability VCID-mnz3-rj21-67ad
5
vulnerability VCID-t1n7-eswt-73gw
6
vulnerability VCID-ve7g-8st5-wffb
7
vulnerability VCID-vwb2-a84s-5qak
8
vulnerability VCID-vyvy-y3cw-hbgr
9
vulnerability VCID-w13x-3rp9-wyej
10
vulnerability VCID-yj9g-uz1a-jkf2
11
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@10.4.29
1
url pkg:composer/typo3/cms@11.5.11
purl pkg:composer/typo3/cms@11.5.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1yxw-saf5-wue7
1
vulnerability VCID-5paq-5frf-43ed
2
vulnerability VCID-8sdd-b1bn-cuhx
3
vulnerability VCID-av8u-rvzq-4fc7
4
vulnerability VCID-mnz3-rj21-67ad
5
vulnerability VCID-t1n7-eswt-73gw
6
vulnerability VCID-tnxn-p13f-yuah
7
vulnerability VCID-ve7g-8st5-wffb
8
vulnerability VCID-vwb2-a84s-5qak
9
vulnerability VCID-vyvy-y3cw-hbgr
10
vulnerability VCID-w13x-3rp9-wyej
11
vulnerability VCID-yj9g-uz1a-jkf2
12
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@11.5.11
aliases CVE-2022-31047, GHSA-fh99-4pgr-8j99
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-bajy-qbwq-fufn
17
url VCID-bnne-7p2q-eqd2
vulnerability_id VCID-bnne-7p2q-eqd2
summary 
Uncontrolled Resource Consumption
Denial of Service in Online Media Asset Handling.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-011/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2018-011/
fixed_packages
0
url pkg:composer/typo3/cms@7.6.32
purl pkg:composer/typo3/cms@7.6.32
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5jgb-dsyx-hyb4
1
vulnerability VCID-5paq-5frf-43ed
2
vulnerability VCID-bajy-qbwq-fufn
3
vulnerability VCID-dsu7-jjjq-f3e1
4
vulnerability VCID-f963-qur3-2qb7
5
vulnerability VCID-gcnj-6qb6-pbgz
6
vulnerability VCID-mnz3-rj21-67ad
7
vulnerability VCID-n15v-ta9h-6ffb
8
vulnerability VCID-t3jn-vwbx-u7cr
9
vulnerability VCID-xa4m-xpa9-v7h8
10
vulnerability VCID-y32z-2d3f-gkgw
11
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.32
1
url pkg:composer/typo3/cms@8.7.21
purl pkg:composer/typo3/cms@8.7.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18dg-eevv-3ug9
1
vulnerability VCID-1kae-ffj3-xyc7
2
vulnerability VCID-2meq-x4kd-bbdn
3
vulnerability VCID-3n2r-awja-dug9
4
vulnerability VCID-3v4n-fzxa-bfaw
5
vulnerability VCID-4ack-haf2-cfbe
6
vulnerability VCID-551q-gpyd-ffe8
7
vulnerability VCID-5jgb-dsyx-hyb4
8
vulnerability VCID-5paq-5frf-43ed
9
vulnerability VCID-5qfv-y43v-akdm
10
vulnerability VCID-6487-15z5-pkd4
11
vulnerability VCID-9g62-zd1x-3bdg
12
vulnerability VCID-9gpp-ez8w-rqav
13
vulnerability VCID-axaf-45kr-kbfe
14
vulnerability VCID-bajy-qbwq-fufn
15
vulnerability VCID-c2tm-eqmm-1ugt
16
vulnerability VCID-cm14-t8uv-k3es
17
vulnerability VCID-cmka-8484-27bu
18
vulnerability VCID-dj88-f3p8-cfbn
19
vulnerability VCID-dsu7-jjjq-f3e1
20
vulnerability VCID-e72u-tpc3-23g3
21
vulnerability VCID-eajg-ctpd-2bby
22
vulnerability VCID-ekfd-wp8z-d7e1
23
vulnerability VCID-f963-qur3-2qb7
24
vulnerability VCID-gcnj-6qb6-pbgz
25
vulnerability VCID-he5m-6wj4-rbhc
26
vulnerability VCID-j77k-hjgx-5kc5
27
vulnerability VCID-jppe-cbgm-k3cz
28
vulnerability VCID-k4h1-mvnf-1ybx
29
vulnerability VCID-k8af-cg9k-87a9
30
vulnerability VCID-m7w6-b2xu-6uee
31
vulnerability VCID-mnz3-rj21-67ad
32
vulnerability VCID-n15v-ta9h-6ffb
33
vulnerability VCID-px44-19tj-h7aa
34
vulnerability VCID-q8hy-wjd9-nbgp
35
vulnerability VCID-s64f-x81f-b7ce
36
vulnerability VCID-shqd-udhm-pff8
37
vulnerability VCID-stzu-sxe6-5yf5
38
vulnerability VCID-t1n7-eswt-73gw
39
vulnerability VCID-t3jn-vwbx-u7cr
40
vulnerability VCID-tqf5-2fsm-8fch
41
vulnerability VCID-vxj6-wvyz-zbaq
42
vulnerability VCID-vxry-uvph-kbfd
43
vulnerability VCID-vybh-pxr3-17hn
44
vulnerability VCID-vyvy-y3cw-hbgr
45
vulnerability VCID-wea9-egep-h7g5
46
vulnerability VCID-xa4m-xpa9-v7h8
47
vulnerability VCID-xh7y-56vy-5ud8
48
vulnerability VCID-y32z-2d3f-gkgw
49
vulnerability VCID-zdq2-dhb2-6kaq
50
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.21
2
url pkg:composer/typo3/cms@9.5.2
purl pkg:composer/typo3/cms@9.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18dg-eevv-3ug9
1
vulnerability VCID-1kae-ffj3-xyc7
2
vulnerability VCID-2meq-x4kd-bbdn
3
vulnerability VCID-2mn6-mdmz-4yd9
4
vulnerability VCID-3n2r-awja-dug9
5
vulnerability VCID-3v4n-fzxa-bfaw
6
vulnerability VCID-4ack-haf2-cfbe
7
vulnerability VCID-4mkw-tv16-jyca
8
vulnerability VCID-543x-cnbz-1kb9
9
vulnerability VCID-551q-gpyd-ffe8
10
vulnerability VCID-58js-jzm4-4fc7
11
vulnerability VCID-5jgb-dsyx-hyb4
12
vulnerability VCID-5kzs-ex81-bbaj
13
vulnerability VCID-5paq-5frf-43ed
14
vulnerability VCID-6487-15z5-pkd4
15
vulnerability VCID-6a9t-8dmn-s3bv
16
vulnerability VCID-9g62-zd1x-3bdg
17
vulnerability VCID-9gpp-ez8w-rqav
18
vulnerability VCID-a49c-fqrj-nbb3
19
vulnerability VCID-anfj-pmkg-skhe
20
vulnerability VCID-axaf-45kr-kbfe
21
vulnerability VCID-bajy-qbwq-fufn
22
vulnerability VCID-c2tm-eqmm-1ugt
23
vulnerability VCID-cm14-t8uv-k3es
24
vulnerability VCID-cmka-8484-27bu
25
vulnerability VCID-d8d1-sat6-muhe
26
vulnerability VCID-dcy2-efyc-6qgq
27
vulnerability VCID-dj88-f3p8-cfbn
28
vulnerability VCID-dsu7-jjjq-f3e1
29
vulnerability VCID-e72u-tpc3-23g3
30
vulnerability VCID-eajg-ctpd-2bby
31
vulnerability VCID-ekfd-wp8z-d7e1
32
vulnerability VCID-f963-qur3-2qb7
33
vulnerability VCID-gcnj-6qb6-pbgz
34
vulnerability VCID-he5m-6wj4-rbhc
35
vulnerability VCID-jppe-cbgm-k3cz
36
vulnerability VCID-k4h1-mvnf-1ybx
37
vulnerability VCID-k8af-cg9k-87a9
38
vulnerability VCID-kc67-7kf7-s3d7
39
vulnerability VCID-kj9x-psfz-2ug1
40
vulnerability VCID-m7w6-b2xu-6uee
41
vulnerability VCID-mnz3-rj21-67ad
42
vulnerability VCID-n15v-ta9h-6ffb
43
vulnerability VCID-p715-yexd-jfgc
44
vulnerability VCID-phgh-sd4m-zbdx
45
vulnerability VCID-px44-19tj-h7aa
46
vulnerability VCID-q8hy-wjd9-nbgp
47
vulnerability VCID-raxk-rm9v-hubn
48
vulnerability VCID-s64f-x81f-b7ce
49
vulnerability VCID-shqd-udhm-pff8
50
vulnerability VCID-stzu-sxe6-5yf5
51
vulnerability VCID-sw7v-fbjk-13hy
52
vulnerability VCID-t1n7-eswt-73gw
53
vulnerability VCID-t3jn-vwbx-u7cr
54
vulnerability VCID-tqf5-2fsm-8fch
55
vulnerability VCID-u9bx-8e86-wbew
56
vulnerability VCID-ve7g-8st5-wffb
57
vulnerability VCID-vxj6-wvyz-zbaq
58
vulnerability VCID-vxry-uvph-kbfd
59
vulnerability VCID-vybh-pxr3-17hn
60
vulnerability VCID-vyvy-y3cw-hbgr
61
vulnerability VCID-wea9-egep-h7g5
62
vulnerability VCID-xa4m-xpa9-v7h8
63
vulnerability VCID-xh7y-56vy-5ud8
64
vulnerability VCID-xtdg-uj46-rkcm
65
vulnerability VCID-xwc2-z7hx-4qa7
66
vulnerability VCID-y32z-2d3f-gkgw
67
vulnerability VCID-zdq2-dhb2-6kaq
68
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.2
aliases 2018-12-11-6
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-bnne-7p2q-eqd2
18
url VCID-buax-rz7x-r7c2
vulnerability_id VCID-buax-rz7x-r7c2
summary 
TYPO3 Multiple Cross-Site Scripting vulnerabilities in frontend
Failing to properly encode editor input, several frontend components are susceptible to Cross-Site Scripting, allowing authenticated editors to inject arbitrary HTML.
references
0
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2015-12-15-3.yaml
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2015-12-15-3.yaml
1
reference_url https://typo3.org/security/advisory/typo3-core-sa-2015-013
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2015-013
2
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-013
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-013
3
reference_url https://github.com/advisories/GHSA-6fc6-cj2j-h22x
reference_id GHSA-6fc6-cj2j-h22x
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-6fc6-cj2j-h22x
fixed_packages
0
url pkg:composer/typo3/cms@7.6.1
purl pkg:composer/typo3/cms@7.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bnd-6xsq-nbec
1
vulnerability VCID-1jcy-nx8g-z3d3
2
vulnerability VCID-1qjx-grvf-y7bk
3
vulnerability VCID-25t3-1sm6-3kdn
4
vulnerability VCID-28bf-jvah-zkhw
5
vulnerability VCID-2fs8-bscc-3ye2
6
vulnerability VCID-3m53-kkk2-j7c2
7
vulnerability VCID-435j-f3yx-9yep
8
vulnerability VCID-47px-4d98-ubab
9
vulnerability VCID-5jgb-dsyx-hyb4
10
vulnerability VCID-5paq-5frf-43ed
11
vulnerability VCID-5ppt-avmb-cqb2
12
vulnerability VCID-6b5q-vzs3-pkcc
13
vulnerability VCID-6wsa-4ywc-8fh4
14
vulnerability VCID-7d1g-j3k5-gub8
15
vulnerability VCID-8jp8-a363-67be
16
vulnerability VCID-b715-6z6c-qqar
17
vulnerability VCID-bajy-qbwq-fufn
18
vulnerability VCID-bck9-34jp-6ydx
19
vulnerability VCID-bmj2-4k58-tqa4
20
vulnerability VCID-bnne-7p2q-eqd2
21
vulnerability VCID-bxjw-7426-gyb8
22
vulnerability VCID-c6zq-cfg5-u7d9
23
vulnerability VCID-dbrh-t8zx-nkd9
24
vulnerability VCID-dm97-51uu-r7gw
25
vulnerability VCID-dsu7-jjjq-f3e1
26
vulnerability VCID-ehzg-bzrd-kbcc
27
vulnerability VCID-ep6t-zwd1-4bb3
28
vulnerability VCID-f963-qur3-2qb7
29
vulnerability VCID-fber-yp9q-f7dr
30
vulnerability VCID-fqbx-7xyq-fkav
31
vulnerability VCID-fy3g-uegw-2bew
32
vulnerability VCID-g4ak-ertr-rya6
33
vulnerability VCID-gcnj-6qb6-pbgz
34
vulnerability VCID-gezz-pvpj-p3c6
35
vulnerability VCID-gspd-apwy-efgu
36
vulnerability VCID-h2dd-7b1r-k7bs
37
vulnerability VCID-h63t-9enx-qfdn
38
vulnerability VCID-h958-d3pm-kfcs
39
vulnerability VCID-hpgq-deze-p7dp
40
vulnerability VCID-hv3n-j8ck-1ufx
41
vulnerability VCID-jmu3-5k7e-x7ch
42
vulnerability VCID-jqth-wfgx-87cx
43
vulnerability VCID-jqx9-41zx-dbcy
44
vulnerability VCID-m3nf-1qbv-d3dj
45
vulnerability VCID-mhud-kq57-nka3
46
vulnerability VCID-mnz3-rj21-67ad
47
vulnerability VCID-mqbh-k9n3-nbed
48
vulnerability VCID-mqk6-z77g-bfdv
49
vulnerability VCID-mub5-s7h1-57cy
50
vulnerability VCID-n15v-ta9h-6ffb
51
vulnerability VCID-n61z-6v8a-hygf
52
vulnerability VCID-n78p-x7hh-gqcf
53
vulnerability VCID-nnh9-udcj-m7fv
54
vulnerability VCID-npn5-rand-q3dg
55
vulnerability VCID-nt6a-5zkv-pbcm
56
vulnerability VCID-nwxj-3ajk-rkh5
57
vulnerability VCID-p1u9-66hm-47er
58
vulnerability VCID-p545-vwe6-9kfr
59
vulnerability VCID-pk8d-8u15-5bfq
60
vulnerability VCID-pnfa-cksc-43de
61
vulnerability VCID-prbd-r82t-87dm
62
vulnerability VCID-q9ak-qcq6-qfhy
63
vulnerability VCID-rdrs-mhaw-b3ge
64
vulnerability VCID-rg5d-d8nc-9qfu
65
vulnerability VCID-rkms-w15c-4yb1
66
vulnerability VCID-rzw5-8d1u-sfam
67
vulnerability VCID-sr3p-pdxy-4yhu
68
vulnerability VCID-t3jn-vwbx-u7cr
69
vulnerability VCID-tmrt-6fxw-5ugh
70
vulnerability VCID-tw1y-t4qj-j3d1
71
vulnerability VCID-uckg-j48d-efad
72
vulnerability VCID-uj89-13ub-43fz
73
vulnerability VCID-utpu-q2dv-m3hm
74
vulnerability VCID-vndb-w8e1-4ugv
75
vulnerability VCID-vrt1-aj9v-2kb6
76
vulnerability VCID-w5pn-eb7y-1kdp
77
vulnerability VCID-wge3-kxdq-f3bz
78
vulnerability VCID-wq32-kgff-gke8
79
vulnerability VCID-wr5t-xqnn-gkcj
80
vulnerability VCID-wxps-mnue-6bbh
81
vulnerability VCID-xa4m-xpa9-v7h8
82
vulnerability VCID-xqew-bx7v-1qfk
83
vulnerability VCID-y32z-2d3f-gkgw
84
vulnerability VCID-z5qq-nwn5-tqgm
85
vulnerability VCID-zdq2-dhb2-6kaq
86
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.1
aliases GHSA-6fc6-cj2j-h22x
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-buax-rz7x-r7c2
19
url VCID-bxjw-7426-gyb8
vulnerability_id VCID-bxjw-7426-gyb8
summary 
Authentication Bypass in TYPO3 CMS
It has been discovered that TYPO3’s Salted Password system extension (which is a mandatory system component) is vulnerable to Authentication Bypass when using hashing methods which are related by PHP class inheritance. In standard TYPO3 core distributions stored passwords using the blowfish hashing algorithm can be overridden when using MD5 as the default hashing algorithm by just knowing a valid username. Per default the Portable PHP hashing algorithm (PHPass) is used which is not vulnerable.
references
0
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2018-07-12-1.yaml
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2018-07-12-1.yaml
1
reference_url https://github.com/TYPO3/typo3
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3
2
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-001
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2018-001
3
reference_url https://github.com/advisories/GHSA-6f9m-v7mp-7jjq
reference_id GHSA-6f9m-v7mp-7jjq
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-6f9m-v7mp-7jjq
fixed_packages
0
url pkg:composer/typo3/cms@7.6.30
purl pkg:composer/typo3/cms@7.6.30
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5jgb-dsyx-hyb4
1
vulnerability VCID-5paq-5frf-43ed
2
vulnerability VCID-6b5q-vzs3-pkcc
3
vulnerability VCID-bajy-qbwq-fufn
4
vulnerability VCID-bnne-7p2q-eqd2
5
vulnerability VCID-dbrh-t8zx-nkd9
6
vulnerability VCID-dm97-51uu-r7gw
7
vulnerability VCID-dsu7-jjjq-f3e1
8
vulnerability VCID-ehzg-bzrd-kbcc
9
vulnerability VCID-f963-qur3-2qb7
10
vulnerability VCID-gcnj-6qb6-pbgz
11
vulnerability VCID-mnz3-rj21-67ad
12
vulnerability VCID-n15v-ta9h-6ffb
13
vulnerability VCID-n78p-x7hh-gqcf
14
vulnerability VCID-pk8d-8u15-5bfq
15
vulnerability VCID-rdrs-mhaw-b3ge
16
vulnerability VCID-t3jn-vwbx-u7cr
17
vulnerability VCID-tw1y-t4qj-j3d1
18
vulnerability VCID-vndb-w8e1-4ugv
19
vulnerability VCID-wr5t-xqnn-gkcj
20
vulnerability VCID-wxps-mnue-6bbh
21
vulnerability VCID-xa4m-xpa9-v7h8
22
vulnerability VCID-xqew-bx7v-1qfk
23
vulnerability VCID-y32z-2d3f-gkgw
24
vulnerability VCID-zdq2-dhb2-6kaq
25
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.30
1
url pkg:composer/typo3/cms@8.7.17
purl pkg:composer/typo3/cms@8.7.17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18dg-eevv-3ug9
1
vulnerability VCID-1kae-ffj3-xyc7
2
vulnerability VCID-2meq-x4kd-bbdn
3
vulnerability VCID-3gg5-1921-rbfs
4
vulnerability VCID-3n2r-awja-dug9
5
vulnerability VCID-3v4n-fzxa-bfaw
6
vulnerability VCID-4ack-haf2-cfbe
7
vulnerability VCID-4btk-jt5n-2ugf
8
vulnerability VCID-551q-gpyd-ffe8
9
vulnerability VCID-5jgb-dsyx-hyb4
10
vulnerability VCID-5paq-5frf-43ed
11
vulnerability VCID-5qfv-y43v-akdm
12
vulnerability VCID-6487-15z5-pkd4
13
vulnerability VCID-6b5q-vzs3-pkcc
14
vulnerability VCID-9g62-zd1x-3bdg
15
vulnerability VCID-9gpp-ez8w-rqav
16
vulnerability VCID-axaf-45kr-kbfe
17
vulnerability VCID-bajy-qbwq-fufn
18
vulnerability VCID-bnne-7p2q-eqd2
19
vulnerability VCID-c2tm-eqmm-1ugt
20
vulnerability VCID-cm14-t8uv-k3es
21
vulnerability VCID-cmka-8484-27bu
22
vulnerability VCID-dbrh-t8zx-nkd9
23
vulnerability VCID-dj88-f3p8-cfbn
24
vulnerability VCID-dm97-51uu-r7gw
25
vulnerability VCID-dsu7-jjjq-f3e1
26
vulnerability VCID-e72u-tpc3-23g3
27
vulnerability VCID-eajg-ctpd-2bby
28
vulnerability VCID-ehzg-bzrd-kbcc
29
vulnerability VCID-ekfd-wp8z-d7e1
30
vulnerability VCID-f963-qur3-2qb7
31
vulnerability VCID-gcnj-6qb6-pbgz
32
vulnerability VCID-he5m-6wj4-rbhc
33
vulnerability VCID-j77k-hjgx-5kc5
34
vulnerability VCID-jppe-cbgm-k3cz
35
vulnerability VCID-k4h1-mvnf-1ybx
36
vulnerability VCID-k8af-cg9k-87a9
37
vulnerability VCID-m7w6-b2xu-6uee
38
vulnerability VCID-mnz3-rj21-67ad
39
vulnerability VCID-n15v-ta9h-6ffb
40
vulnerability VCID-n78p-x7hh-gqcf
41
vulnerability VCID-pk8d-8u15-5bfq
42
vulnerability VCID-px44-19tj-h7aa
43
vulnerability VCID-q8hy-wjd9-nbgp
44
vulnerability VCID-qb4j-9tz7-m7a2
45
vulnerability VCID-rdrs-mhaw-b3ge
46
vulnerability VCID-s64f-x81f-b7ce
47
vulnerability VCID-shqd-udhm-pff8
48
vulnerability VCID-stzu-sxe6-5yf5
49
vulnerability VCID-t1n7-eswt-73gw
50
vulnerability VCID-t3jn-vwbx-u7cr
51
vulnerability VCID-tqf5-2fsm-8fch
52
vulnerability VCID-tw1y-t4qj-j3d1
53
vulnerability VCID-vndb-w8e1-4ugv
54
vulnerability VCID-vxj6-wvyz-zbaq
55
vulnerability VCID-vxry-uvph-kbfd
56
vulnerability VCID-vybh-pxr3-17hn
57
vulnerability VCID-vyvy-y3cw-hbgr
58
vulnerability VCID-wea9-egep-h7g5
59
vulnerability VCID-wr5t-xqnn-gkcj
60
vulnerability VCID-wxps-mnue-6bbh
61
vulnerability VCID-xa4m-xpa9-v7h8
62
vulnerability VCID-xh7y-56vy-5ud8
63
vulnerability VCID-xqew-bx7v-1qfk
64
vulnerability VCID-y32z-2d3f-gkgw
65
vulnerability VCID-zdq2-dhb2-6kaq
66
vulnerability VCID-zkea-ge1t-z7gn
67
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.17
2
url pkg:composer/typo3/cms@9.3.2
purl pkg:composer/typo3/cms@9.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18dg-eevv-3ug9
1
vulnerability VCID-1kae-ffj3-xyc7
2
vulnerability VCID-2meq-x4kd-bbdn
3
vulnerability VCID-2mn6-mdmz-4yd9
4
vulnerability VCID-3gg5-1921-rbfs
5
vulnerability VCID-3n2r-awja-dug9
6
vulnerability VCID-3v4n-fzxa-bfaw
7
vulnerability VCID-4ack-haf2-cfbe
8
vulnerability VCID-4btk-jt5n-2ugf
9
vulnerability VCID-4mkw-tv16-jyca
10
vulnerability VCID-543x-cnbz-1kb9
11
vulnerability VCID-551q-gpyd-ffe8
12
vulnerability VCID-58js-jzm4-4fc7
13
vulnerability VCID-5jgb-dsyx-hyb4
14
vulnerability VCID-5kzs-ex81-bbaj
15
vulnerability VCID-5paq-5frf-43ed
16
vulnerability VCID-6487-15z5-pkd4
17
vulnerability VCID-6a9t-8dmn-s3bv
18
vulnerability VCID-6b5q-vzs3-pkcc
19
vulnerability VCID-9g62-zd1x-3bdg
20
vulnerability VCID-9gpp-ez8w-rqav
21
vulnerability VCID-a49c-fqrj-nbb3
22
vulnerability VCID-anfj-pmkg-skhe
23
vulnerability VCID-axaf-45kr-kbfe
24
vulnerability VCID-bajy-qbwq-fufn
25
vulnerability VCID-bnne-7p2q-eqd2
26
vulnerability VCID-c2tm-eqmm-1ugt
27
vulnerability VCID-cm14-t8uv-k3es
28
vulnerability VCID-cmka-8484-27bu
29
vulnerability VCID-d8d1-sat6-muhe
30
vulnerability VCID-dbrh-t8zx-nkd9
31
vulnerability VCID-dcy2-efyc-6qgq
32
vulnerability VCID-dj88-f3p8-cfbn
33
vulnerability VCID-dm97-51uu-r7gw
34
vulnerability VCID-dsu7-jjjq-f3e1
35
vulnerability VCID-e72u-tpc3-23g3
36
vulnerability VCID-eajg-ctpd-2bby
37
vulnerability VCID-ekfd-wp8z-d7e1
38
vulnerability VCID-f963-qur3-2qb7
39
vulnerability VCID-gcnj-6qb6-pbgz
40
vulnerability VCID-he5m-6wj4-rbhc
41
vulnerability VCID-jppe-cbgm-k3cz
42
vulnerability VCID-k4h1-mvnf-1ybx
43
vulnerability VCID-k8af-cg9k-87a9
44
vulnerability VCID-kc67-7kf7-s3d7
45
vulnerability VCID-kj9x-psfz-2ug1
46
vulnerability VCID-m7w6-b2xu-6uee
47
vulnerability VCID-mnz3-rj21-67ad
48
vulnerability VCID-n15v-ta9h-6ffb
49
vulnerability VCID-n78p-x7hh-gqcf
50
vulnerability VCID-p715-yexd-jfgc
51
vulnerability VCID-phgh-sd4m-zbdx
52
vulnerability VCID-pk8d-8u15-5bfq
53
vulnerability VCID-px44-19tj-h7aa
54
vulnerability VCID-q8hy-wjd9-nbgp
55
vulnerability VCID-qb4j-9tz7-m7a2
56
vulnerability VCID-raxk-rm9v-hubn
57
vulnerability VCID-rdrs-mhaw-b3ge
58
vulnerability VCID-s64f-x81f-b7ce
59
vulnerability VCID-shqd-udhm-pff8
60
vulnerability VCID-stzu-sxe6-5yf5
61
vulnerability VCID-sw7v-fbjk-13hy
62
vulnerability VCID-t1n7-eswt-73gw
63
vulnerability VCID-t3jn-vwbx-u7cr
64
vulnerability VCID-tqf5-2fsm-8fch
65
vulnerability VCID-tw1y-t4qj-j3d1
66
vulnerability VCID-u9bx-8e86-wbew
67
vulnerability VCID-ve7g-8st5-wffb
68
vulnerability VCID-vndb-w8e1-4ugv
69
vulnerability VCID-vxj6-wvyz-zbaq
70
vulnerability VCID-vxry-uvph-kbfd
71
vulnerability VCID-vybh-pxr3-17hn
72
vulnerability VCID-vyvy-y3cw-hbgr
73
vulnerability VCID-wea9-egep-h7g5
74
vulnerability VCID-wr5t-xqnn-gkcj
75
vulnerability VCID-wxps-mnue-6bbh
76
vulnerability VCID-xa4m-xpa9-v7h8
77
vulnerability VCID-xh7y-56vy-5ud8
78
vulnerability VCID-xtdg-uj46-rkcm
79
vulnerability VCID-xwc2-z7hx-4qa7
80
vulnerability VCID-y32z-2d3f-gkgw
81
vulnerability VCID-zdq2-dhb2-6kaq
82
vulnerability VCID-zkea-ge1t-z7gn
83
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.3.2
aliases GHSA-6f9m-v7mp-7jjq
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-bxjw-7426-gyb8
20
url VCID-cczn-x8q7-k7ba
vulnerability_id VCID-cczn-x8q7-k7ba
summary 
Cross-site Scripting
Cross-Site Scripting vulnerability in typolinks.
references
0
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-012/
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-012/
fixed_packages
0
url pkg:composer/typo3/cms@7.6.1
purl pkg:composer/typo3/cms@7.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bnd-6xsq-nbec
1
vulnerability VCID-1jcy-nx8g-z3d3
2
vulnerability VCID-1qjx-grvf-y7bk
3
vulnerability VCID-25t3-1sm6-3kdn
4
vulnerability VCID-28bf-jvah-zkhw
5
vulnerability VCID-2fs8-bscc-3ye2
6
vulnerability VCID-3m53-kkk2-j7c2
7
vulnerability VCID-435j-f3yx-9yep
8
vulnerability VCID-47px-4d98-ubab
9
vulnerability VCID-5jgb-dsyx-hyb4
10
vulnerability VCID-5paq-5frf-43ed
11
vulnerability VCID-5ppt-avmb-cqb2
12
vulnerability VCID-6b5q-vzs3-pkcc
13
vulnerability VCID-6wsa-4ywc-8fh4
14
vulnerability VCID-7d1g-j3k5-gub8
15
vulnerability VCID-8jp8-a363-67be
16
vulnerability VCID-b715-6z6c-qqar
17
vulnerability VCID-bajy-qbwq-fufn
18
vulnerability VCID-bck9-34jp-6ydx
19
vulnerability VCID-bmj2-4k58-tqa4
20
vulnerability VCID-bnne-7p2q-eqd2
21
vulnerability VCID-bxjw-7426-gyb8
22
vulnerability VCID-c6zq-cfg5-u7d9
23
vulnerability VCID-dbrh-t8zx-nkd9
24
vulnerability VCID-dm97-51uu-r7gw
25
vulnerability VCID-dsu7-jjjq-f3e1
26
vulnerability VCID-ehzg-bzrd-kbcc
27
vulnerability VCID-ep6t-zwd1-4bb3
28
vulnerability VCID-f963-qur3-2qb7
29
vulnerability VCID-fber-yp9q-f7dr
30
vulnerability VCID-fqbx-7xyq-fkav
31
vulnerability VCID-fy3g-uegw-2bew
32
vulnerability VCID-g4ak-ertr-rya6
33
vulnerability VCID-gcnj-6qb6-pbgz
34
vulnerability VCID-gezz-pvpj-p3c6
35
vulnerability VCID-gspd-apwy-efgu
36
vulnerability VCID-h2dd-7b1r-k7bs
37
vulnerability VCID-h63t-9enx-qfdn
38
vulnerability VCID-h958-d3pm-kfcs
39
vulnerability VCID-hpgq-deze-p7dp
40
vulnerability VCID-hv3n-j8ck-1ufx
41
vulnerability VCID-jmu3-5k7e-x7ch
42
vulnerability VCID-jqth-wfgx-87cx
43
vulnerability VCID-jqx9-41zx-dbcy
44
vulnerability VCID-m3nf-1qbv-d3dj
45
vulnerability VCID-mhud-kq57-nka3
46
vulnerability VCID-mnz3-rj21-67ad
47
vulnerability VCID-mqbh-k9n3-nbed
48
vulnerability VCID-mqk6-z77g-bfdv
49
vulnerability VCID-mub5-s7h1-57cy
50
vulnerability VCID-n15v-ta9h-6ffb
51
vulnerability VCID-n61z-6v8a-hygf
52
vulnerability VCID-n78p-x7hh-gqcf
53
vulnerability VCID-nnh9-udcj-m7fv
54
vulnerability VCID-npn5-rand-q3dg
55
vulnerability VCID-nt6a-5zkv-pbcm
56
vulnerability VCID-nwxj-3ajk-rkh5
57
vulnerability VCID-p1u9-66hm-47er
58
vulnerability VCID-p545-vwe6-9kfr
59
vulnerability VCID-pk8d-8u15-5bfq
60
vulnerability VCID-pnfa-cksc-43de
61
vulnerability VCID-prbd-r82t-87dm
62
vulnerability VCID-q9ak-qcq6-qfhy
63
vulnerability VCID-rdrs-mhaw-b3ge
64
vulnerability VCID-rg5d-d8nc-9qfu
65
vulnerability VCID-rkms-w15c-4yb1
66
vulnerability VCID-rzw5-8d1u-sfam
67
vulnerability VCID-sr3p-pdxy-4yhu
68
vulnerability VCID-t3jn-vwbx-u7cr
69
vulnerability VCID-tmrt-6fxw-5ugh
70
vulnerability VCID-tw1y-t4qj-j3d1
71
vulnerability VCID-uckg-j48d-efad
72
vulnerability VCID-uj89-13ub-43fz
73
vulnerability VCID-utpu-q2dv-m3hm
74
vulnerability VCID-vndb-w8e1-4ugv
75
vulnerability VCID-vrt1-aj9v-2kb6
76
vulnerability VCID-w5pn-eb7y-1kdp
77
vulnerability VCID-wge3-kxdq-f3bz
78
vulnerability VCID-wq32-kgff-gke8
79
vulnerability VCID-wr5t-xqnn-gkcj
80
vulnerability VCID-wxps-mnue-6bbh
81
vulnerability VCID-xa4m-xpa9-v7h8
82
vulnerability VCID-xqew-bx7v-1qfk
83
vulnerability VCID-y32z-2d3f-gkgw
84
vulnerability VCID-z5qq-nwn5-tqgm
85
vulnerability VCID-zdq2-dhb2-6kaq
86
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.1
aliases 2015-12-15-2
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-cczn-x8q7-k7ba
21
url VCID-cjgc-q6p5-2ydc
vulnerability_id VCID-cjgc-q6p5-2ydc
summary 
Cross-site Scripting
Multiple Cross-Site Scripting vulnerabilities in frontend.
references
0
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-013/
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-013/
fixed_packages
0
url pkg:composer/typo3/cms@7.6.1
purl pkg:composer/typo3/cms@7.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bnd-6xsq-nbec
1
vulnerability VCID-1jcy-nx8g-z3d3
2
vulnerability VCID-1qjx-grvf-y7bk
3
vulnerability VCID-25t3-1sm6-3kdn
4
vulnerability VCID-28bf-jvah-zkhw
5
vulnerability VCID-2fs8-bscc-3ye2
6
vulnerability VCID-3m53-kkk2-j7c2
7
vulnerability VCID-435j-f3yx-9yep
8
vulnerability VCID-47px-4d98-ubab
9
vulnerability VCID-5jgb-dsyx-hyb4
10
vulnerability VCID-5paq-5frf-43ed
11
vulnerability VCID-5ppt-avmb-cqb2
12
vulnerability VCID-6b5q-vzs3-pkcc
13
vulnerability VCID-6wsa-4ywc-8fh4
14
vulnerability VCID-7d1g-j3k5-gub8
15
vulnerability VCID-8jp8-a363-67be
16
vulnerability VCID-b715-6z6c-qqar
17
vulnerability VCID-bajy-qbwq-fufn
18
vulnerability VCID-bck9-34jp-6ydx
19
vulnerability VCID-bmj2-4k58-tqa4
20
vulnerability VCID-bnne-7p2q-eqd2
21
vulnerability VCID-bxjw-7426-gyb8
22
vulnerability VCID-c6zq-cfg5-u7d9
23
vulnerability VCID-dbrh-t8zx-nkd9
24
vulnerability VCID-dm97-51uu-r7gw
25
vulnerability VCID-dsu7-jjjq-f3e1
26
vulnerability VCID-ehzg-bzrd-kbcc
27
vulnerability VCID-ep6t-zwd1-4bb3
28
vulnerability VCID-f963-qur3-2qb7
29
vulnerability VCID-fber-yp9q-f7dr
30
vulnerability VCID-fqbx-7xyq-fkav
31
vulnerability VCID-fy3g-uegw-2bew
32
vulnerability VCID-g4ak-ertr-rya6
33
vulnerability VCID-gcnj-6qb6-pbgz
34
vulnerability VCID-gezz-pvpj-p3c6
35
vulnerability VCID-gspd-apwy-efgu
36
vulnerability VCID-h2dd-7b1r-k7bs
37
vulnerability VCID-h63t-9enx-qfdn
38
vulnerability VCID-h958-d3pm-kfcs
39
vulnerability VCID-hpgq-deze-p7dp
40
vulnerability VCID-hv3n-j8ck-1ufx
41
vulnerability VCID-jmu3-5k7e-x7ch
42
vulnerability VCID-jqth-wfgx-87cx
43
vulnerability VCID-jqx9-41zx-dbcy
44
vulnerability VCID-m3nf-1qbv-d3dj
45
vulnerability VCID-mhud-kq57-nka3
46
vulnerability VCID-mnz3-rj21-67ad
47
vulnerability VCID-mqbh-k9n3-nbed
48
vulnerability VCID-mqk6-z77g-bfdv
49
vulnerability VCID-mub5-s7h1-57cy
50
vulnerability VCID-n15v-ta9h-6ffb
51
vulnerability VCID-n61z-6v8a-hygf
52
vulnerability VCID-n78p-x7hh-gqcf
53
vulnerability VCID-nnh9-udcj-m7fv
54
vulnerability VCID-npn5-rand-q3dg
55
vulnerability VCID-nt6a-5zkv-pbcm
56
vulnerability VCID-nwxj-3ajk-rkh5
57
vulnerability VCID-p1u9-66hm-47er
58
vulnerability VCID-p545-vwe6-9kfr
59
vulnerability VCID-pk8d-8u15-5bfq
60
vulnerability VCID-pnfa-cksc-43de
61
vulnerability VCID-prbd-r82t-87dm
62
vulnerability VCID-q9ak-qcq6-qfhy
63
vulnerability VCID-rdrs-mhaw-b3ge
64
vulnerability VCID-rg5d-d8nc-9qfu
65
vulnerability VCID-rkms-w15c-4yb1
66
vulnerability VCID-rzw5-8d1u-sfam
67
vulnerability VCID-sr3p-pdxy-4yhu
68
vulnerability VCID-t3jn-vwbx-u7cr
69
vulnerability VCID-tmrt-6fxw-5ugh
70
vulnerability VCID-tw1y-t4qj-j3d1
71
vulnerability VCID-uckg-j48d-efad
72
vulnerability VCID-uj89-13ub-43fz
73
vulnerability VCID-utpu-q2dv-m3hm
74
vulnerability VCID-vndb-w8e1-4ugv
75
vulnerability VCID-vrt1-aj9v-2kb6
76
vulnerability VCID-w5pn-eb7y-1kdp
77
vulnerability VCID-wge3-kxdq-f3bz
78
vulnerability VCID-wq32-kgff-gke8
79
vulnerability VCID-wr5t-xqnn-gkcj
80
vulnerability VCID-wxps-mnue-6bbh
81
vulnerability VCID-xa4m-xpa9-v7h8
82
vulnerability VCID-xqew-bx7v-1qfk
83
vulnerability VCID-y32z-2d3f-gkgw
84
vulnerability VCID-z5qq-nwn5-tqgm
85
vulnerability VCID-zdq2-dhb2-6kaq
86
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.1
aliases 2015-12-15-3
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-cjgc-q6p5-2ydc
22
url VCID-ck23-cxn6-bbf3
vulnerability_id VCID-ck23-cxn6-bbf3
summary 
TYPO3 Frontend vulnerable to Unauthenticated Path Disclosure
It has been discovered, that calling a PHP script which is delivered with TYPO3 for testing purposes, discloses the absolute server path to the TYPO3 installation.
references
0
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2015-09-08-1.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2015-09-08-1.yaml
1
reference_url https://github.com/TYPO3/typo3
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3
2
reference_url https://github.com/TYPO3/typo3/commit/ed1e46f89c8e5f699ced245e873d0eff21e5c75e
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/ed1e46f89c8e5f699ced245e873d0eff21e5c75e
3
reference_url https://typo3.org/security/advisory/typo3-core-sa-2015-008
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2015-008
4
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-008
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-008
5
reference_url https://github.com/advisories/GHSA-pqfv-97hj-g97g
reference_id GHSA-pqfv-97hj-g97g
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-pqfv-97hj-g97g
fixed_packages
0
url pkg:composer/typo3/cms@7.4.0
purl pkg:composer/typo3/cms@7.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ng4-5tkh-g7h5
1
vulnerability VCID-28bf-jvah-zkhw
2
vulnerability VCID-5jgb-dsyx-hyb4
3
vulnerability VCID-5paq-5frf-43ed
4
vulnerability VCID-6b5q-vzs3-pkcc
5
vulnerability VCID-6pvx-1qan-ukef
6
vulnerability VCID-bajy-qbwq-fufn
7
vulnerability VCID-bnne-7p2q-eqd2
8
vulnerability VCID-buax-rz7x-r7c2
9
vulnerability VCID-bxjw-7426-gyb8
10
vulnerability VCID-cczn-x8q7-k7ba
11
vulnerability VCID-cjgc-q6p5-2ydc
12
vulnerability VCID-dbrh-t8zx-nkd9
13
vulnerability VCID-dm97-51uu-r7gw
14
vulnerability VCID-dsu7-jjjq-f3e1
15
vulnerability VCID-ehzg-bzrd-kbcc
16
vulnerability VCID-f4pm-9tq5-q3ch
17
vulnerability VCID-gcnj-6qb6-pbgz
18
vulnerability VCID-h958-d3pm-kfcs
19
vulnerability VCID-jmu3-5k7e-x7ch
20
vulnerability VCID-jqx9-41zx-dbcy
21
vulnerability VCID-kqbk-4q4z-nkec
22
vulnerability VCID-mnz3-rj21-67ad
23
vulnerability VCID-n15v-ta9h-6ffb
24
vulnerability VCID-n78p-x7hh-gqcf
25
vulnerability VCID-nwxj-3ajk-rkh5
26
vulnerability VCID-pgzu-kxuj-j3fh
27
vulnerability VCID-pk8d-8u15-5bfq
28
vulnerability VCID-q6dx-uskc-y3hs
29
vulnerability VCID-qemc-8kj8-r3cd
30
vulnerability VCID-rdrs-mhaw-b3ge
31
vulnerability VCID-sr3p-pdxy-4yhu
32
vulnerability VCID-t3jn-vwbx-u7cr
33
vulnerability VCID-tmrt-6fxw-5ugh
34
vulnerability VCID-tw1y-t4qj-j3d1
35
vulnerability VCID-vndb-w8e1-4ugv
36
vulnerability VCID-wr5t-xqnn-gkcj
37
vulnerability VCID-ww44-zmx7-47ft
38
vulnerability VCID-wxps-mnue-6bbh
39
vulnerability VCID-xa4m-xpa9-v7h8
40
vulnerability VCID-xqew-bx7v-1qfk
41
vulnerability VCID-y32z-2d3f-gkgw
42
vulnerability VCID-zdq2-dhb2-6kaq
43
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.4.0
aliases GHSA-pqfv-97hj-g97g
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ck23-cxn6-bbf3
23
url VCID-dbrh-t8zx-nkd9
vulnerability_id VCID-dbrh-t8zx-nkd9
summary 
TYPO3 Information Disclosure in Install Tool
The Install Tool exposes the current TYPO3 version number to non-authenticated users.
references
0
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2018-12-11-5.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2018-12-11-5.yaml
1
reference_url https://github.com/TYPO3/typo3
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3
2
reference_url https://github.com/TYPO3/typo3/commit/232d0a64282382229c205904173a16a581555fe3
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/232d0a64282382229c205904173a16a581555fe3
3
reference_url https://github.com/TYPO3/typo3/commit/b4dd20f31d483f6399e8bcbffcac3e16a2df0d92
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/b4dd20f31d483f6399e8bcbffcac3e16a2df0d92
4
reference_url https://github.com/TYPO3/typo3/commit/fab0cbc970b709ed65fc4622a2cbd52a197480c4
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/fab0cbc970b709ed65fc4622a2cbd52a197480c4
5
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-010
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2018-010
6
reference_url https://github.com/advisories/GHSA-6487-3qvg-8px9
reference_id GHSA-6487-3qvg-8px9
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-6487-3qvg-8px9
fixed_packages
0
url pkg:composer/typo3/cms@7.6.32
purl pkg:composer/typo3/cms@7.6.32
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5jgb-dsyx-hyb4
1
vulnerability VCID-5paq-5frf-43ed
2
vulnerability VCID-bajy-qbwq-fufn
3
vulnerability VCID-dsu7-jjjq-f3e1
4
vulnerability VCID-f963-qur3-2qb7
5
vulnerability VCID-gcnj-6qb6-pbgz
6
vulnerability VCID-mnz3-rj21-67ad
7
vulnerability VCID-n15v-ta9h-6ffb
8
vulnerability VCID-t3jn-vwbx-u7cr
9
vulnerability VCID-xa4m-xpa9-v7h8
10
vulnerability VCID-y32z-2d3f-gkgw
11
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.32
1
url pkg:composer/typo3/cms@8.7.21
purl pkg:composer/typo3/cms@8.7.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18dg-eevv-3ug9
1
vulnerability VCID-1kae-ffj3-xyc7
2
vulnerability VCID-2meq-x4kd-bbdn
3
vulnerability VCID-3n2r-awja-dug9
4
vulnerability VCID-3v4n-fzxa-bfaw
5
vulnerability VCID-4ack-haf2-cfbe
6
vulnerability VCID-551q-gpyd-ffe8
7
vulnerability VCID-5jgb-dsyx-hyb4
8
vulnerability VCID-5paq-5frf-43ed
9
vulnerability VCID-5qfv-y43v-akdm
10
vulnerability VCID-6487-15z5-pkd4
11
vulnerability VCID-9g62-zd1x-3bdg
12
vulnerability VCID-9gpp-ez8w-rqav
13
vulnerability VCID-axaf-45kr-kbfe
14
vulnerability VCID-bajy-qbwq-fufn
15
vulnerability VCID-c2tm-eqmm-1ugt
16
vulnerability VCID-cm14-t8uv-k3es
17
vulnerability VCID-cmka-8484-27bu
18
vulnerability VCID-dj88-f3p8-cfbn
19
vulnerability VCID-dsu7-jjjq-f3e1
20
vulnerability VCID-e72u-tpc3-23g3
21
vulnerability VCID-eajg-ctpd-2bby
22
vulnerability VCID-ekfd-wp8z-d7e1
23
vulnerability VCID-f963-qur3-2qb7
24
vulnerability VCID-gcnj-6qb6-pbgz
25
vulnerability VCID-he5m-6wj4-rbhc
26
vulnerability VCID-j77k-hjgx-5kc5
27
vulnerability VCID-jppe-cbgm-k3cz
28
vulnerability VCID-k4h1-mvnf-1ybx
29
vulnerability VCID-k8af-cg9k-87a9
30
vulnerability VCID-m7w6-b2xu-6uee
31
vulnerability VCID-mnz3-rj21-67ad
32
vulnerability VCID-n15v-ta9h-6ffb
33
vulnerability VCID-px44-19tj-h7aa
34
vulnerability VCID-q8hy-wjd9-nbgp
35
vulnerability VCID-s64f-x81f-b7ce
36
vulnerability VCID-shqd-udhm-pff8
37
vulnerability VCID-stzu-sxe6-5yf5
38
vulnerability VCID-t1n7-eswt-73gw
39
vulnerability VCID-t3jn-vwbx-u7cr
40
vulnerability VCID-tqf5-2fsm-8fch
41
vulnerability VCID-vxj6-wvyz-zbaq
42
vulnerability VCID-vxry-uvph-kbfd
43
vulnerability VCID-vybh-pxr3-17hn
44
vulnerability VCID-vyvy-y3cw-hbgr
45
vulnerability VCID-wea9-egep-h7g5
46
vulnerability VCID-xa4m-xpa9-v7h8
47
vulnerability VCID-xh7y-56vy-5ud8
48
vulnerability VCID-y32z-2d3f-gkgw
49
vulnerability VCID-zdq2-dhb2-6kaq
50
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.21
2
url pkg:composer/typo3/cms@9.5.2
purl pkg:composer/typo3/cms@9.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18dg-eevv-3ug9
1
vulnerability VCID-1kae-ffj3-xyc7
2
vulnerability VCID-2meq-x4kd-bbdn
3
vulnerability VCID-2mn6-mdmz-4yd9
4
vulnerability VCID-3n2r-awja-dug9
5
vulnerability VCID-3v4n-fzxa-bfaw
6
vulnerability VCID-4ack-haf2-cfbe
7
vulnerability VCID-4mkw-tv16-jyca
8
vulnerability VCID-543x-cnbz-1kb9
9
vulnerability VCID-551q-gpyd-ffe8
10
vulnerability VCID-58js-jzm4-4fc7
11
vulnerability VCID-5jgb-dsyx-hyb4
12
vulnerability VCID-5kzs-ex81-bbaj
13
vulnerability VCID-5paq-5frf-43ed
14
vulnerability VCID-6487-15z5-pkd4
15
vulnerability VCID-6a9t-8dmn-s3bv
16
vulnerability VCID-9g62-zd1x-3bdg
17
vulnerability VCID-9gpp-ez8w-rqav
18
vulnerability VCID-a49c-fqrj-nbb3
19
vulnerability VCID-anfj-pmkg-skhe
20
vulnerability VCID-axaf-45kr-kbfe
21
vulnerability VCID-bajy-qbwq-fufn
22
vulnerability VCID-c2tm-eqmm-1ugt
23
vulnerability VCID-cm14-t8uv-k3es
24
vulnerability VCID-cmka-8484-27bu
25
vulnerability VCID-d8d1-sat6-muhe
26
vulnerability VCID-dcy2-efyc-6qgq
27
vulnerability VCID-dj88-f3p8-cfbn
28
vulnerability VCID-dsu7-jjjq-f3e1
29
vulnerability VCID-e72u-tpc3-23g3
30
vulnerability VCID-eajg-ctpd-2bby
31
vulnerability VCID-ekfd-wp8z-d7e1
32
vulnerability VCID-f963-qur3-2qb7
33
vulnerability VCID-gcnj-6qb6-pbgz
34
vulnerability VCID-he5m-6wj4-rbhc
35
vulnerability VCID-jppe-cbgm-k3cz
36
vulnerability VCID-k4h1-mvnf-1ybx
37
vulnerability VCID-k8af-cg9k-87a9
38
vulnerability VCID-kc67-7kf7-s3d7
39
vulnerability VCID-kj9x-psfz-2ug1
40
vulnerability VCID-m7w6-b2xu-6uee
41
vulnerability VCID-mnz3-rj21-67ad
42
vulnerability VCID-n15v-ta9h-6ffb
43
vulnerability VCID-p715-yexd-jfgc
44
vulnerability VCID-phgh-sd4m-zbdx
45
vulnerability VCID-px44-19tj-h7aa
46
vulnerability VCID-q8hy-wjd9-nbgp
47
vulnerability VCID-raxk-rm9v-hubn
48
vulnerability VCID-s64f-x81f-b7ce
49
vulnerability VCID-shqd-udhm-pff8
50
vulnerability VCID-stzu-sxe6-5yf5
51
vulnerability VCID-sw7v-fbjk-13hy
52
vulnerability VCID-t1n7-eswt-73gw
53
vulnerability VCID-t3jn-vwbx-u7cr
54
vulnerability VCID-tqf5-2fsm-8fch
55
vulnerability VCID-u9bx-8e86-wbew
56
vulnerability VCID-ve7g-8st5-wffb
57
vulnerability VCID-vxj6-wvyz-zbaq
58
vulnerability VCID-vxry-uvph-kbfd
59
vulnerability VCID-vybh-pxr3-17hn
60
vulnerability VCID-vyvy-y3cw-hbgr
61
vulnerability VCID-wea9-egep-h7g5
62
vulnerability VCID-xa4m-xpa9-v7h8
63
vulnerability VCID-xh7y-56vy-5ud8
64
vulnerability VCID-xtdg-uj46-rkcm
65
vulnerability VCID-xwc2-z7hx-4qa7
66
vulnerability VCID-y32z-2d3f-gkgw
67
vulnerability VCID-zdq2-dhb2-6kaq
68
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.2
aliases GHSA-6487-3qvg-8px9
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-dbrh-t8zx-nkd9
24
url VCID-dm97-51uu-r7gw
vulnerability_id VCID-dm97-51uu-r7gw
summary 
Cross-site Scripting
Cross-Site Scripting in Online Media Asset Rendering.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-006/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2018-006/
fixed_packages
0
url pkg:composer/typo3/cms@7.6.32
purl pkg:composer/typo3/cms@7.6.32
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5jgb-dsyx-hyb4
1
vulnerability VCID-5paq-5frf-43ed
2
vulnerability VCID-bajy-qbwq-fufn
3
vulnerability VCID-dsu7-jjjq-f3e1
4
vulnerability VCID-f963-qur3-2qb7
5
vulnerability VCID-gcnj-6qb6-pbgz
6
vulnerability VCID-mnz3-rj21-67ad
7
vulnerability VCID-n15v-ta9h-6ffb
8
vulnerability VCID-t3jn-vwbx-u7cr
9
vulnerability VCID-xa4m-xpa9-v7h8
10
vulnerability VCID-y32z-2d3f-gkgw
11
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.32
1
url pkg:composer/typo3/cms@8.7.21
purl pkg:composer/typo3/cms@8.7.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18dg-eevv-3ug9
1
vulnerability VCID-1kae-ffj3-xyc7
2
vulnerability VCID-2meq-x4kd-bbdn
3
vulnerability VCID-3n2r-awja-dug9
4
vulnerability VCID-3v4n-fzxa-bfaw
5
vulnerability VCID-4ack-haf2-cfbe
6
vulnerability VCID-551q-gpyd-ffe8
7
vulnerability VCID-5jgb-dsyx-hyb4
8
vulnerability VCID-5paq-5frf-43ed
9
vulnerability VCID-5qfv-y43v-akdm
10
vulnerability VCID-6487-15z5-pkd4
11
vulnerability VCID-9g62-zd1x-3bdg
12
vulnerability VCID-9gpp-ez8w-rqav
13
vulnerability VCID-axaf-45kr-kbfe
14
vulnerability VCID-bajy-qbwq-fufn
15
vulnerability VCID-c2tm-eqmm-1ugt
16
vulnerability VCID-cm14-t8uv-k3es
17
vulnerability VCID-cmka-8484-27bu
18
vulnerability VCID-dj88-f3p8-cfbn
19
vulnerability VCID-dsu7-jjjq-f3e1
20
vulnerability VCID-e72u-tpc3-23g3
21
vulnerability VCID-eajg-ctpd-2bby
22
vulnerability VCID-ekfd-wp8z-d7e1
23
vulnerability VCID-f963-qur3-2qb7
24
vulnerability VCID-gcnj-6qb6-pbgz
25
vulnerability VCID-he5m-6wj4-rbhc
26
vulnerability VCID-j77k-hjgx-5kc5
27
vulnerability VCID-jppe-cbgm-k3cz
28
vulnerability VCID-k4h1-mvnf-1ybx
29
vulnerability VCID-k8af-cg9k-87a9
30
vulnerability VCID-m7w6-b2xu-6uee
31
vulnerability VCID-mnz3-rj21-67ad
32
vulnerability VCID-n15v-ta9h-6ffb
33
vulnerability VCID-px44-19tj-h7aa
34
vulnerability VCID-q8hy-wjd9-nbgp
35
vulnerability VCID-s64f-x81f-b7ce
36
vulnerability VCID-shqd-udhm-pff8
37
vulnerability VCID-stzu-sxe6-5yf5
38
vulnerability VCID-t1n7-eswt-73gw
39
vulnerability VCID-t3jn-vwbx-u7cr
40
vulnerability VCID-tqf5-2fsm-8fch
41
vulnerability VCID-vxj6-wvyz-zbaq
42
vulnerability VCID-vxry-uvph-kbfd
43
vulnerability VCID-vybh-pxr3-17hn
44
vulnerability VCID-vyvy-y3cw-hbgr
45
vulnerability VCID-wea9-egep-h7g5
46
vulnerability VCID-xa4m-xpa9-v7h8
47
vulnerability VCID-xh7y-56vy-5ud8
48
vulnerability VCID-y32z-2d3f-gkgw
49
vulnerability VCID-zdq2-dhb2-6kaq
50
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.21
2
url pkg:composer/typo3/cms@9.5.2
purl pkg:composer/typo3/cms@9.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18dg-eevv-3ug9
1
vulnerability VCID-1kae-ffj3-xyc7
2
vulnerability VCID-2meq-x4kd-bbdn
3
vulnerability VCID-2mn6-mdmz-4yd9
4
vulnerability VCID-3n2r-awja-dug9
5
vulnerability VCID-3v4n-fzxa-bfaw
6
vulnerability VCID-4ack-haf2-cfbe
7
vulnerability VCID-4mkw-tv16-jyca
8
vulnerability VCID-543x-cnbz-1kb9
9
vulnerability VCID-551q-gpyd-ffe8
10
vulnerability VCID-58js-jzm4-4fc7
11
vulnerability VCID-5jgb-dsyx-hyb4
12
vulnerability VCID-5kzs-ex81-bbaj
13
vulnerability VCID-5paq-5frf-43ed
14
vulnerability VCID-6487-15z5-pkd4
15
vulnerability VCID-6a9t-8dmn-s3bv
16
vulnerability VCID-9g62-zd1x-3bdg
17
vulnerability VCID-9gpp-ez8w-rqav
18
vulnerability VCID-a49c-fqrj-nbb3
19
vulnerability VCID-anfj-pmkg-skhe
20
vulnerability VCID-axaf-45kr-kbfe
21
vulnerability VCID-bajy-qbwq-fufn
22
vulnerability VCID-c2tm-eqmm-1ugt
23
vulnerability VCID-cm14-t8uv-k3es
24
vulnerability VCID-cmka-8484-27bu
25
vulnerability VCID-d8d1-sat6-muhe
26
vulnerability VCID-dcy2-efyc-6qgq
27
vulnerability VCID-dj88-f3p8-cfbn
28
vulnerability VCID-dsu7-jjjq-f3e1
29
vulnerability VCID-e72u-tpc3-23g3
30
vulnerability VCID-eajg-ctpd-2bby
31
vulnerability VCID-ekfd-wp8z-d7e1
32
vulnerability VCID-f963-qur3-2qb7
33
vulnerability VCID-gcnj-6qb6-pbgz
34
vulnerability VCID-he5m-6wj4-rbhc
35
vulnerability VCID-jppe-cbgm-k3cz
36
vulnerability VCID-k4h1-mvnf-1ybx
37
vulnerability VCID-k8af-cg9k-87a9
38
vulnerability VCID-kc67-7kf7-s3d7
39
vulnerability VCID-kj9x-psfz-2ug1
40
vulnerability VCID-m7w6-b2xu-6uee
41
vulnerability VCID-mnz3-rj21-67ad
42
vulnerability VCID-n15v-ta9h-6ffb
43
vulnerability VCID-p715-yexd-jfgc
44
vulnerability VCID-phgh-sd4m-zbdx
45
vulnerability VCID-px44-19tj-h7aa
46
vulnerability VCID-q8hy-wjd9-nbgp
47
vulnerability VCID-raxk-rm9v-hubn
48
vulnerability VCID-s64f-x81f-b7ce
49
vulnerability VCID-shqd-udhm-pff8
50
vulnerability VCID-stzu-sxe6-5yf5
51
vulnerability VCID-sw7v-fbjk-13hy
52
vulnerability VCID-t1n7-eswt-73gw
53
vulnerability VCID-t3jn-vwbx-u7cr
54
vulnerability VCID-tqf5-2fsm-8fch
55
vulnerability VCID-u9bx-8e86-wbew
56
vulnerability VCID-ve7g-8st5-wffb
57
vulnerability VCID-vxj6-wvyz-zbaq
58
vulnerability VCID-vxry-uvph-kbfd
59
vulnerability VCID-vybh-pxr3-17hn
60
vulnerability VCID-vyvy-y3cw-hbgr
61
vulnerability VCID-wea9-egep-h7g5
62
vulnerability VCID-xa4m-xpa9-v7h8
63
vulnerability VCID-xh7y-56vy-5ud8
64
vulnerability VCID-xtdg-uj46-rkcm
65
vulnerability VCID-xwc2-z7hx-4qa7
66
vulnerability VCID-y32z-2d3f-gkgw
67
vulnerability VCID-zdq2-dhb2-6kaq
68
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.2
aliases 2018-12-11-1
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-dm97-51uu-r7gw
25
url VCID-dsu7-jjjq-f3e1
vulnerability_id VCID-dsu7-jjjq-f3e1
summary 
Cleartext storage of session identifier
### Problem
User session identifiers were stored in cleartext - without processing of additional cryptographic hashing algorithms. This vulnerability cannot be exploited directly and occurs in combination with a chained attack - like for instance SQL injection in any other component of the system.

### Solution
Update to TYPO3 versions 6.2.57, 7.6.51, 8.7.40, 9.5.25, 10.4.14, 11.1.1 that fix the problem described.

### Credits
Thanks to TYPO3 security team member Oliver Hader who reported this issue and to TYPO3 core & security team members Benni Mack & Oliver Hader who fixed the issue.

### References
* [TYPO3-CORE-SA-2021-006](https://typo3.org/security/advisory/typo3-core-sa-2021-006)
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-21339
reference_id
reference_type
scores
0
value 0.00132
scoring_system epss
scoring_elements 0.32661
published_at 2026-04-07T12:55:00Z
1
value 0.00132
scoring_system epss
scoring_elements 0.32736
published_at 2026-04-11T12:55:00Z
2
value 0.00132
scoring_system epss
scoring_elements 0.32671
published_at 2026-04-01T12:55:00Z
3
value 0.00132
scoring_system epss
scoring_elements 0.32735
published_at 2026-04-09T12:55:00Z
4
value 0.00132
scoring_system epss
scoring_elements 0.32804
published_at 2026-04-02T12:55:00Z
5
value 0.00132
scoring_system epss
scoring_elements 0.3284
published_at 2026-04-04T12:55:00Z
6
value 0.00132
scoring_system epss
scoring_elements 0.32709
published_at 2026-04-08T12:55:00Z
7
value 0.00132
scoring_system epss
scoring_elements 0.32659
published_at 2026-04-21T12:55:00Z
8
value 0.00132
scoring_system epss
scoring_elements 0.32688
published_at 2026-04-18T12:55:00Z
9
value 0.00132
scoring_system epss
scoring_elements 0.32711
published_at 2026-04-16T12:55:00Z
10
value 0.00132
scoring_system epss
scoring_elements 0.32672
published_at 2026-04-13T12:55:00Z
11
value 0.00132
scoring_system epss
scoring_elements 0.327
published_at 2026-04-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-21339
1
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21339.yaml
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21339.yaml
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21339.yaml
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21339.yaml
3
reference_url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-qx3w-4864-94ch
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-qx3w-4864-94ch
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-21339
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-21339
5
reference_url https://packagist.org/packages/typo3/cms-core
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://packagist.org/packages/typo3/cms-core
6
reference_url https://typo3.org/security/advisory/typo3-core-sa-2021-006
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2021-006
7
reference_url https://github.com/advisories/GHSA-qx3w-4864-94ch
reference_id GHSA-qx3w-4864-94ch
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-qx3w-4864-94ch
fixed_packages
0
url pkg:composer/typo3/cms@7.6.51
purl pkg:composer/typo3/cms@7.6.51
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-n15v-ta9h-6ffb
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.51
1
url pkg:composer/typo3/cms@8.7.40
purl pkg:composer/typo3/cms@8.7.40
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ekfd-wp8z-d7e1
1
vulnerability VCID-n15v-ta9h-6ffb
2
vulnerability VCID-s64f-x81f-b7ce
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.40
2
url pkg:composer/typo3/cms@9.5.25
purl pkg:composer/typo3/cms@9.5.25
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5paq-5frf-43ed
1
vulnerability VCID-6a9t-8dmn-s3bv
2
vulnerability VCID-bajy-qbwq-fufn
3
vulnerability VCID-ekfd-wp8z-d7e1
4
vulnerability VCID-mnz3-rj21-67ad
5
vulnerability VCID-n15v-ta9h-6ffb
6
vulnerability VCID-s64f-x81f-b7ce
7
vulnerability VCID-t1n7-eswt-73gw
8
vulnerability VCID-ve7g-8st5-wffb
9
vulnerability VCID-vyvy-y3cw-hbgr
10
vulnerability VCID-y32z-2d3f-gkgw
11
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.25
3
url pkg:composer/typo3/cms@10.4.14
purl pkg:composer/typo3/cms@10.4.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1yxw-saf5-wue7
1
vulnerability VCID-4jpa-6fqh-hbfg
2
vulnerability VCID-5paq-5frf-43ed
3
vulnerability VCID-6a9t-8dmn-s3bv
4
vulnerability VCID-8sdd-b1bn-cuhx
5
vulnerability VCID-av8u-rvzq-4fc7
6
vulnerability VCID-bajy-qbwq-fufn
7
vulnerability VCID-e32h-8q61-hbgc
8
vulnerability VCID-ekfd-wp8z-d7e1
9
vulnerability VCID-mnz3-rj21-67ad
10
vulnerability VCID-n15v-ta9h-6ffb
11
vulnerability VCID-remd-55jh-r3g5
12
vulnerability VCID-s55j-8hbt-akhn
13
vulnerability VCID-s64f-x81f-b7ce
14
vulnerability VCID-t1n7-eswt-73gw
15
vulnerability VCID-ve7g-8st5-wffb
16
vulnerability VCID-vwb2-a84s-5qak
17
vulnerability VCID-vyvy-y3cw-hbgr
18
vulnerability VCID-w13x-3rp9-wyej
19
vulnerability VCID-y32z-2d3f-gkgw
20
vulnerability VCID-yj9g-uz1a-jkf2
21
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@10.4.14
4
url pkg:composer/typo3/cms@11.1.1
purl pkg:composer/typo3/cms@11.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1yxw-saf5-wue7
1
vulnerability VCID-4jpa-6fqh-hbfg
2
vulnerability VCID-5paq-5frf-43ed
3
vulnerability VCID-6a9t-8dmn-s3bv
4
vulnerability VCID-8sdd-b1bn-cuhx
5
vulnerability VCID-av8u-rvzq-4fc7
6
vulnerability VCID-bajy-qbwq-fufn
7
vulnerability VCID-e32h-8q61-hbgc
8
vulnerability VCID-ekfd-wp8z-d7e1
9
vulnerability VCID-mnz3-rj21-67ad
10
vulnerability VCID-n15v-ta9h-6ffb
11
vulnerability VCID-remd-55jh-r3g5
12
vulnerability VCID-s55j-8hbt-akhn
13
vulnerability VCID-s64f-x81f-b7ce
14
vulnerability VCID-t1n7-eswt-73gw
15
vulnerability VCID-uyeu-a3xr-fkh4
16
vulnerability VCID-ve7g-8st5-wffb
17
vulnerability VCID-vwb2-a84s-5qak
18
vulnerability VCID-vyvy-y3cw-hbgr
19
vulnerability VCID-w13x-3rp9-wyej
20
vulnerability VCID-y32z-2d3f-gkgw
21
vulnerability VCID-yj9g-uz1a-jkf2
22
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@11.1.1
aliases CVE-2021-21339, GHSA-qx3w-4864-94ch
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-dsu7-jjjq-f3e1
26
url VCID-ehzg-bzrd-kbcc
vulnerability_id VCID-ehzg-bzrd-kbcc
summary 
Uncontrolled Resource Consumption
Denial of Service in Frontend Record Registration.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-012/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2018-012/
fixed_packages
0
url pkg:composer/typo3/cms@7.6.32
purl pkg:composer/typo3/cms@7.6.32
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5jgb-dsyx-hyb4
1
vulnerability VCID-5paq-5frf-43ed
2
vulnerability VCID-bajy-qbwq-fufn
3
vulnerability VCID-dsu7-jjjq-f3e1
4
vulnerability VCID-f963-qur3-2qb7
5
vulnerability VCID-gcnj-6qb6-pbgz
6
vulnerability VCID-mnz3-rj21-67ad
7
vulnerability VCID-n15v-ta9h-6ffb
8
vulnerability VCID-t3jn-vwbx-u7cr
9
vulnerability VCID-xa4m-xpa9-v7h8
10
vulnerability VCID-y32z-2d3f-gkgw
11
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.32
1
url pkg:composer/typo3/cms@8.7.21
purl pkg:composer/typo3/cms@8.7.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18dg-eevv-3ug9
1
vulnerability VCID-1kae-ffj3-xyc7
2
vulnerability VCID-2meq-x4kd-bbdn
3
vulnerability VCID-3n2r-awja-dug9
4
vulnerability VCID-3v4n-fzxa-bfaw
5
vulnerability VCID-4ack-haf2-cfbe
6
vulnerability VCID-551q-gpyd-ffe8
7
vulnerability VCID-5jgb-dsyx-hyb4
8
vulnerability VCID-5paq-5frf-43ed
9
vulnerability VCID-5qfv-y43v-akdm
10
vulnerability VCID-6487-15z5-pkd4
11
vulnerability VCID-9g62-zd1x-3bdg
12
vulnerability VCID-9gpp-ez8w-rqav
13
vulnerability VCID-axaf-45kr-kbfe
14
vulnerability VCID-bajy-qbwq-fufn
15
vulnerability VCID-c2tm-eqmm-1ugt
16
vulnerability VCID-cm14-t8uv-k3es
17
vulnerability VCID-cmka-8484-27bu
18
vulnerability VCID-dj88-f3p8-cfbn
19
vulnerability VCID-dsu7-jjjq-f3e1
20
vulnerability VCID-e72u-tpc3-23g3
21
vulnerability VCID-eajg-ctpd-2bby
22
vulnerability VCID-ekfd-wp8z-d7e1
23
vulnerability VCID-f963-qur3-2qb7
24
vulnerability VCID-gcnj-6qb6-pbgz
25
vulnerability VCID-he5m-6wj4-rbhc
26
vulnerability VCID-j77k-hjgx-5kc5
27
vulnerability VCID-jppe-cbgm-k3cz
28
vulnerability VCID-k4h1-mvnf-1ybx
29
vulnerability VCID-k8af-cg9k-87a9
30
vulnerability VCID-m7w6-b2xu-6uee
31
vulnerability VCID-mnz3-rj21-67ad
32
vulnerability VCID-n15v-ta9h-6ffb
33
vulnerability VCID-px44-19tj-h7aa
34
vulnerability VCID-q8hy-wjd9-nbgp
35
vulnerability VCID-s64f-x81f-b7ce
36
vulnerability VCID-shqd-udhm-pff8
37
vulnerability VCID-stzu-sxe6-5yf5
38
vulnerability VCID-t1n7-eswt-73gw
39
vulnerability VCID-t3jn-vwbx-u7cr
40
vulnerability VCID-tqf5-2fsm-8fch
41
vulnerability VCID-vxj6-wvyz-zbaq
42
vulnerability VCID-vxry-uvph-kbfd
43
vulnerability VCID-vybh-pxr3-17hn
44
vulnerability VCID-vyvy-y3cw-hbgr
45
vulnerability VCID-wea9-egep-h7g5
46
vulnerability VCID-xa4m-xpa9-v7h8
47
vulnerability VCID-xh7y-56vy-5ud8
48
vulnerability VCID-y32z-2d3f-gkgw
49
vulnerability VCID-zdq2-dhb2-6kaq
50
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.21
2
url pkg:composer/typo3/cms@9.0.0
purl pkg:composer/typo3/cms@9.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18dg-eevv-3ug9
1
vulnerability VCID-1jp6-qjpr-xfev
2
vulnerability VCID-1kae-ffj3-xyc7
3
vulnerability VCID-28bf-jvah-zkhw
4
vulnerability VCID-2meq-x4kd-bbdn
5
vulnerability VCID-2mn6-mdmz-4yd9
6
vulnerability VCID-3gg5-1921-rbfs
7
vulnerability VCID-3n2r-awja-dug9
8
vulnerability VCID-3v4n-fzxa-bfaw
9
vulnerability VCID-4ack-haf2-cfbe
10
vulnerability VCID-4btk-jt5n-2ugf
11
vulnerability VCID-4mkw-tv16-jyca
12
vulnerability VCID-543x-cnbz-1kb9
13
vulnerability VCID-551q-gpyd-ffe8
14
vulnerability VCID-58js-jzm4-4fc7
15
vulnerability VCID-5jgb-dsyx-hyb4
16
vulnerability VCID-5kzs-ex81-bbaj
17
vulnerability VCID-5paq-5frf-43ed
18
vulnerability VCID-6487-15z5-pkd4
19
vulnerability VCID-6a9t-8dmn-s3bv
20
vulnerability VCID-6b5q-vzs3-pkcc
21
vulnerability VCID-7kjw-j8st-mqfr
22
vulnerability VCID-9g62-zd1x-3bdg
23
vulnerability VCID-9gpp-ez8w-rqav
24
vulnerability VCID-9jj4-ec9n-qbhs
25
vulnerability VCID-a49c-fqrj-nbb3
26
vulnerability VCID-anfj-pmkg-skhe
27
vulnerability VCID-axaf-45kr-kbfe
28
vulnerability VCID-bajy-qbwq-fufn
29
vulnerability VCID-bnne-7p2q-eqd2
30
vulnerability VCID-bxjw-7426-gyb8
31
vulnerability VCID-byp6-edft-fbhm
32
vulnerability VCID-c2tm-eqmm-1ugt
33
vulnerability VCID-cm14-t8uv-k3es
34
vulnerability VCID-cmka-8484-27bu
35
vulnerability VCID-d8d1-sat6-muhe
36
vulnerability VCID-dbrh-t8zx-nkd9
37
vulnerability VCID-dcy2-efyc-6qgq
38
vulnerability VCID-dj88-f3p8-cfbn
39
vulnerability VCID-dm97-51uu-r7gw
40
vulnerability VCID-dsu7-jjjq-f3e1
41
vulnerability VCID-e72u-tpc3-23g3
42
vulnerability VCID-eajg-ctpd-2bby
43
vulnerability VCID-ekfd-wp8z-d7e1
44
vulnerability VCID-f1rq-qudk-zkf2
45
vulnerability VCID-f963-qur3-2qb7
46
vulnerability VCID-gcnj-6qb6-pbgz
47
vulnerability VCID-he5m-6wj4-rbhc
48
vulnerability VCID-jppe-cbgm-k3cz
49
vulnerability VCID-k4h1-mvnf-1ybx
50
vulnerability VCID-k8af-cg9k-87a9
51
vulnerability VCID-kc67-7kf7-s3d7
52
vulnerability VCID-kj9x-psfz-2ug1
53
vulnerability VCID-m7w6-b2xu-6uee
54
vulnerability VCID-mnz3-rj21-67ad
55
vulnerability VCID-n15v-ta9h-6ffb
56
vulnerability VCID-n78p-x7hh-gqcf
57
vulnerability VCID-nwxj-3ajk-rkh5
58
vulnerability VCID-p715-yexd-jfgc
59
vulnerability VCID-phgh-sd4m-zbdx
60
vulnerability VCID-pk8d-8u15-5bfq
61
vulnerability VCID-px44-19tj-h7aa
62
vulnerability VCID-q8hy-wjd9-nbgp
63
vulnerability VCID-qb4j-9tz7-m7a2
64
vulnerability VCID-raxk-rm9v-hubn
65
vulnerability VCID-rdrs-mhaw-b3ge
66
vulnerability VCID-s64f-x81f-b7ce
67
vulnerability VCID-shqd-udhm-pff8
68
vulnerability VCID-sr3p-pdxy-4yhu
69
vulnerability VCID-stzu-sxe6-5yf5
70
vulnerability VCID-sw7v-fbjk-13hy
71
vulnerability VCID-t1n7-eswt-73gw
72
vulnerability VCID-t3jn-vwbx-u7cr
73
vulnerability VCID-tmrt-6fxw-5ugh
74
vulnerability VCID-tqf5-2fsm-8fch
75
vulnerability VCID-tw1y-t4qj-j3d1
76
vulnerability VCID-u9bx-8e86-wbew
77
vulnerability VCID-ve7g-8st5-wffb
78
vulnerability VCID-vndb-w8e1-4ugv
79
vulnerability VCID-vxj6-wvyz-zbaq
80
vulnerability VCID-vxry-uvph-kbfd
81
vulnerability VCID-vybh-pxr3-17hn
82
vulnerability VCID-vyvy-y3cw-hbgr
83
vulnerability VCID-wea9-egep-h7g5
84
vulnerability VCID-wkm6-cgc8-bfa8
85
vulnerability VCID-wr5t-xqnn-gkcj
86
vulnerability VCID-wxps-mnue-6bbh
87
vulnerability VCID-xa4m-xpa9-v7h8
88
vulnerability VCID-xh7y-56vy-5ud8
89
vulnerability VCID-xtdg-uj46-rkcm
90
vulnerability VCID-xwc2-z7hx-4qa7
91
vulnerability VCID-y32z-2d3f-gkgw
92
vulnerability VCID-zdq2-dhb2-6kaq
93
vulnerability VCID-zkea-ge1t-z7gn
94
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.0.0
aliases 2018-12-11-7
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ehzg-bzrd-kbcc
27
url VCID-f4pm-9tq5-q3ch
vulnerability_id VCID-f4pm-9tq5-q3ch
summary 
Duplicate Advisory: TYPO3 Cross-Site Scripting vulnerability in typolinks
## Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-j5v7-9xr5-m7gx. This link is maintained to preserve external references.

## Original Description

All link fields within the TYPO3 installation are vulnerable to Cross-Site Scripting as authorized editors can insert javascript commands by using the url scheme `javascript:`.
references
0
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2015-12-15-2.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2015-12-15-2.yaml
1
reference_url https://github.com/TYPO3/typo3
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3
2
reference_url https://github.com/TYPO3/typo3/commit/25a1473907f0f4b2bb0147c661981940c57a4555
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/25a1473907f0f4b2bb0147c661981940c57a4555
3
reference_url https://github.com/TYPO3/typo3/commit/de1755a6dcff9b037c6d5a1fa340ba100aff054a
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/de1755a6dcff9b037c6d5a1fa340ba100aff054a
4
reference_url https://typo3.org/security/advisory/typo3-core-sa-2015-012
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2015-012
5
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-012
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-012
6
reference_url https://github.com/advisories/GHSA-75mx-chcf-2q32
reference_id GHSA-75mx-chcf-2q32
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-75mx-chcf-2q32
fixed_packages
0
url pkg:composer/typo3/cms@7.6.1
purl pkg:composer/typo3/cms@7.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bnd-6xsq-nbec
1
vulnerability VCID-1jcy-nx8g-z3d3
2
vulnerability VCID-1qjx-grvf-y7bk
3
vulnerability VCID-25t3-1sm6-3kdn
4
vulnerability VCID-28bf-jvah-zkhw
5
vulnerability VCID-2fs8-bscc-3ye2
6
vulnerability VCID-3m53-kkk2-j7c2
7
vulnerability VCID-435j-f3yx-9yep
8
vulnerability VCID-47px-4d98-ubab
9
vulnerability VCID-5jgb-dsyx-hyb4
10
vulnerability VCID-5paq-5frf-43ed
11
vulnerability VCID-5ppt-avmb-cqb2
12
vulnerability VCID-6b5q-vzs3-pkcc
13
vulnerability VCID-6wsa-4ywc-8fh4
14
vulnerability VCID-7d1g-j3k5-gub8
15
vulnerability VCID-8jp8-a363-67be
16
vulnerability VCID-b715-6z6c-qqar
17
vulnerability VCID-bajy-qbwq-fufn
18
vulnerability VCID-bck9-34jp-6ydx
19
vulnerability VCID-bmj2-4k58-tqa4
20
vulnerability VCID-bnne-7p2q-eqd2
21
vulnerability VCID-bxjw-7426-gyb8
22
vulnerability VCID-c6zq-cfg5-u7d9
23
vulnerability VCID-dbrh-t8zx-nkd9
24
vulnerability VCID-dm97-51uu-r7gw
25
vulnerability VCID-dsu7-jjjq-f3e1
26
vulnerability VCID-ehzg-bzrd-kbcc
27
vulnerability VCID-ep6t-zwd1-4bb3
28
vulnerability VCID-f963-qur3-2qb7
29
vulnerability VCID-fber-yp9q-f7dr
30
vulnerability VCID-fqbx-7xyq-fkav
31
vulnerability VCID-fy3g-uegw-2bew
32
vulnerability VCID-g4ak-ertr-rya6
33
vulnerability VCID-gcnj-6qb6-pbgz
34
vulnerability VCID-gezz-pvpj-p3c6
35
vulnerability VCID-gspd-apwy-efgu
36
vulnerability VCID-h2dd-7b1r-k7bs
37
vulnerability VCID-h63t-9enx-qfdn
38
vulnerability VCID-h958-d3pm-kfcs
39
vulnerability VCID-hpgq-deze-p7dp
40
vulnerability VCID-hv3n-j8ck-1ufx
41
vulnerability VCID-jmu3-5k7e-x7ch
42
vulnerability VCID-jqth-wfgx-87cx
43
vulnerability VCID-jqx9-41zx-dbcy
44
vulnerability VCID-m3nf-1qbv-d3dj
45
vulnerability VCID-mhud-kq57-nka3
46
vulnerability VCID-mnz3-rj21-67ad
47
vulnerability VCID-mqbh-k9n3-nbed
48
vulnerability VCID-mqk6-z77g-bfdv
49
vulnerability VCID-mub5-s7h1-57cy
50
vulnerability VCID-n15v-ta9h-6ffb
51
vulnerability VCID-n61z-6v8a-hygf
52
vulnerability VCID-n78p-x7hh-gqcf
53
vulnerability VCID-nnh9-udcj-m7fv
54
vulnerability VCID-npn5-rand-q3dg
55
vulnerability VCID-nt6a-5zkv-pbcm
56
vulnerability VCID-nwxj-3ajk-rkh5
57
vulnerability VCID-p1u9-66hm-47er
58
vulnerability VCID-p545-vwe6-9kfr
59
vulnerability VCID-pk8d-8u15-5bfq
60
vulnerability VCID-pnfa-cksc-43de
61
vulnerability VCID-prbd-r82t-87dm
62
vulnerability VCID-q9ak-qcq6-qfhy
63
vulnerability VCID-rdrs-mhaw-b3ge
64
vulnerability VCID-rg5d-d8nc-9qfu
65
vulnerability VCID-rkms-w15c-4yb1
66
vulnerability VCID-rzw5-8d1u-sfam
67
vulnerability VCID-sr3p-pdxy-4yhu
68
vulnerability VCID-t3jn-vwbx-u7cr
69
vulnerability VCID-tmrt-6fxw-5ugh
70
vulnerability VCID-tw1y-t4qj-j3d1
71
vulnerability VCID-uckg-j48d-efad
72
vulnerability VCID-uj89-13ub-43fz
73
vulnerability VCID-utpu-q2dv-m3hm
74
vulnerability VCID-vndb-w8e1-4ugv
75
vulnerability VCID-vrt1-aj9v-2kb6
76
vulnerability VCID-w5pn-eb7y-1kdp
77
vulnerability VCID-wge3-kxdq-f3bz
78
vulnerability VCID-wq32-kgff-gke8
79
vulnerability VCID-wr5t-xqnn-gkcj
80
vulnerability VCID-wxps-mnue-6bbh
81
vulnerability VCID-xa4m-xpa9-v7h8
82
vulnerability VCID-xqew-bx7v-1qfk
83
vulnerability VCID-y32z-2d3f-gkgw
84
vulnerability VCID-z5qq-nwn5-tqgm
85
vulnerability VCID-zdq2-dhb2-6kaq
86
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.1
aliases GHSA-75mx-chcf-2q32
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-f4pm-9tq5-q3ch
28
url VCID-gcnj-6qb6-pbgz
vulnerability_id VCID-gcnj-6qb6-pbgz
summary 
TYPO3 Directory Traversal on ZIP extraction
An issue was discovered in TYPO3 before 8.7.30, 9.x before 9.5.12, and 10.x before 10.2.2. It has been discovered that the extraction of manually uploaded ZIP archives in Extension Manager is vulnerable to directory traversal. Admin privileges are required in order to exploit this vulnerability. (In v9 LTS and later, System Maintainer privileges are also required.)
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-19848
reference_id
reference_type
scores
0
value 0.00374
scoring_system epss
scoring_elements 0.59108
published_at 2026-04-21T12:55:00Z
1
value 0.00374
scoring_system epss
scoring_elements 0.58989
published_at 2026-04-01T12:55:00Z
2
value 0.00374
scoring_system epss
scoring_elements 0.59064
published_at 2026-04-02T12:55:00Z
3
value 0.00374
scoring_system epss
scoring_elements 0.59087
published_at 2026-04-13T12:55:00Z
4
value 0.00374
scoring_system epss
scoring_elements 0.59051
published_at 2026-04-07T12:55:00Z
5
value 0.00374
scoring_system epss
scoring_elements 0.59102
published_at 2026-04-08T12:55:00Z
6
value 0.00374
scoring_system epss
scoring_elements 0.59106
published_at 2026-04-12T12:55:00Z
7
value 0.00374
scoring_system epss
scoring_elements 0.59125
published_at 2026-04-11T12:55:00Z
8
value 0.00374
scoring_system epss
scoring_elements 0.59124
published_at 2026-04-16T12:55:00Z
9
value 0.00374
scoring_system epss
scoring_elements 0.59128
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-19848
1
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2019-19848.yaml
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2019-19848.yaml
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2019-19848.yaml
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2019-19848.yaml
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-19848
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-19848
4
reference_url https://review.typo3.org/q/%2522Resolves:+%252388764%2522+topic:security
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://review.typo3.org/q/%2522Resolves:+%252388764%2522+topic:security
5
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-024
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2019-024
6
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-024/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-024/
7
reference_url https://github.com/advisories/GHSA-77p4-wfr8-977w
reference_id GHSA-77p4-wfr8-977w
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-77p4-wfr8-977w
fixed_packages
0
url pkg:composer/typo3/cms@8.7.30
purl pkg:composer/typo3/cms@8.7.30
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5jgb-dsyx-hyb4
1
vulnerability VCID-5paq-5frf-43ed
2
vulnerability VCID-bajy-qbwq-fufn
3
vulnerability VCID-dsu7-jjjq-f3e1
4
vulnerability VCID-ekfd-wp8z-d7e1
5
vulnerability VCID-f963-qur3-2qb7
6
vulnerability VCID-he5m-6wj4-rbhc
7
vulnerability VCID-mnz3-rj21-67ad
8
vulnerability VCID-n15v-ta9h-6ffb
9
vulnerability VCID-s64f-x81f-b7ce
10
vulnerability VCID-t1n7-eswt-73gw
11
vulnerability VCID-t3jn-vwbx-u7cr
12
vulnerability VCID-vyvy-y3cw-hbgr
13
vulnerability VCID-xh7y-56vy-5ud8
14
vulnerability VCID-y32z-2d3f-gkgw
15
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.30
1
url pkg:composer/typo3/cms@9.5.12
purl pkg:composer/typo3/cms@9.5.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mn6-mdmz-4yd9
1
vulnerability VCID-543x-cnbz-1kb9
2
vulnerability VCID-58js-jzm4-4fc7
3
vulnerability VCID-5jgb-dsyx-hyb4
4
vulnerability VCID-5kzs-ex81-bbaj
5
vulnerability VCID-5paq-5frf-43ed
6
vulnerability VCID-6a9t-8dmn-s3bv
7
vulnerability VCID-7kjw-j8st-mqfr
8
vulnerability VCID-a49c-fqrj-nbb3
9
vulnerability VCID-bajy-qbwq-fufn
10
vulnerability VCID-d8d1-sat6-muhe
11
vulnerability VCID-dsu7-jjjq-f3e1
12
vulnerability VCID-ekfd-wp8z-d7e1
13
vulnerability VCID-f963-qur3-2qb7
14
vulnerability VCID-he5m-6wj4-rbhc
15
vulnerability VCID-mnz3-rj21-67ad
16
vulnerability VCID-n15v-ta9h-6ffb
17
vulnerability VCID-phgh-sd4m-zbdx
18
vulnerability VCID-s64f-x81f-b7ce
19
vulnerability VCID-sw7v-fbjk-13hy
20
vulnerability VCID-t1n7-eswt-73gw
21
vulnerability VCID-t3jn-vwbx-u7cr
22
vulnerability VCID-ve7g-8st5-wffb
23
vulnerability VCID-vyvy-y3cw-hbgr
24
vulnerability VCID-xh7y-56vy-5ud8
25
vulnerability VCID-y32z-2d3f-gkgw
26
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.12
2
url pkg:composer/typo3/cms@10.2.2
purl pkg:composer/typo3/cms@10.2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1yxw-saf5-wue7
1
vulnerability VCID-2mn6-mdmz-4yd9
2
vulnerability VCID-4jpa-6fqh-hbfg
3
vulnerability VCID-543x-cnbz-1kb9
4
vulnerability VCID-58js-jzm4-4fc7
5
vulnerability VCID-5jgb-dsyx-hyb4
6
vulnerability VCID-5kzs-ex81-bbaj
7
vulnerability VCID-5paq-5frf-43ed
8
vulnerability VCID-6a9t-8dmn-s3bv
9
vulnerability VCID-7kjw-j8st-mqfr
10
vulnerability VCID-8sdd-b1bn-cuhx
11
vulnerability VCID-a49c-fqrj-nbb3
12
vulnerability VCID-a89c-jvwa-6kh5
13
vulnerability VCID-av8u-rvzq-4fc7
14
vulnerability VCID-bajy-qbwq-fufn
15
vulnerability VCID-cdjv-fp71-y3dv
16
vulnerability VCID-d8d1-sat6-muhe
17
vulnerability VCID-dhrm-uxuv-zfaj
18
vulnerability VCID-dsu7-jjjq-f3e1
19
vulnerability VCID-e32h-8q61-hbgc
20
vulnerability VCID-ekfd-wp8z-d7e1
21
vulnerability VCID-f963-qur3-2qb7
22
vulnerability VCID-he5m-6wj4-rbhc
23
vulnerability VCID-mnz3-rj21-67ad
24
vulnerability VCID-n15v-ta9h-6ffb
25
vulnerability VCID-phgh-sd4m-zbdx
26
vulnerability VCID-remd-55jh-r3g5
27
vulnerability VCID-s55j-8hbt-akhn
28
vulnerability VCID-s64f-x81f-b7ce
29
vulnerability VCID-sw7v-fbjk-13hy
30
vulnerability VCID-t1n7-eswt-73gw
31
vulnerability VCID-t3jn-vwbx-u7cr
32
vulnerability VCID-usmv-r64u-m7cb
33
vulnerability VCID-ve7g-8st5-wffb
34
vulnerability VCID-vwb2-a84s-5qak
35
vulnerability VCID-vyvy-y3cw-hbgr
36
vulnerability VCID-w13x-3rp9-wyej
37
vulnerability VCID-xh7y-56vy-5ud8
38
vulnerability VCID-y32z-2d3f-gkgw
39
vulnerability VCID-yj9g-uz1a-jkf2
40
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@10.2.2
aliases CVE-2019-19848, GHSA-77p4-wfr8-977w
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-gcnj-6qb6-pbgz
29
url VCID-h958-d3pm-kfcs
vulnerability_id VCID-h958-d3pm-kfcs
summary 
Missing Access Check
Extbase request handling fails to implement a proper access check for requested controller/ action combinations, which makes it possible for an attacker to execute arbitrary Extbase actions by crafting a special request. To successfully exploit this vulnerability, an attacker must have access to at least one Extbase plugin or module action in a TYPO3 installation. The missing access check inevitably leads to information disclosure or remote code execution, depending on the action that an attacker is able to execute.
references
0
reference_url https://github.com/TYPO3/TYPO3.CMS/commit/21ed4054212babb7ec75d80a24f95c6ba25bd2fb
reference_id
reference_type
scores
url https://github.com/TYPO3/TYPO3.CMS/commit/21ed4054212babb7ec75d80a24f95c6ba25bd2fb
1
reference_url https://github.com/TYPO3/TYPO3.CMS/commit/404f09d491c96b294ded5e2741277dfbeba92807
reference_id
reference_type
scores
url https://github.com/TYPO3/TYPO3.CMS/commit/404f09d491c96b294ded5e2741277dfbeba92807
2
reference_url https://github.com/TYPO3/TYPO3.CMS/commit/c10db60dfc87c33542c418fa316754a5309c3e26
reference_id
reference_type
scores
url https://github.com/TYPO3/TYPO3.CMS/commit/c10db60dfc87c33542c418fa316754a5309c3e26
3
reference_url https://typo3.org/teamssecuritysecurity-bulletins/security-bulletins-single-view/article/missing-access-check-in-typo3-cms/
reference_id
reference_type
scores
url https://typo3.org/teamssecuritysecurity-bulletins/security-bulletins-single-view/article/missing-access-check-in-typo3-cms/
fixed_packages
0
url pkg:composer/typo3/cms@7.6.8
purl pkg:composer/typo3/cms@7.6.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1jcy-nx8g-z3d3
1
vulnerability VCID-1qjx-grvf-y7bk
2
vulnerability VCID-25t3-1sm6-3kdn
3
vulnerability VCID-28bf-jvah-zkhw
4
vulnerability VCID-2fs8-bscc-3ye2
5
vulnerability VCID-435j-f3yx-9yep
6
vulnerability VCID-47px-4d98-ubab
7
vulnerability VCID-5jgb-dsyx-hyb4
8
vulnerability VCID-5paq-5frf-43ed
9
vulnerability VCID-5ppt-avmb-cqb2
10
vulnerability VCID-6b5q-vzs3-pkcc
11
vulnerability VCID-6wsa-4ywc-8fh4
12
vulnerability VCID-7d1g-j3k5-gub8
13
vulnerability VCID-8jp8-a363-67be
14
vulnerability VCID-bajy-qbwq-fufn
15
vulnerability VCID-bck9-34jp-6ydx
16
vulnerability VCID-bmj2-4k58-tqa4
17
vulnerability VCID-bnne-7p2q-eqd2
18
vulnerability VCID-bxjw-7426-gyb8
19
vulnerability VCID-c6zq-cfg5-u7d9
20
vulnerability VCID-dbrh-t8zx-nkd9
21
vulnerability VCID-dm97-51uu-r7gw
22
vulnerability VCID-dsu7-jjjq-f3e1
23
vulnerability VCID-ehzg-bzrd-kbcc
24
vulnerability VCID-ep6t-zwd1-4bb3
25
vulnerability VCID-f963-qur3-2qb7
26
vulnerability VCID-fy3g-uegw-2bew
27
vulnerability VCID-gcnj-6qb6-pbgz
28
vulnerability VCID-h2dd-7b1r-k7bs
29
vulnerability VCID-h63t-9enx-qfdn
30
vulnerability VCID-hpgq-deze-p7dp
31
vulnerability VCID-hv3n-j8ck-1ufx
32
vulnerability VCID-jmu3-5k7e-x7ch
33
vulnerability VCID-jqth-wfgx-87cx
34
vulnerability VCID-jqx9-41zx-dbcy
35
vulnerability VCID-m3nf-1qbv-d3dj
36
vulnerability VCID-mnz3-rj21-67ad
37
vulnerability VCID-mqbh-k9n3-nbed
38
vulnerability VCID-mqk6-z77g-bfdv
39
vulnerability VCID-mub5-s7h1-57cy
40
vulnerability VCID-n15v-ta9h-6ffb
41
vulnerability VCID-n61z-6v8a-hygf
42
vulnerability VCID-n78p-x7hh-gqcf
43
vulnerability VCID-nnh9-udcj-m7fv
44
vulnerability VCID-nt6a-5zkv-pbcm
45
vulnerability VCID-nwxj-3ajk-rkh5
46
vulnerability VCID-p545-vwe6-9kfr
47
vulnerability VCID-pk8d-8u15-5bfq
48
vulnerability VCID-pnfa-cksc-43de
49
vulnerability VCID-prbd-r82t-87dm
50
vulnerability VCID-q9ak-qcq6-qfhy
51
vulnerability VCID-rdrs-mhaw-b3ge
52
vulnerability VCID-rkms-w15c-4yb1
53
vulnerability VCID-rzw5-8d1u-sfam
54
vulnerability VCID-sr3p-pdxy-4yhu
55
vulnerability VCID-t3jn-vwbx-u7cr
56
vulnerability VCID-tmrt-6fxw-5ugh
57
vulnerability VCID-tw1y-t4qj-j3d1
58
vulnerability VCID-uckg-j48d-efad
59
vulnerability VCID-utpu-q2dv-m3hm
60
vulnerability VCID-vndb-w8e1-4ugv
61
vulnerability VCID-vrt1-aj9v-2kb6
62
vulnerability VCID-wge3-kxdq-f3bz
63
vulnerability VCID-wr5t-xqnn-gkcj
64
vulnerability VCID-wxps-mnue-6bbh
65
vulnerability VCID-xa4m-xpa9-v7h8
66
vulnerability VCID-xqew-bx7v-1qfk
67
vulnerability VCID-y32z-2d3f-gkgw
68
vulnerability VCID-zdq2-dhb2-6kaq
69
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.8
1
url pkg:composer/typo3/cms@8.1.1
purl pkg:composer/typo3/cms@8.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18dg-eevv-3ug9
1
vulnerability VCID-1jcy-nx8g-z3d3
2
vulnerability VCID-1kae-ffj3-xyc7
3
vulnerability VCID-1qjx-grvf-y7bk
4
vulnerability VCID-25t3-1sm6-3kdn
5
vulnerability VCID-28bf-jvah-zkhw
6
vulnerability VCID-2fs8-bscc-3ye2
7
vulnerability VCID-2meq-x4kd-bbdn
8
vulnerability VCID-3gg5-1921-rbfs
9
vulnerability VCID-3n2r-awja-dug9
10
vulnerability VCID-3v4n-fzxa-bfaw
11
vulnerability VCID-435j-f3yx-9yep
12
vulnerability VCID-47px-4d98-ubab
13
vulnerability VCID-4ack-haf2-cfbe
14
vulnerability VCID-4btk-jt5n-2ugf
15
vulnerability VCID-551q-gpyd-ffe8
16
vulnerability VCID-5jgb-dsyx-hyb4
17
vulnerability VCID-5paq-5frf-43ed
18
vulnerability VCID-5ppt-avmb-cqb2
19
vulnerability VCID-5qfv-y43v-akdm
20
vulnerability VCID-5yg8-2cbr-d3as
21
vulnerability VCID-6487-15z5-pkd4
22
vulnerability VCID-6b5q-vzs3-pkcc
23
vulnerability VCID-6wsa-4ywc-8fh4
24
vulnerability VCID-7d1g-j3k5-gub8
25
vulnerability VCID-8jp8-a363-67be
26
vulnerability VCID-9g62-zd1x-3bdg
27
vulnerability VCID-9gpp-ez8w-rqav
28
vulnerability VCID-auw7-pc55-73hj
29
vulnerability VCID-axaf-45kr-kbfe
30
vulnerability VCID-bajy-qbwq-fufn
31
vulnerability VCID-bck9-34jp-6ydx
32
vulnerability VCID-bmj2-4k58-tqa4
33
vulnerability VCID-bnne-7p2q-eqd2
34
vulnerability VCID-bxjw-7426-gyb8
35
vulnerability VCID-c2tm-eqmm-1ugt
36
vulnerability VCID-c6zq-cfg5-u7d9
37
vulnerability VCID-cm14-t8uv-k3es
38
vulnerability VCID-cmka-8484-27bu
39
vulnerability VCID-dbrh-t8zx-nkd9
40
vulnerability VCID-dj88-f3p8-cfbn
41
vulnerability VCID-dm97-51uu-r7gw
42
vulnerability VCID-dquc-7amf-e7cs
43
vulnerability VCID-dsu7-jjjq-f3e1
44
vulnerability VCID-e72u-tpc3-23g3
45
vulnerability VCID-e7sv-4xc2-m3d5
46
vulnerability VCID-eajg-ctpd-2bby
47
vulnerability VCID-ehzg-bzrd-kbcc
48
vulnerability VCID-ekfd-wp8z-d7e1
49
vulnerability VCID-ep6t-zwd1-4bb3
50
vulnerability VCID-euk5-hagy-xqfz
51
vulnerability VCID-fy3g-uegw-2bew
52
vulnerability VCID-gcnj-6qb6-pbgz
53
vulnerability VCID-h63t-9enx-qfdn
54
vulnerability VCID-he5m-6wj4-rbhc
55
vulnerability VCID-hpgq-deze-p7dp
56
vulnerability VCID-hv3n-j8ck-1ufx
57
vulnerability VCID-j77k-hjgx-5kc5
58
vulnerability VCID-jmu3-5k7e-x7ch
59
vulnerability VCID-jppe-cbgm-k3cz
60
vulnerability VCID-jqth-wfgx-87cx
61
vulnerability VCID-jqx9-41zx-dbcy
62
vulnerability VCID-k4h1-mvnf-1ybx
63
vulnerability VCID-k8af-cg9k-87a9
64
vulnerability VCID-m3nf-1qbv-d3dj
65
vulnerability VCID-m7w6-b2xu-6uee
66
vulnerability VCID-mnz3-rj21-67ad
67
vulnerability VCID-mqbh-k9n3-nbed
68
vulnerability VCID-mqk6-z77g-bfdv
69
vulnerability VCID-mub5-s7h1-57cy
70
vulnerability VCID-n15v-ta9h-6ffb
71
vulnerability VCID-n61z-6v8a-hygf
72
vulnerability VCID-n78p-x7hh-gqcf
73
vulnerability VCID-nnh9-udcj-m7fv
74
vulnerability VCID-nt6a-5zkv-pbcm
75
vulnerability VCID-nwxj-3ajk-rkh5
76
vulnerability VCID-p545-vwe6-9kfr
77
vulnerability VCID-pk8d-8u15-5bfq
78
vulnerability VCID-pnfa-cksc-43de
79
vulnerability VCID-prbd-r82t-87dm
80
vulnerability VCID-px44-19tj-h7aa
81
vulnerability VCID-q8hy-wjd9-nbgp
82
vulnerability VCID-q9ak-qcq6-qfhy
83
vulnerability VCID-qb4j-9tz7-m7a2
84
vulnerability VCID-rdrs-mhaw-b3ge
85
vulnerability VCID-rzw5-8d1u-sfam
86
vulnerability VCID-s64f-x81f-b7ce
87
vulnerability VCID-shqd-udhm-pff8
88
vulnerability VCID-sr3p-pdxy-4yhu
89
vulnerability VCID-stzu-sxe6-5yf5
90
vulnerability VCID-t1n7-eswt-73gw
91
vulnerability VCID-t3jn-vwbx-u7cr
92
vulnerability VCID-tmrt-6fxw-5ugh
93
vulnerability VCID-tqf5-2fsm-8fch
94
vulnerability VCID-tw1y-t4qj-j3d1
95
vulnerability VCID-uckg-j48d-efad
96
vulnerability VCID-utpu-q2dv-m3hm
97
vulnerability VCID-vndb-w8e1-4ugv
98
vulnerability VCID-vrt1-aj9v-2kb6
99
vulnerability VCID-vxj6-wvyz-zbaq
100
vulnerability VCID-vxry-uvph-kbfd
101
vulnerability VCID-vybh-pxr3-17hn
102
vulnerability VCID-wea9-egep-h7g5
103
vulnerability VCID-wge3-kxdq-f3bz
104
vulnerability VCID-wr5t-xqnn-gkcj
105
vulnerability VCID-wxps-mnue-6bbh
106
vulnerability VCID-xa4m-xpa9-v7h8
107
vulnerability VCID-xh7y-56vy-5ud8
108
vulnerability VCID-xqew-bx7v-1qfk
109
vulnerability VCID-y32z-2d3f-gkgw
110
vulnerability VCID-zawz-vky5-tkgt
111
vulnerability VCID-zdq2-dhb2-6kaq
112
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.1.1
aliases TYPO3-CORE-SA-2016-013
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-h958-d3pm-kfcs
30
url VCID-jmu3-5k7e-x7ch
vulnerability_id VCID-jmu3-5k7e-x7ch
summary Failing to properly encode user input, the page module is vulnerable to Cross-Site Scripting. A valid backend user account with permissions to edit plugins is needed to exploit this vulnerability.
references
0
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2016-021
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2016-021
fixed_packages
0
url pkg:composer/typo3/cms@7.6.11
purl pkg:composer/typo3/cms@7.6.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1jcy-nx8g-z3d3
1
vulnerability VCID-1qjx-grvf-y7bk
2
vulnerability VCID-28bf-jvah-zkhw
3
vulnerability VCID-2fs8-bscc-3ye2
4
vulnerability VCID-435j-f3yx-9yep
5
vulnerability VCID-5jgb-dsyx-hyb4
6
vulnerability VCID-5paq-5frf-43ed
7
vulnerability VCID-6b5q-vzs3-pkcc
8
vulnerability VCID-bajy-qbwq-fufn
9
vulnerability VCID-bnne-7p2q-eqd2
10
vulnerability VCID-bxjw-7426-gyb8
11
vulnerability VCID-c6zq-cfg5-u7d9
12
vulnerability VCID-dbrh-t8zx-nkd9
13
vulnerability VCID-dm97-51uu-r7gw
14
vulnerability VCID-dsu7-jjjq-f3e1
15
vulnerability VCID-ehzg-bzrd-kbcc
16
vulnerability VCID-ep6t-zwd1-4bb3
17
vulnerability VCID-f963-qur3-2qb7
18
vulnerability VCID-fy3g-uegw-2bew
19
vulnerability VCID-gcnj-6qb6-pbgz
20
vulnerability VCID-h63t-9enx-qfdn
21
vulnerability VCID-hpgq-deze-p7dp
22
vulnerability VCID-hv3n-j8ck-1ufx
23
vulnerability VCID-jqth-wfgx-87cx
24
vulnerability VCID-mnz3-rj21-67ad
25
vulnerability VCID-mqbh-k9n3-nbed
26
vulnerability VCID-mub5-s7h1-57cy
27
vulnerability VCID-n15v-ta9h-6ffb
28
vulnerability VCID-n78p-x7hh-gqcf
29
vulnerability VCID-nnh9-udcj-m7fv
30
vulnerability VCID-nt6a-5zkv-pbcm
31
vulnerability VCID-nwxj-3ajk-rkh5
32
vulnerability VCID-pk8d-8u15-5bfq
33
vulnerability VCID-pnfa-cksc-43de
34
vulnerability VCID-prbd-r82t-87dm
35
vulnerability VCID-q9ak-qcq6-qfhy
36
vulnerability VCID-rdrs-mhaw-b3ge
37
vulnerability VCID-rzw5-8d1u-sfam
38
vulnerability VCID-sr3p-pdxy-4yhu
39
vulnerability VCID-t3jn-vwbx-u7cr
40
vulnerability VCID-tmrt-6fxw-5ugh
41
vulnerability VCID-tw1y-t4qj-j3d1
42
vulnerability VCID-vndb-w8e1-4ugv
43
vulnerability VCID-vrt1-aj9v-2kb6
44
vulnerability VCID-wge3-kxdq-f3bz
45
vulnerability VCID-wr5t-xqnn-gkcj
46
vulnerability VCID-wxps-mnue-6bbh
47
vulnerability VCID-xa4m-xpa9-v7h8
48
vulnerability VCID-xqew-bx7v-1qfk
49
vulnerability VCID-y32z-2d3f-gkgw
50
vulnerability VCID-zdq2-dhb2-6kaq
51
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.11
1
url pkg:composer/typo3/cms@8.0.0
purl pkg:composer/typo3/cms@8.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18dg-eevv-3ug9
1
vulnerability VCID-1bnd-6xsq-nbec
2
vulnerability VCID-1jcy-nx8g-z3d3
3
vulnerability VCID-1kae-ffj3-xyc7
4
vulnerability VCID-1qjx-grvf-y7bk
5
vulnerability VCID-25t3-1sm6-3kdn
6
vulnerability VCID-28bf-jvah-zkhw
7
vulnerability VCID-2fs8-bscc-3ye2
8
vulnerability VCID-2meq-x4kd-bbdn
9
vulnerability VCID-3gg5-1921-rbfs
10
vulnerability VCID-3n2r-awja-dug9
11
vulnerability VCID-3v4n-fzxa-bfaw
12
vulnerability VCID-435j-f3yx-9yep
13
vulnerability VCID-47px-4d98-ubab
14
vulnerability VCID-4ack-haf2-cfbe
15
vulnerability VCID-4btk-jt5n-2ugf
16
vulnerability VCID-551q-gpyd-ffe8
17
vulnerability VCID-5jgb-dsyx-hyb4
18
vulnerability VCID-5paq-5frf-43ed
19
vulnerability VCID-5ppt-avmb-cqb2
20
vulnerability VCID-5qfv-y43v-akdm
21
vulnerability VCID-5yg8-2cbr-d3as
22
vulnerability VCID-6487-15z5-pkd4
23
vulnerability VCID-6b5q-vzs3-pkcc
24
vulnerability VCID-6wsa-4ywc-8fh4
25
vulnerability VCID-7d1g-j3k5-gub8
26
vulnerability VCID-8jp8-a363-67be
27
vulnerability VCID-9g62-zd1x-3bdg
28
vulnerability VCID-9gpp-ez8w-rqav
29
vulnerability VCID-auw7-pc55-73hj
30
vulnerability VCID-axaf-45kr-kbfe
31
vulnerability VCID-bajy-qbwq-fufn
32
vulnerability VCID-bck9-34jp-6ydx
33
vulnerability VCID-bmj2-4k58-tqa4
34
vulnerability VCID-bnne-7p2q-eqd2
35
vulnerability VCID-bxjw-7426-gyb8
36
vulnerability VCID-c2tm-eqmm-1ugt
37
vulnerability VCID-c6zq-cfg5-u7d9
38
vulnerability VCID-cm14-t8uv-k3es
39
vulnerability VCID-cmka-8484-27bu
40
vulnerability VCID-dbrh-t8zx-nkd9
41
vulnerability VCID-dj88-f3p8-cfbn
42
vulnerability VCID-dm97-51uu-r7gw
43
vulnerability VCID-dquc-7amf-e7cs
44
vulnerability VCID-dsu7-jjjq-f3e1
45
vulnerability VCID-e72u-tpc3-23g3
46
vulnerability VCID-e7sv-4xc2-m3d5
47
vulnerability VCID-eajg-ctpd-2bby
48
vulnerability VCID-ehzg-bzrd-kbcc
49
vulnerability VCID-ekfd-wp8z-d7e1
50
vulnerability VCID-ep6t-zwd1-4bb3
51
vulnerability VCID-euk5-hagy-xqfz
52
vulnerability VCID-f1rq-qudk-zkf2
53
vulnerability VCID-fber-yp9q-f7dr
54
vulnerability VCID-fqbx-7xyq-fkav
55
vulnerability VCID-fy3g-uegw-2bew
56
vulnerability VCID-gcnj-6qb6-pbgz
57
vulnerability VCID-gezz-pvpj-p3c6
58
vulnerability VCID-gspd-apwy-efgu
59
vulnerability VCID-h63t-9enx-qfdn
60
vulnerability VCID-h958-d3pm-kfcs
61
vulnerability VCID-he5m-6wj4-rbhc
62
vulnerability VCID-hpgq-deze-p7dp
63
vulnerability VCID-hv3n-j8ck-1ufx
64
vulnerability VCID-j77k-hjgx-5kc5
65
vulnerability VCID-jppe-cbgm-k3cz
66
vulnerability VCID-jqth-wfgx-87cx
67
vulnerability VCID-k4h1-mvnf-1ybx
68
vulnerability VCID-k8af-cg9k-87a9
69
vulnerability VCID-m3nf-1qbv-d3dj
70
vulnerability VCID-m7w6-b2xu-6uee
71
vulnerability VCID-mnz3-rj21-67ad
72
vulnerability VCID-mqbh-k9n3-nbed
73
vulnerability VCID-mqk6-z77g-bfdv
74
vulnerability VCID-mub5-s7h1-57cy
75
vulnerability VCID-n15v-ta9h-6ffb
76
vulnerability VCID-n61z-6v8a-hygf
77
vulnerability VCID-n78p-x7hh-gqcf
78
vulnerability VCID-nnh9-udcj-m7fv
79
vulnerability VCID-npn5-rand-q3dg
80
vulnerability VCID-nt6a-5zkv-pbcm
81
vulnerability VCID-nwxj-3ajk-rkh5
82
vulnerability VCID-p1u9-66hm-47er
83
vulnerability VCID-p545-vwe6-9kfr
84
vulnerability VCID-pk8d-8u15-5bfq
85
vulnerability VCID-pnfa-cksc-43de
86
vulnerability VCID-prbd-r82t-87dm
87
vulnerability VCID-px44-19tj-h7aa
88
vulnerability VCID-q8hy-wjd9-nbgp
89
vulnerability VCID-q9ak-qcq6-qfhy
90
vulnerability VCID-qb4j-9tz7-m7a2
91
vulnerability VCID-rdrs-mhaw-b3ge
92
vulnerability VCID-rg5d-d8nc-9qfu
93
vulnerability VCID-rzw5-8d1u-sfam
94
vulnerability VCID-s64f-x81f-b7ce
95
vulnerability VCID-shqd-udhm-pff8
96
vulnerability VCID-sr3p-pdxy-4yhu
97
vulnerability VCID-stzu-sxe6-5yf5
98
vulnerability VCID-t1n7-eswt-73gw
99
vulnerability VCID-t3jn-vwbx-u7cr
100
vulnerability VCID-tmrt-6fxw-5ugh
101
vulnerability VCID-tqf5-2fsm-8fch
102
vulnerability VCID-tw1y-t4qj-j3d1
103
vulnerability VCID-uckg-j48d-efad
104
vulnerability VCID-utpu-q2dv-m3hm
105
vulnerability VCID-vndb-w8e1-4ugv
106
vulnerability VCID-vrt1-aj9v-2kb6
107
vulnerability VCID-vxj6-wvyz-zbaq
108
vulnerability VCID-vxry-uvph-kbfd
109
vulnerability VCID-vybh-pxr3-17hn
110
vulnerability VCID-wea9-egep-h7g5
111
vulnerability VCID-wge3-kxdq-f3bz
112
vulnerability VCID-wr5t-xqnn-gkcj
113
vulnerability VCID-wxps-mnue-6bbh
114
vulnerability VCID-xa4m-xpa9-v7h8
115
vulnerability VCID-xh7y-56vy-5ud8
116
vulnerability VCID-xqew-bx7v-1qfk
117
vulnerability VCID-y32z-2d3f-gkgw
118
vulnerability VCID-zawz-vky5-tkgt
119
vulnerability VCID-zdq2-dhb2-6kaq
120
vulnerability VCID-zkea-ge1t-z7gn
121
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.0.0
2
url pkg:composer/typo3/cms@8.3.1
purl pkg:composer/typo3/cms@8.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18dg-eevv-3ug9
1
vulnerability VCID-1jcy-nx8g-z3d3
2
vulnerability VCID-1kae-ffj3-xyc7
3
vulnerability VCID-1qjx-grvf-y7bk
4
vulnerability VCID-28bf-jvah-zkhw
5
vulnerability VCID-2fs8-bscc-3ye2
6
vulnerability VCID-2meq-x4kd-bbdn
7
vulnerability VCID-3gg5-1921-rbfs
8
vulnerability VCID-3n2r-awja-dug9
9
vulnerability VCID-3v4n-fzxa-bfaw
10
vulnerability VCID-435j-f3yx-9yep
11
vulnerability VCID-4ack-haf2-cfbe
12
vulnerability VCID-4btk-jt5n-2ugf
13
vulnerability VCID-551q-gpyd-ffe8
14
vulnerability VCID-5jgb-dsyx-hyb4
15
vulnerability VCID-5paq-5frf-43ed
16
vulnerability VCID-5qfv-y43v-akdm
17
vulnerability VCID-5yg8-2cbr-d3as
18
vulnerability VCID-6487-15z5-pkd4
19
vulnerability VCID-6b5q-vzs3-pkcc
20
vulnerability VCID-9g62-zd1x-3bdg
21
vulnerability VCID-9gpp-ez8w-rqav
22
vulnerability VCID-axaf-45kr-kbfe
23
vulnerability VCID-bajy-qbwq-fufn
24
vulnerability VCID-bnne-7p2q-eqd2
25
vulnerability VCID-bxjw-7426-gyb8
26
vulnerability VCID-c2tm-eqmm-1ugt
27
vulnerability VCID-c6zq-cfg5-u7d9
28
vulnerability VCID-cm14-t8uv-k3es
29
vulnerability VCID-cmka-8484-27bu
30
vulnerability VCID-dbrh-t8zx-nkd9
31
vulnerability VCID-dj88-f3p8-cfbn
32
vulnerability VCID-dm97-51uu-r7gw
33
vulnerability VCID-dquc-7amf-e7cs
34
vulnerability VCID-dsu7-jjjq-f3e1
35
vulnerability VCID-e72u-tpc3-23g3
36
vulnerability VCID-e7sv-4xc2-m3d5
37
vulnerability VCID-eajg-ctpd-2bby
38
vulnerability VCID-ehzg-bzrd-kbcc
39
vulnerability VCID-ekfd-wp8z-d7e1
40
vulnerability VCID-ep6t-zwd1-4bb3
41
vulnerability VCID-euk5-hagy-xqfz
42
vulnerability VCID-fy3g-uegw-2bew
43
vulnerability VCID-gcnj-6qb6-pbgz
44
vulnerability VCID-h63t-9enx-qfdn
45
vulnerability VCID-he5m-6wj4-rbhc
46
vulnerability VCID-hpgq-deze-p7dp
47
vulnerability VCID-hv3n-j8ck-1ufx
48
vulnerability VCID-j77k-hjgx-5kc5
49
vulnerability VCID-jppe-cbgm-k3cz
50
vulnerability VCID-jqth-wfgx-87cx
51
vulnerability VCID-k4h1-mvnf-1ybx
52
vulnerability VCID-k8af-cg9k-87a9
53
vulnerability VCID-m7w6-b2xu-6uee
54
vulnerability VCID-mnz3-rj21-67ad
55
vulnerability VCID-mqbh-k9n3-nbed
56
vulnerability VCID-mub5-s7h1-57cy
57
vulnerability VCID-n15v-ta9h-6ffb
58
vulnerability VCID-n78p-x7hh-gqcf
59
vulnerability VCID-nnh9-udcj-m7fv
60
vulnerability VCID-nt6a-5zkv-pbcm
61
vulnerability VCID-nwxj-3ajk-rkh5
62
vulnerability VCID-pk8d-8u15-5bfq
63
vulnerability VCID-pnfa-cksc-43de
64
vulnerability VCID-prbd-r82t-87dm
65
vulnerability VCID-px44-19tj-h7aa
66
vulnerability VCID-q8hy-wjd9-nbgp
67
vulnerability VCID-q9ak-qcq6-qfhy
68
vulnerability VCID-qb4j-9tz7-m7a2
69
vulnerability VCID-rdrs-mhaw-b3ge
70
vulnerability VCID-rzw5-8d1u-sfam
71
vulnerability VCID-s64f-x81f-b7ce
72
vulnerability VCID-shqd-udhm-pff8
73
vulnerability VCID-sr3p-pdxy-4yhu
74
vulnerability VCID-stzu-sxe6-5yf5
75
vulnerability VCID-t1n7-eswt-73gw
76
vulnerability VCID-t3jn-vwbx-u7cr
77
vulnerability VCID-tgma-cyvk-97ay
78
vulnerability VCID-tmrt-6fxw-5ugh
79
vulnerability VCID-tqf5-2fsm-8fch
80
vulnerability VCID-tw1y-t4qj-j3d1
81
vulnerability VCID-uw2r-3gvq-bbcq
82
vulnerability VCID-vndb-w8e1-4ugv
83
vulnerability VCID-vrt1-aj9v-2kb6
84
vulnerability VCID-vxj6-wvyz-zbaq
85
vulnerability VCID-vxry-uvph-kbfd
86
vulnerability VCID-vybh-pxr3-17hn
87
vulnerability VCID-wea9-egep-h7g5
88
vulnerability VCID-wge3-kxdq-f3bz
89
vulnerability VCID-wr5t-xqnn-gkcj
90
vulnerability VCID-wxps-mnue-6bbh
91
vulnerability VCID-xa4m-xpa9-v7h8
92
vulnerability VCID-xh7y-56vy-5ud8
93
vulnerability VCID-xqew-bx7v-1qfk
94
vulnerability VCID-y32z-2d3f-gkgw
95
vulnerability VCID-zdq2-dhb2-6kaq
96
vulnerability VCID-zkea-ge1t-z7gn
97
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.3.1
aliases TYPO3-CORE-SA-2016-021
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-jmu3-5k7e-x7ch
31
url VCID-jqx9-41zx-dbcy
vulnerability_id VCID-jqx9-41zx-dbcy
summary 
Cache Flooding in Frontend
Links with a valid cHash argument lead to newly generated page cache entries. Because the cHash is not bound to a specific page, attackers could use valid cHash arguments for multiple pages, leading to additional useless page cache entries. Depending on the number of pages in the system and the number of available valid links with a cHash, attackers could add a considerable amount of additional cache entries, which in the end exceed storage limits and thus could lead to the system not responding any more. This means the Cache Flooding attack potentially could lead to a successful Denial of Service (DoS) attack.
references
0
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2016-022
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2016-022
fixed_packages
0
url pkg:composer/typo3/cms@7.6.11
purl pkg:composer/typo3/cms@7.6.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1jcy-nx8g-z3d3
1
vulnerability VCID-1qjx-grvf-y7bk
2
vulnerability VCID-28bf-jvah-zkhw
3
vulnerability VCID-2fs8-bscc-3ye2
4
vulnerability VCID-435j-f3yx-9yep
5
vulnerability VCID-5jgb-dsyx-hyb4
6
vulnerability VCID-5paq-5frf-43ed
7
vulnerability VCID-6b5q-vzs3-pkcc
8
vulnerability VCID-bajy-qbwq-fufn
9
vulnerability VCID-bnne-7p2q-eqd2
10
vulnerability VCID-bxjw-7426-gyb8
11
vulnerability VCID-c6zq-cfg5-u7d9
12
vulnerability VCID-dbrh-t8zx-nkd9
13
vulnerability VCID-dm97-51uu-r7gw
14
vulnerability VCID-dsu7-jjjq-f3e1
15
vulnerability VCID-ehzg-bzrd-kbcc
16
vulnerability VCID-ep6t-zwd1-4bb3
17
vulnerability VCID-f963-qur3-2qb7
18
vulnerability VCID-fy3g-uegw-2bew
19
vulnerability VCID-gcnj-6qb6-pbgz
20
vulnerability VCID-h63t-9enx-qfdn
21
vulnerability VCID-hpgq-deze-p7dp
22
vulnerability VCID-hv3n-j8ck-1ufx
23
vulnerability VCID-jqth-wfgx-87cx
24
vulnerability VCID-mnz3-rj21-67ad
25
vulnerability VCID-mqbh-k9n3-nbed
26
vulnerability VCID-mub5-s7h1-57cy
27
vulnerability VCID-n15v-ta9h-6ffb
28
vulnerability VCID-n78p-x7hh-gqcf
29
vulnerability VCID-nnh9-udcj-m7fv
30
vulnerability VCID-nt6a-5zkv-pbcm
31
vulnerability VCID-nwxj-3ajk-rkh5
32
vulnerability VCID-pk8d-8u15-5bfq
33
vulnerability VCID-pnfa-cksc-43de
34
vulnerability VCID-prbd-r82t-87dm
35
vulnerability VCID-q9ak-qcq6-qfhy
36
vulnerability VCID-rdrs-mhaw-b3ge
37
vulnerability VCID-rzw5-8d1u-sfam
38
vulnerability VCID-sr3p-pdxy-4yhu
39
vulnerability VCID-t3jn-vwbx-u7cr
40
vulnerability VCID-tmrt-6fxw-5ugh
41
vulnerability VCID-tw1y-t4qj-j3d1
42
vulnerability VCID-vndb-w8e1-4ugv
43
vulnerability VCID-vrt1-aj9v-2kb6
44
vulnerability VCID-wge3-kxdq-f3bz
45
vulnerability VCID-wr5t-xqnn-gkcj
46
vulnerability VCID-wxps-mnue-6bbh
47
vulnerability VCID-xa4m-xpa9-v7h8
48
vulnerability VCID-xqew-bx7v-1qfk
49
vulnerability VCID-y32z-2d3f-gkgw
50
vulnerability VCID-zdq2-dhb2-6kaq
51
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.11
1
url pkg:composer/typo3/cms@8.0.0
purl pkg:composer/typo3/cms@8.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18dg-eevv-3ug9
1
vulnerability VCID-1bnd-6xsq-nbec
2
vulnerability VCID-1jcy-nx8g-z3d3
3
vulnerability VCID-1kae-ffj3-xyc7
4
vulnerability VCID-1qjx-grvf-y7bk
5
vulnerability VCID-25t3-1sm6-3kdn
6
vulnerability VCID-28bf-jvah-zkhw
7
vulnerability VCID-2fs8-bscc-3ye2
8
vulnerability VCID-2meq-x4kd-bbdn
9
vulnerability VCID-3gg5-1921-rbfs
10
vulnerability VCID-3n2r-awja-dug9
11
vulnerability VCID-3v4n-fzxa-bfaw
12
vulnerability VCID-435j-f3yx-9yep
13
vulnerability VCID-47px-4d98-ubab
14
vulnerability VCID-4ack-haf2-cfbe
15
vulnerability VCID-4btk-jt5n-2ugf
16
vulnerability VCID-551q-gpyd-ffe8
17
vulnerability VCID-5jgb-dsyx-hyb4
18
vulnerability VCID-5paq-5frf-43ed
19
vulnerability VCID-5ppt-avmb-cqb2
20
vulnerability VCID-5qfv-y43v-akdm
21
vulnerability VCID-5yg8-2cbr-d3as
22
vulnerability VCID-6487-15z5-pkd4
23
vulnerability VCID-6b5q-vzs3-pkcc
24
vulnerability VCID-6wsa-4ywc-8fh4
25
vulnerability VCID-7d1g-j3k5-gub8
26
vulnerability VCID-8jp8-a363-67be
27
vulnerability VCID-9g62-zd1x-3bdg
28
vulnerability VCID-9gpp-ez8w-rqav
29
vulnerability VCID-auw7-pc55-73hj
30
vulnerability VCID-axaf-45kr-kbfe
31
vulnerability VCID-bajy-qbwq-fufn
32
vulnerability VCID-bck9-34jp-6ydx
33
vulnerability VCID-bmj2-4k58-tqa4
34
vulnerability VCID-bnne-7p2q-eqd2
35
vulnerability VCID-bxjw-7426-gyb8
36
vulnerability VCID-c2tm-eqmm-1ugt
37
vulnerability VCID-c6zq-cfg5-u7d9
38
vulnerability VCID-cm14-t8uv-k3es
39
vulnerability VCID-cmka-8484-27bu
40
vulnerability VCID-dbrh-t8zx-nkd9
41
vulnerability VCID-dj88-f3p8-cfbn
42
vulnerability VCID-dm97-51uu-r7gw
43
vulnerability VCID-dquc-7amf-e7cs
44
vulnerability VCID-dsu7-jjjq-f3e1
45
vulnerability VCID-e72u-tpc3-23g3
46
vulnerability VCID-e7sv-4xc2-m3d5
47
vulnerability VCID-eajg-ctpd-2bby
48
vulnerability VCID-ehzg-bzrd-kbcc
49
vulnerability VCID-ekfd-wp8z-d7e1
50
vulnerability VCID-ep6t-zwd1-4bb3
51
vulnerability VCID-euk5-hagy-xqfz
52
vulnerability VCID-f1rq-qudk-zkf2
53
vulnerability VCID-fber-yp9q-f7dr
54
vulnerability VCID-fqbx-7xyq-fkav
55
vulnerability VCID-fy3g-uegw-2bew
56
vulnerability VCID-gcnj-6qb6-pbgz
57
vulnerability VCID-gezz-pvpj-p3c6
58
vulnerability VCID-gspd-apwy-efgu
59
vulnerability VCID-h63t-9enx-qfdn
60
vulnerability VCID-h958-d3pm-kfcs
61
vulnerability VCID-he5m-6wj4-rbhc
62
vulnerability VCID-hpgq-deze-p7dp
63
vulnerability VCID-hv3n-j8ck-1ufx
64
vulnerability VCID-j77k-hjgx-5kc5
65
vulnerability VCID-jppe-cbgm-k3cz
66
vulnerability VCID-jqth-wfgx-87cx
67
vulnerability VCID-k4h1-mvnf-1ybx
68
vulnerability VCID-k8af-cg9k-87a9
69
vulnerability VCID-m3nf-1qbv-d3dj
70
vulnerability VCID-m7w6-b2xu-6uee
71
vulnerability VCID-mnz3-rj21-67ad
72
vulnerability VCID-mqbh-k9n3-nbed
73
vulnerability VCID-mqk6-z77g-bfdv
74
vulnerability VCID-mub5-s7h1-57cy
75
vulnerability VCID-n15v-ta9h-6ffb
76
vulnerability VCID-n61z-6v8a-hygf
77
vulnerability VCID-n78p-x7hh-gqcf
78
vulnerability VCID-nnh9-udcj-m7fv
79
vulnerability VCID-npn5-rand-q3dg
80
vulnerability VCID-nt6a-5zkv-pbcm
81
vulnerability VCID-nwxj-3ajk-rkh5
82
vulnerability VCID-p1u9-66hm-47er
83
vulnerability VCID-p545-vwe6-9kfr
84
vulnerability VCID-pk8d-8u15-5bfq
85
vulnerability VCID-pnfa-cksc-43de
86
vulnerability VCID-prbd-r82t-87dm
87
vulnerability VCID-px44-19tj-h7aa
88
vulnerability VCID-q8hy-wjd9-nbgp
89
vulnerability VCID-q9ak-qcq6-qfhy
90
vulnerability VCID-qb4j-9tz7-m7a2
91
vulnerability VCID-rdrs-mhaw-b3ge
92
vulnerability VCID-rg5d-d8nc-9qfu
93
vulnerability VCID-rzw5-8d1u-sfam
94
vulnerability VCID-s64f-x81f-b7ce
95
vulnerability VCID-shqd-udhm-pff8
96
vulnerability VCID-sr3p-pdxy-4yhu
97
vulnerability VCID-stzu-sxe6-5yf5
98
vulnerability VCID-t1n7-eswt-73gw
99
vulnerability VCID-t3jn-vwbx-u7cr
100
vulnerability VCID-tmrt-6fxw-5ugh
101
vulnerability VCID-tqf5-2fsm-8fch
102
vulnerability VCID-tw1y-t4qj-j3d1
103
vulnerability VCID-uckg-j48d-efad
104
vulnerability VCID-utpu-q2dv-m3hm
105
vulnerability VCID-vndb-w8e1-4ugv
106
vulnerability VCID-vrt1-aj9v-2kb6
107
vulnerability VCID-vxj6-wvyz-zbaq
108
vulnerability VCID-vxry-uvph-kbfd
109
vulnerability VCID-vybh-pxr3-17hn
110
vulnerability VCID-wea9-egep-h7g5
111
vulnerability VCID-wge3-kxdq-f3bz
112
vulnerability VCID-wr5t-xqnn-gkcj
113
vulnerability VCID-wxps-mnue-6bbh
114
vulnerability VCID-xa4m-xpa9-v7h8
115
vulnerability VCID-xh7y-56vy-5ud8
116
vulnerability VCID-xqew-bx7v-1qfk
117
vulnerability VCID-y32z-2d3f-gkgw
118
vulnerability VCID-zawz-vky5-tkgt
119
vulnerability VCID-zdq2-dhb2-6kaq
120
vulnerability VCID-zkea-ge1t-z7gn
121
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.0.0
2
url pkg:composer/typo3/cms@8.3.1
purl pkg:composer/typo3/cms@8.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18dg-eevv-3ug9
1
vulnerability VCID-1jcy-nx8g-z3d3
2
vulnerability VCID-1kae-ffj3-xyc7
3
vulnerability VCID-1qjx-grvf-y7bk
4
vulnerability VCID-28bf-jvah-zkhw
5
vulnerability VCID-2fs8-bscc-3ye2
6
vulnerability VCID-2meq-x4kd-bbdn
7
vulnerability VCID-3gg5-1921-rbfs
8
vulnerability VCID-3n2r-awja-dug9
9
vulnerability VCID-3v4n-fzxa-bfaw
10
vulnerability VCID-435j-f3yx-9yep
11
vulnerability VCID-4ack-haf2-cfbe
12
vulnerability VCID-4btk-jt5n-2ugf
13
vulnerability VCID-551q-gpyd-ffe8
14
vulnerability VCID-5jgb-dsyx-hyb4
15
vulnerability VCID-5paq-5frf-43ed
16
vulnerability VCID-5qfv-y43v-akdm
17
vulnerability VCID-5yg8-2cbr-d3as
18
vulnerability VCID-6487-15z5-pkd4
19
vulnerability VCID-6b5q-vzs3-pkcc
20
vulnerability VCID-9g62-zd1x-3bdg
21
vulnerability VCID-9gpp-ez8w-rqav
22
vulnerability VCID-axaf-45kr-kbfe
23
vulnerability VCID-bajy-qbwq-fufn
24
vulnerability VCID-bnne-7p2q-eqd2
25
vulnerability VCID-bxjw-7426-gyb8
26
vulnerability VCID-c2tm-eqmm-1ugt
27
vulnerability VCID-c6zq-cfg5-u7d9
28
vulnerability VCID-cm14-t8uv-k3es
29
vulnerability VCID-cmka-8484-27bu
30
vulnerability VCID-dbrh-t8zx-nkd9
31
vulnerability VCID-dj88-f3p8-cfbn
32
vulnerability VCID-dm97-51uu-r7gw
33
vulnerability VCID-dquc-7amf-e7cs
34
vulnerability VCID-dsu7-jjjq-f3e1
35
vulnerability VCID-e72u-tpc3-23g3
36
vulnerability VCID-e7sv-4xc2-m3d5
37
vulnerability VCID-eajg-ctpd-2bby
38
vulnerability VCID-ehzg-bzrd-kbcc
39
vulnerability VCID-ekfd-wp8z-d7e1
40
vulnerability VCID-ep6t-zwd1-4bb3
41
vulnerability VCID-euk5-hagy-xqfz
42
vulnerability VCID-fy3g-uegw-2bew
43
vulnerability VCID-gcnj-6qb6-pbgz
44
vulnerability VCID-h63t-9enx-qfdn
45
vulnerability VCID-he5m-6wj4-rbhc
46
vulnerability VCID-hpgq-deze-p7dp
47
vulnerability VCID-hv3n-j8ck-1ufx
48
vulnerability VCID-j77k-hjgx-5kc5
49
vulnerability VCID-jppe-cbgm-k3cz
50
vulnerability VCID-jqth-wfgx-87cx
51
vulnerability VCID-k4h1-mvnf-1ybx
52
vulnerability VCID-k8af-cg9k-87a9
53
vulnerability VCID-m7w6-b2xu-6uee
54
vulnerability VCID-mnz3-rj21-67ad
55
vulnerability VCID-mqbh-k9n3-nbed
56
vulnerability VCID-mub5-s7h1-57cy
57
vulnerability VCID-n15v-ta9h-6ffb
58
vulnerability VCID-n78p-x7hh-gqcf
59
vulnerability VCID-nnh9-udcj-m7fv
60
vulnerability VCID-nt6a-5zkv-pbcm
61
vulnerability VCID-nwxj-3ajk-rkh5
62
vulnerability VCID-pk8d-8u15-5bfq
63
vulnerability VCID-pnfa-cksc-43de
64
vulnerability VCID-prbd-r82t-87dm
65
vulnerability VCID-px44-19tj-h7aa
66
vulnerability VCID-q8hy-wjd9-nbgp
67
vulnerability VCID-q9ak-qcq6-qfhy
68
vulnerability VCID-qb4j-9tz7-m7a2
69
vulnerability VCID-rdrs-mhaw-b3ge
70
vulnerability VCID-rzw5-8d1u-sfam
71
vulnerability VCID-s64f-x81f-b7ce
72
vulnerability VCID-shqd-udhm-pff8
73
vulnerability VCID-sr3p-pdxy-4yhu
74
vulnerability VCID-stzu-sxe6-5yf5
75
vulnerability VCID-t1n7-eswt-73gw
76
vulnerability VCID-t3jn-vwbx-u7cr
77
vulnerability VCID-tgma-cyvk-97ay
78
vulnerability VCID-tmrt-6fxw-5ugh
79
vulnerability VCID-tqf5-2fsm-8fch
80
vulnerability VCID-tw1y-t4qj-j3d1
81
vulnerability VCID-uw2r-3gvq-bbcq
82
vulnerability VCID-vndb-w8e1-4ugv
83
vulnerability VCID-vrt1-aj9v-2kb6
84
vulnerability VCID-vxj6-wvyz-zbaq
85
vulnerability VCID-vxry-uvph-kbfd
86
vulnerability VCID-vybh-pxr3-17hn
87
vulnerability VCID-wea9-egep-h7g5
88
vulnerability VCID-wge3-kxdq-f3bz
89
vulnerability VCID-wr5t-xqnn-gkcj
90
vulnerability VCID-wxps-mnue-6bbh
91
vulnerability VCID-xa4m-xpa9-v7h8
92
vulnerability VCID-xh7y-56vy-5ud8
93
vulnerability VCID-xqew-bx7v-1qfk
94
vulnerability VCID-y32z-2d3f-gkgw
95
vulnerability VCID-zdq2-dhb2-6kaq
96
vulnerability VCID-zkea-ge1t-z7gn
97
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.3.1
aliases TYPO3-CORE-SA-2016-022
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-jqx9-41zx-dbcy
32
url VCID-kgcq-paqm-9ya6
vulnerability_id VCID-kgcq-paqm-9ya6
summary 
TYPO3 Brute Force Protection Bypass in backend login
The backend login has a basic brute force protection implementation which pauses for 5 seconds if wrong credentials are given. This pause however could be bypassed by forging a special request, making brute force attacks on backend editor credentials more feasible.
references
0
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2015-07-01-5.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2015-07-01-5.yaml
1
reference_url https://github.com/TYPO3/typo3
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3
2
reference_url https://github.com/TYPO3/typo3/commit/0b67290bbd941c07b0101bbfd6c7aadcbb93c75c
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/0b67290bbd941c07b0101bbfd6c7aadcbb93c75c
3
reference_url https://github.com/TYPO3/typo3/commit/0f3fb37674688aba5a44ca6f5df7f8a327a5b5f6
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/0f3fb37674688aba5a44ca6f5df7f8a327a5b5f6
4
reference_url https://typo3.org/security/advisory/typo3-core-sa-2015-006
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2015-006
5
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-006
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-006
6
reference_url https://github.com/advisories/GHSA-jqr8-q455-xx45
reference_id GHSA-jqr8-q455-xx45
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-jqr8-q455-xx45
fixed_packages
0
url pkg:composer/typo3/cms@7.3.1
purl pkg:composer/typo3/cms@7.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ng4-5tkh-g7h5
1
vulnerability VCID-28bf-jvah-zkhw
2
vulnerability VCID-2rhx-afay-97da
3
vulnerability VCID-5jgb-dsyx-hyb4
4
vulnerability VCID-5paq-5frf-43ed
5
vulnerability VCID-6b5q-vzs3-pkcc
6
vulnerability VCID-6pvx-1qan-ukef
7
vulnerability VCID-b5ht-z6zp-pbht
8
vulnerability VCID-bajy-qbwq-fufn
9
vulnerability VCID-bnne-7p2q-eqd2
10
vulnerability VCID-buax-rz7x-r7c2
11
vulnerability VCID-bxjw-7426-gyb8
12
vulnerability VCID-cczn-x8q7-k7ba
13
vulnerability VCID-cjgc-q6p5-2ydc
14
vulnerability VCID-ck23-cxn6-bbf3
15
vulnerability VCID-dbrh-t8zx-nkd9
16
vulnerability VCID-dm97-51uu-r7gw
17
vulnerability VCID-dsu7-jjjq-f3e1
18
vulnerability VCID-ehzg-bzrd-kbcc
19
vulnerability VCID-f4pm-9tq5-q3ch
20
vulnerability VCID-gcnj-6qb6-pbgz
21
vulnerability VCID-h958-d3pm-kfcs
22
vulnerability VCID-jmu3-5k7e-x7ch
23
vulnerability VCID-jqx9-41zx-dbcy
24
vulnerability VCID-kqbk-4q4z-nkec
25
vulnerability VCID-mnz3-rj21-67ad
26
vulnerability VCID-n15v-ta9h-6ffb
27
vulnerability VCID-n78p-x7hh-gqcf
28
vulnerability VCID-nwxj-3ajk-rkh5
29
vulnerability VCID-pgzu-kxuj-j3fh
30
vulnerability VCID-pk8d-8u15-5bfq
31
vulnerability VCID-q6dx-uskc-y3hs
32
vulnerability VCID-qemc-8kj8-r3cd
33
vulnerability VCID-rdrs-mhaw-b3ge
34
vulnerability VCID-sr3p-pdxy-4yhu
35
vulnerability VCID-t3jn-vwbx-u7cr
36
vulnerability VCID-tmrt-6fxw-5ugh
37
vulnerability VCID-tw1y-t4qj-j3d1
38
vulnerability VCID-vndb-w8e1-4ugv
39
vulnerability VCID-wr5t-xqnn-gkcj
40
vulnerability VCID-ww44-zmx7-47ft
41
vulnerability VCID-wxps-mnue-6bbh
42
vulnerability VCID-xa4m-xpa9-v7h8
43
vulnerability VCID-xqew-bx7v-1qfk
44
vulnerability VCID-y32z-2d3f-gkgw
45
vulnerability VCID-zdq2-dhb2-6kaq
46
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.3.1
aliases GHSA-jqr8-q455-xx45
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-kgcq-paqm-9ya6
33
url VCID-kpze-14jy-xud9
vulnerability_id VCID-kpze-14jy-xud9
summary 
Cross-site Scripting
Cross-Site Scripting exploitable by Editors.
references
0
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-004/
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-004/
fixed_packages
0
url pkg:composer/typo3/cms@7.3.0
purl pkg:composer/typo3/cms@7.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ng4-5tkh-g7h5
1
vulnerability VCID-28bf-jvah-zkhw
2
vulnerability VCID-2rhx-afay-97da
3
vulnerability VCID-5jgb-dsyx-hyb4
4
vulnerability VCID-5paq-5frf-43ed
5
vulnerability VCID-6b5q-vzs3-pkcc
6
vulnerability VCID-6gms-w48j-4ffh
7
vulnerability VCID-6pvx-1qan-ukef
8
vulnerability VCID-6spw-66jg-syb1
9
vulnerability VCID-7zx9-8afq-y3hc
10
vulnerability VCID-b5ht-z6zp-pbht
11
vulnerability VCID-bajy-qbwq-fufn
12
vulnerability VCID-bnne-7p2q-eqd2
13
vulnerability VCID-buax-rz7x-r7c2
14
vulnerability VCID-bxjw-7426-gyb8
15
vulnerability VCID-cczn-x8q7-k7ba
16
vulnerability VCID-cjgc-q6p5-2ydc
17
vulnerability VCID-ck23-cxn6-bbf3
18
vulnerability VCID-dbrh-t8zx-nkd9
19
vulnerability VCID-dm97-51uu-r7gw
20
vulnerability VCID-dsu7-jjjq-f3e1
21
vulnerability VCID-ehzg-bzrd-kbcc
22
vulnerability VCID-f4pm-9tq5-q3ch
23
vulnerability VCID-gcnj-6qb6-pbgz
24
vulnerability VCID-h958-d3pm-kfcs
25
vulnerability VCID-jmu3-5k7e-x7ch
26
vulnerability VCID-jqx9-41zx-dbcy
27
vulnerability VCID-kgcq-paqm-9ya6
28
vulnerability VCID-kqbk-4q4z-nkec
29
vulnerability VCID-mnz3-rj21-67ad
30
vulnerability VCID-n15v-ta9h-6ffb
31
vulnerability VCID-n78p-x7hh-gqcf
32
vulnerability VCID-nwxj-3ajk-rkh5
33
vulnerability VCID-pgzu-kxuj-j3fh
34
vulnerability VCID-pk8d-8u15-5bfq
35
vulnerability VCID-q6dx-uskc-y3hs
36
vulnerability VCID-qemc-8kj8-r3cd
37
vulnerability VCID-rdrs-mhaw-b3ge
38
vulnerability VCID-rwgf-2pfh-ufdz
39
vulnerability VCID-sr3p-pdxy-4yhu
40
vulnerability VCID-t3jn-vwbx-u7cr
41
vulnerability VCID-tmrt-6fxw-5ugh
42
vulnerability VCID-tw1y-t4qj-j3d1
43
vulnerability VCID-vndb-w8e1-4ugv
44
vulnerability VCID-wr5t-xqnn-gkcj
45
vulnerability VCID-ww44-zmx7-47ft
46
vulnerability VCID-wxps-mnue-6bbh
47
vulnerability VCID-xa4m-xpa9-v7h8
48
vulnerability VCID-xkpp-psz2-2kag
49
vulnerability VCID-xqew-bx7v-1qfk
50
vulnerability VCID-y32z-2d3f-gkgw
51
vulnerability VCID-zdq2-dhb2-6kaq
52
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.3.0
aliases 2015-07-01-3
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-kpze-14jy-xud9
34
url VCID-kqbk-4q4z-nkec
vulnerability_id VCID-kqbk-4q4z-nkec
summary 
Multiple Cross-Site Scripting vulnerabilities in frontend
Failing to properly encode editor input, several frontend components are susceptible to Cross-Site Scripting, allowing authenticated editors to inject arbitrary HTML.
references
0
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-013/
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-013/
fixed_packages
0
url pkg:composer/typo3/cms@7.6.1
purl pkg:composer/typo3/cms@7.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bnd-6xsq-nbec
1
vulnerability VCID-1jcy-nx8g-z3d3
2
vulnerability VCID-1qjx-grvf-y7bk
3
vulnerability VCID-25t3-1sm6-3kdn
4
vulnerability VCID-28bf-jvah-zkhw
5
vulnerability VCID-2fs8-bscc-3ye2
6
vulnerability VCID-3m53-kkk2-j7c2
7
vulnerability VCID-435j-f3yx-9yep
8
vulnerability VCID-47px-4d98-ubab
9
vulnerability VCID-5jgb-dsyx-hyb4
10
vulnerability VCID-5paq-5frf-43ed
11
vulnerability VCID-5ppt-avmb-cqb2
12
vulnerability VCID-6b5q-vzs3-pkcc
13
vulnerability VCID-6wsa-4ywc-8fh4
14
vulnerability VCID-7d1g-j3k5-gub8
15
vulnerability VCID-8jp8-a363-67be
16
vulnerability VCID-b715-6z6c-qqar
17
vulnerability VCID-bajy-qbwq-fufn
18
vulnerability VCID-bck9-34jp-6ydx
19
vulnerability VCID-bmj2-4k58-tqa4
20
vulnerability VCID-bnne-7p2q-eqd2
21
vulnerability VCID-bxjw-7426-gyb8
22
vulnerability VCID-c6zq-cfg5-u7d9
23
vulnerability VCID-dbrh-t8zx-nkd9
24
vulnerability VCID-dm97-51uu-r7gw
25
vulnerability VCID-dsu7-jjjq-f3e1
26
vulnerability VCID-ehzg-bzrd-kbcc
27
vulnerability VCID-ep6t-zwd1-4bb3
28
vulnerability VCID-f963-qur3-2qb7
29
vulnerability VCID-fber-yp9q-f7dr
30
vulnerability VCID-fqbx-7xyq-fkav
31
vulnerability VCID-fy3g-uegw-2bew
32
vulnerability VCID-g4ak-ertr-rya6
33
vulnerability VCID-gcnj-6qb6-pbgz
34
vulnerability VCID-gezz-pvpj-p3c6
35
vulnerability VCID-gspd-apwy-efgu
36
vulnerability VCID-h2dd-7b1r-k7bs
37
vulnerability VCID-h63t-9enx-qfdn
38
vulnerability VCID-h958-d3pm-kfcs
39
vulnerability VCID-hpgq-deze-p7dp
40
vulnerability VCID-hv3n-j8ck-1ufx
41
vulnerability VCID-jmu3-5k7e-x7ch
42
vulnerability VCID-jqth-wfgx-87cx
43
vulnerability VCID-jqx9-41zx-dbcy
44
vulnerability VCID-m3nf-1qbv-d3dj
45
vulnerability VCID-mhud-kq57-nka3
46
vulnerability VCID-mnz3-rj21-67ad
47
vulnerability VCID-mqbh-k9n3-nbed
48
vulnerability VCID-mqk6-z77g-bfdv
49
vulnerability VCID-mub5-s7h1-57cy
50
vulnerability VCID-n15v-ta9h-6ffb
51
vulnerability VCID-n61z-6v8a-hygf
52
vulnerability VCID-n78p-x7hh-gqcf
53
vulnerability VCID-nnh9-udcj-m7fv
54
vulnerability VCID-npn5-rand-q3dg
55
vulnerability VCID-nt6a-5zkv-pbcm
56
vulnerability VCID-nwxj-3ajk-rkh5
57
vulnerability VCID-p1u9-66hm-47er
58
vulnerability VCID-p545-vwe6-9kfr
59
vulnerability VCID-pk8d-8u15-5bfq
60
vulnerability VCID-pnfa-cksc-43de
61
vulnerability VCID-prbd-r82t-87dm
62
vulnerability VCID-q9ak-qcq6-qfhy
63
vulnerability VCID-rdrs-mhaw-b3ge
64
vulnerability VCID-rg5d-d8nc-9qfu
65
vulnerability VCID-rkms-w15c-4yb1
66
vulnerability VCID-rzw5-8d1u-sfam
67
vulnerability VCID-sr3p-pdxy-4yhu
68
vulnerability VCID-t3jn-vwbx-u7cr
69
vulnerability VCID-tmrt-6fxw-5ugh
70
vulnerability VCID-tw1y-t4qj-j3d1
71
vulnerability VCID-uckg-j48d-efad
72
vulnerability VCID-uj89-13ub-43fz
73
vulnerability VCID-utpu-q2dv-m3hm
74
vulnerability VCID-vndb-w8e1-4ugv
75
vulnerability VCID-vrt1-aj9v-2kb6
76
vulnerability VCID-w5pn-eb7y-1kdp
77
vulnerability VCID-wge3-kxdq-f3bz
78
vulnerability VCID-wq32-kgff-gke8
79
vulnerability VCID-wr5t-xqnn-gkcj
80
vulnerability VCID-wxps-mnue-6bbh
81
vulnerability VCID-xa4m-xpa9-v7h8
82
vulnerability VCID-xqew-bx7v-1qfk
83
vulnerability VCID-y32z-2d3f-gkgw
84
vulnerability VCID-z5qq-nwn5-tqgm
85
vulnerability VCID-zdq2-dhb2-6kaq
86
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.1
aliases TYPO3-CORE-SA-2015-013
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-kqbk-4q4z-nkec
35
url VCID-mnz3-rj21-67ad
vulnerability_id VCID-mnz3-rj21-67ad
summary 
TYPO3 CMS vulnerable to User Enumeration via Response Timing
> ### Meta
> * CVSS: `CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:F/RL:O/RC:C` (4.9)

### Problem
It has been discovered that observing response time during user authentication (backend and frontend) can be used to distinguish between existing and non-existing user accounts.

Extension authors of 3rd party TYPO3 extensions providing a custom authentication service should check if the extension is affected by the described problem. Affected extensions must implement new `MimicServiceInterface::mimicAuthUser`, which simulates corresponding times regular processing would usually take.

### Solution
Update to TYPO3 version 7.6.58 ELTS, 8.7.48 ELTS, 9.5.37 ELTS, 10.4.32 or 11.5.16 that fix the problem described above.

### Credits
Thanks to Vautia who reported this issue and to TYPO3 core & security team members Oliver Hader who fixed the issue.

### References
* [TYPO3-CORE-SA-2022-007](https://typo3.org/security/advisory/typo3-core-sa-2022-007)
* [Vulnerability Report on huntr.dev](https://huntr.dev/bounties/7d519735-2877-4fad-bd77-accde3e290a7/) (embargoed +30 days)
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-36105
reference_id
reference_type
scores
0
value 0.00283
scoring_system epss
scoring_elements 0.51649
published_at 2026-04-02T12:55:00Z
1
value 0.00283
scoring_system epss
scoring_elements 0.51712
published_at 2026-04-12T12:55:00Z
2
value 0.00283
scoring_system epss
scoring_elements 0.51734
published_at 2026-04-11T12:55:00Z
3
value 0.00283
scoring_system epss
scoring_elements 0.51685
published_at 2026-04-09T12:55:00Z
4
value 0.00283
scoring_system epss
scoring_elements 0.51689
published_at 2026-04-08T12:55:00Z
5
value 0.00283
scoring_system epss
scoring_elements 0.51634
published_at 2026-04-07T12:55:00Z
6
value 0.00283
scoring_system epss
scoring_elements 0.51674
published_at 2026-04-04T12:55:00Z
7
value 0.00283
scoring_system epss
scoring_elements 0.51723
published_at 2026-04-21T12:55:00Z
8
value 0.00283
scoring_system epss
scoring_elements 0.51744
published_at 2026-04-18T12:55:00Z
9
value 0.00283
scoring_system epss
scoring_elements 0.51737
published_at 2026-04-16T12:55:00Z
10
value 0.00283
scoring_system epss
scoring_elements 0.51696
published_at 2026-04-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-36105
1
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2022-36105.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2022-36105.yaml
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2022-36105.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2022-36105.yaml
3
reference_url https://github.com/TYPO3/typo3
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3
4
reference_url https://github.com/TYPO3/typo3/commit/f0fc9c4cd7c38207c30dd158de53ee5d9d6f41a2
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/f0fc9c4cd7c38207c30dd158de53ee5d9d6f41a2
5
reference_url https://github.com/TYPO3/typo3/commit/f8b83ce15d4ea275a5a5e564e5d324242f7937b6
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T15:51:34Z/
url https://github.com/TYPO3/typo3/commit/f8b83ce15d4ea275a5a5e564e5d324242f7937b6
6
reference_url https://github.com/TYPO3/typo3/security/advisories/GHSA-m392-235j-9r7r
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T15:51:34Z/
url https://github.com/TYPO3/typo3/security/advisories/GHSA-m392-235j-9r7r
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-36105
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-36105
8
reference_url https://typo3.org/security/advisory/typo3-core-sa-2022-007
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T15:51:34Z/
url https://typo3.org/security/advisory/typo3-core-sa-2022-007
9
reference_url https://github.com/advisories/GHSA-m392-235j-9r7r
reference_id GHSA-m392-235j-9r7r
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-m392-235j-9r7r
fixed_packages
0
url pkg:composer/typo3/cms@10.4.32
purl pkg:composer/typo3/cms@10.4.32
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8sdd-b1bn-cuhx
1
vulnerability VCID-t1n7-eswt-73gw
2
vulnerability VCID-ve7g-8st5-wffb
3
vulnerability VCID-vyvy-y3cw-hbgr
4
vulnerability VCID-w13x-3rp9-wyej
5
vulnerability VCID-yj9g-uz1a-jkf2
6
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@10.4.32
1
url pkg:composer/typo3/cms@11.5.16
purl pkg:composer/typo3/cms@11.5.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8sdd-b1bn-cuhx
1
vulnerability VCID-t1n7-eswt-73gw
2
vulnerability VCID-ve7g-8st5-wffb
3
vulnerability VCID-vyvy-y3cw-hbgr
4
vulnerability VCID-w13x-3rp9-wyej
5
vulnerability VCID-yj9g-uz1a-jkf2
6
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@11.5.16
aliases CVE-2022-36105, GHSA-m392-235j-9r7r
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-mnz3-rj21-67ad
36
url VCID-n15v-ta9h-6ffb
vulnerability_id VCID-n15v-ta9h-6ffb
summary 
Inclusion of Sensitive Information in Log Files
TYPO3 is an open source PHP based web content management system. User credentials may been logged as plain-text. This occurs when explicitly using log level debug, which is not the default configuration. TYPO3 contain a patch for this vulnerability.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-32767
reference_id
reference_type
scores
0
value 0.00327
scoring_system epss
scoring_elements 0.55519
published_at 2026-04-01T12:55:00Z
1
value 0.00327
scoring_system epss
scoring_elements 0.5568
published_at 2026-04-21T12:55:00Z
2
value 0.00327
scoring_system epss
scoring_elements 0.55701
published_at 2026-04-18T12:55:00Z
3
value 0.00327
scoring_system epss
scoring_elements 0.55697
published_at 2026-04-16T12:55:00Z
4
value 0.00327
scoring_system epss
scoring_elements 0.55658
published_at 2026-04-13T12:55:00Z
5
value 0.00327
scoring_system epss
scoring_elements 0.55676
published_at 2026-04-12T12:55:00Z
6
value 0.00327
scoring_system epss
scoring_elements 0.55696
published_at 2026-04-11T12:55:00Z
7
value 0.00327
scoring_system epss
scoring_elements 0.55687
published_at 2026-04-09T12:55:00Z
8
value 0.00327
scoring_system epss
scoring_elements 0.55684
published_at 2026-04-08T12:55:00Z
9
value 0.00327
scoring_system epss
scoring_elements 0.55632
published_at 2026-04-07T12:55:00Z
10
value 0.00327
scoring_system epss
scoring_elements 0.55654
published_at 2026-04-04T12:55:00Z
11
value 0.00327
scoring_system epss
scoring_elements 0.5563
published_at 2026-04-02T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-32767
1
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-32767.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-32767.yaml
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-32767.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-32767.yaml
3
reference_url https://github.com/TYPO3/typo3
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3
4
reference_url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-34fr-fhqr-7235
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-34fr-fhqr-7235
5
reference_url https://github.com/TYPO3/typo3/commit/0b4950163b8919451964133febc65bcdfcec721c
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/0b4950163b8919451964133febc65bcdfcec721c
6
reference_url https://github.com/TYPO3/typo3/security/advisories/GHSA-34fr-fhqr-7235
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/security/advisories/GHSA-34fr-fhqr-7235
7
reference_url https://typo3.org/security/advisory/typo3-core-sa-2021-012
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2021-012
8
reference_url https://typo3.org/security/advisory/typo3-core-sa-2021-013
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2021-013
9
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-32767
reference_id CVE-2021-32767
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-32767
10
reference_url https://github.com/advisories/GHSA-34fr-fhqr-7235
reference_id GHSA-34fr-fhqr-7235
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-34fr-fhqr-7235
fixed_packages
0
url pkg:composer/typo3/cms@9.5.28
purl pkg:composer/typo3/cms@9.5.28
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5paq-5frf-43ed
1
vulnerability VCID-bajy-qbwq-fufn
2
vulnerability VCID-ekfd-wp8z-d7e1
3
vulnerability VCID-mnz3-rj21-67ad
4
vulnerability VCID-s64f-x81f-b7ce
5
vulnerability VCID-t1n7-eswt-73gw
6
vulnerability VCID-ve7g-8st5-wffb
7
vulnerability VCID-vyvy-y3cw-hbgr
8
vulnerability VCID-y32z-2d3f-gkgw
9
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.28
1
url pkg:composer/typo3/cms@10.4.18
purl pkg:composer/typo3/cms@10.4.18
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1yxw-saf5-wue7
1
vulnerability VCID-4jpa-6fqh-hbfg
2
vulnerability VCID-5paq-5frf-43ed
3
vulnerability VCID-8sdd-b1bn-cuhx
4
vulnerability VCID-av8u-rvzq-4fc7
5
vulnerability VCID-bajy-qbwq-fufn
6
vulnerability VCID-e32h-8q61-hbgc
7
vulnerability VCID-mnz3-rj21-67ad
8
vulnerability VCID-remd-55jh-r3g5
9
vulnerability VCID-s55j-8hbt-akhn
10
vulnerability VCID-t1n7-eswt-73gw
11
vulnerability VCID-ve7g-8st5-wffb
12
vulnerability VCID-vwb2-a84s-5qak
13
vulnerability VCID-vyvy-y3cw-hbgr
14
vulnerability VCID-w13x-3rp9-wyej
15
vulnerability VCID-y32z-2d3f-gkgw
16
vulnerability VCID-yj9g-uz1a-jkf2
17
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@10.4.18
2
url pkg:composer/typo3/cms@11.3.1
purl pkg:composer/typo3/cms@11.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1yxw-saf5-wue7
1
vulnerability VCID-4jpa-6fqh-hbfg
2
vulnerability VCID-5paq-5frf-43ed
3
vulnerability VCID-8sdd-b1bn-cuhx
4
vulnerability VCID-av8u-rvzq-4fc7
5
vulnerability VCID-bajy-qbwq-fufn
6
vulnerability VCID-e32h-8q61-hbgc
7
vulnerability VCID-jjbn-6efk-nud2
8
vulnerability VCID-mnz3-rj21-67ad
9
vulnerability VCID-remd-55jh-r3g5
10
vulnerability VCID-s55j-8hbt-akhn
11
vulnerability VCID-t1n7-eswt-73gw
12
vulnerability VCID-uyeu-a3xr-fkh4
13
vulnerability VCID-ve7g-8st5-wffb
14
vulnerability VCID-vwb2-a84s-5qak
15
vulnerability VCID-vyvy-y3cw-hbgr
16
vulnerability VCID-w13x-3rp9-wyej
17
vulnerability VCID-y32z-2d3f-gkgw
18
vulnerability VCID-yj9g-uz1a-jkf2
19
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@11.3.1
aliases CVE-2021-32767, GHSA-34fr-fhqr-7235
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-n15v-ta9h-6ffb
37
url VCID-n78p-x7hh-gqcf
vulnerability_id VCID-n78p-x7hh-gqcf
summary Information Disclosure in Install Tool.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-010/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2018-010/
fixed_packages
0
url pkg:composer/typo3/cms@7.6.32
purl pkg:composer/typo3/cms@7.6.32
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5jgb-dsyx-hyb4
1
vulnerability VCID-5paq-5frf-43ed
2
vulnerability VCID-bajy-qbwq-fufn
3
vulnerability VCID-dsu7-jjjq-f3e1
4
vulnerability VCID-f963-qur3-2qb7
5
vulnerability VCID-gcnj-6qb6-pbgz
6
vulnerability VCID-mnz3-rj21-67ad
7
vulnerability VCID-n15v-ta9h-6ffb
8
vulnerability VCID-t3jn-vwbx-u7cr
9
vulnerability VCID-xa4m-xpa9-v7h8
10
vulnerability VCID-y32z-2d3f-gkgw
11
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.32
1
url pkg:composer/typo3/cms@8.7.21
purl pkg:composer/typo3/cms@8.7.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18dg-eevv-3ug9
1
vulnerability VCID-1kae-ffj3-xyc7
2
vulnerability VCID-2meq-x4kd-bbdn
3
vulnerability VCID-3n2r-awja-dug9
4
vulnerability VCID-3v4n-fzxa-bfaw
5
vulnerability VCID-4ack-haf2-cfbe
6
vulnerability VCID-551q-gpyd-ffe8
7
vulnerability VCID-5jgb-dsyx-hyb4
8
vulnerability VCID-5paq-5frf-43ed
9
vulnerability VCID-5qfv-y43v-akdm
10
vulnerability VCID-6487-15z5-pkd4
11
vulnerability VCID-9g62-zd1x-3bdg
12
vulnerability VCID-9gpp-ez8w-rqav
13
vulnerability VCID-axaf-45kr-kbfe
14
vulnerability VCID-bajy-qbwq-fufn
15
vulnerability VCID-c2tm-eqmm-1ugt
16
vulnerability VCID-cm14-t8uv-k3es
17
vulnerability VCID-cmka-8484-27bu
18
vulnerability VCID-dj88-f3p8-cfbn
19
vulnerability VCID-dsu7-jjjq-f3e1
20
vulnerability VCID-e72u-tpc3-23g3
21
vulnerability VCID-eajg-ctpd-2bby
22
vulnerability VCID-ekfd-wp8z-d7e1
23
vulnerability VCID-f963-qur3-2qb7
24
vulnerability VCID-gcnj-6qb6-pbgz
25
vulnerability VCID-he5m-6wj4-rbhc
26
vulnerability VCID-j77k-hjgx-5kc5
27
vulnerability VCID-jppe-cbgm-k3cz
28
vulnerability VCID-k4h1-mvnf-1ybx
29
vulnerability VCID-k8af-cg9k-87a9
30
vulnerability VCID-m7w6-b2xu-6uee
31
vulnerability VCID-mnz3-rj21-67ad
32
vulnerability VCID-n15v-ta9h-6ffb
33
vulnerability VCID-px44-19tj-h7aa
34
vulnerability VCID-q8hy-wjd9-nbgp
35
vulnerability VCID-s64f-x81f-b7ce
36
vulnerability VCID-shqd-udhm-pff8
37
vulnerability VCID-stzu-sxe6-5yf5
38
vulnerability VCID-t1n7-eswt-73gw
39
vulnerability VCID-t3jn-vwbx-u7cr
40
vulnerability VCID-tqf5-2fsm-8fch
41
vulnerability VCID-vxj6-wvyz-zbaq
42
vulnerability VCID-vxry-uvph-kbfd
43
vulnerability VCID-vybh-pxr3-17hn
44
vulnerability VCID-vyvy-y3cw-hbgr
45
vulnerability VCID-wea9-egep-h7g5
46
vulnerability VCID-xa4m-xpa9-v7h8
47
vulnerability VCID-xh7y-56vy-5ud8
48
vulnerability VCID-y32z-2d3f-gkgw
49
vulnerability VCID-zdq2-dhb2-6kaq
50
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.21
2
url pkg:composer/typo3/cms@9.5.2
purl pkg:composer/typo3/cms@9.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18dg-eevv-3ug9
1
vulnerability VCID-1kae-ffj3-xyc7
2
vulnerability VCID-2meq-x4kd-bbdn
3
vulnerability VCID-2mn6-mdmz-4yd9
4
vulnerability VCID-3n2r-awja-dug9
5
vulnerability VCID-3v4n-fzxa-bfaw
6
vulnerability VCID-4ack-haf2-cfbe
7
vulnerability VCID-4mkw-tv16-jyca
8
vulnerability VCID-543x-cnbz-1kb9
9
vulnerability VCID-551q-gpyd-ffe8
10
vulnerability VCID-58js-jzm4-4fc7
11
vulnerability VCID-5jgb-dsyx-hyb4
12
vulnerability VCID-5kzs-ex81-bbaj
13
vulnerability VCID-5paq-5frf-43ed
14
vulnerability VCID-6487-15z5-pkd4
15
vulnerability VCID-6a9t-8dmn-s3bv
16
vulnerability VCID-9g62-zd1x-3bdg
17
vulnerability VCID-9gpp-ez8w-rqav
18
vulnerability VCID-a49c-fqrj-nbb3
19
vulnerability VCID-anfj-pmkg-skhe
20
vulnerability VCID-axaf-45kr-kbfe
21
vulnerability VCID-bajy-qbwq-fufn
22
vulnerability VCID-c2tm-eqmm-1ugt
23
vulnerability VCID-cm14-t8uv-k3es
24
vulnerability VCID-cmka-8484-27bu
25
vulnerability VCID-d8d1-sat6-muhe
26
vulnerability VCID-dcy2-efyc-6qgq
27
vulnerability VCID-dj88-f3p8-cfbn
28
vulnerability VCID-dsu7-jjjq-f3e1
29
vulnerability VCID-e72u-tpc3-23g3
30
vulnerability VCID-eajg-ctpd-2bby
31
vulnerability VCID-ekfd-wp8z-d7e1
32
vulnerability VCID-f963-qur3-2qb7
33
vulnerability VCID-gcnj-6qb6-pbgz
34
vulnerability VCID-he5m-6wj4-rbhc
35
vulnerability VCID-jppe-cbgm-k3cz
36
vulnerability VCID-k4h1-mvnf-1ybx
37
vulnerability VCID-k8af-cg9k-87a9
38
vulnerability VCID-kc67-7kf7-s3d7
39
vulnerability VCID-kj9x-psfz-2ug1
40
vulnerability VCID-m7w6-b2xu-6uee
41
vulnerability VCID-mnz3-rj21-67ad
42
vulnerability VCID-n15v-ta9h-6ffb
43
vulnerability VCID-p715-yexd-jfgc
44
vulnerability VCID-phgh-sd4m-zbdx
45
vulnerability VCID-px44-19tj-h7aa
46
vulnerability VCID-q8hy-wjd9-nbgp
47
vulnerability VCID-raxk-rm9v-hubn
48
vulnerability VCID-s64f-x81f-b7ce
49
vulnerability VCID-shqd-udhm-pff8
50
vulnerability VCID-stzu-sxe6-5yf5
51
vulnerability VCID-sw7v-fbjk-13hy
52
vulnerability VCID-t1n7-eswt-73gw
53
vulnerability VCID-t3jn-vwbx-u7cr
54
vulnerability VCID-tqf5-2fsm-8fch
55
vulnerability VCID-u9bx-8e86-wbew
56
vulnerability VCID-ve7g-8st5-wffb
57
vulnerability VCID-vxj6-wvyz-zbaq
58
vulnerability VCID-vxry-uvph-kbfd
59
vulnerability VCID-vybh-pxr3-17hn
60
vulnerability VCID-vyvy-y3cw-hbgr
61
vulnerability VCID-wea9-egep-h7g5
62
vulnerability VCID-xa4m-xpa9-v7h8
63
vulnerability VCID-xh7y-56vy-5ud8
64
vulnerability VCID-xtdg-uj46-rkcm
65
vulnerability VCID-xwc2-z7hx-4qa7
66
vulnerability VCID-y32z-2d3f-gkgw
67
vulnerability VCID-zdq2-dhb2-6kaq
68
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.2
aliases 2018-12-11-5
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-n78p-x7hh-gqcf
38
url VCID-ne8w-dpjw-7qf1
vulnerability_id VCID-ne8w-dpjw-7qf1
summary 
Improper Access Control
Access bypass when editing file metadata.
references
0
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-002/
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-002/
fixed_packages
0
url pkg:composer/typo3/cms@7.3.0
purl pkg:composer/typo3/cms@7.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ng4-5tkh-g7h5
1
vulnerability VCID-28bf-jvah-zkhw
2
vulnerability VCID-2rhx-afay-97da
3
vulnerability VCID-5jgb-dsyx-hyb4
4
vulnerability VCID-5paq-5frf-43ed
5
vulnerability VCID-6b5q-vzs3-pkcc
6
vulnerability VCID-6gms-w48j-4ffh
7
vulnerability VCID-6pvx-1qan-ukef
8
vulnerability VCID-6spw-66jg-syb1
9
vulnerability VCID-7zx9-8afq-y3hc
10
vulnerability VCID-b5ht-z6zp-pbht
11
vulnerability VCID-bajy-qbwq-fufn
12
vulnerability VCID-bnne-7p2q-eqd2
13
vulnerability VCID-buax-rz7x-r7c2
14
vulnerability VCID-bxjw-7426-gyb8
15
vulnerability VCID-cczn-x8q7-k7ba
16
vulnerability VCID-cjgc-q6p5-2ydc
17
vulnerability VCID-ck23-cxn6-bbf3
18
vulnerability VCID-dbrh-t8zx-nkd9
19
vulnerability VCID-dm97-51uu-r7gw
20
vulnerability VCID-dsu7-jjjq-f3e1
21
vulnerability VCID-ehzg-bzrd-kbcc
22
vulnerability VCID-f4pm-9tq5-q3ch
23
vulnerability VCID-gcnj-6qb6-pbgz
24
vulnerability VCID-h958-d3pm-kfcs
25
vulnerability VCID-jmu3-5k7e-x7ch
26
vulnerability VCID-jqx9-41zx-dbcy
27
vulnerability VCID-kgcq-paqm-9ya6
28
vulnerability VCID-kqbk-4q4z-nkec
29
vulnerability VCID-mnz3-rj21-67ad
30
vulnerability VCID-n15v-ta9h-6ffb
31
vulnerability VCID-n78p-x7hh-gqcf
32
vulnerability VCID-nwxj-3ajk-rkh5
33
vulnerability VCID-pgzu-kxuj-j3fh
34
vulnerability VCID-pk8d-8u15-5bfq
35
vulnerability VCID-q6dx-uskc-y3hs
36
vulnerability VCID-qemc-8kj8-r3cd
37
vulnerability VCID-rdrs-mhaw-b3ge
38
vulnerability VCID-rwgf-2pfh-ufdz
39
vulnerability VCID-sr3p-pdxy-4yhu
40
vulnerability VCID-t3jn-vwbx-u7cr
41
vulnerability VCID-tmrt-6fxw-5ugh
42
vulnerability VCID-tw1y-t4qj-j3d1
43
vulnerability VCID-vndb-w8e1-4ugv
44
vulnerability VCID-wr5t-xqnn-gkcj
45
vulnerability VCID-ww44-zmx7-47ft
46
vulnerability VCID-wxps-mnue-6bbh
47
vulnerability VCID-xa4m-xpa9-v7h8
48
vulnerability VCID-xkpp-psz2-2kag
49
vulnerability VCID-xqew-bx7v-1qfk
50
vulnerability VCID-y32z-2d3f-gkgw
51
vulnerability VCID-zdq2-dhb2-6kaq
52
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.3.0
aliases 2015-07-01-1
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ne8w-dpjw-7qf1
39
url VCID-nwxj-3ajk-rkh5
vulnerability_id VCID-nwxj-3ajk-rkh5
summary 
Cross-site Scripting
The page module in TYPO3 is vulnerable to XSS via `$GLOBALS['TYPO3_CONF_VARS']['SYS']['sitename']`, as demonstrated by an admin entering a crafted site name during the installation process.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-6905
reference_id
reference_type
scores
0
value 0.02274
scoring_system epss
scoring_elements 0.84681
published_at 2026-04-21T12:55:00Z
1
value 0.02274
scoring_system epss
scoring_elements 0.84584
published_at 2026-04-01T12:55:00Z
2
value 0.02274
scoring_system epss
scoring_elements 0.84599
published_at 2026-04-02T12:55:00Z
3
value 0.02274
scoring_system epss
scoring_elements 0.84619
published_at 2026-04-04T12:55:00Z
4
value 0.02274
scoring_system epss
scoring_elements 0.84621
published_at 2026-04-07T12:55:00Z
5
value 0.02274
scoring_system epss
scoring_elements 0.84642
published_at 2026-04-08T12:55:00Z
6
value 0.02274
scoring_system epss
scoring_elements 0.84649
published_at 2026-04-09T12:55:00Z
7
value 0.02274
scoring_system epss
scoring_elements 0.84666
published_at 2026-04-11T12:55:00Z
8
value 0.02274
scoring_system epss
scoring_elements 0.84662
published_at 2026-04-12T12:55:00Z
9
value 0.02274
scoring_system epss
scoring_elements 0.84657
published_at 2026-04-13T12:55:00Z
10
value 0.02274
scoring_system epss
scoring_elements 0.84678
published_at 2026-04-16T12:55:00Z
11
value 0.02274
scoring_system epss
scoring_elements 0.84679
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-6905
1
reference_url https://forge.typo3.org/issues/84191
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://forge.typo3.org/issues/84191
2
reference_url https://github.com/pradeepjairamani/TYPO3-XSS-POC
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pradeepjairamani/TYPO3-XSS-POC
3
reference_url https://github.com/TYPO3/typo3/commit/d2c0ea7db3b31a796a82f9d39f77f9983beb7c35
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/d2c0ea7db3b31a796a82f9d39f77f9983beb7c35
4
reference_url http://www.securitytracker.com/id/1040755
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.securitytracker.com/id/1040755
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-6905
reference_id CVE-2018-6905
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-6905
6
reference_url https://github.com/advisories/GHSA-3w22-wrwx-2r75
reference_id GHSA-3w22-wrwx-2r75
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-3w22-wrwx-2r75
fixed_packages
0
url pkg:composer/typo3/cms@8.7.11
purl pkg:composer/typo3/cms@8.7.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18dg-eevv-3ug9
1
vulnerability VCID-1jp6-qjpr-xfev
2
vulnerability VCID-1kae-ffj3-xyc7
3
vulnerability VCID-28bf-jvah-zkhw
4
vulnerability VCID-2meq-x4kd-bbdn
5
vulnerability VCID-3gg5-1921-rbfs
6
vulnerability VCID-3n2r-awja-dug9
7
vulnerability VCID-3v4n-fzxa-bfaw
8
vulnerability VCID-4ack-haf2-cfbe
9
vulnerability VCID-4btk-jt5n-2ugf
10
vulnerability VCID-551q-gpyd-ffe8
11
vulnerability VCID-5jgb-dsyx-hyb4
12
vulnerability VCID-5paq-5frf-43ed
13
vulnerability VCID-5qfv-y43v-akdm
14
vulnerability VCID-6487-15z5-pkd4
15
vulnerability VCID-6b5q-vzs3-pkcc
16
vulnerability VCID-9g62-zd1x-3bdg
17
vulnerability VCID-9gpp-ez8w-rqav
18
vulnerability VCID-9jj4-ec9n-qbhs
19
vulnerability VCID-axaf-45kr-kbfe
20
vulnerability VCID-bajy-qbwq-fufn
21
vulnerability VCID-bnne-7p2q-eqd2
22
vulnerability VCID-bxjw-7426-gyb8
23
vulnerability VCID-byp6-edft-fbhm
24
vulnerability VCID-c2tm-eqmm-1ugt
25
vulnerability VCID-cm14-t8uv-k3es
26
vulnerability VCID-cmka-8484-27bu
27
vulnerability VCID-dbrh-t8zx-nkd9
28
vulnerability VCID-dj88-f3p8-cfbn
29
vulnerability VCID-dm97-51uu-r7gw
30
vulnerability VCID-dsu7-jjjq-f3e1
31
vulnerability VCID-e72u-tpc3-23g3
32
vulnerability VCID-eajg-ctpd-2bby
33
vulnerability VCID-ehzg-bzrd-kbcc
34
vulnerability VCID-ekfd-wp8z-d7e1
35
vulnerability VCID-f963-qur3-2qb7
36
vulnerability VCID-gcnj-6qb6-pbgz
37
vulnerability VCID-he5m-6wj4-rbhc
38
vulnerability VCID-j77k-hjgx-5kc5
39
vulnerability VCID-jppe-cbgm-k3cz
40
vulnerability VCID-k4h1-mvnf-1ybx
41
vulnerability VCID-k8af-cg9k-87a9
42
vulnerability VCID-m7w6-b2xu-6uee
43
vulnerability VCID-mnz3-rj21-67ad
44
vulnerability VCID-n15v-ta9h-6ffb
45
vulnerability VCID-n78p-x7hh-gqcf
46
vulnerability VCID-pk8d-8u15-5bfq
47
vulnerability VCID-px44-19tj-h7aa
48
vulnerability VCID-q8hy-wjd9-nbgp
49
vulnerability VCID-qb4j-9tz7-m7a2
50
vulnerability VCID-rdrs-mhaw-b3ge
51
vulnerability VCID-s64f-x81f-b7ce
52
vulnerability VCID-shqd-udhm-pff8
53
vulnerability VCID-sr3p-pdxy-4yhu
54
vulnerability VCID-stzu-sxe6-5yf5
55
vulnerability VCID-t1n7-eswt-73gw
56
vulnerability VCID-t3jn-vwbx-u7cr
57
vulnerability VCID-tmrt-6fxw-5ugh
58
vulnerability VCID-tqf5-2fsm-8fch
59
vulnerability VCID-tw1y-t4qj-j3d1
60
vulnerability VCID-vndb-w8e1-4ugv
61
vulnerability VCID-vxj6-wvyz-zbaq
62
vulnerability VCID-vxry-uvph-kbfd
63
vulnerability VCID-vybh-pxr3-17hn
64
vulnerability VCID-vyvy-y3cw-hbgr
65
vulnerability VCID-wea9-egep-h7g5
66
vulnerability VCID-wkm6-cgc8-bfa8
67
vulnerability VCID-wr5t-xqnn-gkcj
68
vulnerability VCID-wxps-mnue-6bbh
69
vulnerability VCID-xa4m-xpa9-v7h8
70
vulnerability VCID-xh7y-56vy-5ud8
71
vulnerability VCID-xqew-bx7v-1qfk
72
vulnerability VCID-y32z-2d3f-gkgw
73
vulnerability VCID-zdq2-dhb2-6kaq
74
vulnerability VCID-zkea-ge1t-z7gn
75
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.11
1
url pkg:composer/typo3/cms@9.1.0
purl pkg:composer/typo3/cms@9.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18dg-eevv-3ug9
1
vulnerability VCID-1jp6-qjpr-xfev
2
vulnerability VCID-1kae-ffj3-xyc7
3
vulnerability VCID-28bf-jvah-zkhw
4
vulnerability VCID-2meq-x4kd-bbdn
5
vulnerability VCID-2mn6-mdmz-4yd9
6
vulnerability VCID-3gg5-1921-rbfs
7
vulnerability VCID-3n2r-awja-dug9
8
vulnerability VCID-3v4n-fzxa-bfaw
9
vulnerability VCID-4ack-haf2-cfbe
10
vulnerability VCID-4btk-jt5n-2ugf
11
vulnerability VCID-4mkw-tv16-jyca
12
vulnerability VCID-543x-cnbz-1kb9
13
vulnerability VCID-551q-gpyd-ffe8
14
vulnerability VCID-58js-jzm4-4fc7
15
vulnerability VCID-5jgb-dsyx-hyb4
16
vulnerability VCID-5kzs-ex81-bbaj
17
vulnerability VCID-5paq-5frf-43ed
18
vulnerability VCID-6487-15z5-pkd4
19
vulnerability VCID-6a9t-8dmn-s3bv
20
vulnerability VCID-6b5q-vzs3-pkcc
21
vulnerability VCID-9g62-zd1x-3bdg
22
vulnerability VCID-9gpp-ez8w-rqav
23
vulnerability VCID-9jj4-ec9n-qbhs
24
vulnerability VCID-a49c-fqrj-nbb3
25
vulnerability VCID-anfj-pmkg-skhe
26
vulnerability VCID-axaf-45kr-kbfe
27
vulnerability VCID-bajy-qbwq-fufn
28
vulnerability VCID-bnne-7p2q-eqd2
29
vulnerability VCID-bxjw-7426-gyb8
30
vulnerability VCID-byp6-edft-fbhm
31
vulnerability VCID-c2tm-eqmm-1ugt
32
vulnerability VCID-cm14-t8uv-k3es
33
vulnerability VCID-cmka-8484-27bu
34
vulnerability VCID-d8d1-sat6-muhe
35
vulnerability VCID-dbrh-t8zx-nkd9
36
vulnerability VCID-dcy2-efyc-6qgq
37
vulnerability VCID-dj88-f3p8-cfbn
38
vulnerability VCID-dm97-51uu-r7gw
39
vulnerability VCID-dsu7-jjjq-f3e1
40
vulnerability VCID-e72u-tpc3-23g3
41
vulnerability VCID-eajg-ctpd-2bby
42
vulnerability VCID-ekfd-wp8z-d7e1
43
vulnerability VCID-f963-qur3-2qb7
44
vulnerability VCID-gcnj-6qb6-pbgz
45
vulnerability VCID-he5m-6wj4-rbhc
46
vulnerability VCID-jppe-cbgm-k3cz
47
vulnerability VCID-k4h1-mvnf-1ybx
48
vulnerability VCID-k8af-cg9k-87a9
49
vulnerability VCID-kc67-7kf7-s3d7
50
vulnerability VCID-kj9x-psfz-2ug1
51
vulnerability VCID-m7w6-b2xu-6uee
52
vulnerability VCID-mnz3-rj21-67ad
53
vulnerability VCID-n15v-ta9h-6ffb
54
vulnerability VCID-n78p-x7hh-gqcf
55
vulnerability VCID-p715-yexd-jfgc
56
vulnerability VCID-phgh-sd4m-zbdx
57
vulnerability VCID-pk8d-8u15-5bfq
58
vulnerability VCID-px44-19tj-h7aa
59
vulnerability VCID-q8hy-wjd9-nbgp
60
vulnerability VCID-qb4j-9tz7-m7a2
61
vulnerability VCID-raxk-rm9v-hubn
62
vulnerability VCID-rdrs-mhaw-b3ge
63
vulnerability VCID-s64f-x81f-b7ce
64
vulnerability VCID-shqd-udhm-pff8
65
vulnerability VCID-sr3p-pdxy-4yhu
66
vulnerability VCID-stzu-sxe6-5yf5
67
vulnerability VCID-sw7v-fbjk-13hy
68
vulnerability VCID-t1n7-eswt-73gw
69
vulnerability VCID-t3jn-vwbx-u7cr
70
vulnerability VCID-tmrt-6fxw-5ugh
71
vulnerability VCID-tqf5-2fsm-8fch
72
vulnerability VCID-tw1y-t4qj-j3d1
73
vulnerability VCID-u9bx-8e86-wbew
74
vulnerability VCID-ve7g-8st5-wffb
75
vulnerability VCID-vndb-w8e1-4ugv
76
vulnerability VCID-vxj6-wvyz-zbaq
77
vulnerability VCID-vxry-uvph-kbfd
78
vulnerability VCID-vybh-pxr3-17hn
79
vulnerability VCID-vyvy-y3cw-hbgr
80
vulnerability VCID-wea9-egep-h7g5
81
vulnerability VCID-wkm6-cgc8-bfa8
82
vulnerability VCID-wr5t-xqnn-gkcj
83
vulnerability VCID-wxps-mnue-6bbh
84
vulnerability VCID-xa4m-xpa9-v7h8
85
vulnerability VCID-xh7y-56vy-5ud8
86
vulnerability VCID-xtdg-uj46-rkcm
87
vulnerability VCID-xwc2-z7hx-4qa7
88
vulnerability VCID-y32z-2d3f-gkgw
89
vulnerability VCID-zdq2-dhb2-6kaq
90
vulnerability VCID-zkea-ge1t-z7gn
91
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.1.0
2
url pkg:composer/typo3/cms@9.2.0
purl pkg:composer/typo3/cms@9.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18dg-eevv-3ug9
1
vulnerability VCID-1jp6-qjpr-xfev
2
vulnerability VCID-1kae-ffj3-xyc7
3
vulnerability VCID-28bf-jvah-zkhw
4
vulnerability VCID-2meq-x4kd-bbdn
5
vulnerability VCID-2mn6-mdmz-4yd9
6
vulnerability VCID-3gg5-1921-rbfs
7
vulnerability VCID-3n2r-awja-dug9
8
vulnerability VCID-3v4n-fzxa-bfaw
9
vulnerability VCID-4ack-haf2-cfbe
10
vulnerability VCID-4btk-jt5n-2ugf
11
vulnerability VCID-4mkw-tv16-jyca
12
vulnerability VCID-543x-cnbz-1kb9
13
vulnerability VCID-551q-gpyd-ffe8
14
vulnerability VCID-58js-jzm4-4fc7
15
vulnerability VCID-5jgb-dsyx-hyb4
16
vulnerability VCID-5kzs-ex81-bbaj
17
vulnerability VCID-5paq-5frf-43ed
18
vulnerability VCID-6487-15z5-pkd4
19
vulnerability VCID-6a9t-8dmn-s3bv
20
vulnerability VCID-6b5q-vzs3-pkcc
21
vulnerability VCID-9g62-zd1x-3bdg
22
vulnerability VCID-9gpp-ez8w-rqav
23
vulnerability VCID-9jj4-ec9n-qbhs
24
vulnerability VCID-a49c-fqrj-nbb3
25
vulnerability VCID-anfj-pmkg-skhe
26
vulnerability VCID-axaf-45kr-kbfe
27
vulnerability VCID-bajy-qbwq-fufn
28
vulnerability VCID-bnne-7p2q-eqd2
29
vulnerability VCID-bxjw-7426-gyb8
30
vulnerability VCID-byp6-edft-fbhm
31
vulnerability VCID-c2tm-eqmm-1ugt
32
vulnerability VCID-cm14-t8uv-k3es
33
vulnerability VCID-cmka-8484-27bu
34
vulnerability VCID-d8d1-sat6-muhe
35
vulnerability VCID-dbrh-t8zx-nkd9
36
vulnerability VCID-dcy2-efyc-6qgq
37
vulnerability VCID-dj88-f3p8-cfbn
38
vulnerability VCID-dm97-51uu-r7gw
39
vulnerability VCID-dsu7-jjjq-f3e1
40
vulnerability VCID-e72u-tpc3-23g3
41
vulnerability VCID-eajg-ctpd-2bby
42
vulnerability VCID-ekfd-wp8z-d7e1
43
vulnerability VCID-f963-qur3-2qb7
44
vulnerability VCID-gcnj-6qb6-pbgz
45
vulnerability VCID-he5m-6wj4-rbhc
46
vulnerability VCID-jppe-cbgm-k3cz
47
vulnerability VCID-k4h1-mvnf-1ybx
48
vulnerability VCID-k8af-cg9k-87a9
49
vulnerability VCID-kc67-7kf7-s3d7
50
vulnerability VCID-kj9x-psfz-2ug1
51
vulnerability VCID-m7w6-b2xu-6uee
52
vulnerability VCID-mnz3-rj21-67ad
53
vulnerability VCID-n15v-ta9h-6ffb
54
vulnerability VCID-n78p-x7hh-gqcf
55
vulnerability VCID-p715-yexd-jfgc
56
vulnerability VCID-phgh-sd4m-zbdx
57
vulnerability VCID-pk8d-8u15-5bfq
58
vulnerability VCID-px44-19tj-h7aa
59
vulnerability VCID-q8hy-wjd9-nbgp
60
vulnerability VCID-qb4j-9tz7-m7a2
61
vulnerability VCID-raxk-rm9v-hubn
62
vulnerability VCID-rdrs-mhaw-b3ge
63
vulnerability VCID-s64f-x81f-b7ce
64
vulnerability VCID-shqd-udhm-pff8
65
vulnerability VCID-sr3p-pdxy-4yhu
66
vulnerability VCID-stzu-sxe6-5yf5
67
vulnerability VCID-sw7v-fbjk-13hy
68
vulnerability VCID-t1n7-eswt-73gw
69
vulnerability VCID-t3jn-vwbx-u7cr
70
vulnerability VCID-tmrt-6fxw-5ugh
71
vulnerability VCID-tqf5-2fsm-8fch
72
vulnerability VCID-tw1y-t4qj-j3d1
73
vulnerability VCID-u9bx-8e86-wbew
74
vulnerability VCID-ve7g-8st5-wffb
75
vulnerability VCID-vndb-w8e1-4ugv
76
vulnerability VCID-vxj6-wvyz-zbaq
77
vulnerability VCID-vxry-uvph-kbfd
78
vulnerability VCID-vybh-pxr3-17hn
79
vulnerability VCID-vyvy-y3cw-hbgr
80
vulnerability VCID-wea9-egep-h7g5
81
vulnerability VCID-wkm6-cgc8-bfa8
82
vulnerability VCID-wr5t-xqnn-gkcj
83
vulnerability VCID-wxps-mnue-6bbh
84
vulnerability VCID-xa4m-xpa9-v7h8
85
vulnerability VCID-xh7y-56vy-5ud8
86
vulnerability VCID-xtdg-uj46-rkcm
87
vulnerability VCID-xwc2-z7hx-4qa7
88
vulnerability VCID-y32z-2d3f-gkgw
89
vulnerability VCID-zdq2-dhb2-6kaq
90
vulnerability VCID-zkea-ge1t-z7gn
91
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.2.0
aliases CVE-2018-6905, GHSA-3w22-wrwx-2r75
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-nwxj-3ajk-rkh5
40
url VCID-pgzu-kxuj-j3fh
vulnerability_id VCID-pgzu-kxuj-j3fh
summary 
Typo3 XSS Vulnerability
Multiple cross-site scripting (XSS) vulnerabilities in unspecified backend components in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allow remote authenticated editors to inject arbitrary web script or HTML via unknown vectors.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-8755
reference_id
reference_type
scores
0
value 0.00222
scoring_system epss
scoring_elements 0.44791
published_at 2026-04-21T12:55:00Z
1
value 0.00222
scoring_system epss
scoring_elements 0.44726
published_at 2026-04-01T12:55:00Z
2
value 0.00222
scoring_system epss
scoring_elements 0.44806
published_at 2026-04-02T12:55:00Z
3
value 0.00222
scoring_system epss
scoring_elements 0.44827
published_at 2026-04-04T12:55:00Z
4
value 0.00222
scoring_system epss
scoring_elements 0.44767
published_at 2026-04-07T12:55:00Z
5
value 0.00222
scoring_system epss
scoring_elements 0.4482
published_at 2026-04-08T12:55:00Z
6
value 0.00222
scoring_system epss
scoring_elements 0.44822
published_at 2026-04-09T12:55:00Z
7
value 0.00222
scoring_system epss
scoring_elements 0.44839
published_at 2026-04-11T12:55:00Z
8
value 0.00222
scoring_system epss
scoring_elements 0.44808
published_at 2026-04-12T12:55:00Z
9
value 0.00222
scoring_system epss
scoring_elements 0.44809
published_at 2026-04-13T12:55:00Z
10
value 0.00222
scoring_system epss
scoring_elements 0.44863
published_at 2026-04-16T12:55:00Z
11
value 0.00222
scoring_system epss
scoring_elements 0.44856
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-8755
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2015-8755
reference_id
reference_type
scores
0
value 3.5
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:S/C:N/I:P/A:N
1
value 5.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
3
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2015-8755
2
reference_url https://web.archive.org/web/20160621193435/http://www.securityfocus.com/bid/79236
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20160621193435/http://www.securityfocus.com/bid/79236
3
reference_url https://web.archive.org/web/20161012163838/http://www.securitytracker.com/id/1034483
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20161012163838/http://www.securitytracker.com/id/1034483
4
reference_url http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-011
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-011
5
reference_url http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-011/
reference_id
reference_type
scores
url http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-011/
6
reference_url http://www.securityfocus.com/bid/79236
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/79236
7
reference_url http://www.securitytracker.com/id/1034483
reference_id
reference_type
scores
url http://www.securitytracker.com/id/1034483
8
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:*:*:*:*:*:*:*
9
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:alpha1:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.0:alpha1:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:alpha1:*:*:*:*:*:*
10
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:alpha2:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.0:alpha2:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:alpha2:*:*:*:*:*:*
11
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:alpha3:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.0:alpha3:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:alpha3:*:*:*:*:*:*
12
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:beta1:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.0:beta1:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:beta1:*:*:*:*:*:*
13
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:beta2:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.0:beta2:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:beta2:*:*:*:*:*:*
14
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:beta3:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.0:beta3:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:beta3:*:*:*:*:*:*
15
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:beta4:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.0:beta4:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:beta4:*:*:*:*:*:*
16
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:beta5:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.0:beta5:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:beta5:*:*:*:*:*:*
17
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:beta6:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.0:beta6:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:beta6:*:*:*:*:*:*
18
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:beta7:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.0:beta7:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:beta7:*:*:*:*:*:*
19
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:rc1:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.0:rc1:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:rc1:*:*:*:*:*:*
20
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:rc2:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.0:rc2:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:rc2:*:*:*:*:*:*
21
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.1:*:*:*:*:*:*:*
22
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.10:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.10:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.10:*:*:*:*:*:*:*
23
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.10:rc1:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.10:rc1:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.10:rc1:*:*:*:*:*:*
24
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.11:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.11:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.11:*:*:*:*:*:*:*
25
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.12:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.12:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.12:*:*:*:*:*:*:*
26
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.13:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.13:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.13:*:*:*:*:*:*:*
27
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.14:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.14:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.14:*:*:*:*:*:*:*
28
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.15:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.15:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.15:*:*:*:*:*:*:*
29
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.2:*:*:*:*:*:*:*
30
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.3:*:*:*:*:*:*:*
31
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.4:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.4:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.4:*:*:*:*:*:*:*
32
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.5:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.5:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.5:*:*:*:*:*:*:*
33
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.6:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.6:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.6:*:*:*:*:*:*:*
34
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.7:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.7:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.7:*:*:*:*:*:*:*
35
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.8:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.8:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.8:*:*:*:*:*:*:*
36
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.9:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.9:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.9:*:*:*:*:*:*:*
37
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:7.0.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:7.0.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:7.0.0:*:*:*:*:*:*:*
38
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:7.0.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:7.0.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:7.0.2:*:*:*:*:*:*:*
39
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:7.1.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:7.1.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:7.1.0:*:*:*:*:*:*:*
40
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:7.2.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:7.2.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:7.2.0:*:*:*:*:*:*:*
41
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:7.3.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:7.3.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:7.3.0:*:*:*:*:*:*:*
42
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:7.3.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:7.3.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:7.3.1:*:*:*:*:*:*:*
43
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:7.4.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:7.4.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:7.4.0:*:*:*:*:*:*:*
44
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:7.5.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:7.5.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:7.5.0:*:*:*:*:*:*:*
45
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:7.6.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:7.6.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:7.6.0:*:*:*:*:*:*:*
46
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:7.6.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:7.6.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:7.6.1:*:*:*:*:*:*:*
47
reference_url https://github.com/advisories/GHSA-56f9-5563-m2h7
reference_id GHSA-56f9-5563-m2h7
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-56f9-5563-m2h7
fixed_packages
0
url pkg:composer/typo3/cms@7.6.1
purl pkg:composer/typo3/cms@7.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bnd-6xsq-nbec
1
vulnerability VCID-1jcy-nx8g-z3d3
2
vulnerability VCID-1qjx-grvf-y7bk
3
vulnerability VCID-25t3-1sm6-3kdn
4
vulnerability VCID-28bf-jvah-zkhw
5
vulnerability VCID-2fs8-bscc-3ye2
6
vulnerability VCID-3m53-kkk2-j7c2
7
vulnerability VCID-435j-f3yx-9yep
8
vulnerability VCID-47px-4d98-ubab
9
vulnerability VCID-5jgb-dsyx-hyb4
10
vulnerability VCID-5paq-5frf-43ed
11
vulnerability VCID-5ppt-avmb-cqb2
12
vulnerability VCID-6b5q-vzs3-pkcc
13
vulnerability VCID-6wsa-4ywc-8fh4
14
vulnerability VCID-7d1g-j3k5-gub8
15
vulnerability VCID-8jp8-a363-67be
16
vulnerability VCID-b715-6z6c-qqar
17
vulnerability VCID-bajy-qbwq-fufn
18
vulnerability VCID-bck9-34jp-6ydx
19
vulnerability VCID-bmj2-4k58-tqa4
20
vulnerability VCID-bnne-7p2q-eqd2
21
vulnerability VCID-bxjw-7426-gyb8
22
vulnerability VCID-c6zq-cfg5-u7d9
23
vulnerability VCID-dbrh-t8zx-nkd9
24
vulnerability VCID-dm97-51uu-r7gw
25
vulnerability VCID-dsu7-jjjq-f3e1
26
vulnerability VCID-ehzg-bzrd-kbcc
27
vulnerability VCID-ep6t-zwd1-4bb3
28
vulnerability VCID-f963-qur3-2qb7
29
vulnerability VCID-fber-yp9q-f7dr
30
vulnerability VCID-fqbx-7xyq-fkav
31
vulnerability VCID-fy3g-uegw-2bew
32
vulnerability VCID-g4ak-ertr-rya6
33
vulnerability VCID-gcnj-6qb6-pbgz
34
vulnerability VCID-gezz-pvpj-p3c6
35
vulnerability VCID-gspd-apwy-efgu
36
vulnerability VCID-h2dd-7b1r-k7bs
37
vulnerability VCID-h63t-9enx-qfdn
38
vulnerability VCID-h958-d3pm-kfcs
39
vulnerability VCID-hpgq-deze-p7dp
40
vulnerability VCID-hv3n-j8ck-1ufx
41
vulnerability VCID-jmu3-5k7e-x7ch
42
vulnerability VCID-jqth-wfgx-87cx
43
vulnerability VCID-jqx9-41zx-dbcy
44
vulnerability VCID-m3nf-1qbv-d3dj
45
vulnerability VCID-mhud-kq57-nka3
46
vulnerability VCID-mnz3-rj21-67ad
47
vulnerability VCID-mqbh-k9n3-nbed
48
vulnerability VCID-mqk6-z77g-bfdv
49
vulnerability VCID-mub5-s7h1-57cy
50
vulnerability VCID-n15v-ta9h-6ffb
51
vulnerability VCID-n61z-6v8a-hygf
52
vulnerability VCID-n78p-x7hh-gqcf
53
vulnerability VCID-nnh9-udcj-m7fv
54
vulnerability VCID-npn5-rand-q3dg
55
vulnerability VCID-nt6a-5zkv-pbcm
56
vulnerability VCID-nwxj-3ajk-rkh5
57
vulnerability VCID-p1u9-66hm-47er
58
vulnerability VCID-p545-vwe6-9kfr
59
vulnerability VCID-pk8d-8u15-5bfq
60
vulnerability VCID-pnfa-cksc-43de
61
vulnerability VCID-prbd-r82t-87dm
62
vulnerability VCID-q9ak-qcq6-qfhy
63
vulnerability VCID-rdrs-mhaw-b3ge
64
vulnerability VCID-rg5d-d8nc-9qfu
65
vulnerability VCID-rkms-w15c-4yb1
66
vulnerability VCID-rzw5-8d1u-sfam
67
vulnerability VCID-sr3p-pdxy-4yhu
68
vulnerability VCID-t3jn-vwbx-u7cr
69
vulnerability VCID-tmrt-6fxw-5ugh
70
vulnerability VCID-tw1y-t4qj-j3d1
71
vulnerability VCID-uckg-j48d-efad
72
vulnerability VCID-uj89-13ub-43fz
73
vulnerability VCID-utpu-q2dv-m3hm
74
vulnerability VCID-vndb-w8e1-4ugv
75
vulnerability VCID-vrt1-aj9v-2kb6
76
vulnerability VCID-w5pn-eb7y-1kdp
77
vulnerability VCID-wge3-kxdq-f3bz
78
vulnerability VCID-wq32-kgff-gke8
79
vulnerability VCID-wr5t-xqnn-gkcj
80
vulnerability VCID-wxps-mnue-6bbh
81
vulnerability VCID-xa4m-xpa9-v7h8
82
vulnerability VCID-xqew-bx7v-1qfk
83
vulnerability VCID-y32z-2d3f-gkgw
84
vulnerability VCID-z5qq-nwn5-tqgm
85
vulnerability VCID-zdq2-dhb2-6kaq
86
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.1
aliases CVE-2015-8755, GHSA-56f9-5563-m2h7
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pgzu-kxuj-j3fh
41
url VCID-pk8d-8u15-5bfq
vulnerability_id VCID-pk8d-8u15-5bfq
summary 
TYPO3 Denial of Service in Online Media Asset Handling
Online Media Asset Handling (*`.youtube` and *`.vimeo` files) in the TYPO3 backend is vulnerable to denial of service. Putting large files with according file extensions results in high consumption of system resources. This can lead to exceeding limits of the current PHP process which results in a dysfunctional backend component. A valid backend user account or write access on the server system (e.g. SFTP) is needed in order to exploit this vulnerability.
references
0
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2018-12-11-6.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2018-12-11-6.yaml
1
reference_url https://github.com/TYPO3/typo3
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3
2
reference_url https://github.com/TYPO3/typo3/commit/054799caf53b28ff92e00aff957fab88c45a7509
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/054799caf53b28ff92e00aff957fab88c45a7509
3
reference_url https://github.com/TYPO3/typo3/commit/16567366e2a25c0cbed7208c3be9eda962e28c9b
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/16567366e2a25c0cbed7208c3be9eda962e28c9b
4
reference_url https://github.com/TYPO3/typo3/commit/7a5155e0137d01db7e5723849f0493ad5b0c98ac
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/7a5155e0137d01db7e5723849f0493ad5b0c98ac
5
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-011
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2018-011
6
reference_url https://github.com/advisories/GHSA-f3wf-q4fj-3gxf
reference_id GHSA-f3wf-q4fj-3gxf
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-f3wf-q4fj-3gxf
fixed_packages
0
url pkg:composer/typo3/cms@7.6.32
purl pkg:composer/typo3/cms@7.6.32
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5jgb-dsyx-hyb4
1
vulnerability VCID-5paq-5frf-43ed
2
vulnerability VCID-bajy-qbwq-fufn
3
vulnerability VCID-dsu7-jjjq-f3e1
4
vulnerability VCID-f963-qur3-2qb7
5
vulnerability VCID-gcnj-6qb6-pbgz
6
vulnerability VCID-mnz3-rj21-67ad
7
vulnerability VCID-n15v-ta9h-6ffb
8
vulnerability VCID-t3jn-vwbx-u7cr
9
vulnerability VCID-xa4m-xpa9-v7h8
10
vulnerability VCID-y32z-2d3f-gkgw
11
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.32
1
url pkg:composer/typo3/cms@8.7.21
purl pkg:composer/typo3/cms@8.7.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18dg-eevv-3ug9
1
vulnerability VCID-1kae-ffj3-xyc7
2
vulnerability VCID-2meq-x4kd-bbdn
3
vulnerability VCID-3n2r-awja-dug9
4
vulnerability VCID-3v4n-fzxa-bfaw
5
vulnerability VCID-4ack-haf2-cfbe
6
vulnerability VCID-551q-gpyd-ffe8
7
vulnerability VCID-5jgb-dsyx-hyb4
8
vulnerability VCID-5paq-5frf-43ed
9
vulnerability VCID-5qfv-y43v-akdm
10
vulnerability VCID-6487-15z5-pkd4
11
vulnerability VCID-9g62-zd1x-3bdg
12
vulnerability VCID-9gpp-ez8w-rqav
13
vulnerability VCID-axaf-45kr-kbfe
14
vulnerability VCID-bajy-qbwq-fufn
15
vulnerability VCID-c2tm-eqmm-1ugt
16
vulnerability VCID-cm14-t8uv-k3es
17
vulnerability VCID-cmka-8484-27bu
18
vulnerability VCID-dj88-f3p8-cfbn
19
vulnerability VCID-dsu7-jjjq-f3e1
20
vulnerability VCID-e72u-tpc3-23g3
21
vulnerability VCID-eajg-ctpd-2bby
22
vulnerability VCID-ekfd-wp8z-d7e1
23
vulnerability VCID-f963-qur3-2qb7
24
vulnerability VCID-gcnj-6qb6-pbgz
25
vulnerability VCID-he5m-6wj4-rbhc
26
vulnerability VCID-j77k-hjgx-5kc5
27
vulnerability VCID-jppe-cbgm-k3cz
28
vulnerability VCID-k4h1-mvnf-1ybx
29
vulnerability VCID-k8af-cg9k-87a9
30
vulnerability VCID-m7w6-b2xu-6uee
31
vulnerability VCID-mnz3-rj21-67ad
32
vulnerability VCID-n15v-ta9h-6ffb
33
vulnerability VCID-px44-19tj-h7aa
34
vulnerability VCID-q8hy-wjd9-nbgp
35
vulnerability VCID-s64f-x81f-b7ce
36
vulnerability VCID-shqd-udhm-pff8
37
vulnerability VCID-stzu-sxe6-5yf5
38
vulnerability VCID-t1n7-eswt-73gw
39
vulnerability VCID-t3jn-vwbx-u7cr
40
vulnerability VCID-tqf5-2fsm-8fch
41
vulnerability VCID-vxj6-wvyz-zbaq
42
vulnerability VCID-vxry-uvph-kbfd
43
vulnerability VCID-vybh-pxr3-17hn
44
vulnerability VCID-vyvy-y3cw-hbgr
45
vulnerability VCID-wea9-egep-h7g5
46
vulnerability VCID-xa4m-xpa9-v7h8
47
vulnerability VCID-xh7y-56vy-5ud8
48
vulnerability VCID-y32z-2d3f-gkgw
49
vulnerability VCID-zdq2-dhb2-6kaq
50
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.21
2
url pkg:composer/typo3/cms@9.5.2
purl pkg:composer/typo3/cms@9.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18dg-eevv-3ug9
1
vulnerability VCID-1kae-ffj3-xyc7
2
vulnerability VCID-2meq-x4kd-bbdn
3
vulnerability VCID-2mn6-mdmz-4yd9
4
vulnerability VCID-3n2r-awja-dug9
5
vulnerability VCID-3v4n-fzxa-bfaw
6
vulnerability VCID-4ack-haf2-cfbe
7
vulnerability VCID-4mkw-tv16-jyca
8
vulnerability VCID-543x-cnbz-1kb9
9
vulnerability VCID-551q-gpyd-ffe8
10
vulnerability VCID-58js-jzm4-4fc7
11
vulnerability VCID-5jgb-dsyx-hyb4
12
vulnerability VCID-5kzs-ex81-bbaj
13
vulnerability VCID-5paq-5frf-43ed
14
vulnerability VCID-6487-15z5-pkd4
15
vulnerability VCID-6a9t-8dmn-s3bv
16
vulnerability VCID-9g62-zd1x-3bdg
17
vulnerability VCID-9gpp-ez8w-rqav
18
vulnerability VCID-a49c-fqrj-nbb3
19
vulnerability VCID-anfj-pmkg-skhe
20
vulnerability VCID-axaf-45kr-kbfe
21
vulnerability VCID-bajy-qbwq-fufn
22
vulnerability VCID-c2tm-eqmm-1ugt
23
vulnerability VCID-cm14-t8uv-k3es
24
vulnerability VCID-cmka-8484-27bu
25
vulnerability VCID-d8d1-sat6-muhe
26
vulnerability VCID-dcy2-efyc-6qgq
27
vulnerability VCID-dj88-f3p8-cfbn
28
vulnerability VCID-dsu7-jjjq-f3e1
29
vulnerability VCID-e72u-tpc3-23g3
30
vulnerability VCID-eajg-ctpd-2bby
31
vulnerability VCID-ekfd-wp8z-d7e1
32
vulnerability VCID-f963-qur3-2qb7
33
vulnerability VCID-gcnj-6qb6-pbgz
34
vulnerability VCID-he5m-6wj4-rbhc
35
vulnerability VCID-jppe-cbgm-k3cz
36
vulnerability VCID-k4h1-mvnf-1ybx
37
vulnerability VCID-k8af-cg9k-87a9
38
vulnerability VCID-kc67-7kf7-s3d7
39
vulnerability VCID-kj9x-psfz-2ug1
40
vulnerability VCID-m7w6-b2xu-6uee
41
vulnerability VCID-mnz3-rj21-67ad
42
vulnerability VCID-n15v-ta9h-6ffb
43
vulnerability VCID-p715-yexd-jfgc
44
vulnerability VCID-phgh-sd4m-zbdx
45
vulnerability VCID-px44-19tj-h7aa
46
vulnerability VCID-q8hy-wjd9-nbgp
47
vulnerability VCID-raxk-rm9v-hubn
48
vulnerability VCID-s64f-x81f-b7ce
49
vulnerability VCID-shqd-udhm-pff8
50
vulnerability VCID-stzu-sxe6-5yf5
51
vulnerability VCID-sw7v-fbjk-13hy
52
vulnerability VCID-t1n7-eswt-73gw
53
vulnerability VCID-t3jn-vwbx-u7cr
54
vulnerability VCID-tqf5-2fsm-8fch
55
vulnerability VCID-u9bx-8e86-wbew
56
vulnerability VCID-ve7g-8st5-wffb
57
vulnerability VCID-vxj6-wvyz-zbaq
58
vulnerability VCID-vxry-uvph-kbfd
59
vulnerability VCID-vybh-pxr3-17hn
60
vulnerability VCID-vyvy-y3cw-hbgr
61
vulnerability VCID-wea9-egep-h7g5
62
vulnerability VCID-xa4m-xpa9-v7h8
63
vulnerability VCID-xh7y-56vy-5ud8
64
vulnerability VCID-xtdg-uj46-rkcm
65
vulnerability VCID-xwc2-z7hx-4qa7
66
vulnerability VCID-y32z-2d3f-gkgw
67
vulnerability VCID-zdq2-dhb2-6kaq
68
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.2
aliases GHSA-f3wf-q4fj-3gxf
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pk8d-8u15-5bfq
42
url VCID-q6dx-uskc-y3hs
vulnerability_id VCID-q6dx-uskc-y3hs
summary 
Multiple Cross-Site Scripting vulnerabilities in TYPO3 backend
Failing to properly encode user input, several backend components are susceptible to Cross-Site Scripting, allowing authenticated editors to inject arbitrary HTML or JavaScript.
references
0
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2015-12-15-1.yaml
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2015-12-15-1.yaml
1
reference_url https://typo3.org/security/advisory/typo3-core-sa-2015-011
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2015-011
2
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-011
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-011
3
reference_url https://github.com/advisories/GHSA-5cxf-xx9j-54jc
reference_id GHSA-5cxf-xx9j-54jc
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-5cxf-xx9j-54jc
fixed_packages
0
url pkg:composer/typo3/cms@7.6.1
purl pkg:composer/typo3/cms@7.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bnd-6xsq-nbec
1
vulnerability VCID-1jcy-nx8g-z3d3
2
vulnerability VCID-1qjx-grvf-y7bk
3
vulnerability VCID-25t3-1sm6-3kdn
4
vulnerability VCID-28bf-jvah-zkhw
5
vulnerability VCID-2fs8-bscc-3ye2
6
vulnerability VCID-3m53-kkk2-j7c2
7
vulnerability VCID-435j-f3yx-9yep
8
vulnerability VCID-47px-4d98-ubab
9
vulnerability VCID-5jgb-dsyx-hyb4
10
vulnerability VCID-5paq-5frf-43ed
11
vulnerability VCID-5ppt-avmb-cqb2
12
vulnerability VCID-6b5q-vzs3-pkcc
13
vulnerability VCID-6wsa-4ywc-8fh4
14
vulnerability VCID-7d1g-j3k5-gub8
15
vulnerability VCID-8jp8-a363-67be
16
vulnerability VCID-b715-6z6c-qqar
17
vulnerability VCID-bajy-qbwq-fufn
18
vulnerability VCID-bck9-34jp-6ydx
19
vulnerability VCID-bmj2-4k58-tqa4
20
vulnerability VCID-bnne-7p2q-eqd2
21
vulnerability VCID-bxjw-7426-gyb8
22
vulnerability VCID-c6zq-cfg5-u7d9
23
vulnerability VCID-dbrh-t8zx-nkd9
24
vulnerability VCID-dm97-51uu-r7gw
25
vulnerability VCID-dsu7-jjjq-f3e1
26
vulnerability VCID-ehzg-bzrd-kbcc
27
vulnerability VCID-ep6t-zwd1-4bb3
28
vulnerability VCID-f963-qur3-2qb7
29
vulnerability VCID-fber-yp9q-f7dr
30
vulnerability VCID-fqbx-7xyq-fkav
31
vulnerability VCID-fy3g-uegw-2bew
32
vulnerability VCID-g4ak-ertr-rya6
33
vulnerability VCID-gcnj-6qb6-pbgz
34
vulnerability VCID-gezz-pvpj-p3c6
35
vulnerability VCID-gspd-apwy-efgu
36
vulnerability VCID-h2dd-7b1r-k7bs
37
vulnerability VCID-h63t-9enx-qfdn
38
vulnerability VCID-h958-d3pm-kfcs
39
vulnerability VCID-hpgq-deze-p7dp
40
vulnerability VCID-hv3n-j8ck-1ufx
41
vulnerability VCID-jmu3-5k7e-x7ch
42
vulnerability VCID-jqth-wfgx-87cx
43
vulnerability VCID-jqx9-41zx-dbcy
44
vulnerability VCID-m3nf-1qbv-d3dj
45
vulnerability VCID-mhud-kq57-nka3
46
vulnerability VCID-mnz3-rj21-67ad
47
vulnerability VCID-mqbh-k9n3-nbed
48
vulnerability VCID-mqk6-z77g-bfdv
49
vulnerability VCID-mub5-s7h1-57cy
50
vulnerability VCID-n15v-ta9h-6ffb
51
vulnerability VCID-n61z-6v8a-hygf
52
vulnerability VCID-n78p-x7hh-gqcf
53
vulnerability VCID-nnh9-udcj-m7fv
54
vulnerability VCID-npn5-rand-q3dg
55
vulnerability VCID-nt6a-5zkv-pbcm
56
vulnerability VCID-nwxj-3ajk-rkh5
57
vulnerability VCID-p1u9-66hm-47er
58
vulnerability VCID-p545-vwe6-9kfr
59
vulnerability VCID-pk8d-8u15-5bfq
60
vulnerability VCID-pnfa-cksc-43de
61
vulnerability VCID-prbd-r82t-87dm
62
vulnerability VCID-q9ak-qcq6-qfhy
63
vulnerability VCID-rdrs-mhaw-b3ge
64
vulnerability VCID-rg5d-d8nc-9qfu
65
vulnerability VCID-rkms-w15c-4yb1
66
vulnerability VCID-rzw5-8d1u-sfam
67
vulnerability VCID-sr3p-pdxy-4yhu
68
vulnerability VCID-t3jn-vwbx-u7cr
69
vulnerability VCID-tmrt-6fxw-5ugh
70
vulnerability VCID-tw1y-t4qj-j3d1
71
vulnerability VCID-uckg-j48d-efad
72
vulnerability VCID-uj89-13ub-43fz
73
vulnerability VCID-utpu-q2dv-m3hm
74
vulnerability VCID-vndb-w8e1-4ugv
75
vulnerability VCID-vrt1-aj9v-2kb6
76
vulnerability VCID-w5pn-eb7y-1kdp
77
vulnerability VCID-wge3-kxdq-f3bz
78
vulnerability VCID-wq32-kgff-gke8
79
vulnerability VCID-wr5t-xqnn-gkcj
80
vulnerability VCID-wxps-mnue-6bbh
81
vulnerability VCID-xa4m-xpa9-v7h8
82
vulnerability VCID-xqew-bx7v-1qfk
83
vulnerability VCID-y32z-2d3f-gkgw
84
vulnerability VCID-z5qq-nwn5-tqgm
85
vulnerability VCID-zdq2-dhb2-6kaq
86
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.1
aliases GHSA-5cxf-xx9j-54jc
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-q6dx-uskc-y3hs
43
url VCID-qemc-8kj8-r3cd
vulnerability_id VCID-qemc-8kj8-r3cd
summary 
Cross-site Scripting
Multiple Cross-Site Scripting vulnerabilities in TYPO3 backend.
references
0
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-011/
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-011/
fixed_packages
0
url pkg:composer/typo3/cms@7.6.1
purl pkg:composer/typo3/cms@7.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bnd-6xsq-nbec
1
vulnerability VCID-1jcy-nx8g-z3d3
2
vulnerability VCID-1qjx-grvf-y7bk
3
vulnerability VCID-25t3-1sm6-3kdn
4
vulnerability VCID-28bf-jvah-zkhw
5
vulnerability VCID-2fs8-bscc-3ye2
6
vulnerability VCID-3m53-kkk2-j7c2
7
vulnerability VCID-435j-f3yx-9yep
8
vulnerability VCID-47px-4d98-ubab
9
vulnerability VCID-5jgb-dsyx-hyb4
10
vulnerability VCID-5paq-5frf-43ed
11
vulnerability VCID-5ppt-avmb-cqb2
12
vulnerability VCID-6b5q-vzs3-pkcc
13
vulnerability VCID-6wsa-4ywc-8fh4
14
vulnerability VCID-7d1g-j3k5-gub8
15
vulnerability VCID-8jp8-a363-67be
16
vulnerability VCID-b715-6z6c-qqar
17
vulnerability VCID-bajy-qbwq-fufn
18
vulnerability VCID-bck9-34jp-6ydx
19
vulnerability VCID-bmj2-4k58-tqa4
20
vulnerability VCID-bnne-7p2q-eqd2
21
vulnerability VCID-bxjw-7426-gyb8
22
vulnerability VCID-c6zq-cfg5-u7d9
23
vulnerability VCID-dbrh-t8zx-nkd9
24
vulnerability VCID-dm97-51uu-r7gw
25
vulnerability VCID-dsu7-jjjq-f3e1
26
vulnerability VCID-ehzg-bzrd-kbcc
27
vulnerability VCID-ep6t-zwd1-4bb3
28
vulnerability VCID-f963-qur3-2qb7
29
vulnerability VCID-fber-yp9q-f7dr
30
vulnerability VCID-fqbx-7xyq-fkav
31
vulnerability VCID-fy3g-uegw-2bew
32
vulnerability VCID-g4ak-ertr-rya6
33
vulnerability VCID-gcnj-6qb6-pbgz
34
vulnerability VCID-gezz-pvpj-p3c6
35
vulnerability VCID-gspd-apwy-efgu
36
vulnerability VCID-h2dd-7b1r-k7bs
37
vulnerability VCID-h63t-9enx-qfdn
38
vulnerability VCID-h958-d3pm-kfcs
39
vulnerability VCID-hpgq-deze-p7dp
40
vulnerability VCID-hv3n-j8ck-1ufx
41
vulnerability VCID-jmu3-5k7e-x7ch
42
vulnerability VCID-jqth-wfgx-87cx
43
vulnerability VCID-jqx9-41zx-dbcy
44
vulnerability VCID-m3nf-1qbv-d3dj
45
vulnerability VCID-mhud-kq57-nka3
46
vulnerability VCID-mnz3-rj21-67ad
47
vulnerability VCID-mqbh-k9n3-nbed
48
vulnerability VCID-mqk6-z77g-bfdv
49
vulnerability VCID-mub5-s7h1-57cy
50
vulnerability VCID-n15v-ta9h-6ffb
51
vulnerability VCID-n61z-6v8a-hygf
52
vulnerability VCID-n78p-x7hh-gqcf
53
vulnerability VCID-nnh9-udcj-m7fv
54
vulnerability VCID-npn5-rand-q3dg
55
vulnerability VCID-nt6a-5zkv-pbcm
56
vulnerability VCID-nwxj-3ajk-rkh5
57
vulnerability VCID-p1u9-66hm-47er
58
vulnerability VCID-p545-vwe6-9kfr
59
vulnerability VCID-pk8d-8u15-5bfq
60
vulnerability VCID-pnfa-cksc-43de
61
vulnerability VCID-prbd-r82t-87dm
62
vulnerability VCID-q9ak-qcq6-qfhy
63
vulnerability VCID-rdrs-mhaw-b3ge
64
vulnerability VCID-rg5d-d8nc-9qfu
65
vulnerability VCID-rkms-w15c-4yb1
66
vulnerability VCID-rzw5-8d1u-sfam
67
vulnerability VCID-sr3p-pdxy-4yhu
68
vulnerability VCID-t3jn-vwbx-u7cr
69
vulnerability VCID-tmrt-6fxw-5ugh
70
vulnerability VCID-tw1y-t4qj-j3d1
71
vulnerability VCID-uckg-j48d-efad
72
vulnerability VCID-uj89-13ub-43fz
73
vulnerability VCID-utpu-q2dv-m3hm
74
vulnerability VCID-vndb-w8e1-4ugv
75
vulnerability VCID-vrt1-aj9v-2kb6
76
vulnerability VCID-w5pn-eb7y-1kdp
77
vulnerability VCID-wge3-kxdq-f3bz
78
vulnerability VCID-wq32-kgff-gke8
79
vulnerability VCID-wr5t-xqnn-gkcj
80
vulnerability VCID-wxps-mnue-6bbh
81
vulnerability VCID-xa4m-xpa9-v7h8
82
vulnerability VCID-xqew-bx7v-1qfk
83
vulnerability VCID-y32z-2d3f-gkgw
84
vulnerability VCID-z5qq-nwn5-tqgm
85
vulnerability VCID-zdq2-dhb2-6kaq
86
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.1
aliases 2015-12-15-1
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qemc-8kj8-r3cd
44
url VCID-rdrs-mhaw-b3ge
vulnerability_id VCID-rdrs-mhaw-b3ge
summary 
Cross-site Scripting
Cross-Site Scripting in Frontend User Login.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-008/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2018-008/
fixed_packages
0
url pkg:composer/typo3/cms@7.6.32
purl pkg:composer/typo3/cms@7.6.32
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5jgb-dsyx-hyb4
1
vulnerability VCID-5paq-5frf-43ed
2
vulnerability VCID-bajy-qbwq-fufn
3
vulnerability VCID-dsu7-jjjq-f3e1
4
vulnerability VCID-f963-qur3-2qb7
5
vulnerability VCID-gcnj-6qb6-pbgz
6
vulnerability VCID-mnz3-rj21-67ad
7
vulnerability VCID-n15v-ta9h-6ffb
8
vulnerability VCID-t3jn-vwbx-u7cr
9
vulnerability VCID-xa4m-xpa9-v7h8
10
vulnerability VCID-y32z-2d3f-gkgw
11
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.32
1
url pkg:composer/typo3/cms@8.7.21
purl pkg:composer/typo3/cms@8.7.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18dg-eevv-3ug9
1
vulnerability VCID-1kae-ffj3-xyc7
2
vulnerability VCID-2meq-x4kd-bbdn
3
vulnerability VCID-3n2r-awja-dug9
4
vulnerability VCID-3v4n-fzxa-bfaw
5
vulnerability VCID-4ack-haf2-cfbe
6
vulnerability VCID-551q-gpyd-ffe8
7
vulnerability VCID-5jgb-dsyx-hyb4
8
vulnerability VCID-5paq-5frf-43ed
9
vulnerability VCID-5qfv-y43v-akdm
10
vulnerability VCID-6487-15z5-pkd4
11
vulnerability VCID-9g62-zd1x-3bdg
12
vulnerability VCID-9gpp-ez8w-rqav
13
vulnerability VCID-axaf-45kr-kbfe
14
vulnerability VCID-bajy-qbwq-fufn
15
vulnerability VCID-c2tm-eqmm-1ugt
16
vulnerability VCID-cm14-t8uv-k3es
17
vulnerability VCID-cmka-8484-27bu
18
vulnerability VCID-dj88-f3p8-cfbn
19
vulnerability VCID-dsu7-jjjq-f3e1
20
vulnerability VCID-e72u-tpc3-23g3
21
vulnerability VCID-eajg-ctpd-2bby
22
vulnerability VCID-ekfd-wp8z-d7e1
23
vulnerability VCID-f963-qur3-2qb7
24
vulnerability VCID-gcnj-6qb6-pbgz
25
vulnerability VCID-he5m-6wj4-rbhc
26
vulnerability VCID-j77k-hjgx-5kc5
27
vulnerability VCID-jppe-cbgm-k3cz
28
vulnerability VCID-k4h1-mvnf-1ybx
29
vulnerability VCID-k8af-cg9k-87a9
30
vulnerability VCID-m7w6-b2xu-6uee
31
vulnerability VCID-mnz3-rj21-67ad
32
vulnerability VCID-n15v-ta9h-6ffb
33
vulnerability VCID-px44-19tj-h7aa
34
vulnerability VCID-q8hy-wjd9-nbgp
35
vulnerability VCID-s64f-x81f-b7ce
36
vulnerability VCID-shqd-udhm-pff8
37
vulnerability VCID-stzu-sxe6-5yf5
38
vulnerability VCID-t1n7-eswt-73gw
39
vulnerability VCID-t3jn-vwbx-u7cr
40
vulnerability VCID-tqf5-2fsm-8fch
41
vulnerability VCID-vxj6-wvyz-zbaq
42
vulnerability VCID-vxry-uvph-kbfd
43
vulnerability VCID-vybh-pxr3-17hn
44
vulnerability VCID-vyvy-y3cw-hbgr
45
vulnerability VCID-wea9-egep-h7g5
46
vulnerability VCID-xa4m-xpa9-v7h8
47
vulnerability VCID-xh7y-56vy-5ud8
48
vulnerability VCID-y32z-2d3f-gkgw
49
vulnerability VCID-zdq2-dhb2-6kaq
50
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.21
2
url pkg:composer/typo3/cms@9.5.2
purl pkg:composer/typo3/cms@9.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18dg-eevv-3ug9
1
vulnerability VCID-1kae-ffj3-xyc7
2
vulnerability VCID-2meq-x4kd-bbdn
3
vulnerability VCID-2mn6-mdmz-4yd9
4
vulnerability VCID-3n2r-awja-dug9
5
vulnerability VCID-3v4n-fzxa-bfaw
6
vulnerability VCID-4ack-haf2-cfbe
7
vulnerability VCID-4mkw-tv16-jyca
8
vulnerability VCID-543x-cnbz-1kb9
9
vulnerability VCID-551q-gpyd-ffe8
10
vulnerability VCID-58js-jzm4-4fc7
11
vulnerability VCID-5jgb-dsyx-hyb4
12
vulnerability VCID-5kzs-ex81-bbaj
13
vulnerability VCID-5paq-5frf-43ed
14
vulnerability VCID-6487-15z5-pkd4
15
vulnerability VCID-6a9t-8dmn-s3bv
16
vulnerability VCID-9g62-zd1x-3bdg
17
vulnerability VCID-9gpp-ez8w-rqav
18
vulnerability VCID-a49c-fqrj-nbb3
19
vulnerability VCID-anfj-pmkg-skhe
20
vulnerability VCID-axaf-45kr-kbfe
21
vulnerability VCID-bajy-qbwq-fufn
22
vulnerability VCID-c2tm-eqmm-1ugt
23
vulnerability VCID-cm14-t8uv-k3es
24
vulnerability VCID-cmka-8484-27bu
25
vulnerability VCID-d8d1-sat6-muhe
26
vulnerability VCID-dcy2-efyc-6qgq
27
vulnerability VCID-dj88-f3p8-cfbn
28
vulnerability VCID-dsu7-jjjq-f3e1
29
vulnerability VCID-e72u-tpc3-23g3
30
vulnerability VCID-eajg-ctpd-2bby
31
vulnerability VCID-ekfd-wp8z-d7e1
32
vulnerability VCID-f963-qur3-2qb7
33
vulnerability VCID-gcnj-6qb6-pbgz
34
vulnerability VCID-he5m-6wj4-rbhc
35
vulnerability VCID-jppe-cbgm-k3cz
36
vulnerability VCID-k4h1-mvnf-1ybx
37
vulnerability VCID-k8af-cg9k-87a9
38
vulnerability VCID-kc67-7kf7-s3d7
39
vulnerability VCID-kj9x-psfz-2ug1
40
vulnerability VCID-m7w6-b2xu-6uee
41
vulnerability VCID-mnz3-rj21-67ad
42
vulnerability VCID-n15v-ta9h-6ffb
43
vulnerability VCID-p715-yexd-jfgc
44
vulnerability VCID-phgh-sd4m-zbdx
45
vulnerability VCID-px44-19tj-h7aa
46
vulnerability VCID-q8hy-wjd9-nbgp
47
vulnerability VCID-raxk-rm9v-hubn
48
vulnerability VCID-s64f-x81f-b7ce
49
vulnerability VCID-shqd-udhm-pff8
50
vulnerability VCID-stzu-sxe6-5yf5
51
vulnerability VCID-sw7v-fbjk-13hy
52
vulnerability VCID-t1n7-eswt-73gw
53
vulnerability VCID-t3jn-vwbx-u7cr
54
vulnerability VCID-tqf5-2fsm-8fch
55
vulnerability VCID-u9bx-8e86-wbew
56
vulnerability VCID-ve7g-8st5-wffb
57
vulnerability VCID-vxj6-wvyz-zbaq
58
vulnerability VCID-vxry-uvph-kbfd
59
vulnerability VCID-vybh-pxr3-17hn
60
vulnerability VCID-vyvy-y3cw-hbgr
61
vulnerability VCID-wea9-egep-h7g5
62
vulnerability VCID-xa4m-xpa9-v7h8
63
vulnerability VCID-xh7y-56vy-5ud8
64
vulnerability VCID-xtdg-uj46-rkcm
65
vulnerability VCID-xwc2-z7hx-4qa7
66
vulnerability VCID-y32z-2d3f-gkgw
67
vulnerability VCID-zdq2-dhb2-6kaq
68
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.2
aliases 2018-12-11-3
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-rdrs-mhaw-b3ge
45
url VCID-re9h-ze98-rbhu
vulnerability_id VCID-re9h-ze98-rbhu
summary 
Typo3 Cross-Site Scripting in Flash component (ELTS)
TYPO3 6.2.0 to 6.2.38 ELTS and 7.0.0 to 7.1.0 included a vulnerable external component, which could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack on a targeted system.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-8091
reference_id
reference_type
scores
0
value 0.20517
scoring_system epss
scoring_elements 0.95573
published_at 2026-04-21T12:55:00Z
1
value 0.20517
scoring_system epss
scoring_elements 0.95524
published_at 2026-04-01T12:55:00Z
2
value 0.20517
scoring_system epss
scoring_elements 0.95532
published_at 2026-04-02T12:55:00Z
3
value 0.20517
scoring_system epss
scoring_elements 0.95538
published_at 2026-04-04T12:55:00Z
4
value 0.20517
scoring_system epss
scoring_elements 0.95542
published_at 2026-04-07T12:55:00Z
5
value 0.20517
scoring_system epss
scoring_elements 0.95549
published_at 2026-04-08T12:55:00Z
6
value 0.20517
scoring_system epss
scoring_elements 0.95552
published_at 2026-04-09T12:55:00Z
7
value 0.20517
scoring_system epss
scoring_elements 0.95556
published_at 2026-04-11T12:55:00Z
8
value 0.20517
scoring_system epss
scoring_elements 0.95557
published_at 2026-04-12T12:55:00Z
9
value 0.20517
scoring_system epss
scoring_elements 0.95559
published_at 2026-04-13T12:55:00Z
10
value 0.20517
scoring_system epss
scoring_elements 0.95567
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-8091
1
reference_url https://github.com/TYPO3/typo3
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3
2
reference_url https://github.com/TYPO3/typo3/blob/4cb53e828bd5138d180cdf9cac1ccf7fd31086d2/typo3/sysext/core/Documentation/Changelog/7.2/Breaking-65962-WebSVGLibraryAndAPIRemoved.rst
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/blob/4cb53e828bd5138d180cdf9cac1ccf7fd31086d2/typo3/sysext/core/Documentation/Changelog/7.2/Breaking-65962-WebSVGLibraryAndAPIRemoved.rst
3
reference_url https://github.com/TYPO3/typo3/commit/482e2e992f80f5e38cb48fcaea40fd9812a5252c
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/482e2e992f80f5e38cb48fcaea40fd9812a5252c
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-8091
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-8091
5
reference_url https://typo3.org/security/advisory/typo3-psa-2019-003
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-psa-2019-003
6
reference_url https://typo3.org/security/advisory/typo3-psa-2019-003/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-psa-2019-003/
7
reference_url https://www.purplemet.com/blog/typo3-xss-vulnerability
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.purplemet.com/blog/typo3-xss-vulnerability
8
reference_url https://github.com/advisories/GHSA-qvhv-pwww-53jj
reference_id GHSA-qvhv-pwww-53jj
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-qvhv-pwww-53jj
fixed_packages
0
url pkg:composer/typo3/cms@7.2.0
purl pkg:composer/typo3/cms@7.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ng4-5tkh-g7h5
1
vulnerability VCID-28bf-jvah-zkhw
2
vulnerability VCID-2rhx-afay-97da
3
vulnerability VCID-37wu-bjfj-k7eg
4
vulnerability VCID-4etp-u4pt-v7hm
5
vulnerability VCID-51ba-3ag9-rucn
6
vulnerability VCID-5jgb-dsyx-hyb4
7
vulnerability VCID-5paq-5frf-43ed
8
vulnerability VCID-6b5q-vzs3-pkcc
9
vulnerability VCID-6gms-w48j-4ffh
10
vulnerability VCID-6pvx-1qan-ukef
11
vulnerability VCID-6spw-66jg-syb1
12
vulnerability VCID-7zx9-8afq-y3hc
13
vulnerability VCID-b5ht-z6zp-pbht
14
vulnerability VCID-bajy-qbwq-fufn
15
vulnerability VCID-bnne-7p2q-eqd2
16
vulnerability VCID-buax-rz7x-r7c2
17
vulnerability VCID-bxjw-7426-gyb8
18
vulnerability VCID-cczn-x8q7-k7ba
19
vulnerability VCID-cjgc-q6p5-2ydc
20
vulnerability VCID-ck23-cxn6-bbf3
21
vulnerability VCID-dbrh-t8zx-nkd9
22
vulnerability VCID-dm97-51uu-r7gw
23
vulnerability VCID-dsu7-jjjq-f3e1
24
vulnerability VCID-ehzg-bzrd-kbcc
25
vulnerability VCID-f4pm-9tq5-q3ch
26
vulnerability VCID-gcnj-6qb6-pbgz
27
vulnerability VCID-h958-d3pm-kfcs
28
vulnerability VCID-jmu3-5k7e-x7ch
29
vulnerability VCID-jqx9-41zx-dbcy
30
vulnerability VCID-kgcq-paqm-9ya6
31
vulnerability VCID-kpze-14jy-xud9
32
vulnerability VCID-kqbk-4q4z-nkec
33
vulnerability VCID-mnz3-rj21-67ad
34
vulnerability VCID-n15v-ta9h-6ffb
35
vulnerability VCID-n78p-x7hh-gqcf
36
vulnerability VCID-ne8w-dpjw-7qf1
37
vulnerability VCID-nwxj-3ajk-rkh5
38
vulnerability VCID-pgzu-kxuj-j3fh
39
vulnerability VCID-pk8d-8u15-5bfq
40
vulnerability VCID-q6dx-uskc-y3hs
41
vulnerability VCID-qemc-8kj8-r3cd
42
vulnerability VCID-rdrs-mhaw-b3ge
43
vulnerability VCID-rwgf-2pfh-ufdz
44
vulnerability VCID-se8w-fv8x-tqde
45
vulnerability VCID-sr3p-pdxy-4yhu
46
vulnerability VCID-t3jn-vwbx-u7cr
47
vulnerability VCID-tmrt-6fxw-5ugh
48
vulnerability VCID-tw1y-t4qj-j3d1
49
vulnerability VCID-vndb-w8e1-4ugv
50
vulnerability VCID-wr5t-xqnn-gkcj
51
vulnerability VCID-ww44-zmx7-47ft
52
vulnerability VCID-wxps-mnue-6bbh
53
vulnerability VCID-xa4m-xpa9-v7h8
54
vulnerability VCID-xhq3-ts9t-sbdy
55
vulnerability VCID-xkpp-psz2-2kag
56
vulnerability VCID-xqew-bx7v-1qfk
57
vulnerability VCID-y32z-2d3f-gkgw
58
vulnerability VCID-zdq2-dhb2-6kaq
59
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.2.0
aliases CVE-2020-8091, GHSA-qvhv-pwww-53jj
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-re9h-ze98-rbhu
46
url VCID-rwgf-2pfh-ufdz
vulnerability_id VCID-rwgf-2pfh-ufdz
summary 
TYPO3 Cross-Site Scripting Vulnerability Exploitable by Editors
It has been discovered that link tags generated by typolink functionality in the website's frontend are vulnerable to cross-site scripting - values being assigned to HTML attributes have not been parsed correctly. A valid backend user account is needed to exploit this vulnerability.

As second and separate vulnerability in the filelist module of the backend user interface has been referenced with this advisory as well. Error messages being shown after using a malicious name for renaming a file are not propery encoded, thus vulnerable to cross-site scripting. A valid backend user account is needed to exploit this vulnerability.
references
0
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2015-07-01-3.yaml
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2015-07-01-3.yaml
1
reference_url https://github.com/TYPO3/typo3
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3
2
reference_url https://github.com/TYPO3/typo3/commit/7695d91fca1a96a3a3e7466097ae92c32b1130d8
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/7695d91fca1a96a3a3e7466097ae92c32b1130d8
3
reference_url https://github.com/TYPO3/typo3/commit/d7feb40c8d277c6b6ab3a548313be1e1a2084299
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/d7feb40c8d277c6b6ab3a548313be1e1a2084299
4
reference_url https://typo3.org/security/advisory/typo3-core-sa-2015-004
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2015-004
5
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-004
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-004
6
reference_url https://github.com/advisories/GHSA-wp8j-c736-c5r3
reference_id GHSA-wp8j-c736-c5r3
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-wp8j-c736-c5r3
fixed_packages
0
url pkg:composer/typo3/cms@7.3.1
purl pkg:composer/typo3/cms@7.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ng4-5tkh-g7h5
1
vulnerability VCID-28bf-jvah-zkhw
2
vulnerability VCID-2rhx-afay-97da
3
vulnerability VCID-5jgb-dsyx-hyb4
4
vulnerability VCID-5paq-5frf-43ed
5
vulnerability VCID-6b5q-vzs3-pkcc
6
vulnerability VCID-6pvx-1qan-ukef
7
vulnerability VCID-b5ht-z6zp-pbht
8
vulnerability VCID-bajy-qbwq-fufn
9
vulnerability VCID-bnne-7p2q-eqd2
10
vulnerability VCID-buax-rz7x-r7c2
11
vulnerability VCID-bxjw-7426-gyb8
12
vulnerability VCID-cczn-x8q7-k7ba
13
vulnerability VCID-cjgc-q6p5-2ydc
14
vulnerability VCID-ck23-cxn6-bbf3
15
vulnerability VCID-dbrh-t8zx-nkd9
16
vulnerability VCID-dm97-51uu-r7gw
17
vulnerability VCID-dsu7-jjjq-f3e1
18
vulnerability VCID-ehzg-bzrd-kbcc
19
vulnerability VCID-f4pm-9tq5-q3ch
20
vulnerability VCID-gcnj-6qb6-pbgz
21
vulnerability VCID-h958-d3pm-kfcs
22
vulnerability VCID-jmu3-5k7e-x7ch
23
vulnerability VCID-jqx9-41zx-dbcy
24
vulnerability VCID-kqbk-4q4z-nkec
25
vulnerability VCID-mnz3-rj21-67ad
26
vulnerability VCID-n15v-ta9h-6ffb
27
vulnerability VCID-n78p-x7hh-gqcf
28
vulnerability VCID-nwxj-3ajk-rkh5
29
vulnerability VCID-pgzu-kxuj-j3fh
30
vulnerability VCID-pk8d-8u15-5bfq
31
vulnerability VCID-q6dx-uskc-y3hs
32
vulnerability VCID-qemc-8kj8-r3cd
33
vulnerability VCID-rdrs-mhaw-b3ge
34
vulnerability VCID-sr3p-pdxy-4yhu
35
vulnerability VCID-t3jn-vwbx-u7cr
36
vulnerability VCID-tmrt-6fxw-5ugh
37
vulnerability VCID-tw1y-t4qj-j3d1
38
vulnerability VCID-vndb-w8e1-4ugv
39
vulnerability VCID-wr5t-xqnn-gkcj
40
vulnerability VCID-ww44-zmx7-47ft
41
vulnerability VCID-wxps-mnue-6bbh
42
vulnerability VCID-xa4m-xpa9-v7h8
43
vulnerability VCID-xqew-bx7v-1qfk
44
vulnerability VCID-y32z-2d3f-gkgw
45
vulnerability VCID-zdq2-dhb2-6kaq
46
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.3.1
aliases GHSA-wp8j-c736-c5r3
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-rwgf-2pfh-ufdz
47
url VCID-se8w-fv8x-tqde
vulnerability_id VCID-se8w-fv8x-tqde
summary Information Disclosure possibility exploitable by Editors.
references
0
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-005/
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-005/
fixed_packages
0
url pkg:composer/typo3/cms@7.3.0
purl pkg:composer/typo3/cms@7.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ng4-5tkh-g7h5
1
vulnerability VCID-28bf-jvah-zkhw
2
vulnerability VCID-2rhx-afay-97da
3
vulnerability VCID-5jgb-dsyx-hyb4
4
vulnerability VCID-5paq-5frf-43ed
5
vulnerability VCID-6b5q-vzs3-pkcc
6
vulnerability VCID-6gms-w48j-4ffh
7
vulnerability VCID-6pvx-1qan-ukef
8
vulnerability VCID-6spw-66jg-syb1
9
vulnerability VCID-7zx9-8afq-y3hc
10
vulnerability VCID-b5ht-z6zp-pbht
11
vulnerability VCID-bajy-qbwq-fufn
12
vulnerability VCID-bnne-7p2q-eqd2
13
vulnerability VCID-buax-rz7x-r7c2
14
vulnerability VCID-bxjw-7426-gyb8
15
vulnerability VCID-cczn-x8q7-k7ba
16
vulnerability VCID-cjgc-q6p5-2ydc
17
vulnerability VCID-ck23-cxn6-bbf3
18
vulnerability VCID-dbrh-t8zx-nkd9
19
vulnerability VCID-dm97-51uu-r7gw
20
vulnerability VCID-dsu7-jjjq-f3e1
21
vulnerability VCID-ehzg-bzrd-kbcc
22
vulnerability VCID-f4pm-9tq5-q3ch
23
vulnerability VCID-gcnj-6qb6-pbgz
24
vulnerability VCID-h958-d3pm-kfcs
25
vulnerability VCID-jmu3-5k7e-x7ch
26
vulnerability VCID-jqx9-41zx-dbcy
27
vulnerability VCID-kgcq-paqm-9ya6
28
vulnerability VCID-kqbk-4q4z-nkec
29
vulnerability VCID-mnz3-rj21-67ad
30
vulnerability VCID-n15v-ta9h-6ffb
31
vulnerability VCID-n78p-x7hh-gqcf
32
vulnerability VCID-nwxj-3ajk-rkh5
33
vulnerability VCID-pgzu-kxuj-j3fh
34
vulnerability VCID-pk8d-8u15-5bfq
35
vulnerability VCID-q6dx-uskc-y3hs
36
vulnerability VCID-qemc-8kj8-r3cd
37
vulnerability VCID-rdrs-mhaw-b3ge
38
vulnerability VCID-rwgf-2pfh-ufdz
39
vulnerability VCID-sr3p-pdxy-4yhu
40
vulnerability VCID-t3jn-vwbx-u7cr
41
vulnerability VCID-tmrt-6fxw-5ugh
42
vulnerability VCID-tw1y-t4qj-j3d1
43
vulnerability VCID-vndb-w8e1-4ugv
44
vulnerability VCID-wr5t-xqnn-gkcj
45
vulnerability VCID-ww44-zmx7-47ft
46
vulnerability VCID-wxps-mnue-6bbh
47
vulnerability VCID-xa4m-xpa9-v7h8
48
vulnerability VCID-xkpp-psz2-2kag
49
vulnerability VCID-xqew-bx7v-1qfk
50
vulnerability VCID-y32z-2d3f-gkgw
51
vulnerability VCID-zdq2-dhb2-6kaq
52
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.3.0
aliases 2015-07-01-4
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-se8w-fv8x-tqde
48
url VCID-sr3p-pdxy-4yhu
vulnerability_id VCID-sr3p-pdxy-4yhu
summary Insecure Deserialization & Arbitrary Code Execution in TYPO3 CMS.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-002/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2018-002/
fixed_packages
0
url pkg:composer/typo3/cms@7.6.30
purl pkg:composer/typo3/cms@7.6.30
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5jgb-dsyx-hyb4
1
vulnerability VCID-5paq-5frf-43ed
2
vulnerability VCID-6b5q-vzs3-pkcc
3
vulnerability VCID-bajy-qbwq-fufn
4
vulnerability VCID-bnne-7p2q-eqd2
5
vulnerability VCID-dbrh-t8zx-nkd9
6
vulnerability VCID-dm97-51uu-r7gw
7
vulnerability VCID-dsu7-jjjq-f3e1
8
vulnerability VCID-ehzg-bzrd-kbcc
9
vulnerability VCID-f963-qur3-2qb7
10
vulnerability VCID-gcnj-6qb6-pbgz
11
vulnerability VCID-mnz3-rj21-67ad
12
vulnerability VCID-n15v-ta9h-6ffb
13
vulnerability VCID-n78p-x7hh-gqcf
14
vulnerability VCID-pk8d-8u15-5bfq
15
vulnerability VCID-rdrs-mhaw-b3ge
16
vulnerability VCID-t3jn-vwbx-u7cr
17
vulnerability VCID-tw1y-t4qj-j3d1
18
vulnerability VCID-vndb-w8e1-4ugv
19
vulnerability VCID-wr5t-xqnn-gkcj
20
vulnerability VCID-wxps-mnue-6bbh
21
vulnerability VCID-xa4m-xpa9-v7h8
22
vulnerability VCID-xqew-bx7v-1qfk
23
vulnerability VCID-y32z-2d3f-gkgw
24
vulnerability VCID-zdq2-dhb2-6kaq
25
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.30
1
url pkg:composer/typo3/cms@8.7.17
purl pkg:composer/typo3/cms@8.7.17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18dg-eevv-3ug9
1
vulnerability VCID-1kae-ffj3-xyc7
2
vulnerability VCID-2meq-x4kd-bbdn
3
vulnerability VCID-3gg5-1921-rbfs
4
vulnerability VCID-3n2r-awja-dug9
5
vulnerability VCID-3v4n-fzxa-bfaw
6
vulnerability VCID-4ack-haf2-cfbe
7
vulnerability VCID-4btk-jt5n-2ugf
8
vulnerability VCID-551q-gpyd-ffe8
9
vulnerability VCID-5jgb-dsyx-hyb4
10
vulnerability VCID-5paq-5frf-43ed
11
vulnerability VCID-5qfv-y43v-akdm
12
vulnerability VCID-6487-15z5-pkd4
13
vulnerability VCID-6b5q-vzs3-pkcc
14
vulnerability VCID-9g62-zd1x-3bdg
15
vulnerability VCID-9gpp-ez8w-rqav
16
vulnerability VCID-axaf-45kr-kbfe
17
vulnerability VCID-bajy-qbwq-fufn
18
vulnerability VCID-bnne-7p2q-eqd2
19
vulnerability VCID-c2tm-eqmm-1ugt
20
vulnerability VCID-cm14-t8uv-k3es
21
vulnerability VCID-cmka-8484-27bu
22
vulnerability VCID-dbrh-t8zx-nkd9
23
vulnerability VCID-dj88-f3p8-cfbn
24
vulnerability VCID-dm97-51uu-r7gw
25
vulnerability VCID-dsu7-jjjq-f3e1
26
vulnerability VCID-e72u-tpc3-23g3
27
vulnerability VCID-eajg-ctpd-2bby
28
vulnerability VCID-ehzg-bzrd-kbcc
29
vulnerability VCID-ekfd-wp8z-d7e1
30
vulnerability VCID-f963-qur3-2qb7
31
vulnerability VCID-gcnj-6qb6-pbgz
32
vulnerability VCID-he5m-6wj4-rbhc
33
vulnerability VCID-j77k-hjgx-5kc5
34
vulnerability VCID-jppe-cbgm-k3cz
35
vulnerability VCID-k4h1-mvnf-1ybx
36
vulnerability VCID-k8af-cg9k-87a9
37
vulnerability VCID-m7w6-b2xu-6uee
38
vulnerability VCID-mnz3-rj21-67ad
39
vulnerability VCID-n15v-ta9h-6ffb
40
vulnerability VCID-n78p-x7hh-gqcf
41
vulnerability VCID-pk8d-8u15-5bfq
42
vulnerability VCID-px44-19tj-h7aa
43
vulnerability VCID-q8hy-wjd9-nbgp
44
vulnerability VCID-qb4j-9tz7-m7a2
45
vulnerability VCID-rdrs-mhaw-b3ge
46
vulnerability VCID-s64f-x81f-b7ce
47
vulnerability VCID-shqd-udhm-pff8
48
vulnerability VCID-stzu-sxe6-5yf5
49
vulnerability VCID-t1n7-eswt-73gw
50
vulnerability VCID-t3jn-vwbx-u7cr
51
vulnerability VCID-tqf5-2fsm-8fch
52
vulnerability VCID-tw1y-t4qj-j3d1
53
vulnerability VCID-vndb-w8e1-4ugv
54
vulnerability VCID-vxj6-wvyz-zbaq
55
vulnerability VCID-vxry-uvph-kbfd
56
vulnerability VCID-vybh-pxr3-17hn
57
vulnerability VCID-vyvy-y3cw-hbgr
58
vulnerability VCID-wea9-egep-h7g5
59
vulnerability VCID-wr5t-xqnn-gkcj
60
vulnerability VCID-wxps-mnue-6bbh
61
vulnerability VCID-xa4m-xpa9-v7h8
62
vulnerability VCID-xh7y-56vy-5ud8
63
vulnerability VCID-xqew-bx7v-1qfk
64
vulnerability VCID-y32z-2d3f-gkgw
65
vulnerability VCID-zdq2-dhb2-6kaq
66
vulnerability VCID-zkea-ge1t-z7gn
67
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.17
2
url pkg:composer/typo3/cms@9.3.2
purl pkg:composer/typo3/cms@9.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18dg-eevv-3ug9
1
vulnerability VCID-1kae-ffj3-xyc7
2
vulnerability VCID-2meq-x4kd-bbdn
3
vulnerability VCID-2mn6-mdmz-4yd9
4
vulnerability VCID-3gg5-1921-rbfs
5
vulnerability VCID-3n2r-awja-dug9
6
vulnerability VCID-3v4n-fzxa-bfaw
7
vulnerability VCID-4ack-haf2-cfbe
8
vulnerability VCID-4btk-jt5n-2ugf
9
vulnerability VCID-4mkw-tv16-jyca
10
vulnerability VCID-543x-cnbz-1kb9
11
vulnerability VCID-551q-gpyd-ffe8
12
vulnerability VCID-58js-jzm4-4fc7
13
vulnerability VCID-5jgb-dsyx-hyb4
14
vulnerability VCID-5kzs-ex81-bbaj
15
vulnerability VCID-5paq-5frf-43ed
16
vulnerability VCID-6487-15z5-pkd4
17
vulnerability VCID-6a9t-8dmn-s3bv
18
vulnerability VCID-6b5q-vzs3-pkcc
19
vulnerability VCID-9g62-zd1x-3bdg
20
vulnerability VCID-9gpp-ez8w-rqav
21
vulnerability VCID-a49c-fqrj-nbb3
22
vulnerability VCID-anfj-pmkg-skhe
23
vulnerability VCID-axaf-45kr-kbfe
24
vulnerability VCID-bajy-qbwq-fufn
25
vulnerability VCID-bnne-7p2q-eqd2
26
vulnerability VCID-c2tm-eqmm-1ugt
27
vulnerability VCID-cm14-t8uv-k3es
28
vulnerability VCID-cmka-8484-27bu
29
vulnerability VCID-d8d1-sat6-muhe
30
vulnerability VCID-dbrh-t8zx-nkd9
31
vulnerability VCID-dcy2-efyc-6qgq
32
vulnerability VCID-dj88-f3p8-cfbn
33
vulnerability VCID-dm97-51uu-r7gw
34
vulnerability VCID-dsu7-jjjq-f3e1
35
vulnerability VCID-e72u-tpc3-23g3
36
vulnerability VCID-eajg-ctpd-2bby
37
vulnerability VCID-ekfd-wp8z-d7e1
38
vulnerability VCID-f963-qur3-2qb7
39
vulnerability VCID-gcnj-6qb6-pbgz
40
vulnerability VCID-he5m-6wj4-rbhc
41
vulnerability VCID-jppe-cbgm-k3cz
42
vulnerability VCID-k4h1-mvnf-1ybx
43
vulnerability VCID-k8af-cg9k-87a9
44
vulnerability VCID-kc67-7kf7-s3d7
45
vulnerability VCID-kj9x-psfz-2ug1
46
vulnerability VCID-m7w6-b2xu-6uee
47
vulnerability VCID-mnz3-rj21-67ad
48
vulnerability VCID-n15v-ta9h-6ffb
49
vulnerability VCID-n78p-x7hh-gqcf
50
vulnerability VCID-p715-yexd-jfgc
51
vulnerability VCID-phgh-sd4m-zbdx
52
vulnerability VCID-pk8d-8u15-5bfq
53
vulnerability VCID-px44-19tj-h7aa
54
vulnerability VCID-q8hy-wjd9-nbgp
55
vulnerability VCID-qb4j-9tz7-m7a2
56
vulnerability VCID-raxk-rm9v-hubn
57
vulnerability VCID-rdrs-mhaw-b3ge
58
vulnerability VCID-s64f-x81f-b7ce
59
vulnerability VCID-shqd-udhm-pff8
60
vulnerability VCID-stzu-sxe6-5yf5
61
vulnerability VCID-sw7v-fbjk-13hy
62
vulnerability VCID-t1n7-eswt-73gw
63
vulnerability VCID-t3jn-vwbx-u7cr
64
vulnerability VCID-tqf5-2fsm-8fch
65
vulnerability VCID-tw1y-t4qj-j3d1
66
vulnerability VCID-u9bx-8e86-wbew
67
vulnerability VCID-ve7g-8st5-wffb
68
vulnerability VCID-vndb-w8e1-4ugv
69
vulnerability VCID-vxj6-wvyz-zbaq
70
vulnerability VCID-vxry-uvph-kbfd
71
vulnerability VCID-vybh-pxr3-17hn
72
vulnerability VCID-vyvy-y3cw-hbgr
73
vulnerability VCID-wea9-egep-h7g5
74
vulnerability VCID-wr5t-xqnn-gkcj
75
vulnerability VCID-wxps-mnue-6bbh
76
vulnerability VCID-xa4m-xpa9-v7h8
77
vulnerability VCID-xh7y-56vy-5ud8
78
vulnerability VCID-xtdg-uj46-rkcm
79
vulnerability VCID-xwc2-z7hx-4qa7
80
vulnerability VCID-y32z-2d3f-gkgw
81
vulnerability VCID-zdq2-dhb2-6kaq
82
vulnerability VCID-zkea-ge1t-z7gn
83
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.3.2
aliases 2018-07-12-2
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-sr3p-pdxy-4yhu
49
url VCID-t3jn-vwbx-u7cr
vulnerability_id VCID-t3jn-vwbx-u7cr
summary 
Cross-Site Scripting in Content Preview (CType menu)
### Problem
It has been discovered that content elements of type _menu_ are vulnerable to cross-site scripting when their referenced items get previewed in the page module. A valid backend user account is needed to exploit this vulnerability.

### Solution
Update to TYPO3 versions 7.6.51, 8.7.40, 9.5.25, 10.4.14, 11.1.1 that fix the problem described.

### Credits
Thanks to TYPO3 contributor Oliver Bartsch who reported and fixed the issue.

### References
* [TYPO3-CORE-SA-2021-008](https://typo3.org/security/advisory/typo3-core-sa-2021-008)
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-21370
reference_id
reference_type
scores
0
value 0.00342
scoring_system epss
scoring_elements 0.56917
published_at 2026-04-18T12:55:00Z
1
value 0.00342
scoring_system epss
scoring_elements 0.56779
published_at 2026-04-01T12:55:00Z
2
value 0.00342
scoring_system epss
scoring_elements 0.56873
published_at 2026-04-02T12:55:00Z
3
value 0.00342
scoring_system epss
scoring_elements 0.56895
published_at 2026-04-21T12:55:00Z
4
value 0.00342
scoring_system epss
scoring_elements 0.56871
published_at 2026-04-07T12:55:00Z
5
value 0.00342
scoring_system epss
scoring_elements 0.56922
published_at 2026-04-08T12:55:00Z
6
value 0.00342
scoring_system epss
scoring_elements 0.56926
published_at 2026-04-09T12:55:00Z
7
value 0.00342
scoring_system epss
scoring_elements 0.56935
published_at 2026-04-11T12:55:00Z
8
value 0.00342
scoring_system epss
scoring_elements 0.56914
published_at 2026-04-12T12:55:00Z
9
value 0.00342
scoring_system epss
scoring_elements 0.56891
published_at 2026-04-13T12:55:00Z
10
value 0.00342
scoring_system epss
scoring_elements 0.56921
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-21370
1
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21370.yaml
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21370.yaml
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21370.yaml
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21370.yaml
3
reference_url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-x7hc-x7fm-f7qh
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-x7hc-x7fm-f7qh
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-21370
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-21370
5
reference_url https://packagist.org/packages/typo3/cms-backend
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://packagist.org/packages/typo3/cms-backend
6
reference_url https://typo3.org/security/advisory/typo3-core-sa-2021-008
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2021-008
7
reference_url https://github.com/advisories/GHSA-x7hc-x7fm-f7qh
reference_id GHSA-x7hc-x7fm-f7qh
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-x7hc-x7fm-f7qh
fixed_packages
0
url pkg:composer/typo3/cms@7.6.51
purl pkg:composer/typo3/cms@7.6.51
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-n15v-ta9h-6ffb
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.51
1
url pkg:composer/typo3/cms@8.7.40
purl pkg:composer/typo3/cms@8.7.40
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ekfd-wp8z-d7e1
1
vulnerability VCID-n15v-ta9h-6ffb
2
vulnerability VCID-s64f-x81f-b7ce
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.40
2
url pkg:composer/typo3/cms@9.5.25
purl pkg:composer/typo3/cms@9.5.25
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5paq-5frf-43ed
1
vulnerability VCID-6a9t-8dmn-s3bv
2
vulnerability VCID-bajy-qbwq-fufn
3
vulnerability VCID-ekfd-wp8z-d7e1
4
vulnerability VCID-mnz3-rj21-67ad
5
vulnerability VCID-n15v-ta9h-6ffb
6
vulnerability VCID-s64f-x81f-b7ce
7
vulnerability VCID-t1n7-eswt-73gw
8
vulnerability VCID-ve7g-8st5-wffb
9
vulnerability VCID-vyvy-y3cw-hbgr
10
vulnerability VCID-y32z-2d3f-gkgw
11
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.25
3
url pkg:composer/typo3/cms@10.4.14
purl pkg:composer/typo3/cms@10.4.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1yxw-saf5-wue7
1
vulnerability VCID-4jpa-6fqh-hbfg
2
vulnerability VCID-5paq-5frf-43ed
3
vulnerability VCID-6a9t-8dmn-s3bv
4
vulnerability VCID-8sdd-b1bn-cuhx
5
vulnerability VCID-av8u-rvzq-4fc7
6
vulnerability VCID-bajy-qbwq-fufn
7
vulnerability VCID-e32h-8q61-hbgc
8
vulnerability VCID-ekfd-wp8z-d7e1
9
vulnerability VCID-mnz3-rj21-67ad
10
vulnerability VCID-n15v-ta9h-6ffb
11
vulnerability VCID-remd-55jh-r3g5
12
vulnerability VCID-s55j-8hbt-akhn
13
vulnerability VCID-s64f-x81f-b7ce
14
vulnerability VCID-t1n7-eswt-73gw
15
vulnerability VCID-ve7g-8st5-wffb
16
vulnerability VCID-vwb2-a84s-5qak
17
vulnerability VCID-vyvy-y3cw-hbgr
18
vulnerability VCID-w13x-3rp9-wyej
19
vulnerability VCID-y32z-2d3f-gkgw
20
vulnerability VCID-yj9g-uz1a-jkf2
21
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@10.4.14
4
url pkg:composer/typo3/cms@11.1.1
purl pkg:composer/typo3/cms@11.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1yxw-saf5-wue7
1
vulnerability VCID-4jpa-6fqh-hbfg
2
vulnerability VCID-5paq-5frf-43ed
3
vulnerability VCID-6a9t-8dmn-s3bv
4
vulnerability VCID-8sdd-b1bn-cuhx
5
vulnerability VCID-av8u-rvzq-4fc7
6
vulnerability VCID-bajy-qbwq-fufn
7
vulnerability VCID-e32h-8q61-hbgc
8
vulnerability VCID-ekfd-wp8z-d7e1
9
vulnerability VCID-mnz3-rj21-67ad
10
vulnerability VCID-n15v-ta9h-6ffb
11
vulnerability VCID-remd-55jh-r3g5
12
vulnerability VCID-s55j-8hbt-akhn
13
vulnerability VCID-s64f-x81f-b7ce
14
vulnerability VCID-t1n7-eswt-73gw
15
vulnerability VCID-uyeu-a3xr-fkh4
16
vulnerability VCID-ve7g-8st5-wffb
17
vulnerability VCID-vwb2-a84s-5qak
18
vulnerability VCID-vyvy-y3cw-hbgr
19
vulnerability VCID-w13x-3rp9-wyej
20
vulnerability VCID-y32z-2d3f-gkgw
21
vulnerability VCID-yj9g-uz1a-jkf2
22
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@11.1.1
aliases CVE-2021-21370, GHSA-x7hc-x7fm-f7qh
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-t3jn-vwbx-u7cr
50
url VCID-tmrt-6fxw-5ugh
vulnerability_id VCID-tmrt-6fxw-5ugh
summary 
Insecure Deserialization & Arbitrary Code Execution in TYPO3 CMS
Phar files (formerly known as "PHP archives") can act als self extracting archives which leads to the fact that source code is executed when Phar files are invoked. The Phar file format is not limited to be stored with a dedicated file extension - "bundle.phar" would be valid as well as "bundle.txt" would be. This way, Phar files can be obfuscated as image or text file which would not be denied from being uploaded and persisted to a TYPO3 installation. Due to a missing sanitization of user input, those Phar files can be invoked by manipulated URLs in TYPO3 backend forms. A valid backend user account is needed to exploit this vulnerability. In theory the attack vector would be possible in the TYPO3 frontend as well, however no functional exploit has been identified so far.
references
0
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2018-07-12-2.yaml
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2018-07-12-2.yaml
1
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-002
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2018-002
2
reference_url https://github.com/advisories/GHSA-ppgf-8745-8pgx
reference_id GHSA-ppgf-8745-8pgx
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-ppgf-8745-8pgx
fixed_packages
0
url pkg:composer/typo3/cms@7.6.30
purl pkg:composer/typo3/cms@7.6.30
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5jgb-dsyx-hyb4
1
vulnerability VCID-5paq-5frf-43ed
2
vulnerability VCID-6b5q-vzs3-pkcc
3
vulnerability VCID-bajy-qbwq-fufn
4
vulnerability VCID-bnne-7p2q-eqd2
5
vulnerability VCID-dbrh-t8zx-nkd9
6
vulnerability VCID-dm97-51uu-r7gw
7
vulnerability VCID-dsu7-jjjq-f3e1
8
vulnerability VCID-ehzg-bzrd-kbcc
9
vulnerability VCID-f963-qur3-2qb7
10
vulnerability VCID-gcnj-6qb6-pbgz
11
vulnerability VCID-mnz3-rj21-67ad
12
vulnerability VCID-n15v-ta9h-6ffb
13
vulnerability VCID-n78p-x7hh-gqcf
14
vulnerability VCID-pk8d-8u15-5bfq
15
vulnerability VCID-rdrs-mhaw-b3ge
16
vulnerability VCID-t3jn-vwbx-u7cr
17
vulnerability VCID-tw1y-t4qj-j3d1
18
vulnerability VCID-vndb-w8e1-4ugv
19
vulnerability VCID-wr5t-xqnn-gkcj
20
vulnerability VCID-wxps-mnue-6bbh
21
vulnerability VCID-xa4m-xpa9-v7h8
22
vulnerability VCID-xqew-bx7v-1qfk
23
vulnerability VCID-y32z-2d3f-gkgw
24
vulnerability VCID-zdq2-dhb2-6kaq
25
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.30
1
url pkg:composer/typo3/cms@8.7.17
purl pkg:composer/typo3/cms@8.7.17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18dg-eevv-3ug9
1
vulnerability VCID-1kae-ffj3-xyc7
2
vulnerability VCID-2meq-x4kd-bbdn
3
vulnerability VCID-3gg5-1921-rbfs
4
vulnerability VCID-3n2r-awja-dug9
5
vulnerability VCID-3v4n-fzxa-bfaw
6
vulnerability VCID-4ack-haf2-cfbe
7
vulnerability VCID-4btk-jt5n-2ugf
8
vulnerability VCID-551q-gpyd-ffe8
9
vulnerability VCID-5jgb-dsyx-hyb4
10
vulnerability VCID-5paq-5frf-43ed
11
vulnerability VCID-5qfv-y43v-akdm
12
vulnerability VCID-6487-15z5-pkd4
13
vulnerability VCID-6b5q-vzs3-pkcc
14
vulnerability VCID-9g62-zd1x-3bdg
15
vulnerability VCID-9gpp-ez8w-rqav
16
vulnerability VCID-axaf-45kr-kbfe
17
vulnerability VCID-bajy-qbwq-fufn
18
vulnerability VCID-bnne-7p2q-eqd2
19
vulnerability VCID-c2tm-eqmm-1ugt
20
vulnerability VCID-cm14-t8uv-k3es
21
vulnerability VCID-cmka-8484-27bu
22
vulnerability VCID-dbrh-t8zx-nkd9
23
vulnerability VCID-dj88-f3p8-cfbn
24
vulnerability VCID-dm97-51uu-r7gw
25
vulnerability VCID-dsu7-jjjq-f3e1
26
vulnerability VCID-e72u-tpc3-23g3
27
vulnerability VCID-eajg-ctpd-2bby
28
vulnerability VCID-ehzg-bzrd-kbcc
29
vulnerability VCID-ekfd-wp8z-d7e1
30
vulnerability VCID-f963-qur3-2qb7
31
vulnerability VCID-gcnj-6qb6-pbgz
32
vulnerability VCID-he5m-6wj4-rbhc
33
vulnerability VCID-j77k-hjgx-5kc5
34
vulnerability VCID-jppe-cbgm-k3cz
35
vulnerability VCID-k4h1-mvnf-1ybx
36
vulnerability VCID-k8af-cg9k-87a9
37
vulnerability VCID-m7w6-b2xu-6uee
38
vulnerability VCID-mnz3-rj21-67ad
39
vulnerability VCID-n15v-ta9h-6ffb
40
vulnerability VCID-n78p-x7hh-gqcf
41
vulnerability VCID-pk8d-8u15-5bfq
42
vulnerability VCID-px44-19tj-h7aa
43
vulnerability VCID-q8hy-wjd9-nbgp
44
vulnerability VCID-qb4j-9tz7-m7a2
45
vulnerability VCID-rdrs-mhaw-b3ge
46
vulnerability VCID-s64f-x81f-b7ce
47
vulnerability VCID-shqd-udhm-pff8
48
vulnerability VCID-stzu-sxe6-5yf5
49
vulnerability VCID-t1n7-eswt-73gw
50
vulnerability VCID-t3jn-vwbx-u7cr
51
vulnerability VCID-tqf5-2fsm-8fch
52
vulnerability VCID-tw1y-t4qj-j3d1
53
vulnerability VCID-vndb-w8e1-4ugv
54
vulnerability VCID-vxj6-wvyz-zbaq
55
vulnerability VCID-vxry-uvph-kbfd
56
vulnerability VCID-vybh-pxr3-17hn
57
vulnerability VCID-vyvy-y3cw-hbgr
58
vulnerability VCID-wea9-egep-h7g5
59
vulnerability VCID-wr5t-xqnn-gkcj
60
vulnerability VCID-wxps-mnue-6bbh
61
vulnerability VCID-xa4m-xpa9-v7h8
62
vulnerability VCID-xh7y-56vy-5ud8
63
vulnerability VCID-xqew-bx7v-1qfk
64
vulnerability VCID-y32z-2d3f-gkgw
65
vulnerability VCID-zdq2-dhb2-6kaq
66
vulnerability VCID-zkea-ge1t-z7gn
67
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.17
2
url pkg:composer/typo3/cms@9.3.2
purl pkg:composer/typo3/cms@9.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18dg-eevv-3ug9
1
vulnerability VCID-1kae-ffj3-xyc7
2
vulnerability VCID-2meq-x4kd-bbdn
3
vulnerability VCID-2mn6-mdmz-4yd9
4
vulnerability VCID-3gg5-1921-rbfs
5
vulnerability VCID-3n2r-awja-dug9
6
vulnerability VCID-3v4n-fzxa-bfaw
7
vulnerability VCID-4ack-haf2-cfbe
8
vulnerability VCID-4btk-jt5n-2ugf
9
vulnerability VCID-4mkw-tv16-jyca
10
vulnerability VCID-543x-cnbz-1kb9
11
vulnerability VCID-551q-gpyd-ffe8
12
vulnerability VCID-58js-jzm4-4fc7
13
vulnerability VCID-5jgb-dsyx-hyb4
14
vulnerability VCID-5kzs-ex81-bbaj
15
vulnerability VCID-5paq-5frf-43ed
16
vulnerability VCID-6487-15z5-pkd4
17
vulnerability VCID-6a9t-8dmn-s3bv
18
vulnerability VCID-6b5q-vzs3-pkcc
19
vulnerability VCID-9g62-zd1x-3bdg
20
vulnerability VCID-9gpp-ez8w-rqav
21
vulnerability VCID-a49c-fqrj-nbb3
22
vulnerability VCID-anfj-pmkg-skhe
23
vulnerability VCID-axaf-45kr-kbfe
24
vulnerability VCID-bajy-qbwq-fufn
25
vulnerability VCID-bnne-7p2q-eqd2
26
vulnerability VCID-c2tm-eqmm-1ugt
27
vulnerability VCID-cm14-t8uv-k3es
28
vulnerability VCID-cmka-8484-27bu
29
vulnerability VCID-d8d1-sat6-muhe
30
vulnerability VCID-dbrh-t8zx-nkd9
31
vulnerability VCID-dcy2-efyc-6qgq
32
vulnerability VCID-dj88-f3p8-cfbn
33
vulnerability VCID-dm97-51uu-r7gw
34
vulnerability VCID-dsu7-jjjq-f3e1
35
vulnerability VCID-e72u-tpc3-23g3
36
vulnerability VCID-eajg-ctpd-2bby
37
vulnerability VCID-ekfd-wp8z-d7e1
38
vulnerability VCID-f963-qur3-2qb7
39
vulnerability VCID-gcnj-6qb6-pbgz
40
vulnerability VCID-he5m-6wj4-rbhc
41
vulnerability VCID-jppe-cbgm-k3cz
42
vulnerability VCID-k4h1-mvnf-1ybx
43
vulnerability VCID-k8af-cg9k-87a9
44
vulnerability VCID-kc67-7kf7-s3d7
45
vulnerability VCID-kj9x-psfz-2ug1
46
vulnerability VCID-m7w6-b2xu-6uee
47
vulnerability VCID-mnz3-rj21-67ad
48
vulnerability VCID-n15v-ta9h-6ffb
49
vulnerability VCID-n78p-x7hh-gqcf
50
vulnerability VCID-p715-yexd-jfgc
51
vulnerability VCID-phgh-sd4m-zbdx
52
vulnerability VCID-pk8d-8u15-5bfq
53
vulnerability VCID-px44-19tj-h7aa
54
vulnerability VCID-q8hy-wjd9-nbgp
55
vulnerability VCID-qb4j-9tz7-m7a2
56
vulnerability VCID-raxk-rm9v-hubn
57
vulnerability VCID-rdrs-mhaw-b3ge
58
vulnerability VCID-s64f-x81f-b7ce
59
vulnerability VCID-shqd-udhm-pff8
60
vulnerability VCID-stzu-sxe6-5yf5
61
vulnerability VCID-sw7v-fbjk-13hy
62
vulnerability VCID-t1n7-eswt-73gw
63
vulnerability VCID-t3jn-vwbx-u7cr
64
vulnerability VCID-tqf5-2fsm-8fch
65
vulnerability VCID-tw1y-t4qj-j3d1
66
vulnerability VCID-u9bx-8e86-wbew
67
vulnerability VCID-ve7g-8st5-wffb
68
vulnerability VCID-vndb-w8e1-4ugv
69
vulnerability VCID-vxj6-wvyz-zbaq
70
vulnerability VCID-vxry-uvph-kbfd
71
vulnerability VCID-vybh-pxr3-17hn
72
vulnerability VCID-vyvy-y3cw-hbgr
73
vulnerability VCID-wea9-egep-h7g5
74
vulnerability VCID-wr5t-xqnn-gkcj
75
vulnerability VCID-wxps-mnue-6bbh
76
vulnerability VCID-xa4m-xpa9-v7h8
77
vulnerability VCID-xh7y-56vy-5ud8
78
vulnerability VCID-xtdg-uj46-rkcm
79
vulnerability VCID-xwc2-z7hx-4qa7
80
vulnerability VCID-y32z-2d3f-gkgw
81
vulnerability VCID-zdq2-dhb2-6kaq
82
vulnerability VCID-zkea-ge1t-z7gn
83
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.3.2
aliases GHSA-ppgf-8745-8pgx
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-tmrt-6fxw-5ugh
51
url VCID-tw1y-t4qj-j3d1
vulnerability_id VCID-tw1y-t4qj-j3d1
summary 
Cross-site Scripting
Cross-Site Scripting in Backend Modal Component.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-007/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2018-007/
fixed_packages
0
url pkg:composer/typo3/cms@7.6.32
purl pkg:composer/typo3/cms@7.6.32
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5jgb-dsyx-hyb4
1
vulnerability VCID-5paq-5frf-43ed
2
vulnerability VCID-bajy-qbwq-fufn
3
vulnerability VCID-dsu7-jjjq-f3e1
4
vulnerability VCID-f963-qur3-2qb7
5
vulnerability VCID-gcnj-6qb6-pbgz
6
vulnerability VCID-mnz3-rj21-67ad
7
vulnerability VCID-n15v-ta9h-6ffb
8
vulnerability VCID-t3jn-vwbx-u7cr
9
vulnerability VCID-xa4m-xpa9-v7h8
10
vulnerability VCID-y32z-2d3f-gkgw
11
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.32
1
url pkg:composer/typo3/cms@8.7.21
purl pkg:composer/typo3/cms@8.7.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18dg-eevv-3ug9
1
vulnerability VCID-1kae-ffj3-xyc7
2
vulnerability VCID-2meq-x4kd-bbdn
3
vulnerability VCID-3n2r-awja-dug9
4
vulnerability VCID-3v4n-fzxa-bfaw
5
vulnerability VCID-4ack-haf2-cfbe
6
vulnerability VCID-551q-gpyd-ffe8
7
vulnerability VCID-5jgb-dsyx-hyb4
8
vulnerability VCID-5paq-5frf-43ed
9
vulnerability VCID-5qfv-y43v-akdm
10
vulnerability VCID-6487-15z5-pkd4
11
vulnerability VCID-9g62-zd1x-3bdg
12
vulnerability VCID-9gpp-ez8w-rqav
13
vulnerability VCID-axaf-45kr-kbfe
14
vulnerability VCID-bajy-qbwq-fufn
15
vulnerability VCID-c2tm-eqmm-1ugt
16
vulnerability VCID-cm14-t8uv-k3es
17
vulnerability VCID-cmka-8484-27bu
18
vulnerability VCID-dj88-f3p8-cfbn
19
vulnerability VCID-dsu7-jjjq-f3e1
20
vulnerability VCID-e72u-tpc3-23g3
21
vulnerability VCID-eajg-ctpd-2bby
22
vulnerability VCID-ekfd-wp8z-d7e1
23
vulnerability VCID-f963-qur3-2qb7
24
vulnerability VCID-gcnj-6qb6-pbgz
25
vulnerability VCID-he5m-6wj4-rbhc
26
vulnerability VCID-j77k-hjgx-5kc5
27
vulnerability VCID-jppe-cbgm-k3cz
28
vulnerability VCID-k4h1-mvnf-1ybx
29
vulnerability VCID-k8af-cg9k-87a9
30
vulnerability VCID-m7w6-b2xu-6uee
31
vulnerability VCID-mnz3-rj21-67ad
32
vulnerability VCID-n15v-ta9h-6ffb
33
vulnerability VCID-px44-19tj-h7aa
34
vulnerability VCID-q8hy-wjd9-nbgp
35
vulnerability VCID-s64f-x81f-b7ce
36
vulnerability VCID-shqd-udhm-pff8
37
vulnerability VCID-stzu-sxe6-5yf5
38
vulnerability VCID-t1n7-eswt-73gw
39
vulnerability VCID-t3jn-vwbx-u7cr
40
vulnerability VCID-tqf5-2fsm-8fch
41
vulnerability VCID-vxj6-wvyz-zbaq
42
vulnerability VCID-vxry-uvph-kbfd
43
vulnerability VCID-vybh-pxr3-17hn
44
vulnerability VCID-vyvy-y3cw-hbgr
45
vulnerability VCID-wea9-egep-h7g5
46
vulnerability VCID-xa4m-xpa9-v7h8
47
vulnerability VCID-xh7y-56vy-5ud8
48
vulnerability VCID-y32z-2d3f-gkgw
49
vulnerability VCID-zdq2-dhb2-6kaq
50
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.21
2
url pkg:composer/typo3/cms@9.5.2
purl pkg:composer/typo3/cms@9.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18dg-eevv-3ug9
1
vulnerability VCID-1kae-ffj3-xyc7
2
vulnerability VCID-2meq-x4kd-bbdn
3
vulnerability VCID-2mn6-mdmz-4yd9
4
vulnerability VCID-3n2r-awja-dug9
5
vulnerability VCID-3v4n-fzxa-bfaw
6
vulnerability VCID-4ack-haf2-cfbe
7
vulnerability VCID-4mkw-tv16-jyca
8
vulnerability VCID-543x-cnbz-1kb9
9
vulnerability VCID-551q-gpyd-ffe8
10
vulnerability VCID-58js-jzm4-4fc7
11
vulnerability VCID-5jgb-dsyx-hyb4
12
vulnerability VCID-5kzs-ex81-bbaj
13
vulnerability VCID-5paq-5frf-43ed
14
vulnerability VCID-6487-15z5-pkd4
15
vulnerability VCID-6a9t-8dmn-s3bv
16
vulnerability VCID-9g62-zd1x-3bdg
17
vulnerability VCID-9gpp-ez8w-rqav
18
vulnerability VCID-a49c-fqrj-nbb3
19
vulnerability VCID-anfj-pmkg-skhe
20
vulnerability VCID-axaf-45kr-kbfe
21
vulnerability VCID-bajy-qbwq-fufn
22
vulnerability VCID-c2tm-eqmm-1ugt
23
vulnerability VCID-cm14-t8uv-k3es
24
vulnerability VCID-cmka-8484-27bu
25
vulnerability VCID-d8d1-sat6-muhe
26
vulnerability VCID-dcy2-efyc-6qgq
27
vulnerability VCID-dj88-f3p8-cfbn
28
vulnerability VCID-dsu7-jjjq-f3e1
29
vulnerability VCID-e72u-tpc3-23g3
30
vulnerability VCID-eajg-ctpd-2bby
31
vulnerability VCID-ekfd-wp8z-d7e1
32
vulnerability VCID-f963-qur3-2qb7
33
vulnerability VCID-gcnj-6qb6-pbgz
34
vulnerability VCID-he5m-6wj4-rbhc
35
vulnerability VCID-jppe-cbgm-k3cz
36
vulnerability VCID-k4h1-mvnf-1ybx
37
vulnerability VCID-k8af-cg9k-87a9
38
vulnerability VCID-kc67-7kf7-s3d7
39
vulnerability VCID-kj9x-psfz-2ug1
40
vulnerability VCID-m7w6-b2xu-6uee
41
vulnerability VCID-mnz3-rj21-67ad
42
vulnerability VCID-n15v-ta9h-6ffb
43
vulnerability VCID-p715-yexd-jfgc
44
vulnerability VCID-phgh-sd4m-zbdx
45
vulnerability VCID-px44-19tj-h7aa
46
vulnerability VCID-q8hy-wjd9-nbgp
47
vulnerability VCID-raxk-rm9v-hubn
48
vulnerability VCID-s64f-x81f-b7ce
49
vulnerability VCID-shqd-udhm-pff8
50
vulnerability VCID-stzu-sxe6-5yf5
51
vulnerability VCID-sw7v-fbjk-13hy
52
vulnerability VCID-t1n7-eswt-73gw
53
vulnerability VCID-t3jn-vwbx-u7cr
54
vulnerability VCID-tqf5-2fsm-8fch
55
vulnerability VCID-u9bx-8e86-wbew
56
vulnerability VCID-ve7g-8st5-wffb
57
vulnerability VCID-vxj6-wvyz-zbaq
58
vulnerability VCID-vxry-uvph-kbfd
59
vulnerability VCID-vybh-pxr3-17hn
60
vulnerability VCID-vyvy-y3cw-hbgr
61
vulnerability VCID-wea9-egep-h7g5
62
vulnerability VCID-xa4m-xpa9-v7h8
63
vulnerability VCID-xh7y-56vy-5ud8
64
vulnerability VCID-xtdg-uj46-rkcm
65
vulnerability VCID-xwc2-z7hx-4qa7
66
vulnerability VCID-y32z-2d3f-gkgw
67
vulnerability VCID-zdq2-dhb2-6kaq
68
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.2
aliases 2018-12-11-2
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-tw1y-t4qj-j3d1
52
url VCID-vbbx-pk8m-jfhd
vulnerability_id VCID-vbbx-pk8m-jfhd
summary 
Typo3 Vulnerable to Cache Poisoning
**Problem Description:** A request URL with arbitrary arguments, but still pointing to the home page of  a TYPO3 installation can be cached if the configuration option `config.prefixLocalAnchors` is used with the values "all" or "cached". The impact of this vulnerability is that unfamiliar looking links to the home page can end up in the cache, which leads to a reload of the page in the browser when section links are followed by web page visitors, instead of just directly jumping to the requested section of the page. TYPO3 versions 4.6.x and higher are only affected if the homepage is not a shortcut to a different page.

**Solution:** Removing the configuration options `config.prefixLocalAnchors` (and optionally also config.baseUrl) in favor of `config.absRefPrefix`

**Credits:** Thanks to Gernot Leitgab who discovered and reported the vulnerability.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-9509
reference_id
reference_type
scores
0
value 0.00633
scoring_system epss
scoring_elements 0.70392
published_at 2026-04-21T12:55:00Z
1
value 0.00633
scoring_system epss
scoring_elements 0.70372
published_at 2026-04-12T12:55:00Z
2
value 0.00633
scoring_system epss
scoring_elements 0.70358
published_at 2026-04-13T12:55:00Z
3
value 0.00633
scoring_system epss
scoring_elements 0.70401
published_at 2026-04-16T12:55:00Z
4
value 0.00633
scoring_system epss
scoring_elements 0.70411
published_at 2026-04-18T12:55:00Z
5
value 0.00633
scoring_system epss
scoring_elements 0.70296
published_at 2026-04-01T12:55:00Z
6
value 0.00633
scoring_system epss
scoring_elements 0.70309
published_at 2026-04-02T12:55:00Z
7
value 0.00633
scoring_system epss
scoring_elements 0.70326
published_at 2026-04-04T12:55:00Z
8
value 0.00633
scoring_system epss
scoring_elements 0.70304
published_at 2026-04-07T12:55:00Z
9
value 0.00633
scoring_system epss
scoring_elements 0.70349
published_at 2026-04-08T12:55:00Z
10
value 0.00633
scoring_system epss
scoring_elements 0.70364
published_at 2026-04-09T12:55:00Z
11
value 0.00633
scoring_system epss
scoring_elements 0.70388
published_at 2026-04-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-9509
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2014-9509
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:P/I:P/A:P
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2014-9509
2
reference_url http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2014-003
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2014-003
3
reference_url http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2014-003/
reference_id
reference_type
scores
url http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2014-003/
4
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.0:*:*:*:*:*:*:*
5
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.1:*:*:*:*:*:*:*
6
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.10:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.10:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.10:*:*:*:*:*:*:*
7
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.11:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.11:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.11:*:*:*:*:*:*:*
8
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.12:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.12:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.12:*:*:*:*:*:*:*
9
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.13:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.13:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.13:*:*:*:*:*:*:*
10
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.14:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.14:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.14:*:*:*:*:*:*:*
11
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.15:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.15:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.15:*:*:*:*:*:*:*
12
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.16:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.16:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.16:*:*:*:*:*:*:*
13
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.17:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.17:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.17:*:*:*:*:*:*:*
14
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.18:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.18:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.18:*:*:*:*:*:*:*
15
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.19:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.19:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.19:*:*:*:*:*:*:*
16
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.2:*:*:*:*:*:*:*
17
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.20:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.20:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.20:*:*:*:*:*:*:*
18
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.21:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.21:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.21:*:*:*:*:*:*:*
19
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.22:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.22:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.22:*:*:*:*:*:*:*
20
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.23:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.23:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.23:*:*:*:*:*:*:*
21
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.24:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.24:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.24:*:*:*:*:*:*:*
22
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.25:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.25:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.25:*:*:*:*:*:*:*
23
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.26:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.26:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.26:*:*:*:*:*:*:*
24
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.27:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.27:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.27:*:*:*:*:*:*:*
25
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.28:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.28:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.28:*:*:*:*:*:*:*
26
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.29:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.29:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.29:*:*:*:*:*:*:*
27
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.3:*:*:*:*:*:*:*
28
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.30:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.30:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.30:*:*:*:*:*:*:*
29
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.31:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.31:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.31:*:*:*:*:*:*:*
30
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.32:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.32:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.32:*:*:*:*:*:*:*
31
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.33:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.33:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.33:*:*:*:*:*:*:*
32
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.34:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.34:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.34:*:*:*:*:*:*:*
33
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.35:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.35:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.35:*:*:*:*:*:*:*
34
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.36:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.36:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.36:*:*:*:*:*:*:*
35
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.37:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.37:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.37:*:*:*:*:*:*:*
36
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.38:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.38:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.38:*:*:*:*:*:*:*
37
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.4:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.4:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.4:*:*:*:*:*:*:*
38
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.5:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.5:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.5:*:*:*:*:*:*:*
39
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.6:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.6:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.6:*:*:*:*:*:*:*
40
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.7:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.7:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.7:*:*:*:*:*:*:*
41
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.8:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.8:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.8:*:*:*:*:*:*:*
42
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.9:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.5.9:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.5.9:*:*:*:*:*:*:*
43
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.6.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.0:*:*:*:*:*:*:*
44
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.6.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.1:*:*:*:*:*:*:*
45
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.10:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.6.10:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.10:*:*:*:*:*:*:*
46
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.11:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.6.11:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.11:*:*:*:*:*:*:*
47
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.12:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.6.12:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.12:*:*:*:*:*:*:*
48
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.13:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.6.13:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.13:*:*:*:*:*:*:*
49
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.14:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.6.14:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.14:*:*:*:*:*:*:*
50
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.15:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.6.15:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.15:*:*:*:*:*:*:*
51
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.16:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.6.16:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.16:*:*:*:*:*:*:*
52
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.17:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.6.17:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.17:*:*:*:*:*:*:*
53
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.18:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.6.18:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.18:*:*:*:*:*:*:*
54
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.6.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.2:*:*:*:*:*:*:*
55
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.6.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.3:*:*:*:*:*:*:*
56
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.4:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.6.4:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.4:*:*:*:*:*:*:*
57
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.5:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.6.5:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.5:*:*:*:*:*:*:*
58
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.6:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.6.6:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.6:*:*:*:*:*:*:*
59
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.7:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.6.7:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.7:*:*:*:*:*:*:*
60
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.8:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.6.8:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.8:*:*:*:*:*:*:*
61
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.9:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.6.9:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.6.9:*:*:*:*:*:*:*
62
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.7.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.0:*:*:*:*:*:*:*
63
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.7.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.1:*:*:*:*:*:*:*
64
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.10:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.7.10:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.10:*:*:*:*:*:*:*
65
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.11:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.7.11:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.11:*:*:*:*:*:*:*
66
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.12:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.7.12:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.12:*:*:*:*:*:*:*
67
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.13:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.7.13:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.13:*:*:*:*:*:*:*
68
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.14:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.7.14:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.14:*:*:*:*:*:*:*
69
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.15:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.7.15:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.15:*:*:*:*:*:*:*
70
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.16:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.7.16:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.16:*:*:*:*:*:*:*
71
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.17:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.7.17:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.17:*:*:*:*:*:*:*
72
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.18:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.7.18:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.18:*:*:*:*:*:*:*
73
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.19:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.7.19:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.19:*:*:*:*:*:*:*
74
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.7.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.2:*:*:*:*:*:*:*
75
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.20:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.7.20:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.20:*:*:*:*:*:*:*
76
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.7.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.3:*:*:*:*:*:*:*
77
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.4:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.7.4:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.4:*:*:*:*:*:*:*
78
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.5:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.7.5:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.5:*:*:*:*:*:*:*
79
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.6:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.7.6:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.6:*:*:*:*:*:*:*
80
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.7:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.7.7:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.7:*:*:*:*:*:*:*
81
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.8:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.7.8:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.8:*:*:*:*:*:*:*
82
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.9:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:4.7.9:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:4.7.9:*:*:*:*:*:*:*
83
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0:*:*:*:*:*:*:*
84
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.0.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0.1:*:*:*:*:*:*:*
85
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0.10:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.0.10:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0.10:*:*:*:*:*:*:*
86
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0.11:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.0.11:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0.11:*:*:*:*:*:*:*
87
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0.12:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.0.12:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0.12:*:*:*:*:*:*:*
88
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0.13:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.0.13:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0.13:*:*:*:*:*:*:*
89
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0.14:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.0.14:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0.14:*:*:*:*:*:*:*
90
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.0.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0.2:*:*:*:*:*:*:*
91
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.0.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0.3:*:*:*:*:*:*:*
92
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0.4:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.0.4:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0.4:*:*:*:*:*:*:*
93
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0.5:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.0.5:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0.5:*:*:*:*:*:*:*
94
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0.6:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.0.6:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0.6:*:*:*:*:*:*:*
95
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0.7:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.0.7:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0.7:*:*:*:*:*:*:*
96
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0.8:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.0.8:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0.8:*:*:*:*:*:*:*
97
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0.9:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.0.9:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.0.9:*:*:*:*:*:*:*
98
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.1:*:*:*:*:*:*:*
99
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.1.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.1.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.1.1:*:*:*:*:*:*:*
100
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.1.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.1.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.1.2:*:*:*:*:*:*:*
101
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.1.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.1.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.1.3:*:*:*:*:*:*:*
102
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.1.4:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.1.4:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.1.4:*:*:*:*:*:*:*
103
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.1.5:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.1.5:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.1.5:*:*:*:*:*:*:*
104
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.1.6:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.1.6:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.1.6:*:*:*:*:*:*:*
105
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.1.7:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.1.7:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.1.7:*:*:*:*:*:*:*
106
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.1.8:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.1.8:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.1.8:*:*:*:*:*:*:*
107
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.1.9:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.1.9:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.1.9:*:*:*:*:*:*:*
108
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2:*:*:*:*:*:*:*
109
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:beta1:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.0:beta1:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:beta1:*:*:*:*:*:*
110
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:beta2:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.0:beta2:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:beta2:*:*:*:*:*:*
111
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:beta3:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.0:beta3:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.0:beta3:*:*:*:*:*:*
112
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.1:*:*:*:*:*:*:*
113
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.2:*:*:*:*:*:*:*
114
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.3:*:*:*:*:*:*:*
115
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.4:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.4:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.4:*:*:*:*:*:*:*
116
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.5:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.5:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.5:*:*:*:*:*:*:*
117
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.6:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.6:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.6:*:*:*:*:*:*:*
118
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.7:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.7:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.7:*:*:*:*:*:*:*
119
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.8:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:6.2.8:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:6.2.8:*:*:*:*:*:*:*
120
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:7.0.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:7.0.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:7.0.0:*:*:*:*:*:*:*
121
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:7.0.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:typo3:typo3:7.0.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:typo3:typo3:7.0.1:*:*:*:*:*:*:*
122
reference_url https://github.com/advisories/GHSA-5479-gqqr-f9gj
reference_id GHSA-5479-gqqr-f9gj
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-5479-gqqr-f9gj
fixed_packages
0
url pkg:composer/typo3/cms@7.0.2
purl pkg:composer/typo3/cms@7.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ng4-5tkh-g7h5
1
vulnerability VCID-28bf-jvah-zkhw
2
vulnerability VCID-2rhx-afay-97da
3
vulnerability VCID-37wu-bjfj-k7eg
4
vulnerability VCID-4etp-u4pt-v7hm
5
vulnerability VCID-51ba-3ag9-rucn
6
vulnerability VCID-5jgb-dsyx-hyb4
7
vulnerability VCID-5paq-5frf-43ed
8
vulnerability VCID-6b5q-vzs3-pkcc
9
vulnerability VCID-6gms-w48j-4ffh
10
vulnerability VCID-6pvx-1qan-ukef
11
vulnerability VCID-6spw-66jg-syb1
12
vulnerability VCID-7zx9-8afq-y3hc
13
vulnerability VCID-b5ht-z6zp-pbht
14
vulnerability VCID-bajy-qbwq-fufn
15
vulnerability VCID-bnne-7p2q-eqd2
16
vulnerability VCID-buax-rz7x-r7c2
17
vulnerability VCID-bxjw-7426-gyb8
18
vulnerability VCID-cczn-x8q7-k7ba
19
vulnerability VCID-cjgc-q6p5-2ydc
20
vulnerability VCID-ck23-cxn6-bbf3
21
vulnerability VCID-dbrh-t8zx-nkd9
22
vulnerability VCID-dm97-51uu-r7gw
23
vulnerability VCID-dsu7-jjjq-f3e1
24
vulnerability VCID-ehzg-bzrd-kbcc
25
vulnerability VCID-f4pm-9tq5-q3ch
26
vulnerability VCID-gcnj-6qb6-pbgz
27
vulnerability VCID-h958-d3pm-kfcs
28
vulnerability VCID-jmu3-5k7e-x7ch
29
vulnerability VCID-jqx9-41zx-dbcy
30
vulnerability VCID-kgcq-paqm-9ya6
31
vulnerability VCID-kpze-14jy-xud9
32
vulnerability VCID-kqbk-4q4z-nkec
33
vulnerability VCID-mnz3-rj21-67ad
34
vulnerability VCID-n15v-ta9h-6ffb
35
vulnerability VCID-n78p-x7hh-gqcf
36
vulnerability VCID-ne8w-dpjw-7qf1
37
vulnerability VCID-nwxj-3ajk-rkh5
38
vulnerability VCID-pgzu-kxuj-j3fh
39
vulnerability VCID-pk8d-8u15-5bfq
40
vulnerability VCID-q6dx-uskc-y3hs
41
vulnerability VCID-qemc-8kj8-r3cd
42
vulnerability VCID-rdrs-mhaw-b3ge
43
vulnerability VCID-re9h-ze98-rbhu
44
vulnerability VCID-rwgf-2pfh-ufdz
45
vulnerability VCID-se8w-fv8x-tqde
46
vulnerability VCID-sr3p-pdxy-4yhu
47
vulnerability VCID-t3jn-vwbx-u7cr
48
vulnerability VCID-tmrt-6fxw-5ugh
49
vulnerability VCID-tw1y-t4qj-j3d1
50
vulnerability VCID-vndb-w8e1-4ugv
51
vulnerability VCID-wr5t-xqnn-gkcj
52
vulnerability VCID-ww44-zmx7-47ft
53
vulnerability VCID-wxps-mnue-6bbh
54
vulnerability VCID-xa4m-xpa9-v7h8
55
vulnerability VCID-xhq3-ts9t-sbdy
56
vulnerability VCID-xkpp-psz2-2kag
57
vulnerability VCID-xqew-bx7v-1qfk
58
vulnerability VCID-y32z-2d3f-gkgw
59
vulnerability VCID-zdq2-dhb2-6kaq
60
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.0.2
aliases CVE-2014-9509, GHSA-5479-gqqr-f9gj
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-vbbx-pk8m-jfhd
53
url VCID-vndb-w8e1-4ugv
vulnerability_id VCID-vndb-w8e1-4ugv
summary 
TYPO3 Cross-Site Scripting in Online Media Asset Rendering
Failing to properly encode user input, online media asset rendering (`*.youtube` and `*.vimeo` files) is vulnerable to cross-site scripting. A valid backend user account or write access on the server system (e.g. SFTP) is needed in order to exploit this vulnerability.
references
0
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2018-12-11-1.yaml
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2018-12-11-1.yaml
1
reference_url https://github.com/TYPO3/typo3
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3
2
reference_url https://github.com/TYPO3/typo3/commit/20927adfb8aae0093508c904937e40114b92a90c
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/20927adfb8aae0093508c904937e40114b92a90c
3
reference_url https://github.com/TYPO3/typo3/commit/a32a9a746f807b14571139f0cb7caa00b8d037a5
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/a32a9a746f807b14571139f0cb7caa00b8d037a5
4
reference_url https://github.com/TYPO3/typo3/commit/c9174937802581bfecfaa788512a4f6e5cf8e9c7
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/c9174937802581bfecfaa788512a4f6e5cf8e9c7
5
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-006
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2018-006
6
reference_url https://github.com/advisories/GHSA-8m6j-p5jv-v69w
reference_id GHSA-8m6j-p5jv-v69w
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-8m6j-p5jv-v69w
fixed_packages
0
url pkg:composer/typo3/cms@7.6.32
purl pkg:composer/typo3/cms@7.6.32
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5jgb-dsyx-hyb4
1
vulnerability VCID-5paq-5frf-43ed
2
vulnerability VCID-bajy-qbwq-fufn
3
vulnerability VCID-dsu7-jjjq-f3e1
4
vulnerability VCID-f963-qur3-2qb7
5
vulnerability VCID-gcnj-6qb6-pbgz
6
vulnerability VCID-mnz3-rj21-67ad
7
vulnerability VCID-n15v-ta9h-6ffb
8
vulnerability VCID-t3jn-vwbx-u7cr
9
vulnerability VCID-xa4m-xpa9-v7h8
10
vulnerability VCID-y32z-2d3f-gkgw
11
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.32
1
url pkg:composer/typo3/cms@8.7.21
purl pkg:composer/typo3/cms@8.7.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18dg-eevv-3ug9
1
vulnerability VCID-1kae-ffj3-xyc7
2
vulnerability VCID-2meq-x4kd-bbdn
3
vulnerability VCID-3n2r-awja-dug9
4
vulnerability VCID-3v4n-fzxa-bfaw
5
vulnerability VCID-4ack-haf2-cfbe
6
vulnerability VCID-551q-gpyd-ffe8
7
vulnerability VCID-5jgb-dsyx-hyb4
8
vulnerability VCID-5paq-5frf-43ed
9
vulnerability VCID-5qfv-y43v-akdm
10
vulnerability VCID-6487-15z5-pkd4
11
vulnerability VCID-9g62-zd1x-3bdg
12
vulnerability VCID-9gpp-ez8w-rqav
13
vulnerability VCID-axaf-45kr-kbfe
14
vulnerability VCID-bajy-qbwq-fufn
15
vulnerability VCID-c2tm-eqmm-1ugt
16
vulnerability VCID-cm14-t8uv-k3es
17
vulnerability VCID-cmka-8484-27bu
18
vulnerability VCID-dj88-f3p8-cfbn
19
vulnerability VCID-dsu7-jjjq-f3e1
20
vulnerability VCID-e72u-tpc3-23g3
21
vulnerability VCID-eajg-ctpd-2bby
22
vulnerability VCID-ekfd-wp8z-d7e1
23
vulnerability VCID-f963-qur3-2qb7
24
vulnerability VCID-gcnj-6qb6-pbgz
25
vulnerability VCID-he5m-6wj4-rbhc
26
vulnerability VCID-j77k-hjgx-5kc5
27
vulnerability VCID-jppe-cbgm-k3cz
28
vulnerability VCID-k4h1-mvnf-1ybx
29
vulnerability VCID-k8af-cg9k-87a9
30
vulnerability VCID-m7w6-b2xu-6uee
31
vulnerability VCID-mnz3-rj21-67ad
32
vulnerability VCID-n15v-ta9h-6ffb
33
vulnerability VCID-px44-19tj-h7aa
34
vulnerability VCID-q8hy-wjd9-nbgp
35
vulnerability VCID-s64f-x81f-b7ce
36
vulnerability VCID-shqd-udhm-pff8
37
vulnerability VCID-stzu-sxe6-5yf5
38
vulnerability VCID-t1n7-eswt-73gw
39
vulnerability VCID-t3jn-vwbx-u7cr
40
vulnerability VCID-tqf5-2fsm-8fch
41
vulnerability VCID-vxj6-wvyz-zbaq
42
vulnerability VCID-vxry-uvph-kbfd
43
vulnerability VCID-vybh-pxr3-17hn
44
vulnerability VCID-vyvy-y3cw-hbgr
45
vulnerability VCID-wea9-egep-h7g5
46
vulnerability VCID-xa4m-xpa9-v7h8
47
vulnerability VCID-xh7y-56vy-5ud8
48
vulnerability VCID-y32z-2d3f-gkgw
49
vulnerability VCID-zdq2-dhb2-6kaq
50
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.21
2
url pkg:composer/typo3/cms@9.5.2
purl pkg:composer/typo3/cms@9.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18dg-eevv-3ug9
1
vulnerability VCID-1kae-ffj3-xyc7
2
vulnerability VCID-2meq-x4kd-bbdn
3
vulnerability VCID-2mn6-mdmz-4yd9
4
vulnerability VCID-3n2r-awja-dug9
5
vulnerability VCID-3v4n-fzxa-bfaw
6
vulnerability VCID-4ack-haf2-cfbe
7
vulnerability VCID-4mkw-tv16-jyca
8
vulnerability VCID-543x-cnbz-1kb9
9
vulnerability VCID-551q-gpyd-ffe8
10
vulnerability VCID-58js-jzm4-4fc7
11
vulnerability VCID-5jgb-dsyx-hyb4
12
vulnerability VCID-5kzs-ex81-bbaj
13
vulnerability VCID-5paq-5frf-43ed
14
vulnerability VCID-6487-15z5-pkd4
15
vulnerability VCID-6a9t-8dmn-s3bv
16
vulnerability VCID-9g62-zd1x-3bdg
17
vulnerability VCID-9gpp-ez8w-rqav
18
vulnerability VCID-a49c-fqrj-nbb3
19
vulnerability VCID-anfj-pmkg-skhe
20
vulnerability VCID-axaf-45kr-kbfe
21
vulnerability VCID-bajy-qbwq-fufn
22
vulnerability VCID-c2tm-eqmm-1ugt
23
vulnerability VCID-cm14-t8uv-k3es
24
vulnerability VCID-cmka-8484-27bu
25
vulnerability VCID-d8d1-sat6-muhe
26
vulnerability VCID-dcy2-efyc-6qgq
27
vulnerability VCID-dj88-f3p8-cfbn
28
vulnerability VCID-dsu7-jjjq-f3e1
29
vulnerability VCID-e72u-tpc3-23g3
30
vulnerability VCID-eajg-ctpd-2bby
31
vulnerability VCID-ekfd-wp8z-d7e1
32
vulnerability VCID-f963-qur3-2qb7
33
vulnerability VCID-gcnj-6qb6-pbgz
34
vulnerability VCID-he5m-6wj4-rbhc
35
vulnerability VCID-jppe-cbgm-k3cz
36
vulnerability VCID-k4h1-mvnf-1ybx
37
vulnerability VCID-k8af-cg9k-87a9
38
vulnerability VCID-kc67-7kf7-s3d7
39
vulnerability VCID-kj9x-psfz-2ug1
40
vulnerability VCID-m7w6-b2xu-6uee
41
vulnerability VCID-mnz3-rj21-67ad
42
vulnerability VCID-n15v-ta9h-6ffb
43
vulnerability VCID-p715-yexd-jfgc
44
vulnerability VCID-phgh-sd4m-zbdx
45
vulnerability VCID-px44-19tj-h7aa
46
vulnerability VCID-q8hy-wjd9-nbgp
47
vulnerability VCID-raxk-rm9v-hubn
48
vulnerability VCID-s64f-x81f-b7ce
49
vulnerability VCID-shqd-udhm-pff8
50
vulnerability VCID-stzu-sxe6-5yf5
51
vulnerability VCID-sw7v-fbjk-13hy
52
vulnerability VCID-t1n7-eswt-73gw
53
vulnerability VCID-t3jn-vwbx-u7cr
54
vulnerability VCID-tqf5-2fsm-8fch
55
vulnerability VCID-u9bx-8e86-wbew
56
vulnerability VCID-ve7g-8st5-wffb
57
vulnerability VCID-vxj6-wvyz-zbaq
58
vulnerability VCID-vxry-uvph-kbfd
59
vulnerability VCID-vybh-pxr3-17hn
60
vulnerability VCID-vyvy-y3cw-hbgr
61
vulnerability VCID-wea9-egep-h7g5
62
vulnerability VCID-xa4m-xpa9-v7h8
63
vulnerability VCID-xh7y-56vy-5ud8
64
vulnerability VCID-xtdg-uj46-rkcm
65
vulnerability VCID-xwc2-z7hx-4qa7
66
vulnerability VCID-y32z-2d3f-gkgw
67
vulnerability VCID-zdq2-dhb2-6kaq
68
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.2
aliases GHSA-8m6j-p5jv-v69w
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-vndb-w8e1-4ugv
54
url VCID-wr5t-xqnn-gkcj
vulnerability_id VCID-wr5t-xqnn-gkcj
summary 
TYPO3 Cross-Site Scripting in Backend Modal Component
Failing to properly encode user input, notifications shown in modal windows in the TYPO3 backend are vulnerable to cross-site scripting. A valid backend user account is needed in order to exploit this vulnerability.
references
0
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2018-12-11-2.yaml
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2018-12-11-2.yaml
1
reference_url https://github.com/TYPO3/typo3
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3
2
reference_url https://github.com/TYPO3/typo3/commit/02cd5c97228cba477d16c68e28309ce25c433ce9
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/02cd5c97228cba477d16c68e28309ce25c433ce9
3
reference_url https://github.com/TYPO3/typo3/commit/89a38ad0ef9411745954f53f29bea5b8ce81cd32
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/89a38ad0ef9411745954f53f29bea5b8ce81cd32
4
reference_url https://github.com/TYPO3/typo3/commit/c35646c3f7795a4a7b0046a88f146b490fa4883c
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/c35646c3f7795a4a7b0046a88f146b490fa4883c
5
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-007
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2018-007
6
reference_url https://github.com/advisories/GHSA-7q33-hxwj-7p8v
reference_id GHSA-7q33-hxwj-7p8v
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-7q33-hxwj-7p8v
fixed_packages
0
url pkg:composer/typo3/cms@7.6.32
purl pkg:composer/typo3/cms@7.6.32
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5jgb-dsyx-hyb4
1
vulnerability VCID-5paq-5frf-43ed
2
vulnerability VCID-bajy-qbwq-fufn
3
vulnerability VCID-dsu7-jjjq-f3e1
4
vulnerability VCID-f963-qur3-2qb7
5
vulnerability VCID-gcnj-6qb6-pbgz
6
vulnerability VCID-mnz3-rj21-67ad
7
vulnerability VCID-n15v-ta9h-6ffb
8
vulnerability VCID-t3jn-vwbx-u7cr
9
vulnerability VCID-xa4m-xpa9-v7h8
10
vulnerability VCID-y32z-2d3f-gkgw
11
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.32
1
url pkg:composer/typo3/cms@8.7.21
purl pkg:composer/typo3/cms@8.7.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18dg-eevv-3ug9
1
vulnerability VCID-1kae-ffj3-xyc7
2
vulnerability VCID-2meq-x4kd-bbdn
3
vulnerability VCID-3n2r-awja-dug9
4
vulnerability VCID-3v4n-fzxa-bfaw
5
vulnerability VCID-4ack-haf2-cfbe
6
vulnerability VCID-551q-gpyd-ffe8
7
vulnerability VCID-5jgb-dsyx-hyb4
8
vulnerability VCID-5paq-5frf-43ed
9
vulnerability VCID-5qfv-y43v-akdm
10
vulnerability VCID-6487-15z5-pkd4
11
vulnerability VCID-9g62-zd1x-3bdg
12
vulnerability VCID-9gpp-ez8w-rqav
13
vulnerability VCID-axaf-45kr-kbfe
14
vulnerability VCID-bajy-qbwq-fufn
15
vulnerability VCID-c2tm-eqmm-1ugt
16
vulnerability VCID-cm14-t8uv-k3es
17
vulnerability VCID-cmka-8484-27bu
18
vulnerability VCID-dj88-f3p8-cfbn
19
vulnerability VCID-dsu7-jjjq-f3e1
20
vulnerability VCID-e72u-tpc3-23g3
21
vulnerability VCID-eajg-ctpd-2bby
22
vulnerability VCID-ekfd-wp8z-d7e1
23
vulnerability VCID-f963-qur3-2qb7
24
vulnerability VCID-gcnj-6qb6-pbgz
25
vulnerability VCID-he5m-6wj4-rbhc
26
vulnerability VCID-j77k-hjgx-5kc5
27
vulnerability VCID-jppe-cbgm-k3cz
28
vulnerability VCID-k4h1-mvnf-1ybx
29
vulnerability VCID-k8af-cg9k-87a9
30
vulnerability VCID-m7w6-b2xu-6uee
31
vulnerability VCID-mnz3-rj21-67ad
32
vulnerability VCID-n15v-ta9h-6ffb
33
vulnerability VCID-px44-19tj-h7aa
34
vulnerability VCID-q8hy-wjd9-nbgp
35
vulnerability VCID-s64f-x81f-b7ce
36
vulnerability VCID-shqd-udhm-pff8
37
vulnerability VCID-stzu-sxe6-5yf5
38
vulnerability VCID-t1n7-eswt-73gw
39
vulnerability VCID-t3jn-vwbx-u7cr
40
vulnerability VCID-tqf5-2fsm-8fch
41
vulnerability VCID-vxj6-wvyz-zbaq
42
vulnerability VCID-vxry-uvph-kbfd
43
vulnerability VCID-vybh-pxr3-17hn
44
vulnerability VCID-vyvy-y3cw-hbgr
45
vulnerability VCID-wea9-egep-h7g5
46
vulnerability VCID-xa4m-xpa9-v7h8
47
vulnerability VCID-xh7y-56vy-5ud8
48
vulnerability VCID-y32z-2d3f-gkgw
49
vulnerability VCID-zdq2-dhb2-6kaq
50
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.21
2
url pkg:composer/typo3/cms@9.5.2
purl pkg:composer/typo3/cms@9.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18dg-eevv-3ug9
1
vulnerability VCID-1kae-ffj3-xyc7
2
vulnerability VCID-2meq-x4kd-bbdn
3
vulnerability VCID-2mn6-mdmz-4yd9
4
vulnerability VCID-3n2r-awja-dug9
5
vulnerability VCID-3v4n-fzxa-bfaw
6
vulnerability VCID-4ack-haf2-cfbe
7
vulnerability VCID-4mkw-tv16-jyca
8
vulnerability VCID-543x-cnbz-1kb9
9
vulnerability VCID-551q-gpyd-ffe8
10
vulnerability VCID-58js-jzm4-4fc7
11
vulnerability VCID-5jgb-dsyx-hyb4
12
vulnerability VCID-5kzs-ex81-bbaj
13
vulnerability VCID-5paq-5frf-43ed
14
vulnerability VCID-6487-15z5-pkd4
15
vulnerability VCID-6a9t-8dmn-s3bv
16
vulnerability VCID-9g62-zd1x-3bdg
17
vulnerability VCID-9gpp-ez8w-rqav
18
vulnerability VCID-a49c-fqrj-nbb3
19
vulnerability VCID-anfj-pmkg-skhe
20
vulnerability VCID-axaf-45kr-kbfe
21
vulnerability VCID-bajy-qbwq-fufn
22
vulnerability VCID-c2tm-eqmm-1ugt
23
vulnerability VCID-cm14-t8uv-k3es
24
vulnerability VCID-cmka-8484-27bu
25
vulnerability VCID-d8d1-sat6-muhe
26
vulnerability VCID-dcy2-efyc-6qgq
27
vulnerability VCID-dj88-f3p8-cfbn
28
vulnerability VCID-dsu7-jjjq-f3e1
29
vulnerability VCID-e72u-tpc3-23g3
30
vulnerability VCID-eajg-ctpd-2bby
31
vulnerability VCID-ekfd-wp8z-d7e1
32
vulnerability VCID-f963-qur3-2qb7
33
vulnerability VCID-gcnj-6qb6-pbgz
34
vulnerability VCID-he5m-6wj4-rbhc
35
vulnerability VCID-jppe-cbgm-k3cz
36
vulnerability VCID-k4h1-mvnf-1ybx
37
vulnerability VCID-k8af-cg9k-87a9
38
vulnerability VCID-kc67-7kf7-s3d7
39
vulnerability VCID-kj9x-psfz-2ug1
40
vulnerability VCID-m7w6-b2xu-6uee
41
vulnerability VCID-mnz3-rj21-67ad
42
vulnerability VCID-n15v-ta9h-6ffb
43
vulnerability VCID-p715-yexd-jfgc
44
vulnerability VCID-phgh-sd4m-zbdx
45
vulnerability VCID-px44-19tj-h7aa
46
vulnerability VCID-q8hy-wjd9-nbgp
47
vulnerability VCID-raxk-rm9v-hubn
48
vulnerability VCID-s64f-x81f-b7ce
49
vulnerability VCID-shqd-udhm-pff8
50
vulnerability VCID-stzu-sxe6-5yf5
51
vulnerability VCID-sw7v-fbjk-13hy
52
vulnerability VCID-t1n7-eswt-73gw
53
vulnerability VCID-t3jn-vwbx-u7cr
54
vulnerability VCID-tqf5-2fsm-8fch
55
vulnerability VCID-u9bx-8e86-wbew
56
vulnerability VCID-ve7g-8st5-wffb
57
vulnerability VCID-vxj6-wvyz-zbaq
58
vulnerability VCID-vxry-uvph-kbfd
59
vulnerability VCID-vybh-pxr3-17hn
60
vulnerability VCID-vyvy-y3cw-hbgr
61
vulnerability VCID-wea9-egep-h7g5
62
vulnerability VCID-xa4m-xpa9-v7h8
63
vulnerability VCID-xh7y-56vy-5ud8
64
vulnerability VCID-xtdg-uj46-rkcm
65
vulnerability VCID-xwc2-z7hx-4qa7
66
vulnerability VCID-y32z-2d3f-gkgw
67
vulnerability VCID-zdq2-dhb2-6kaq
68
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.2
aliases GHSA-7q33-hxwj-7p8v
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wr5t-xqnn-gkcj
55
url VCID-ww44-zmx7-47ft
vulnerability_id VCID-ww44-zmx7-47ft
summary 
Cross-Site Scripting vulnerability in typolinks
All link fields within the TYPO3 installation are vulnerable to Cross-Site Scripting as authorized editors can insert javascript commands by using the url scheme "javascript:".
references
0
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-012/
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-012/
fixed_packages
0
url pkg:composer/typo3/cms@7.6.1
purl pkg:composer/typo3/cms@7.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bnd-6xsq-nbec
1
vulnerability VCID-1jcy-nx8g-z3d3
2
vulnerability VCID-1qjx-grvf-y7bk
3
vulnerability VCID-25t3-1sm6-3kdn
4
vulnerability VCID-28bf-jvah-zkhw
5
vulnerability VCID-2fs8-bscc-3ye2
6
vulnerability VCID-3m53-kkk2-j7c2
7
vulnerability VCID-435j-f3yx-9yep
8
vulnerability VCID-47px-4d98-ubab
9
vulnerability VCID-5jgb-dsyx-hyb4
10
vulnerability VCID-5paq-5frf-43ed
11
vulnerability VCID-5ppt-avmb-cqb2
12
vulnerability VCID-6b5q-vzs3-pkcc
13
vulnerability VCID-6wsa-4ywc-8fh4
14
vulnerability VCID-7d1g-j3k5-gub8
15
vulnerability VCID-8jp8-a363-67be
16
vulnerability VCID-b715-6z6c-qqar
17
vulnerability VCID-bajy-qbwq-fufn
18
vulnerability VCID-bck9-34jp-6ydx
19
vulnerability VCID-bmj2-4k58-tqa4
20
vulnerability VCID-bnne-7p2q-eqd2
21
vulnerability VCID-bxjw-7426-gyb8
22
vulnerability VCID-c6zq-cfg5-u7d9
23
vulnerability VCID-dbrh-t8zx-nkd9
24
vulnerability VCID-dm97-51uu-r7gw
25
vulnerability VCID-dsu7-jjjq-f3e1
26
vulnerability VCID-ehzg-bzrd-kbcc
27
vulnerability VCID-ep6t-zwd1-4bb3
28
vulnerability VCID-f963-qur3-2qb7
29
vulnerability VCID-fber-yp9q-f7dr
30
vulnerability VCID-fqbx-7xyq-fkav
31
vulnerability VCID-fy3g-uegw-2bew
32
vulnerability VCID-g4ak-ertr-rya6
33
vulnerability VCID-gcnj-6qb6-pbgz
34
vulnerability VCID-gezz-pvpj-p3c6
35
vulnerability VCID-gspd-apwy-efgu
36
vulnerability VCID-h2dd-7b1r-k7bs
37
vulnerability VCID-h63t-9enx-qfdn
38
vulnerability VCID-h958-d3pm-kfcs
39
vulnerability VCID-hpgq-deze-p7dp
40
vulnerability VCID-hv3n-j8ck-1ufx
41
vulnerability VCID-jmu3-5k7e-x7ch
42
vulnerability VCID-jqth-wfgx-87cx
43
vulnerability VCID-jqx9-41zx-dbcy
44
vulnerability VCID-m3nf-1qbv-d3dj
45
vulnerability VCID-mhud-kq57-nka3
46
vulnerability VCID-mnz3-rj21-67ad
47
vulnerability VCID-mqbh-k9n3-nbed
48
vulnerability VCID-mqk6-z77g-bfdv
49
vulnerability VCID-mub5-s7h1-57cy
50
vulnerability VCID-n15v-ta9h-6ffb
51
vulnerability VCID-n61z-6v8a-hygf
52
vulnerability VCID-n78p-x7hh-gqcf
53
vulnerability VCID-nnh9-udcj-m7fv
54
vulnerability VCID-npn5-rand-q3dg
55
vulnerability VCID-nt6a-5zkv-pbcm
56
vulnerability VCID-nwxj-3ajk-rkh5
57
vulnerability VCID-p1u9-66hm-47er
58
vulnerability VCID-p545-vwe6-9kfr
59
vulnerability VCID-pk8d-8u15-5bfq
60
vulnerability VCID-pnfa-cksc-43de
61
vulnerability VCID-prbd-r82t-87dm
62
vulnerability VCID-q9ak-qcq6-qfhy
63
vulnerability VCID-rdrs-mhaw-b3ge
64
vulnerability VCID-rg5d-d8nc-9qfu
65
vulnerability VCID-rkms-w15c-4yb1
66
vulnerability VCID-rzw5-8d1u-sfam
67
vulnerability VCID-sr3p-pdxy-4yhu
68
vulnerability VCID-t3jn-vwbx-u7cr
69
vulnerability VCID-tmrt-6fxw-5ugh
70
vulnerability VCID-tw1y-t4qj-j3d1
71
vulnerability VCID-uckg-j48d-efad
72
vulnerability VCID-uj89-13ub-43fz
73
vulnerability VCID-utpu-q2dv-m3hm
74
vulnerability VCID-vndb-w8e1-4ugv
75
vulnerability VCID-vrt1-aj9v-2kb6
76
vulnerability VCID-w5pn-eb7y-1kdp
77
vulnerability VCID-wge3-kxdq-f3bz
78
vulnerability VCID-wq32-kgff-gke8
79
vulnerability VCID-wr5t-xqnn-gkcj
80
vulnerability VCID-wxps-mnue-6bbh
81
vulnerability VCID-xa4m-xpa9-v7h8
82
vulnerability VCID-xqew-bx7v-1qfk
83
vulnerability VCID-y32z-2d3f-gkgw
84
vulnerability VCID-z5qq-nwn5-tqgm
85
vulnerability VCID-zdq2-dhb2-6kaq
86
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.1
aliases TYPO3-CORE-SA-2015-012
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ww44-zmx7-47ft
56
url VCID-wxps-mnue-6bbh
vulnerability_id VCID-wxps-mnue-6bbh
summary 
TYPO3 Cross-Site Scripting in Frontend User Login
Failing to properly encode user input, login status display is vulnerable to cross-site scripting in the website frontend. A valid user account is needed in order to exploit this vulnerability - either a backend user or a frontend user having the possibility to modify their user profile.

Template patterns that are affected are

- ###FEUSER_[fieldName]### using system extension felogin
- <!--###USERNAME###--> for regular frontend rendering (pattern can be defined individually using TypoScript setting config.USERNAME_substToken)
references
0
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2018-12-11-3.yaml
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2018-12-11-3.yaml
1
reference_url https://github.com/TYPO3/typo3
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3
2
reference_url https://github.com/TYPO3/typo3/commit/1c85fe70269e2ff8ecf0b6d5f16550c6cd0ddc78
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/1c85fe70269e2ff8ecf0b6d5f16550c6cd0ddc78
3
reference_url https://github.com/TYPO3/typo3/commit/373bec5d7d415f0764ebbadc7970610dc26da068
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/373bec5d7d415f0764ebbadc7970610dc26da068
4
reference_url https://github.com/TYPO3/typo3/commit/e4143195e1451630f058a58ab62d92135948a927
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/e4143195e1451630f058a58ab62d92135948a927
5
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-008
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2018-008
6
reference_url https://github.com/advisories/GHSA-2rcw-9hrm-8q7q
reference_id GHSA-2rcw-9hrm-8q7q
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-2rcw-9hrm-8q7q
fixed_packages
0
url pkg:composer/typo3/cms@7.6.32
purl pkg:composer/typo3/cms@7.6.32
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5jgb-dsyx-hyb4
1
vulnerability VCID-5paq-5frf-43ed
2
vulnerability VCID-bajy-qbwq-fufn
3
vulnerability VCID-dsu7-jjjq-f3e1
4
vulnerability VCID-f963-qur3-2qb7
5
vulnerability VCID-gcnj-6qb6-pbgz
6
vulnerability VCID-mnz3-rj21-67ad
7
vulnerability VCID-n15v-ta9h-6ffb
8
vulnerability VCID-t3jn-vwbx-u7cr
9
vulnerability VCID-xa4m-xpa9-v7h8
10
vulnerability VCID-y32z-2d3f-gkgw
11
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.32
1
url pkg:composer/typo3/cms@8.7.21
purl pkg:composer/typo3/cms@8.7.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18dg-eevv-3ug9
1
vulnerability VCID-1kae-ffj3-xyc7
2
vulnerability VCID-2meq-x4kd-bbdn
3
vulnerability VCID-3n2r-awja-dug9
4
vulnerability VCID-3v4n-fzxa-bfaw
5
vulnerability VCID-4ack-haf2-cfbe
6
vulnerability VCID-551q-gpyd-ffe8
7
vulnerability VCID-5jgb-dsyx-hyb4
8
vulnerability VCID-5paq-5frf-43ed
9
vulnerability VCID-5qfv-y43v-akdm
10
vulnerability VCID-6487-15z5-pkd4
11
vulnerability VCID-9g62-zd1x-3bdg
12
vulnerability VCID-9gpp-ez8w-rqav
13
vulnerability VCID-axaf-45kr-kbfe
14
vulnerability VCID-bajy-qbwq-fufn
15
vulnerability VCID-c2tm-eqmm-1ugt
16
vulnerability VCID-cm14-t8uv-k3es
17
vulnerability VCID-cmka-8484-27bu
18
vulnerability VCID-dj88-f3p8-cfbn
19
vulnerability VCID-dsu7-jjjq-f3e1
20
vulnerability VCID-e72u-tpc3-23g3
21
vulnerability VCID-eajg-ctpd-2bby
22
vulnerability VCID-ekfd-wp8z-d7e1
23
vulnerability VCID-f963-qur3-2qb7
24
vulnerability VCID-gcnj-6qb6-pbgz
25
vulnerability VCID-he5m-6wj4-rbhc
26
vulnerability VCID-j77k-hjgx-5kc5
27
vulnerability VCID-jppe-cbgm-k3cz
28
vulnerability VCID-k4h1-mvnf-1ybx
29
vulnerability VCID-k8af-cg9k-87a9
30
vulnerability VCID-m7w6-b2xu-6uee
31
vulnerability VCID-mnz3-rj21-67ad
32
vulnerability VCID-n15v-ta9h-6ffb
33
vulnerability VCID-px44-19tj-h7aa
34
vulnerability VCID-q8hy-wjd9-nbgp
35
vulnerability VCID-s64f-x81f-b7ce
36
vulnerability VCID-shqd-udhm-pff8
37
vulnerability VCID-stzu-sxe6-5yf5
38
vulnerability VCID-t1n7-eswt-73gw
39
vulnerability VCID-t3jn-vwbx-u7cr
40
vulnerability VCID-tqf5-2fsm-8fch
41
vulnerability VCID-vxj6-wvyz-zbaq
42
vulnerability VCID-vxry-uvph-kbfd
43
vulnerability VCID-vybh-pxr3-17hn
44
vulnerability VCID-vyvy-y3cw-hbgr
45
vulnerability VCID-wea9-egep-h7g5
46
vulnerability VCID-xa4m-xpa9-v7h8
47
vulnerability VCID-xh7y-56vy-5ud8
48
vulnerability VCID-y32z-2d3f-gkgw
49
vulnerability VCID-zdq2-dhb2-6kaq
50
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.21
2
url pkg:composer/typo3/cms@9.5.2
purl pkg:composer/typo3/cms@9.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18dg-eevv-3ug9
1
vulnerability VCID-1kae-ffj3-xyc7
2
vulnerability VCID-2meq-x4kd-bbdn
3
vulnerability VCID-2mn6-mdmz-4yd9
4
vulnerability VCID-3n2r-awja-dug9
5
vulnerability VCID-3v4n-fzxa-bfaw
6
vulnerability VCID-4ack-haf2-cfbe
7
vulnerability VCID-4mkw-tv16-jyca
8
vulnerability VCID-543x-cnbz-1kb9
9
vulnerability VCID-551q-gpyd-ffe8
10
vulnerability VCID-58js-jzm4-4fc7
11
vulnerability VCID-5jgb-dsyx-hyb4
12
vulnerability VCID-5kzs-ex81-bbaj
13
vulnerability VCID-5paq-5frf-43ed
14
vulnerability VCID-6487-15z5-pkd4
15
vulnerability VCID-6a9t-8dmn-s3bv
16
vulnerability VCID-9g62-zd1x-3bdg
17
vulnerability VCID-9gpp-ez8w-rqav
18
vulnerability VCID-a49c-fqrj-nbb3
19
vulnerability VCID-anfj-pmkg-skhe
20
vulnerability VCID-axaf-45kr-kbfe
21
vulnerability VCID-bajy-qbwq-fufn
22
vulnerability VCID-c2tm-eqmm-1ugt
23
vulnerability VCID-cm14-t8uv-k3es
24
vulnerability VCID-cmka-8484-27bu
25
vulnerability VCID-d8d1-sat6-muhe
26
vulnerability VCID-dcy2-efyc-6qgq
27
vulnerability VCID-dj88-f3p8-cfbn
28
vulnerability VCID-dsu7-jjjq-f3e1
29
vulnerability VCID-e72u-tpc3-23g3
30
vulnerability VCID-eajg-ctpd-2bby
31
vulnerability VCID-ekfd-wp8z-d7e1
32
vulnerability VCID-f963-qur3-2qb7
33
vulnerability VCID-gcnj-6qb6-pbgz
34
vulnerability VCID-he5m-6wj4-rbhc
35
vulnerability VCID-jppe-cbgm-k3cz
36
vulnerability VCID-k4h1-mvnf-1ybx
37
vulnerability VCID-k8af-cg9k-87a9
38
vulnerability VCID-kc67-7kf7-s3d7
39
vulnerability VCID-kj9x-psfz-2ug1
40
vulnerability VCID-m7w6-b2xu-6uee
41
vulnerability VCID-mnz3-rj21-67ad
42
vulnerability VCID-n15v-ta9h-6ffb
43
vulnerability VCID-p715-yexd-jfgc
44
vulnerability VCID-phgh-sd4m-zbdx
45
vulnerability VCID-px44-19tj-h7aa
46
vulnerability VCID-q8hy-wjd9-nbgp
47
vulnerability VCID-raxk-rm9v-hubn
48
vulnerability VCID-s64f-x81f-b7ce
49
vulnerability VCID-shqd-udhm-pff8
50
vulnerability VCID-stzu-sxe6-5yf5
51
vulnerability VCID-sw7v-fbjk-13hy
52
vulnerability VCID-t1n7-eswt-73gw
53
vulnerability VCID-t3jn-vwbx-u7cr
54
vulnerability VCID-tqf5-2fsm-8fch
55
vulnerability VCID-u9bx-8e86-wbew
56
vulnerability VCID-ve7g-8st5-wffb
57
vulnerability VCID-vxj6-wvyz-zbaq
58
vulnerability VCID-vxry-uvph-kbfd
59
vulnerability VCID-vybh-pxr3-17hn
60
vulnerability VCID-vyvy-y3cw-hbgr
61
vulnerability VCID-wea9-egep-h7g5
62
vulnerability VCID-xa4m-xpa9-v7h8
63
vulnerability VCID-xh7y-56vy-5ud8
64
vulnerability VCID-xtdg-uj46-rkcm
65
vulnerability VCID-xwc2-z7hx-4qa7
66
vulnerability VCID-y32z-2d3f-gkgw
67
vulnerability VCID-zdq2-dhb2-6kaq
68
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.2
aliases GHSA-2rcw-9hrm-8q7q
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wxps-mnue-6bbh
57
url VCID-xa4m-xpa9-v7h8
vulnerability_id VCID-xa4m-xpa9-v7h8
summary 
TYPO3 Insecure Deserialization in Query Generator & Query View
An issue was discovered in TYPO3 before 8.7.30, 9.x before 9.5.12, and 10.x before 10.2.2. It has been discovered that the classes QueryGenerator and QueryView are vulnerable to insecure deserialization. One exploitable scenario requires having the system extension ext:lowlevel (Backend Module: DB Check) installed, with a valid backend user who has administrator privileges. The other exploitable scenario requires having the system extension ext:sys_action installed, with a valid backend user who has limited privileges.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-19849
reference_id
reference_type
scores
0
value 0.00746
scoring_system epss
scoring_elements 0.73104
published_at 2026-04-21T12:55:00Z
1
value 0.00746
scoring_system epss
scoring_elements 0.73005
published_at 2026-04-01T12:55:00Z
2
value 0.00746
scoring_system epss
scoring_elements 0.73015
published_at 2026-04-02T12:55:00Z
3
value 0.00746
scoring_system epss
scoring_elements 0.73036
published_at 2026-04-04T12:55:00Z
4
value 0.00746
scoring_system epss
scoring_elements 0.73011
published_at 2026-04-07T12:55:00Z
5
value 0.00746
scoring_system epss
scoring_elements 0.73048
published_at 2026-04-08T12:55:00Z
6
value 0.00746
scoring_system epss
scoring_elements 0.73061
published_at 2026-04-09T12:55:00Z
7
value 0.00746
scoring_system epss
scoring_elements 0.73085
published_at 2026-04-11T12:55:00Z
8
value 0.00746
scoring_system epss
scoring_elements 0.73065
published_at 2026-04-12T12:55:00Z
9
value 0.00746
scoring_system epss
scoring_elements 0.73058
published_at 2026-04-13T12:55:00Z
10
value 0.00746
scoring_system epss
scoring_elements 0.73101
published_at 2026-04-16T12:55:00Z
11
value 0.00746
scoring_system epss
scoring_elements 0.73111
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-19849
1
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2019-19849.yaml
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2019-19849.yaml
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2019-19849.yaml
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2019-19849.yaml
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-19849
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-19849
4
reference_url https://review.typo3.org/q/%2522Resolves:+%252389005%2522+topic:security
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://review.typo3.org/q/%2522Resolves:+%252389005%2522+topic:security
5
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-026
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2019-026
6
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-026/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-026/
7
reference_url https://github.com/advisories/GHSA-rcgc-4xfc-564v
reference_id GHSA-rcgc-4xfc-564v
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-rcgc-4xfc-564v
fixed_packages
0
url pkg:composer/typo3/cms@8.7.30
purl pkg:composer/typo3/cms@8.7.30
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5jgb-dsyx-hyb4
1
vulnerability VCID-5paq-5frf-43ed
2
vulnerability VCID-bajy-qbwq-fufn
3
vulnerability VCID-dsu7-jjjq-f3e1
4
vulnerability VCID-ekfd-wp8z-d7e1
5
vulnerability VCID-f963-qur3-2qb7
6
vulnerability VCID-he5m-6wj4-rbhc
7
vulnerability VCID-mnz3-rj21-67ad
8
vulnerability VCID-n15v-ta9h-6ffb
9
vulnerability VCID-s64f-x81f-b7ce
10
vulnerability VCID-t1n7-eswt-73gw
11
vulnerability VCID-t3jn-vwbx-u7cr
12
vulnerability VCID-vyvy-y3cw-hbgr
13
vulnerability VCID-xh7y-56vy-5ud8
14
vulnerability VCID-y32z-2d3f-gkgw
15
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.30
1
url pkg:composer/typo3/cms@9.5.12
purl pkg:composer/typo3/cms@9.5.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mn6-mdmz-4yd9
1
vulnerability VCID-543x-cnbz-1kb9
2
vulnerability VCID-58js-jzm4-4fc7
3
vulnerability VCID-5jgb-dsyx-hyb4
4
vulnerability VCID-5kzs-ex81-bbaj
5
vulnerability VCID-5paq-5frf-43ed
6
vulnerability VCID-6a9t-8dmn-s3bv
7
vulnerability VCID-7kjw-j8st-mqfr
8
vulnerability VCID-a49c-fqrj-nbb3
9
vulnerability VCID-bajy-qbwq-fufn
10
vulnerability VCID-d8d1-sat6-muhe
11
vulnerability VCID-dsu7-jjjq-f3e1
12
vulnerability VCID-ekfd-wp8z-d7e1
13
vulnerability VCID-f963-qur3-2qb7
14
vulnerability VCID-he5m-6wj4-rbhc
15
vulnerability VCID-mnz3-rj21-67ad
16
vulnerability VCID-n15v-ta9h-6ffb
17
vulnerability VCID-phgh-sd4m-zbdx
18
vulnerability VCID-s64f-x81f-b7ce
19
vulnerability VCID-sw7v-fbjk-13hy
20
vulnerability VCID-t1n7-eswt-73gw
21
vulnerability VCID-t3jn-vwbx-u7cr
22
vulnerability VCID-ve7g-8st5-wffb
23
vulnerability VCID-vyvy-y3cw-hbgr
24
vulnerability VCID-xh7y-56vy-5ud8
25
vulnerability VCID-y32z-2d3f-gkgw
26
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.12
2
url pkg:composer/typo3/cms@10.2.1
purl pkg:composer/typo3/cms@10.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1yxw-saf5-wue7
1
vulnerability VCID-2mn6-mdmz-4yd9
2
vulnerability VCID-4jpa-6fqh-hbfg
3
vulnerability VCID-543x-cnbz-1kb9
4
vulnerability VCID-58js-jzm4-4fc7
5
vulnerability VCID-5jgb-dsyx-hyb4
6
vulnerability VCID-5kzs-ex81-bbaj
7
vulnerability VCID-5paq-5frf-43ed
8
vulnerability VCID-6a9t-8dmn-s3bv
9
vulnerability VCID-7kjw-j8st-mqfr
10
vulnerability VCID-8sdd-b1bn-cuhx
11
vulnerability VCID-a49c-fqrj-nbb3
12
vulnerability VCID-a89c-jvwa-6kh5
13
vulnerability VCID-av8u-rvzq-4fc7
14
vulnerability VCID-bajy-qbwq-fufn
15
vulnerability VCID-cdjv-fp71-y3dv
16
vulnerability VCID-d8d1-sat6-muhe
17
vulnerability VCID-dhrm-uxuv-zfaj
18
vulnerability VCID-dsu7-jjjq-f3e1
19
vulnerability VCID-e32h-8q61-hbgc
20
vulnerability VCID-ekfd-wp8z-d7e1
21
vulnerability VCID-f963-qur3-2qb7
22
vulnerability VCID-he5m-6wj4-rbhc
23
vulnerability VCID-mnz3-rj21-67ad
24
vulnerability VCID-n15v-ta9h-6ffb
25
vulnerability VCID-phgh-sd4m-zbdx
26
vulnerability VCID-remd-55jh-r3g5
27
vulnerability VCID-s55j-8hbt-akhn
28
vulnerability VCID-s64f-x81f-b7ce
29
vulnerability VCID-sw7v-fbjk-13hy
30
vulnerability VCID-t1n7-eswt-73gw
31
vulnerability VCID-t3jn-vwbx-u7cr
32
vulnerability VCID-usmv-r64u-m7cb
33
vulnerability VCID-ve7g-8st5-wffb
34
vulnerability VCID-vwb2-a84s-5qak
35
vulnerability VCID-vyvy-y3cw-hbgr
36
vulnerability VCID-w13x-3rp9-wyej
37
vulnerability VCID-xh7y-56vy-5ud8
38
vulnerability VCID-y32z-2d3f-gkgw
39
vulnerability VCID-yj9g-uz1a-jkf2
40
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@10.2.1
3
url pkg:composer/typo3/cms@10.2.2
purl pkg:composer/typo3/cms@10.2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1yxw-saf5-wue7
1
vulnerability VCID-2mn6-mdmz-4yd9
2
vulnerability VCID-4jpa-6fqh-hbfg
3
vulnerability VCID-543x-cnbz-1kb9
4
vulnerability VCID-58js-jzm4-4fc7
5
vulnerability VCID-5jgb-dsyx-hyb4
6
vulnerability VCID-5kzs-ex81-bbaj
7
vulnerability VCID-5paq-5frf-43ed
8
vulnerability VCID-6a9t-8dmn-s3bv
9
vulnerability VCID-7kjw-j8st-mqfr
10
vulnerability VCID-8sdd-b1bn-cuhx
11
vulnerability VCID-a49c-fqrj-nbb3
12
vulnerability VCID-a89c-jvwa-6kh5
13
vulnerability VCID-av8u-rvzq-4fc7
14
vulnerability VCID-bajy-qbwq-fufn
15
vulnerability VCID-cdjv-fp71-y3dv
16
vulnerability VCID-d8d1-sat6-muhe
17
vulnerability VCID-dhrm-uxuv-zfaj
18
vulnerability VCID-dsu7-jjjq-f3e1
19
vulnerability VCID-e32h-8q61-hbgc
20
vulnerability VCID-ekfd-wp8z-d7e1
21
vulnerability VCID-f963-qur3-2qb7
22
vulnerability VCID-he5m-6wj4-rbhc
23
vulnerability VCID-mnz3-rj21-67ad
24
vulnerability VCID-n15v-ta9h-6ffb
25
vulnerability VCID-phgh-sd4m-zbdx
26
vulnerability VCID-remd-55jh-r3g5
27
vulnerability VCID-s55j-8hbt-akhn
28
vulnerability VCID-s64f-x81f-b7ce
29
vulnerability VCID-sw7v-fbjk-13hy
30
vulnerability VCID-t1n7-eswt-73gw
31
vulnerability VCID-t3jn-vwbx-u7cr
32
vulnerability VCID-usmv-r64u-m7cb
33
vulnerability VCID-ve7g-8st5-wffb
34
vulnerability VCID-vwb2-a84s-5qak
35
vulnerability VCID-vyvy-y3cw-hbgr
36
vulnerability VCID-w13x-3rp9-wyej
37
vulnerability VCID-xh7y-56vy-5ud8
38
vulnerability VCID-y32z-2d3f-gkgw
39
vulnerability VCID-yj9g-uz1a-jkf2
40
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@10.2.2
aliases CVE-2019-19849, GHSA-rcgc-4xfc-564v
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xa4m-xpa9-v7h8
58
url VCID-xhq3-ts9t-sbdy
vulnerability_id VCID-xhq3-ts9t-sbdy
summary Frontend login Session Fixation.
references
0
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-003/
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-003/
fixed_packages
0
url pkg:composer/typo3/cms@7.3.0
purl pkg:composer/typo3/cms@7.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ng4-5tkh-g7h5
1
vulnerability VCID-28bf-jvah-zkhw
2
vulnerability VCID-2rhx-afay-97da
3
vulnerability VCID-5jgb-dsyx-hyb4
4
vulnerability VCID-5paq-5frf-43ed
5
vulnerability VCID-6b5q-vzs3-pkcc
6
vulnerability VCID-6gms-w48j-4ffh
7
vulnerability VCID-6pvx-1qan-ukef
8
vulnerability VCID-6spw-66jg-syb1
9
vulnerability VCID-7zx9-8afq-y3hc
10
vulnerability VCID-b5ht-z6zp-pbht
11
vulnerability VCID-bajy-qbwq-fufn
12
vulnerability VCID-bnne-7p2q-eqd2
13
vulnerability VCID-buax-rz7x-r7c2
14
vulnerability VCID-bxjw-7426-gyb8
15
vulnerability VCID-cczn-x8q7-k7ba
16
vulnerability VCID-cjgc-q6p5-2ydc
17
vulnerability VCID-ck23-cxn6-bbf3
18
vulnerability VCID-dbrh-t8zx-nkd9
19
vulnerability VCID-dm97-51uu-r7gw
20
vulnerability VCID-dsu7-jjjq-f3e1
21
vulnerability VCID-ehzg-bzrd-kbcc
22
vulnerability VCID-f4pm-9tq5-q3ch
23
vulnerability VCID-gcnj-6qb6-pbgz
24
vulnerability VCID-h958-d3pm-kfcs
25
vulnerability VCID-jmu3-5k7e-x7ch
26
vulnerability VCID-jqx9-41zx-dbcy
27
vulnerability VCID-kgcq-paqm-9ya6
28
vulnerability VCID-kqbk-4q4z-nkec
29
vulnerability VCID-mnz3-rj21-67ad
30
vulnerability VCID-n15v-ta9h-6ffb
31
vulnerability VCID-n78p-x7hh-gqcf
32
vulnerability VCID-nwxj-3ajk-rkh5
33
vulnerability VCID-pgzu-kxuj-j3fh
34
vulnerability VCID-pk8d-8u15-5bfq
35
vulnerability VCID-q6dx-uskc-y3hs
36
vulnerability VCID-qemc-8kj8-r3cd
37
vulnerability VCID-rdrs-mhaw-b3ge
38
vulnerability VCID-rwgf-2pfh-ufdz
39
vulnerability VCID-sr3p-pdxy-4yhu
40
vulnerability VCID-t3jn-vwbx-u7cr
41
vulnerability VCID-tmrt-6fxw-5ugh
42
vulnerability VCID-tw1y-t4qj-j3d1
43
vulnerability VCID-vndb-w8e1-4ugv
44
vulnerability VCID-wr5t-xqnn-gkcj
45
vulnerability VCID-ww44-zmx7-47ft
46
vulnerability VCID-wxps-mnue-6bbh
47
vulnerability VCID-xa4m-xpa9-v7h8
48
vulnerability VCID-xkpp-psz2-2kag
49
vulnerability VCID-xqew-bx7v-1qfk
50
vulnerability VCID-y32z-2d3f-gkgw
51
vulnerability VCID-zdq2-dhb2-6kaq
52
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.3.0
aliases 2015-07-01-2
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xhq3-ts9t-sbdy
59
url VCID-xkpp-psz2-2kag
vulnerability_id VCID-xkpp-psz2-2kag
summary 
TYPO3 frontend login vulnerable to Session Fixation
It has been discovered that TYPO3 is susceptible to session fixation. If a user authenticates while anonymous session data is present, the session id is not changed. This makes it possible for attackers to generate a valid session id, trick users into using this session id (e.g. by leveraging a different Cross-Site Scripting vulnerability) and then maybe getting access to an authenticated session.
references
0
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2015-07-01-2.yaml
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2015-07-01-2.yaml
1
reference_url https://github.com/TYPO3/typo3
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3
2
reference_url https://github.com/TYPO3/typo3/commit/4c9aba94a930d56ab374693c9c5cc0458587278a
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/4c9aba94a930d56ab374693c9c5cc0458587278a
3
reference_url https://github.com/TYPO3/typo3/commit/4f6e84bba3c13ea8b2652af1a4c47758aa0705f4
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/4f6e84bba3c13ea8b2652af1a4c47758aa0705f4
4
reference_url https://typo3.org/security/advisory/typo3-core-sa-2015-003
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2015-003
5
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-003
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-003
6
reference_url https://github.com/advisories/GHSA-r9vc-jfmh-6j48
reference_id GHSA-r9vc-jfmh-6j48
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-r9vc-jfmh-6j48
fixed_packages
0
url pkg:composer/typo3/cms@7.3.1
purl pkg:composer/typo3/cms@7.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ng4-5tkh-g7h5
1
vulnerability VCID-28bf-jvah-zkhw
2
vulnerability VCID-2rhx-afay-97da
3
vulnerability VCID-5jgb-dsyx-hyb4
4
vulnerability VCID-5paq-5frf-43ed
5
vulnerability VCID-6b5q-vzs3-pkcc
6
vulnerability VCID-6pvx-1qan-ukef
7
vulnerability VCID-b5ht-z6zp-pbht
8
vulnerability VCID-bajy-qbwq-fufn
9
vulnerability VCID-bnne-7p2q-eqd2
10
vulnerability VCID-buax-rz7x-r7c2
11
vulnerability VCID-bxjw-7426-gyb8
12
vulnerability VCID-cczn-x8q7-k7ba
13
vulnerability VCID-cjgc-q6p5-2ydc
14
vulnerability VCID-ck23-cxn6-bbf3
15
vulnerability VCID-dbrh-t8zx-nkd9
16
vulnerability VCID-dm97-51uu-r7gw
17
vulnerability VCID-dsu7-jjjq-f3e1
18
vulnerability VCID-ehzg-bzrd-kbcc
19
vulnerability VCID-f4pm-9tq5-q3ch
20
vulnerability VCID-gcnj-6qb6-pbgz
21
vulnerability VCID-h958-d3pm-kfcs
22
vulnerability VCID-jmu3-5k7e-x7ch
23
vulnerability VCID-jqx9-41zx-dbcy
24
vulnerability VCID-kqbk-4q4z-nkec
25
vulnerability VCID-mnz3-rj21-67ad
26
vulnerability VCID-n15v-ta9h-6ffb
27
vulnerability VCID-n78p-x7hh-gqcf
28
vulnerability VCID-nwxj-3ajk-rkh5
29
vulnerability VCID-pgzu-kxuj-j3fh
30
vulnerability VCID-pk8d-8u15-5bfq
31
vulnerability VCID-q6dx-uskc-y3hs
32
vulnerability VCID-qemc-8kj8-r3cd
33
vulnerability VCID-rdrs-mhaw-b3ge
34
vulnerability VCID-sr3p-pdxy-4yhu
35
vulnerability VCID-t3jn-vwbx-u7cr
36
vulnerability VCID-tmrt-6fxw-5ugh
37
vulnerability VCID-tw1y-t4qj-j3d1
38
vulnerability VCID-vndb-w8e1-4ugv
39
vulnerability VCID-wr5t-xqnn-gkcj
40
vulnerability VCID-ww44-zmx7-47ft
41
vulnerability VCID-wxps-mnue-6bbh
42
vulnerability VCID-xa4m-xpa9-v7h8
43
vulnerability VCID-xqew-bx7v-1qfk
44
vulnerability VCID-y32z-2d3f-gkgw
45
vulnerability VCID-zdq2-dhb2-6kaq
46
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.3.1
aliases GHSA-r9vc-jfmh-6j48
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xkpp-psz2-2kag
60
url VCID-xqew-bx7v-1qfk
vulnerability_id VCID-xqew-bx7v-1qfk
summary 
TYPO3 Denial of Service in Frontend Record Registration
TYPO3’s built-in record registration functionality (aka `basic shopping cart`) using recs URL parameters is vulnerable to denial of service. Failing to properly ensure that anonymous user sessions are valid, attackers can use this vulnerability in order to create  an arbitrary amount of individual session-data records in the database.
references
0
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2018-12-11-7.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2018-12-11-7.yaml
1
reference_url https://github.com/TYPO3/typo3
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3
2
reference_url https://github.com/TYPO3/typo3/commit/05011d1248c54d00960e344fd920a6246da92415
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/05011d1248c54d00960e344fd920a6246da92415
3
reference_url https://github.com/TYPO3/typo3/commit/fc2b4b9fb978088267f83e73cd401d4371dd40e3
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/fc2b4b9fb978088267f83e73cd401d4371dd40e3
4
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-012
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2018-012
5
reference_url https://github.com/advisories/GHSA-g585-crjf-vhwq
reference_id GHSA-g585-crjf-vhwq
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-g585-crjf-vhwq
fixed_packages
0
url pkg:composer/typo3/cms@7.6.32
purl pkg:composer/typo3/cms@7.6.32
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5jgb-dsyx-hyb4
1
vulnerability VCID-5paq-5frf-43ed
2
vulnerability VCID-bajy-qbwq-fufn
3
vulnerability VCID-dsu7-jjjq-f3e1
4
vulnerability VCID-f963-qur3-2qb7
5
vulnerability VCID-gcnj-6qb6-pbgz
6
vulnerability VCID-mnz3-rj21-67ad
7
vulnerability VCID-n15v-ta9h-6ffb
8
vulnerability VCID-t3jn-vwbx-u7cr
9
vulnerability VCID-xa4m-xpa9-v7h8
10
vulnerability VCID-y32z-2d3f-gkgw
11
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.32
1
url pkg:composer/typo3/cms@8.7.21
purl pkg:composer/typo3/cms@8.7.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18dg-eevv-3ug9
1
vulnerability VCID-1kae-ffj3-xyc7
2
vulnerability VCID-2meq-x4kd-bbdn
3
vulnerability VCID-3n2r-awja-dug9
4
vulnerability VCID-3v4n-fzxa-bfaw
5
vulnerability VCID-4ack-haf2-cfbe
6
vulnerability VCID-551q-gpyd-ffe8
7
vulnerability VCID-5jgb-dsyx-hyb4
8
vulnerability VCID-5paq-5frf-43ed
9
vulnerability VCID-5qfv-y43v-akdm
10
vulnerability VCID-6487-15z5-pkd4
11
vulnerability VCID-9g62-zd1x-3bdg
12
vulnerability VCID-9gpp-ez8w-rqav
13
vulnerability VCID-axaf-45kr-kbfe
14
vulnerability VCID-bajy-qbwq-fufn
15
vulnerability VCID-c2tm-eqmm-1ugt
16
vulnerability VCID-cm14-t8uv-k3es
17
vulnerability VCID-cmka-8484-27bu
18
vulnerability VCID-dj88-f3p8-cfbn
19
vulnerability VCID-dsu7-jjjq-f3e1
20
vulnerability VCID-e72u-tpc3-23g3
21
vulnerability VCID-eajg-ctpd-2bby
22
vulnerability VCID-ekfd-wp8z-d7e1
23
vulnerability VCID-f963-qur3-2qb7
24
vulnerability VCID-gcnj-6qb6-pbgz
25
vulnerability VCID-he5m-6wj4-rbhc
26
vulnerability VCID-j77k-hjgx-5kc5
27
vulnerability VCID-jppe-cbgm-k3cz
28
vulnerability VCID-k4h1-mvnf-1ybx
29
vulnerability VCID-k8af-cg9k-87a9
30
vulnerability VCID-m7w6-b2xu-6uee
31
vulnerability VCID-mnz3-rj21-67ad
32
vulnerability VCID-n15v-ta9h-6ffb
33
vulnerability VCID-px44-19tj-h7aa
34
vulnerability VCID-q8hy-wjd9-nbgp
35
vulnerability VCID-s64f-x81f-b7ce
36
vulnerability VCID-shqd-udhm-pff8
37
vulnerability VCID-stzu-sxe6-5yf5
38
vulnerability VCID-t1n7-eswt-73gw
39
vulnerability VCID-t3jn-vwbx-u7cr
40
vulnerability VCID-tqf5-2fsm-8fch
41
vulnerability VCID-vxj6-wvyz-zbaq
42
vulnerability VCID-vxry-uvph-kbfd
43
vulnerability VCID-vybh-pxr3-17hn
44
vulnerability VCID-vyvy-y3cw-hbgr
45
vulnerability VCID-wea9-egep-h7g5
46
vulnerability VCID-xa4m-xpa9-v7h8
47
vulnerability VCID-xh7y-56vy-5ud8
48
vulnerability VCID-y32z-2d3f-gkgw
49
vulnerability VCID-zdq2-dhb2-6kaq
50
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.21
aliases GHSA-g585-crjf-vhwq
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xqew-bx7v-1qfk
61
url VCID-y32z-2d3f-gkgw
vulnerability_id VCID-y32z-2d3f-gkgw
summary 
Cross-site Scripting
TYPO3 is vulnerable to cross-site scripting. Corresponding rendering instructions via TypoScript functionality HTMLparser does not consider all potentially malicious HTML tag & attribute combinations per default. In default scenarios, a valid backend user account is needed to exploit this vulnerability. In case custom plugins used in the website frontend accept and reflect rich-text content submitted by users, no authentication is required.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-32768
reference_id
reference_type
scores
0
value 0.00284
scoring_system epss
scoring_elements 0.51797
published_at 2026-04-04T12:55:00Z
1
value 0.00284
scoring_system epss
scoring_elements 0.51855
published_at 2026-04-21T12:55:00Z
2
value 0.00284
scoring_system epss
scoring_elements 0.51874
published_at 2026-04-18T12:55:00Z
3
value 0.00284
scoring_system epss
scoring_elements 0.51867
published_at 2026-04-16T12:55:00Z
4
value 0.00284
scoring_system epss
scoring_elements 0.51825
published_at 2026-04-13T12:55:00Z
5
value 0.00284
scoring_system epss
scoring_elements 0.5184
published_at 2026-04-12T12:55:00Z
6
value 0.00284
scoring_system epss
scoring_elements 0.51809
published_at 2026-04-09T12:55:00Z
7
value 0.00284
scoring_system epss
scoring_elements 0.51722
published_at 2026-04-01T12:55:00Z
8
value 0.00284
scoring_system epss
scoring_elements 0.51812
published_at 2026-04-08T12:55:00Z
9
value 0.00284
scoring_system epss
scoring_elements 0.51757
published_at 2026-04-07T12:55:00Z
10
value 0.00284
scoring_system epss
scoring_elements 0.51771
published_at 2026-04-02T12:55:00Z
11
value 0.00284
scoring_system epss
scoring_elements 0.5186
published_at 2026-04-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-32768
1
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-32768.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-32768.yaml
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-32768.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-32768.yaml
3
reference_url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-c5c9-8c6m-727v
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-c5c9-8c6m-727v
4
reference_url https://github.com/TYPO3/typo3/security/advisories/GHSA-c5c9-8c6m-727v
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/security/advisories/GHSA-c5c9-8c6m-727v
5
reference_url https://typo3.org/security/advisory/typo3-core-sa-2021-013
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2021-013
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-32768
reference_id CVE-2021-32768
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-32768
7
reference_url https://github.com/advisories/GHSA-c5c9-8c6m-727v
reference_id GHSA-c5c9-8c6m-727v
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-c5c9-8c6m-727v
fixed_packages
0
url pkg:composer/typo3/cms@7.6.53
purl pkg:composer/typo3/cms@7.6.53
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.53
1
url pkg:composer/typo3/cms@8.7.42
purl pkg:composer/typo3/cms@8.7.42
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.42
2
url pkg:composer/typo3/cms@9.5.29
purl pkg:composer/typo3/cms@9.5.29
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5paq-5frf-43ed
1
vulnerability VCID-bajy-qbwq-fufn
2
vulnerability VCID-mnz3-rj21-67ad
3
vulnerability VCID-t1n7-eswt-73gw
4
vulnerability VCID-ve7g-8st5-wffb
5
vulnerability VCID-vyvy-y3cw-hbgr
6
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.29
3
url pkg:composer/typo3/cms@10.4.19
purl pkg:composer/typo3/cms@10.4.19
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1yxw-saf5-wue7
1
vulnerability VCID-4jpa-6fqh-hbfg
2
vulnerability VCID-5paq-5frf-43ed
3
vulnerability VCID-8sdd-b1bn-cuhx
4
vulnerability VCID-av8u-rvzq-4fc7
5
vulnerability VCID-bajy-qbwq-fufn
6
vulnerability VCID-e32h-8q61-hbgc
7
vulnerability VCID-mnz3-rj21-67ad
8
vulnerability VCID-remd-55jh-r3g5
9
vulnerability VCID-s55j-8hbt-akhn
10
vulnerability VCID-t1n7-eswt-73gw
11
vulnerability VCID-ve7g-8st5-wffb
12
vulnerability VCID-vwb2-a84s-5qak
13
vulnerability VCID-vyvy-y3cw-hbgr
14
vulnerability VCID-w13x-3rp9-wyej
15
vulnerability VCID-yj9g-uz1a-jkf2
16
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@10.4.19
4
url pkg:composer/typo3/cms@11.3.2
purl pkg:composer/typo3/cms@11.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1yxw-saf5-wue7
1
vulnerability VCID-4jpa-6fqh-hbfg
2
vulnerability VCID-5paq-5frf-43ed
3
vulnerability VCID-8sdd-b1bn-cuhx
4
vulnerability VCID-av8u-rvzq-4fc7
5
vulnerability VCID-bajy-qbwq-fufn
6
vulnerability VCID-e32h-8q61-hbgc
7
vulnerability VCID-jjbn-6efk-nud2
8
vulnerability VCID-mnz3-rj21-67ad
9
vulnerability VCID-remd-55jh-r3g5
10
vulnerability VCID-s55j-8hbt-akhn
11
vulnerability VCID-t1n7-eswt-73gw
12
vulnerability VCID-uyeu-a3xr-fkh4
13
vulnerability VCID-ve7g-8st5-wffb
14
vulnerability VCID-vwb2-a84s-5qak
15
vulnerability VCID-vyvy-y3cw-hbgr
16
vulnerability VCID-w13x-3rp9-wyej
17
vulnerability VCID-yj9g-uz1a-jkf2
18
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@11.3.2
aliases CVE-2021-32768, GHSA-c5c9-8c6m-727v
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-y32z-2d3f-gkgw
62
url VCID-zdq2-dhb2-6kaq
vulnerability_id VCID-zdq2-dhb2-6kaq
summary 
TYPO3 CMS vulnerable to Weak Authentication in Frontend Login
### Problem
Restricting frontend login to specific users, organized in different storage folders (partitions), can be bypassed. A potential attacker might use this ambiguity in usernames to get access to a different account - however, credentials must be known to the adversary.

### Solution
Update to TYPO3 versions 8.7.49 ELTS, 9.5.38 ELTS, 10.4.33, 11.5.20, 12.1.1 that fix the problem described above.

### References
* [TYPO3-CORE-SA-2022-013](https://typo3.org/security/advisory/typo3-core-sa-2022-013)
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-23501
reference_id
reference_type
scores
0
value 0.00229
scoring_system epss
scoring_elements 0.45749
published_at 2026-04-08T12:55:00Z
1
value 0.00229
scoring_system epss
scoring_elements 0.4579
published_at 2026-04-18T12:55:00Z
2
value 0.00229
scoring_system epss
scoring_elements 0.45795
published_at 2026-04-16T12:55:00Z
3
value 0.00229
scoring_system epss
scoring_elements 0.45746
published_at 2026-04-13T12:55:00Z
4
value 0.00229
scoring_system epss
scoring_elements 0.45738
published_at 2026-04-21T12:55:00Z
5
value 0.00229
scoring_system epss
scoring_elements 0.45768
published_at 2026-04-11T12:55:00Z
6
value 0.00229
scoring_system epss
scoring_elements 0.45745
published_at 2026-04-09T12:55:00Z
7
value 0.00229
scoring_system epss
scoring_elements 0.45724
published_at 2026-04-02T12:55:00Z
8
value 0.00229
scoring_system epss
scoring_elements 0.45744
published_at 2026-04-04T12:55:00Z
9
value 0.00229
scoring_system epss
scoring_elements 0.45693
published_at 2026-04-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-23501
1
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2022-23501.yaml
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2022-23501.yaml
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2022-23501.yaml
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2022-23501.yaml
3
reference_url https://github.com/TYPO3/typo3
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3
4
reference_url https://github.com/TYPO3/typo3/commit/28be9cdb3fed02ce4cfc6fa2d39f7d8e2266eced
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/28be9cdb3fed02ce4cfc6fa2d39f7d8e2266eced
5
reference_url https://github.com/TYPO3/typo3/security/advisories/GHSA-jfp7-79g7-89rf
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-21T18:48:00Z/
url https://github.com/TYPO3/typo3/security/advisories/GHSA-jfp7-79g7-89rf
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-23501
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-23501
7
reference_url https://typo3.org/security/advisory/typo3-core-sa-2022-013
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2022-013
8
reference_url https://github.com/advisories/GHSA-jfp7-79g7-89rf
reference_id GHSA-jfp7-79g7-89rf
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-jfp7-79g7-89rf
fixed_packages
0
url pkg:composer/typo3/cms@10.4.33
purl pkg:composer/typo3/cms@10.4.33
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-vyvy-y3cw-hbgr
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@10.4.33
1
url pkg:composer/typo3/cms@11.5.20
purl pkg:composer/typo3/cms@11.5.20
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-vyvy-y3cw-hbgr
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@11.5.20
2
url pkg:composer/typo3/cms@12.1.1
purl pkg:composer/typo3/cms@12.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-vyvy-y3cw-hbgr
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@12.1.1
aliases CVE-2022-23501, GHSA-jfp7-79g7-89rf, GMS-2022-8134
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zdq2-dhb2-6kaq
63
url VCID-zspb-bd6j-wyd2
vulnerability_id VCID-zspb-bd6j-wyd2
summary Security Misconfiguration in Install Tool Cookie.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-009/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2018-009/
fixed_packages
0
url pkg:composer/typo3/cms@7.6.32
purl pkg:composer/typo3/cms@7.6.32
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5jgb-dsyx-hyb4
1
vulnerability VCID-5paq-5frf-43ed
2
vulnerability VCID-bajy-qbwq-fufn
3
vulnerability VCID-dsu7-jjjq-f3e1
4
vulnerability VCID-f963-qur3-2qb7
5
vulnerability VCID-gcnj-6qb6-pbgz
6
vulnerability VCID-mnz3-rj21-67ad
7
vulnerability VCID-n15v-ta9h-6ffb
8
vulnerability VCID-t3jn-vwbx-u7cr
9
vulnerability VCID-xa4m-xpa9-v7h8
10
vulnerability VCID-y32z-2d3f-gkgw
11
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.32
1
url pkg:composer/typo3/cms@8.7.21
purl pkg:composer/typo3/cms@8.7.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18dg-eevv-3ug9
1
vulnerability VCID-1kae-ffj3-xyc7
2
vulnerability VCID-2meq-x4kd-bbdn
3
vulnerability VCID-3n2r-awja-dug9
4
vulnerability VCID-3v4n-fzxa-bfaw
5
vulnerability VCID-4ack-haf2-cfbe
6
vulnerability VCID-551q-gpyd-ffe8
7
vulnerability VCID-5jgb-dsyx-hyb4
8
vulnerability VCID-5paq-5frf-43ed
9
vulnerability VCID-5qfv-y43v-akdm
10
vulnerability VCID-6487-15z5-pkd4
11
vulnerability VCID-9g62-zd1x-3bdg
12
vulnerability VCID-9gpp-ez8w-rqav
13
vulnerability VCID-axaf-45kr-kbfe
14
vulnerability VCID-bajy-qbwq-fufn
15
vulnerability VCID-c2tm-eqmm-1ugt
16
vulnerability VCID-cm14-t8uv-k3es
17
vulnerability VCID-cmka-8484-27bu
18
vulnerability VCID-dj88-f3p8-cfbn
19
vulnerability VCID-dsu7-jjjq-f3e1
20
vulnerability VCID-e72u-tpc3-23g3
21
vulnerability VCID-eajg-ctpd-2bby
22
vulnerability VCID-ekfd-wp8z-d7e1
23
vulnerability VCID-f963-qur3-2qb7
24
vulnerability VCID-gcnj-6qb6-pbgz
25
vulnerability VCID-he5m-6wj4-rbhc
26
vulnerability VCID-j77k-hjgx-5kc5
27
vulnerability VCID-jppe-cbgm-k3cz
28
vulnerability VCID-k4h1-mvnf-1ybx
29
vulnerability VCID-k8af-cg9k-87a9
30
vulnerability VCID-m7w6-b2xu-6uee
31
vulnerability VCID-mnz3-rj21-67ad
32
vulnerability VCID-n15v-ta9h-6ffb
33
vulnerability VCID-px44-19tj-h7aa
34
vulnerability VCID-q8hy-wjd9-nbgp
35
vulnerability VCID-s64f-x81f-b7ce
36
vulnerability VCID-shqd-udhm-pff8
37
vulnerability VCID-stzu-sxe6-5yf5
38
vulnerability VCID-t1n7-eswt-73gw
39
vulnerability VCID-t3jn-vwbx-u7cr
40
vulnerability VCID-tqf5-2fsm-8fch
41
vulnerability VCID-vxj6-wvyz-zbaq
42
vulnerability VCID-vxry-uvph-kbfd
43
vulnerability VCID-vybh-pxr3-17hn
44
vulnerability VCID-vyvy-y3cw-hbgr
45
vulnerability VCID-wea9-egep-h7g5
46
vulnerability VCID-xa4m-xpa9-v7h8
47
vulnerability VCID-xh7y-56vy-5ud8
48
vulnerability VCID-y32z-2d3f-gkgw
49
vulnerability VCID-zdq2-dhb2-6kaq
50
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.21
2
url pkg:composer/typo3/cms@9.5.2
purl pkg:composer/typo3/cms@9.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18dg-eevv-3ug9
1
vulnerability VCID-1kae-ffj3-xyc7
2
vulnerability VCID-2meq-x4kd-bbdn
3
vulnerability VCID-2mn6-mdmz-4yd9
4
vulnerability VCID-3n2r-awja-dug9
5
vulnerability VCID-3v4n-fzxa-bfaw
6
vulnerability VCID-4ack-haf2-cfbe
7
vulnerability VCID-4mkw-tv16-jyca
8
vulnerability VCID-543x-cnbz-1kb9
9
vulnerability VCID-551q-gpyd-ffe8
10
vulnerability VCID-58js-jzm4-4fc7
11
vulnerability VCID-5jgb-dsyx-hyb4
12
vulnerability VCID-5kzs-ex81-bbaj
13
vulnerability VCID-5paq-5frf-43ed
14
vulnerability VCID-6487-15z5-pkd4
15
vulnerability VCID-6a9t-8dmn-s3bv
16
vulnerability VCID-9g62-zd1x-3bdg
17
vulnerability VCID-9gpp-ez8w-rqav
18
vulnerability VCID-a49c-fqrj-nbb3
19
vulnerability VCID-anfj-pmkg-skhe
20
vulnerability VCID-axaf-45kr-kbfe
21
vulnerability VCID-bajy-qbwq-fufn
22
vulnerability VCID-c2tm-eqmm-1ugt
23
vulnerability VCID-cm14-t8uv-k3es
24
vulnerability VCID-cmka-8484-27bu
25
vulnerability VCID-d8d1-sat6-muhe
26
vulnerability VCID-dcy2-efyc-6qgq
27
vulnerability VCID-dj88-f3p8-cfbn
28
vulnerability VCID-dsu7-jjjq-f3e1
29
vulnerability VCID-e72u-tpc3-23g3
30
vulnerability VCID-eajg-ctpd-2bby
31
vulnerability VCID-ekfd-wp8z-d7e1
32
vulnerability VCID-f963-qur3-2qb7
33
vulnerability VCID-gcnj-6qb6-pbgz
34
vulnerability VCID-he5m-6wj4-rbhc
35
vulnerability VCID-jppe-cbgm-k3cz
36
vulnerability VCID-k4h1-mvnf-1ybx
37
vulnerability VCID-k8af-cg9k-87a9
38
vulnerability VCID-kc67-7kf7-s3d7
39
vulnerability VCID-kj9x-psfz-2ug1
40
vulnerability VCID-m7w6-b2xu-6uee
41
vulnerability VCID-mnz3-rj21-67ad
42
vulnerability VCID-n15v-ta9h-6ffb
43
vulnerability VCID-p715-yexd-jfgc
44
vulnerability VCID-phgh-sd4m-zbdx
45
vulnerability VCID-px44-19tj-h7aa
46
vulnerability VCID-q8hy-wjd9-nbgp
47
vulnerability VCID-raxk-rm9v-hubn
48
vulnerability VCID-s64f-x81f-b7ce
49
vulnerability VCID-shqd-udhm-pff8
50
vulnerability VCID-stzu-sxe6-5yf5
51
vulnerability VCID-sw7v-fbjk-13hy
52
vulnerability VCID-t1n7-eswt-73gw
53
vulnerability VCID-t3jn-vwbx-u7cr
54
vulnerability VCID-tqf5-2fsm-8fch
55
vulnerability VCID-u9bx-8e86-wbew
56
vulnerability VCID-ve7g-8st5-wffb
57
vulnerability VCID-vxj6-wvyz-zbaq
58
vulnerability VCID-vxry-uvph-kbfd
59
vulnerability VCID-vybh-pxr3-17hn
60
vulnerability VCID-vyvy-y3cw-hbgr
61
vulnerability VCID-wea9-egep-h7g5
62
vulnerability VCID-xa4m-xpa9-v7h8
63
vulnerability VCID-xh7y-56vy-5ud8
64
vulnerability VCID-xtdg-uj46-rkcm
65
vulnerability VCID-xwc2-z7hx-4qa7
66
vulnerability VCID-y32z-2d3f-gkgw
67
vulnerability VCID-zdq2-dhb2-6kaq
68
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.2
aliases 2018-12-11-4
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zspb-bd6j-wyd2
Fixing_vulnerabilities
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.0.1