Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:composer/typo3/cms@7.0.1
Typecomposer
Namespacetypo3
Namecms
Version7.0.1
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version9.5.25
Latest_non_vulnerable_version12.2.0
Affected_by_vulnerabilities
0
url VCID-1u4r-r97q-3yfk
vulnerability_id VCID-1u4r-r97q-3yfk
summary Information Disclosure possibility exploitable by Editors.
references
0
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-005/
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-005/
fixed_packages
0
url pkg:composer/typo3/cms@7.3.0
purl pkg:composer/typo3/cms@7.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3ugj-6m1e-e3hr
1
vulnerability VCID-5hm4-ms5p-uuae
2
vulnerability VCID-8jcy-3kje-fqeh
3
vulnerability VCID-953t-q1cr-zyd6
4
vulnerability VCID-abjx-8v46-d7d8
5
vulnerability VCID-ansr-8m5j-pya6
6
vulnerability VCID-c57c-akce-xufq
7
vulnerability VCID-dsqm-9q3e-dudw
8
vulnerability VCID-e82x-2cdb-7fgn
9
vulnerability VCID-ev4k-5k1d-2bhu
10
vulnerability VCID-fdnw-2tz5-4fdr
11
vulnerability VCID-fqkx-v8t5-q3h6
12
vulnerability VCID-hp99-ncuh-6ugv
13
vulnerability VCID-j6x1-dfre-2bdq
14
vulnerability VCID-jp1p-rfxa-hyd9
15
vulnerability VCID-jq5y-7h9g-mufa
16
vulnerability VCID-n18b-qe5x-z7cj
17
vulnerability VCID-nhjv-nke2-2kf8
18
vulnerability VCID-njsj-bwjq-fyap
19
vulnerability VCID-p7gd-anw2-1qbz
20
vulnerability VCID-u6h1-ccgw-jqds
21
vulnerability VCID-ub3e-hrb1-wqac
22
vulnerability VCID-vq15-t92r-5bhx
23
vulnerability VCID-wms8-dnuz-b3hc
24
vulnerability VCID-xw1s-93bu-wuh9
25
vulnerability VCID-yz6t-ge1y-qfgr
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.3.0
aliases GMS-2015-83
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1u4r-r97q-3yfk
1
url VCID-3ugj-6m1e-e3hr
vulnerability_id VCID-3ugj-6m1e-e3hr
summary 
Cross-site Scripting
Cross-Site Scripting in Online Media Asset Rendering.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-006/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2018-006/
fixed_packages
0
url pkg:composer/typo3/cms@7.6.32
purl pkg:composer/typo3/cms@7.6.32
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ev4k-5k1d-2bhu
1
vulnerability VCID-fqkx-v8t5-q3h6
2
vulnerability VCID-jp1p-rfxa-hyd9
3
vulnerability VCID-p7gd-anw2-1qbz
4
vulnerability VCID-tgyt-axv1-c7ag
5
vulnerability VCID-xw1s-93bu-wuh9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.32
1
url pkg:composer/typo3/cms@8.7.21
purl pkg:composer/typo3/cms@8.7.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-4eym-e6vt-8fbs
2
vulnerability VCID-7m6u-k5tp-gkhy
3
vulnerability VCID-848u-w88s-5bbe
4
vulnerability VCID-am6s-67bm-77dr
5
vulnerability VCID-bn3p-39sv-6fdg
6
vulnerability VCID-ev4k-5k1d-2bhu
7
vulnerability VCID-fqkx-v8t5-q3h6
8
vulnerability VCID-fut7-bb1f-37g7
9
vulnerability VCID-jp1p-rfxa-hyd9
10
vulnerability VCID-k5t3-28es-h3ez
11
vulnerability VCID-khpm-e1xb-hydb
12
vulnerability VCID-nney-azbc-pucg
13
vulnerability VCID-p7gd-anw2-1qbz
14
vulnerability VCID-pmvp-twk2-jqe4
15
vulnerability VCID-qv14-m93d-jyd9
16
vulnerability VCID-rqrw-t2kj-mud8
17
vulnerability VCID-ru6w-m6q6-27gn
18
vulnerability VCID-sdsa-mh76-kqch
19
vulnerability VCID-tgyt-axv1-c7ag
20
vulnerability VCID-u259-2sxq-tbct
21
vulnerability VCID-vw2r-g8yy-eyf4
22
vulnerability VCID-x5x1-w7yv-eye9
23
vulnerability VCID-xw1s-93bu-wuh9
24
vulnerability VCID-y7ds-p5r2-yuhq
25
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.21
2
url pkg:composer/typo3/cms@9.5.2
purl pkg:composer/typo3/cms@9.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1sfk-z8py-ykb8
2
vulnerability VCID-3ye6-vqje-abh4
3
vulnerability VCID-4an7-9ph4-mkd4
4
vulnerability VCID-4eym-e6vt-8fbs
5
vulnerability VCID-4jck-w9ct-budk
6
vulnerability VCID-6mnf-2fcw-dqgp
7
vulnerability VCID-7m6u-k5tp-gkhy
8
vulnerability VCID-7xv1-78u7-xufp
9
vulnerability VCID-848u-w88s-5bbe
10
vulnerability VCID-8w4e-d49b-nbg8
11
vulnerability VCID-9adx-p876-kyb5
12
vulnerability VCID-am6s-67bm-77dr
13
vulnerability VCID-bbh5-rss8-bfct
14
vulnerability VCID-cvk2-93hm-gkhx
15
vulnerability VCID-e6zr-4bgg-kkh5
16
vulnerability VCID-ev4k-5k1d-2bhu
17
vulnerability VCID-fqkx-v8t5-q3h6
18
vulnerability VCID-fut7-bb1f-37g7
19
vulnerability VCID-jp1p-rfxa-hyd9
20
vulnerability VCID-k5t3-28es-h3ez
21
vulnerability VCID-khpm-e1xb-hydb
22
vulnerability VCID-n1gz-y615-cbbk
23
vulnerability VCID-nney-azbc-pucg
24
vulnerability VCID-p7gd-anw2-1qbz
25
vulnerability VCID-pmvp-twk2-jqe4
26
vulnerability VCID-qv14-m93d-jyd9
27
vulnerability VCID-rqrw-t2kj-mud8
28
vulnerability VCID-ru6w-m6q6-27gn
29
vulnerability VCID-sdsa-mh76-kqch
30
vulnerability VCID-tgyt-axv1-c7ag
31
vulnerability VCID-u259-2sxq-tbct
32
vulnerability VCID-vw2r-g8yy-eyf4
33
vulnerability VCID-x5x1-w7yv-eye9
34
vulnerability VCID-xw1s-93bu-wuh9
35
vulnerability VCID-y7ds-p5r2-yuhq
36
vulnerability VCID-zeut-9wfp-q7et
37
vulnerability VCID-zkvq-bms4-gfcv
38
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.2
aliases GMS-2018-97
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3ugj-6m1e-e3hr
2
url VCID-5hm4-ms5p-uuae
vulnerability_id VCID-5hm4-ms5p-uuae
summary Failing to properly encode user input, the page module is vulnerable to Cross-Site Scripting. A valid backend user account with permissions to edit plugins is needed to exploit this vulnerability.
references
0
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2016-021
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2016-021
fixed_packages
0
url pkg:composer/typo3/cms@7.6.11
purl pkg:composer/typo3/cms@7.6.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3ugj-6m1e-e3hr
1
vulnerability VCID-5dxs-cdht-27hw
2
vulnerability VCID-66ru-n2df-b3ay
3
vulnerability VCID-727q-h3ey-6yc9
4
vulnerability VCID-953t-q1cr-zyd6
5
vulnerability VCID-9saf-w56y-pugz
6
vulnerability VCID-abjx-8v46-d7d8
7
vulnerability VCID-dsqm-9q3e-dudw
8
vulnerability VCID-e564-zdku-9fc6
9
vulnerability VCID-eutz-mj58-audb
10
vulnerability VCID-ev4k-5k1d-2bhu
11
vulnerability VCID-fdnw-2tz5-4fdr
12
vulnerability VCID-fqkx-v8t5-q3h6
13
vulnerability VCID-h217-xe8x-nua3
14
vulnerability VCID-h7cg-64er-uya9
15
vulnerability VCID-h7hf-sf2q-73ay
16
vulnerability VCID-hp99-ncuh-6ugv
17
vulnerability VCID-jp1p-rfxa-hyd9
18
vulnerability VCID-jq5y-7h9g-mufa
19
vulnerability VCID-jqe4-8hzb-mfea
20
vulnerability VCID-mctp-nf36-7qdn
21
vulnerability VCID-njsj-bwjq-fyap
22
vulnerability VCID-p7gd-anw2-1qbz
23
vulnerability VCID-sy7r-d6pv-yba9
24
vulnerability VCID-tgyt-axv1-c7ag
25
vulnerability VCID-vq15-t92r-5bhx
26
vulnerability VCID-xh68-defe-f7ce
27
vulnerability VCID-xw1s-93bu-wuh9
28
vulnerability VCID-ygw4-jdqu-4fbt
29
vulnerability VCID-yz6t-ge1y-qfgr
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.11
1
url pkg:composer/typo3/cms@8.0.0
purl pkg:composer/typo3/cms@8.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-11u3-8xzy-jfhh
1
vulnerability VCID-1ffs-9vj5-27hk
2
vulnerability VCID-28fn-ncj5-2ufk
3
vulnerability VCID-2r7u-mc45-8yhe
4
vulnerability VCID-2rhr-8vaz-hqfj
5
vulnerability VCID-2vpx-fqb6-aqfa
6
vulnerability VCID-39jx-muqb-nkfq
7
vulnerability VCID-39vn-73mc-jqav
8
vulnerability VCID-3ugj-6m1e-e3hr
9
vulnerability VCID-4eym-e6vt-8fbs
10
vulnerability VCID-4wnp-gusy-43b8
11
vulnerability VCID-5dxs-cdht-27hw
12
vulnerability VCID-5u2f-5zzf-j3e4
13
vulnerability VCID-66kh-c1dm-8fbf
14
vulnerability VCID-66ru-n2df-b3ay
15
vulnerability VCID-6su8-bbrw-hbhp
16
vulnerability VCID-727q-h3ey-6yc9
17
vulnerability VCID-7ch1-q9f4-a7bt
18
vulnerability VCID-7m6u-k5tp-gkhy
19
vulnerability VCID-848u-w88s-5bbe
20
vulnerability VCID-8p64-6zpt-t3av
21
vulnerability VCID-94r9-hh4g-jkej
22
vulnerability VCID-953t-q1cr-zyd6
23
vulnerability VCID-9726-hafj-wkay
24
vulnerability VCID-9saf-w56y-pugz
25
vulnerability VCID-9yu1-z7c2-t3fj
26
vulnerability VCID-abjx-8v46-d7d8
27
vulnerability VCID-am6s-67bm-77dr
28
vulnerability VCID-bn3p-39sv-6fdg
29
vulnerability VCID-bq2j-t19h-zyad
30
vulnerability VCID-bstt-ybrs-5ua3
31
vulnerability VCID-buj5-2t53-3kcr
32
vulnerability VCID-d6c2-upx1-e7cd
33
vulnerability VCID-dsqm-9q3e-dudw
34
vulnerability VCID-e564-zdku-9fc6
35
vulnerability VCID-emqq-kwjg-3kfk
36
vulnerability VCID-eutz-mj58-audb
37
vulnerability VCID-ev4k-5k1d-2bhu
38
vulnerability VCID-f319-jpf5-hyex
39
vulnerability VCID-fdnw-2tz5-4fdr
40
vulnerability VCID-fgqa-5fx9-nkaz
41
vulnerability VCID-fh61-7rfy-s3hg
42
vulnerability VCID-fqkc-utex-3kav
43
vulnerability VCID-fqkx-v8t5-q3h6
44
vulnerability VCID-fut7-bb1f-37g7
45
vulnerability VCID-g7mm-vjbw-bbhd
46
vulnerability VCID-gk79-jtuz-myh6
47
vulnerability VCID-gpv4-4tpd-tbaa
48
vulnerability VCID-h217-xe8x-nua3
49
vulnerability VCID-h7cg-64er-uya9
50
vulnerability VCID-h7hf-sf2q-73ay
51
vulnerability VCID-hp99-ncuh-6ugv
52
vulnerability VCID-hyx9-8ae6-sba8
53
vulnerability VCID-hzma-cduk-3uhp
54
vulnerability VCID-j8hk-bqnb-gycp
55
vulnerability VCID-j8sh-5evd-dkaz
56
vulnerability VCID-jeqr-9tfu-f7b2
57
vulnerability VCID-jf28-91be-6kbr
58
vulnerability VCID-jmea-qzsr-wkf4
59
vulnerability VCID-jn38-wfec-7bb2
60
vulnerability VCID-jp1p-rfxa-hyd9
61
vulnerability VCID-jq5y-7h9g-mufa
62
vulnerability VCID-jqe4-8hzb-mfea
63
vulnerability VCID-jwb1-3sbg-kfa5
64
vulnerability VCID-k5t3-28es-h3ez
65
vulnerability VCID-khpm-e1xb-hydb
66
vulnerability VCID-ks1q-a8x2-uqht
67
vulnerability VCID-m3nc-xbb4-yubr
68
vulnerability VCID-mctp-nf36-7qdn
69
vulnerability VCID-nhjv-nke2-2kf8
70
vulnerability VCID-njsj-bwjq-fyap
71
vulnerability VCID-nney-azbc-pucg
72
vulnerability VCID-nvbp-pbjw-3qgx
73
vulnerability VCID-p576-w7dd-p3h7
74
vulnerability VCID-p7gd-anw2-1qbz
75
vulnerability VCID-pmvp-twk2-jqe4
76
vulnerability VCID-q2ym-y2rz-1bdn
77
vulnerability VCID-q52p-xfj8-gygd
78
vulnerability VCID-q7vt-19eb-sqeq
79
vulnerability VCID-qcnh-z4zh-myaw
80
vulnerability VCID-qdxh-arxx-wbcr
81
vulnerability VCID-qxab-9uwr-yqhv
82
vulnerability VCID-rqrw-t2kj-mud8
83
vulnerability VCID-ru6w-m6q6-27gn
84
vulnerability VCID-sdjb-gp4t-vbgt
85
vulnerability VCID-sdsa-mh76-kqch
86
vulnerability VCID-sdz8-hju8-4bcb
87
vulnerability VCID-sy7r-d6pv-yba9
88
vulnerability VCID-teby-zvvw-zkhv
89
vulnerability VCID-u259-2sxq-tbct
90
vulnerability VCID-u4tq-8qnk-5fd7
91
vulnerability VCID-u5he-6tqb-gqaf
92
vulnerability VCID-u6as-cwxc-pkhk
93
vulnerability VCID-uq77-aax5-k7d8
94
vulnerability VCID-vq15-t92r-5bhx
95
vulnerability VCID-vw2r-g8yy-eyf4
96
vulnerability VCID-w483-prq4-rycx
97
vulnerability VCID-w58p-3wg1-7ycr
98
vulnerability VCID-wat8-4m83-hken
99
vulnerability VCID-wy45-2gmr-fkfg
100
vulnerability VCID-x175-xjek-97ds
101
vulnerability VCID-x5x1-w7yv-eye9
102
vulnerability VCID-xh68-defe-f7ce
103
vulnerability VCID-xpxg-qq49-b7fd
104
vulnerability VCID-xvyu-2hb8-8ufh
105
vulnerability VCID-xw1s-93bu-wuh9
106
vulnerability VCID-y7ds-p5r2-yuhq
107
vulnerability VCID-ygw4-jdqu-4fbt
108
vulnerability VCID-yh6b-tc4u-v3bk
109
vulnerability VCID-yn6z-9v7k-x7br
110
vulnerability VCID-yz6t-ge1y-qfgr
111
vulnerability VCID-zgfw-pk39-gyg8
112
vulnerability VCID-zmwv-gwq3-fkej
113
vulnerability VCID-zrz3-3dnf-tbay
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.0.0
2
url pkg:composer/typo3/cms@8.3.1
purl pkg:composer/typo3/cms@8.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-3ugj-6m1e-e3hr
2
vulnerability VCID-4eym-e6vt-8fbs
3
vulnerability VCID-5dxs-cdht-27hw
4
vulnerability VCID-66ru-n2df-b3ay
5
vulnerability VCID-727q-h3ey-6yc9
6
vulnerability VCID-7ch1-q9f4-a7bt
7
vulnerability VCID-7m6u-k5tp-gkhy
8
vulnerability VCID-848u-w88s-5bbe
9
vulnerability VCID-953t-q1cr-zyd6
10
vulnerability VCID-9saf-w56y-pugz
11
vulnerability VCID-abjx-8v46-d7d8
12
vulnerability VCID-am6s-67bm-77dr
13
vulnerability VCID-bn3p-39sv-6fdg
14
vulnerability VCID-d6c2-upx1-e7cd
15
vulnerability VCID-dsqm-9q3e-dudw
16
vulnerability VCID-e564-zdku-9fc6
17
vulnerability VCID-emqq-kwjg-3kfk
18
vulnerability VCID-eutz-mj58-audb
19
vulnerability VCID-ev4k-5k1d-2bhu
20
vulnerability VCID-fdnw-2tz5-4fdr
21
vulnerability VCID-fqkx-v8t5-q3h6
22
vulnerability VCID-fut7-bb1f-37g7
23
vulnerability VCID-h217-xe8x-nua3
24
vulnerability VCID-h7cg-64er-uya9
25
vulnerability VCID-h7hf-sf2q-73ay
26
vulnerability VCID-hg2n-xera-jkdh
27
vulnerability VCID-hp99-ncuh-6ugv
28
vulnerability VCID-jp1p-rfxa-hyd9
29
vulnerability VCID-jq5y-7h9g-mufa
30
vulnerability VCID-jqe4-8hzb-mfea
31
vulnerability VCID-k5t3-28es-h3ez
32
vulnerability VCID-khpm-e1xb-hydb
33
vulnerability VCID-mctp-nf36-7qdn
34
vulnerability VCID-njsj-bwjq-fyap
35
vulnerability VCID-nney-azbc-pucg
36
vulnerability VCID-p7gd-anw2-1qbz
37
vulnerability VCID-pmvp-twk2-jqe4
38
vulnerability VCID-q52p-xfj8-gygd
39
vulnerability VCID-qv14-m93d-jyd9
40
vulnerability VCID-qxab-9uwr-yqhv
41
vulnerability VCID-rqrw-t2kj-mud8
42
vulnerability VCID-ru6w-m6q6-27gn
43
vulnerability VCID-sdsa-mh76-kqch
44
vulnerability VCID-sy7r-d6pv-yba9
45
vulnerability VCID-u259-2sxq-tbct
46
vulnerability VCID-vq15-t92r-5bhx
47
vulnerability VCID-vw2r-g8yy-eyf4
48
vulnerability VCID-wy45-2gmr-fkfg
49
vulnerability VCID-x5x1-w7yv-eye9
50
vulnerability VCID-xh68-defe-f7ce
51
vulnerability VCID-xw1s-93bu-wuh9
52
vulnerability VCID-y7ds-p5r2-yuhq
53
vulnerability VCID-ygw4-jdqu-4fbt
54
vulnerability VCID-yz6t-ge1y-qfgr
55
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.3.1
aliases TYPO3-CORE-SA-2016-021
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5hm4-ms5p-uuae
3
url VCID-7n9x-c9gs-9yb3
vulnerability_id VCID-7n9x-c9gs-9yb3
summary 
Cross-site Scripting
Cross-Site Scripting in 3rd party library Flowplayer.
references
0
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-007/
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-007/
fixed_packages
0
url pkg:composer/typo3/cms@7.3.0
purl pkg:composer/typo3/cms@7.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3ugj-6m1e-e3hr
1
vulnerability VCID-5hm4-ms5p-uuae
2
vulnerability VCID-8jcy-3kje-fqeh
3
vulnerability VCID-953t-q1cr-zyd6
4
vulnerability VCID-abjx-8v46-d7d8
5
vulnerability VCID-ansr-8m5j-pya6
6
vulnerability VCID-c57c-akce-xufq
7
vulnerability VCID-dsqm-9q3e-dudw
8
vulnerability VCID-e82x-2cdb-7fgn
9
vulnerability VCID-ev4k-5k1d-2bhu
10
vulnerability VCID-fdnw-2tz5-4fdr
11
vulnerability VCID-fqkx-v8t5-q3h6
12
vulnerability VCID-hp99-ncuh-6ugv
13
vulnerability VCID-j6x1-dfre-2bdq
14
vulnerability VCID-jp1p-rfxa-hyd9
15
vulnerability VCID-jq5y-7h9g-mufa
16
vulnerability VCID-n18b-qe5x-z7cj
17
vulnerability VCID-nhjv-nke2-2kf8
18
vulnerability VCID-njsj-bwjq-fyap
19
vulnerability VCID-p7gd-anw2-1qbz
20
vulnerability VCID-u6h1-ccgw-jqds
21
vulnerability VCID-ub3e-hrb1-wqac
22
vulnerability VCID-vq15-t92r-5bhx
23
vulnerability VCID-wms8-dnuz-b3hc
24
vulnerability VCID-xw1s-93bu-wuh9
25
vulnerability VCID-yz6t-ge1y-qfgr
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.3.0
aliases GMS-2015-85
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7n9x-c9gs-9yb3
4
url VCID-8jcy-3kje-fqeh
vulnerability_id VCID-8jcy-3kje-fqeh
summary 
Cache Flooding in Frontend
Links with a valid cHash argument lead to newly generated page cache entries. Because the cHash is not bound to a specific page, attackers could use valid cHash arguments for multiple pages, leading to additional useless page cache entries. Depending on the number of pages in the system and the number of available valid links with a cHash, attackers could add a considerable amount of additional cache entries, which in the end exceed storage limits and thus could lead to the system not responding any more. This means the Cache Flooding attack potentially could lead to a successful Denial of Service (DoS) attack.
references
0
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2016-022
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2016-022
fixed_packages
0
url pkg:composer/typo3/cms@7.6.11
purl pkg:composer/typo3/cms@7.6.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3ugj-6m1e-e3hr
1
vulnerability VCID-5dxs-cdht-27hw
2
vulnerability VCID-66ru-n2df-b3ay
3
vulnerability VCID-727q-h3ey-6yc9
4
vulnerability VCID-953t-q1cr-zyd6
5
vulnerability VCID-9saf-w56y-pugz
6
vulnerability VCID-abjx-8v46-d7d8
7
vulnerability VCID-dsqm-9q3e-dudw
8
vulnerability VCID-e564-zdku-9fc6
9
vulnerability VCID-eutz-mj58-audb
10
vulnerability VCID-ev4k-5k1d-2bhu
11
vulnerability VCID-fdnw-2tz5-4fdr
12
vulnerability VCID-fqkx-v8t5-q3h6
13
vulnerability VCID-h217-xe8x-nua3
14
vulnerability VCID-h7cg-64er-uya9
15
vulnerability VCID-h7hf-sf2q-73ay
16
vulnerability VCID-hp99-ncuh-6ugv
17
vulnerability VCID-jp1p-rfxa-hyd9
18
vulnerability VCID-jq5y-7h9g-mufa
19
vulnerability VCID-jqe4-8hzb-mfea
20
vulnerability VCID-mctp-nf36-7qdn
21
vulnerability VCID-njsj-bwjq-fyap
22
vulnerability VCID-p7gd-anw2-1qbz
23
vulnerability VCID-sy7r-d6pv-yba9
24
vulnerability VCID-tgyt-axv1-c7ag
25
vulnerability VCID-vq15-t92r-5bhx
26
vulnerability VCID-xh68-defe-f7ce
27
vulnerability VCID-xw1s-93bu-wuh9
28
vulnerability VCID-ygw4-jdqu-4fbt
29
vulnerability VCID-yz6t-ge1y-qfgr
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.11
1
url pkg:composer/typo3/cms@8.0.0
purl pkg:composer/typo3/cms@8.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-11u3-8xzy-jfhh
1
vulnerability VCID-1ffs-9vj5-27hk
2
vulnerability VCID-28fn-ncj5-2ufk
3
vulnerability VCID-2r7u-mc45-8yhe
4
vulnerability VCID-2rhr-8vaz-hqfj
5
vulnerability VCID-2vpx-fqb6-aqfa
6
vulnerability VCID-39jx-muqb-nkfq
7
vulnerability VCID-39vn-73mc-jqav
8
vulnerability VCID-3ugj-6m1e-e3hr
9
vulnerability VCID-4eym-e6vt-8fbs
10
vulnerability VCID-4wnp-gusy-43b8
11
vulnerability VCID-5dxs-cdht-27hw
12
vulnerability VCID-5u2f-5zzf-j3e4
13
vulnerability VCID-66kh-c1dm-8fbf
14
vulnerability VCID-66ru-n2df-b3ay
15
vulnerability VCID-6su8-bbrw-hbhp
16
vulnerability VCID-727q-h3ey-6yc9
17
vulnerability VCID-7ch1-q9f4-a7bt
18
vulnerability VCID-7m6u-k5tp-gkhy
19
vulnerability VCID-848u-w88s-5bbe
20
vulnerability VCID-8p64-6zpt-t3av
21
vulnerability VCID-94r9-hh4g-jkej
22
vulnerability VCID-953t-q1cr-zyd6
23
vulnerability VCID-9726-hafj-wkay
24
vulnerability VCID-9saf-w56y-pugz
25
vulnerability VCID-9yu1-z7c2-t3fj
26
vulnerability VCID-abjx-8v46-d7d8
27
vulnerability VCID-am6s-67bm-77dr
28
vulnerability VCID-bn3p-39sv-6fdg
29
vulnerability VCID-bq2j-t19h-zyad
30
vulnerability VCID-bstt-ybrs-5ua3
31
vulnerability VCID-buj5-2t53-3kcr
32
vulnerability VCID-d6c2-upx1-e7cd
33
vulnerability VCID-dsqm-9q3e-dudw
34
vulnerability VCID-e564-zdku-9fc6
35
vulnerability VCID-emqq-kwjg-3kfk
36
vulnerability VCID-eutz-mj58-audb
37
vulnerability VCID-ev4k-5k1d-2bhu
38
vulnerability VCID-f319-jpf5-hyex
39
vulnerability VCID-fdnw-2tz5-4fdr
40
vulnerability VCID-fgqa-5fx9-nkaz
41
vulnerability VCID-fh61-7rfy-s3hg
42
vulnerability VCID-fqkc-utex-3kav
43
vulnerability VCID-fqkx-v8t5-q3h6
44
vulnerability VCID-fut7-bb1f-37g7
45
vulnerability VCID-g7mm-vjbw-bbhd
46
vulnerability VCID-gk79-jtuz-myh6
47
vulnerability VCID-gpv4-4tpd-tbaa
48
vulnerability VCID-h217-xe8x-nua3
49
vulnerability VCID-h7cg-64er-uya9
50
vulnerability VCID-h7hf-sf2q-73ay
51
vulnerability VCID-hp99-ncuh-6ugv
52
vulnerability VCID-hyx9-8ae6-sba8
53
vulnerability VCID-hzma-cduk-3uhp
54
vulnerability VCID-j8hk-bqnb-gycp
55
vulnerability VCID-j8sh-5evd-dkaz
56
vulnerability VCID-jeqr-9tfu-f7b2
57
vulnerability VCID-jf28-91be-6kbr
58
vulnerability VCID-jmea-qzsr-wkf4
59
vulnerability VCID-jn38-wfec-7bb2
60
vulnerability VCID-jp1p-rfxa-hyd9
61
vulnerability VCID-jq5y-7h9g-mufa
62
vulnerability VCID-jqe4-8hzb-mfea
63
vulnerability VCID-jwb1-3sbg-kfa5
64
vulnerability VCID-k5t3-28es-h3ez
65
vulnerability VCID-khpm-e1xb-hydb
66
vulnerability VCID-ks1q-a8x2-uqht
67
vulnerability VCID-m3nc-xbb4-yubr
68
vulnerability VCID-mctp-nf36-7qdn
69
vulnerability VCID-nhjv-nke2-2kf8
70
vulnerability VCID-njsj-bwjq-fyap
71
vulnerability VCID-nney-azbc-pucg
72
vulnerability VCID-nvbp-pbjw-3qgx
73
vulnerability VCID-p576-w7dd-p3h7
74
vulnerability VCID-p7gd-anw2-1qbz
75
vulnerability VCID-pmvp-twk2-jqe4
76
vulnerability VCID-q2ym-y2rz-1bdn
77
vulnerability VCID-q52p-xfj8-gygd
78
vulnerability VCID-q7vt-19eb-sqeq
79
vulnerability VCID-qcnh-z4zh-myaw
80
vulnerability VCID-qdxh-arxx-wbcr
81
vulnerability VCID-qxab-9uwr-yqhv
82
vulnerability VCID-rqrw-t2kj-mud8
83
vulnerability VCID-ru6w-m6q6-27gn
84
vulnerability VCID-sdjb-gp4t-vbgt
85
vulnerability VCID-sdsa-mh76-kqch
86
vulnerability VCID-sdz8-hju8-4bcb
87
vulnerability VCID-sy7r-d6pv-yba9
88
vulnerability VCID-teby-zvvw-zkhv
89
vulnerability VCID-u259-2sxq-tbct
90
vulnerability VCID-u4tq-8qnk-5fd7
91
vulnerability VCID-u5he-6tqb-gqaf
92
vulnerability VCID-u6as-cwxc-pkhk
93
vulnerability VCID-uq77-aax5-k7d8
94
vulnerability VCID-vq15-t92r-5bhx
95
vulnerability VCID-vw2r-g8yy-eyf4
96
vulnerability VCID-w483-prq4-rycx
97
vulnerability VCID-w58p-3wg1-7ycr
98
vulnerability VCID-wat8-4m83-hken
99
vulnerability VCID-wy45-2gmr-fkfg
100
vulnerability VCID-x175-xjek-97ds
101
vulnerability VCID-x5x1-w7yv-eye9
102
vulnerability VCID-xh68-defe-f7ce
103
vulnerability VCID-xpxg-qq49-b7fd
104
vulnerability VCID-xvyu-2hb8-8ufh
105
vulnerability VCID-xw1s-93bu-wuh9
106
vulnerability VCID-y7ds-p5r2-yuhq
107
vulnerability VCID-ygw4-jdqu-4fbt
108
vulnerability VCID-yh6b-tc4u-v3bk
109
vulnerability VCID-yn6z-9v7k-x7br
110
vulnerability VCID-yz6t-ge1y-qfgr
111
vulnerability VCID-zgfw-pk39-gyg8
112
vulnerability VCID-zmwv-gwq3-fkej
113
vulnerability VCID-zrz3-3dnf-tbay
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.0.0
2
url pkg:composer/typo3/cms@8.3.1
purl pkg:composer/typo3/cms@8.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-3ugj-6m1e-e3hr
2
vulnerability VCID-4eym-e6vt-8fbs
3
vulnerability VCID-5dxs-cdht-27hw
4
vulnerability VCID-66ru-n2df-b3ay
5
vulnerability VCID-727q-h3ey-6yc9
6
vulnerability VCID-7ch1-q9f4-a7bt
7
vulnerability VCID-7m6u-k5tp-gkhy
8
vulnerability VCID-848u-w88s-5bbe
9
vulnerability VCID-953t-q1cr-zyd6
10
vulnerability VCID-9saf-w56y-pugz
11
vulnerability VCID-abjx-8v46-d7d8
12
vulnerability VCID-am6s-67bm-77dr
13
vulnerability VCID-bn3p-39sv-6fdg
14
vulnerability VCID-d6c2-upx1-e7cd
15
vulnerability VCID-dsqm-9q3e-dudw
16
vulnerability VCID-e564-zdku-9fc6
17
vulnerability VCID-emqq-kwjg-3kfk
18
vulnerability VCID-eutz-mj58-audb
19
vulnerability VCID-ev4k-5k1d-2bhu
20
vulnerability VCID-fdnw-2tz5-4fdr
21
vulnerability VCID-fqkx-v8t5-q3h6
22
vulnerability VCID-fut7-bb1f-37g7
23
vulnerability VCID-h217-xe8x-nua3
24
vulnerability VCID-h7cg-64er-uya9
25
vulnerability VCID-h7hf-sf2q-73ay
26
vulnerability VCID-hg2n-xera-jkdh
27
vulnerability VCID-hp99-ncuh-6ugv
28
vulnerability VCID-jp1p-rfxa-hyd9
29
vulnerability VCID-jq5y-7h9g-mufa
30
vulnerability VCID-jqe4-8hzb-mfea
31
vulnerability VCID-k5t3-28es-h3ez
32
vulnerability VCID-khpm-e1xb-hydb
33
vulnerability VCID-mctp-nf36-7qdn
34
vulnerability VCID-njsj-bwjq-fyap
35
vulnerability VCID-nney-azbc-pucg
36
vulnerability VCID-p7gd-anw2-1qbz
37
vulnerability VCID-pmvp-twk2-jqe4
38
vulnerability VCID-q52p-xfj8-gygd
39
vulnerability VCID-qv14-m93d-jyd9
40
vulnerability VCID-qxab-9uwr-yqhv
41
vulnerability VCID-rqrw-t2kj-mud8
42
vulnerability VCID-ru6w-m6q6-27gn
43
vulnerability VCID-sdsa-mh76-kqch
44
vulnerability VCID-sy7r-d6pv-yba9
45
vulnerability VCID-u259-2sxq-tbct
46
vulnerability VCID-vq15-t92r-5bhx
47
vulnerability VCID-vw2r-g8yy-eyf4
48
vulnerability VCID-wy45-2gmr-fkfg
49
vulnerability VCID-x5x1-w7yv-eye9
50
vulnerability VCID-xh68-defe-f7ce
51
vulnerability VCID-xw1s-93bu-wuh9
52
vulnerability VCID-y7ds-p5r2-yuhq
53
vulnerability VCID-ygw4-jdqu-4fbt
54
vulnerability VCID-yz6t-ge1y-qfgr
55
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.3.1
aliases TYPO3-CORE-SA-2016-022
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8jcy-3kje-fqeh
5
url VCID-953t-q1cr-zyd6
vulnerability_id VCID-953t-q1cr-zyd6
summary 
Cross-site Scripting
Cross-Site Scripting in Backend Modal Component.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-007/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2018-007/
fixed_packages
0
url pkg:composer/typo3/cms@7.6.32
purl pkg:composer/typo3/cms@7.6.32
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ev4k-5k1d-2bhu
1
vulnerability VCID-fqkx-v8t5-q3h6
2
vulnerability VCID-jp1p-rfxa-hyd9
3
vulnerability VCID-p7gd-anw2-1qbz
4
vulnerability VCID-tgyt-axv1-c7ag
5
vulnerability VCID-xw1s-93bu-wuh9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.32
1
url pkg:composer/typo3/cms@8.7.21
purl pkg:composer/typo3/cms@8.7.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-4eym-e6vt-8fbs
2
vulnerability VCID-7m6u-k5tp-gkhy
3
vulnerability VCID-848u-w88s-5bbe
4
vulnerability VCID-am6s-67bm-77dr
5
vulnerability VCID-bn3p-39sv-6fdg
6
vulnerability VCID-ev4k-5k1d-2bhu
7
vulnerability VCID-fqkx-v8t5-q3h6
8
vulnerability VCID-fut7-bb1f-37g7
9
vulnerability VCID-jp1p-rfxa-hyd9
10
vulnerability VCID-k5t3-28es-h3ez
11
vulnerability VCID-khpm-e1xb-hydb
12
vulnerability VCID-nney-azbc-pucg
13
vulnerability VCID-p7gd-anw2-1qbz
14
vulnerability VCID-pmvp-twk2-jqe4
15
vulnerability VCID-qv14-m93d-jyd9
16
vulnerability VCID-rqrw-t2kj-mud8
17
vulnerability VCID-ru6w-m6q6-27gn
18
vulnerability VCID-sdsa-mh76-kqch
19
vulnerability VCID-tgyt-axv1-c7ag
20
vulnerability VCID-u259-2sxq-tbct
21
vulnerability VCID-vw2r-g8yy-eyf4
22
vulnerability VCID-x5x1-w7yv-eye9
23
vulnerability VCID-xw1s-93bu-wuh9
24
vulnerability VCID-y7ds-p5r2-yuhq
25
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.21
2
url pkg:composer/typo3/cms@9.5.2
purl pkg:composer/typo3/cms@9.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1sfk-z8py-ykb8
2
vulnerability VCID-3ye6-vqje-abh4
3
vulnerability VCID-4an7-9ph4-mkd4
4
vulnerability VCID-4eym-e6vt-8fbs
5
vulnerability VCID-4jck-w9ct-budk
6
vulnerability VCID-6mnf-2fcw-dqgp
7
vulnerability VCID-7m6u-k5tp-gkhy
8
vulnerability VCID-7xv1-78u7-xufp
9
vulnerability VCID-848u-w88s-5bbe
10
vulnerability VCID-8w4e-d49b-nbg8
11
vulnerability VCID-9adx-p876-kyb5
12
vulnerability VCID-am6s-67bm-77dr
13
vulnerability VCID-bbh5-rss8-bfct
14
vulnerability VCID-cvk2-93hm-gkhx
15
vulnerability VCID-e6zr-4bgg-kkh5
16
vulnerability VCID-ev4k-5k1d-2bhu
17
vulnerability VCID-fqkx-v8t5-q3h6
18
vulnerability VCID-fut7-bb1f-37g7
19
vulnerability VCID-jp1p-rfxa-hyd9
20
vulnerability VCID-k5t3-28es-h3ez
21
vulnerability VCID-khpm-e1xb-hydb
22
vulnerability VCID-n1gz-y615-cbbk
23
vulnerability VCID-nney-azbc-pucg
24
vulnerability VCID-p7gd-anw2-1qbz
25
vulnerability VCID-pmvp-twk2-jqe4
26
vulnerability VCID-qv14-m93d-jyd9
27
vulnerability VCID-rqrw-t2kj-mud8
28
vulnerability VCID-ru6w-m6q6-27gn
29
vulnerability VCID-sdsa-mh76-kqch
30
vulnerability VCID-tgyt-axv1-c7ag
31
vulnerability VCID-u259-2sxq-tbct
32
vulnerability VCID-vw2r-g8yy-eyf4
33
vulnerability VCID-x5x1-w7yv-eye9
34
vulnerability VCID-xw1s-93bu-wuh9
35
vulnerability VCID-y7ds-p5r2-yuhq
36
vulnerability VCID-zeut-9wfp-q7et
37
vulnerability VCID-zkvq-bms4-gfcv
38
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.2
aliases GMS-2018-98
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-953t-q1cr-zyd6
6
url VCID-abjx-8v46-d7d8
vulnerability_id VCID-abjx-8v46-d7d8
summary 
Improper Authentication
Authentication Bypass in TYPO3 CMS.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-001/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2018-001/
fixed_packages
0
url pkg:composer/typo3/cms@7.6.30
purl pkg:composer/typo3/cms@7.6.30
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3ugj-6m1e-e3hr
1
vulnerability VCID-953t-q1cr-zyd6
2
vulnerability VCID-dsqm-9q3e-dudw
3
vulnerability VCID-ev4k-5k1d-2bhu
4
vulnerability VCID-fdnw-2tz5-4fdr
5
vulnerability VCID-fqkx-v8t5-q3h6
6
vulnerability VCID-hp99-ncuh-6ugv
7
vulnerability VCID-jp1p-rfxa-hyd9
8
vulnerability VCID-jq5y-7h9g-mufa
9
vulnerability VCID-p7gd-anw2-1qbz
10
vulnerability VCID-tgyt-axv1-c7ag
11
vulnerability VCID-xw1s-93bu-wuh9
12
vulnerability VCID-yz6t-ge1y-qfgr
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.30
1
url pkg:composer/typo3/cms@8.7.17
purl pkg:composer/typo3/cms@8.7.17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-3ugj-6m1e-e3hr
2
vulnerability VCID-4eym-e6vt-8fbs
3
vulnerability VCID-7ch1-q9f4-a7bt
4
vulnerability VCID-7m6u-k5tp-gkhy
5
vulnerability VCID-848u-w88s-5bbe
6
vulnerability VCID-953t-q1cr-zyd6
7
vulnerability VCID-am6s-67bm-77dr
8
vulnerability VCID-bn3p-39sv-6fdg
9
vulnerability VCID-dsqm-9q3e-dudw
10
vulnerability VCID-emqq-kwjg-3kfk
11
vulnerability VCID-ev4k-5k1d-2bhu
12
vulnerability VCID-fdnw-2tz5-4fdr
13
vulnerability VCID-fqkx-v8t5-q3h6
14
vulnerability VCID-fut7-bb1f-37g7
15
vulnerability VCID-hp99-ncuh-6ugv
16
vulnerability VCID-jp1p-rfxa-hyd9
17
vulnerability VCID-jq5y-7h9g-mufa
18
vulnerability VCID-k5t3-28es-h3ez
19
vulnerability VCID-khpm-e1xb-hydb
20
vulnerability VCID-nney-azbc-pucg
21
vulnerability VCID-p7gd-anw2-1qbz
22
vulnerability VCID-pmvp-twk2-jqe4
23
vulnerability VCID-qv14-m93d-jyd9
24
vulnerability VCID-qxab-9uwr-yqhv
25
vulnerability VCID-rqrw-t2kj-mud8
26
vulnerability VCID-ru6w-m6q6-27gn
27
vulnerability VCID-sdsa-mh76-kqch
28
vulnerability VCID-tgyt-axv1-c7ag
29
vulnerability VCID-u259-2sxq-tbct
30
vulnerability VCID-vw2r-g8yy-eyf4
31
vulnerability VCID-x5x1-w7yv-eye9
32
vulnerability VCID-xw1s-93bu-wuh9
33
vulnerability VCID-y7ds-p5r2-yuhq
34
vulnerability VCID-yz6t-ge1y-qfgr
35
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.17
2
url pkg:composer/typo3/cms@9.3.2
purl pkg:composer/typo3/cms@9.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1sfk-z8py-ykb8
2
vulnerability VCID-3ugj-6m1e-e3hr
3
vulnerability VCID-3ye6-vqje-abh4
4
vulnerability VCID-4an7-9ph4-mkd4
5
vulnerability VCID-4eym-e6vt-8fbs
6
vulnerability VCID-4jck-w9ct-budk
7
vulnerability VCID-6mnf-2fcw-dqgp
8
vulnerability VCID-7ch1-q9f4-a7bt
9
vulnerability VCID-7m6u-k5tp-gkhy
10
vulnerability VCID-7xv1-78u7-xufp
11
vulnerability VCID-848u-w88s-5bbe
12
vulnerability VCID-8w4e-d49b-nbg8
13
vulnerability VCID-953t-q1cr-zyd6
14
vulnerability VCID-9adx-p876-kyb5
15
vulnerability VCID-am6s-67bm-77dr
16
vulnerability VCID-bbh5-rss8-bfct
17
vulnerability VCID-cvk2-93hm-gkhx
18
vulnerability VCID-dsqm-9q3e-dudw
19
vulnerability VCID-e6zr-4bgg-kkh5
20
vulnerability VCID-emqq-kwjg-3kfk
21
vulnerability VCID-ev4k-5k1d-2bhu
22
vulnerability VCID-fqkx-v8t5-q3h6
23
vulnerability VCID-fut7-bb1f-37g7
24
vulnerability VCID-hp99-ncuh-6ugv
25
vulnerability VCID-jp1p-rfxa-hyd9
26
vulnerability VCID-jq5y-7h9g-mufa
27
vulnerability VCID-k5t3-28es-h3ez
28
vulnerability VCID-khpm-e1xb-hydb
29
vulnerability VCID-n1gz-y615-cbbk
30
vulnerability VCID-nney-azbc-pucg
31
vulnerability VCID-p7gd-anw2-1qbz
32
vulnerability VCID-pmvp-twk2-jqe4
33
vulnerability VCID-qv14-m93d-jyd9
34
vulnerability VCID-qxab-9uwr-yqhv
35
vulnerability VCID-rqrw-t2kj-mud8
36
vulnerability VCID-ru6w-m6q6-27gn
37
vulnerability VCID-sdsa-mh76-kqch
38
vulnerability VCID-tgyt-axv1-c7ag
39
vulnerability VCID-u259-2sxq-tbct
40
vulnerability VCID-vw2r-g8yy-eyf4
41
vulnerability VCID-x5x1-w7yv-eye9
42
vulnerability VCID-xw1s-93bu-wuh9
43
vulnerability VCID-y7ds-p5r2-yuhq
44
vulnerability VCID-yz6t-ge1y-qfgr
45
vulnerability VCID-zeut-9wfp-q7et
46
vulnerability VCID-zkvq-bms4-gfcv
47
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.3.2
aliases GMS-2018-93
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-abjx-8v46-d7d8
7
url VCID-ansr-8m5j-pya6
vulnerability_id VCID-ansr-8m5j-pya6
summary 
Cross-site Scripting
Multiple Cross-Site Scripting vulnerabilities in TYPO3 backend.
references
0
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-011/
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-011/
fixed_packages
0
url pkg:composer/typo3/cms@7.6.1
purl pkg:composer/typo3/cms@7.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2r7u-mc45-8yhe
1
vulnerability VCID-2vpx-fqb6-aqfa
2
vulnerability VCID-39jx-muqb-nkfq
3
vulnerability VCID-3ugj-6m1e-e3hr
4
vulnerability VCID-5dxs-cdht-27hw
5
vulnerability VCID-5hm4-ms5p-uuae
6
vulnerability VCID-66ru-n2df-b3ay
7
vulnerability VCID-727q-h3ey-6yc9
8
vulnerability VCID-8jcy-3kje-fqeh
9
vulnerability VCID-8p64-6zpt-t3av
10
vulnerability VCID-953t-q1cr-zyd6
11
vulnerability VCID-9saf-w56y-pugz
12
vulnerability VCID-abjx-8v46-d7d8
13
vulnerability VCID-dd9u-w2y2-87h9
14
vulnerability VCID-dsqm-9q3e-dudw
15
vulnerability VCID-e564-zdku-9fc6
16
vulnerability VCID-eutz-mj58-audb
17
vulnerability VCID-ev4k-5k1d-2bhu
18
vulnerability VCID-exjy-5cyn-zfg1
19
vulnerability VCID-fdnw-2tz5-4fdr
20
vulnerability VCID-fqkx-v8t5-q3h6
21
vulnerability VCID-g9ns-sxkx-aqh1
22
vulnerability VCID-h217-xe8x-nua3
23
vulnerability VCID-h7cg-64er-uya9
24
vulnerability VCID-h7hf-sf2q-73ay
25
vulnerability VCID-hp99-ncuh-6ugv
26
vulnerability VCID-hzma-cduk-3uhp
27
vulnerability VCID-jeqr-9tfu-f7b2
28
vulnerability VCID-jp1p-rfxa-hyd9
29
vulnerability VCID-jq5y-7h9g-mufa
30
vulnerability VCID-jqe4-8hzb-mfea
31
vulnerability VCID-ks1q-a8x2-uqht
32
vulnerability VCID-m3nc-xbb4-yubr
33
vulnerability VCID-mctp-nf36-7qdn
34
vulnerability VCID-nhjv-nke2-2kf8
35
vulnerability VCID-njsj-bwjq-fyap
36
vulnerability VCID-p7gd-anw2-1qbz
37
vulnerability VCID-s97a-nmk8-y3ay
38
vulnerability VCID-sy7r-d6pv-yba9
39
vulnerability VCID-tgyt-axv1-c7ag
40
vulnerability VCID-u4tq-8qnk-5fd7
41
vulnerability VCID-vq15-t92r-5bhx
42
vulnerability VCID-xh68-defe-f7ce
43
vulnerability VCID-xw1s-93bu-wuh9
44
vulnerability VCID-y1ap-y4az-x7ec
45
vulnerability VCID-ygw4-jdqu-4fbt
46
vulnerability VCID-yn6z-9v7k-x7br
47
vulnerability VCID-yz6t-ge1y-qfgr
48
vulnerability VCID-zrz3-3dnf-tbay
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.1
aliases GMS-2015-87
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ansr-8m5j-pya6
8
url VCID-c57c-akce-xufq
vulnerability_id VCID-c57c-akce-xufq
summary 
Cross-Site Scripting Vulnerability
It has been discovered, that it is possible to forge a link to a backend module, which contains a JavaScript payload. This JavaScript is executed, if an authenticated editor with access to the module follows the link that, is tricked to click on a certain HTML target. Because TYPO3 include a secret token unknown to an attacker in every URL, an exploit would not be feasible for these versions.
references
0
reference_url http://packetstormsecurity.com/files/133551/Typo3-CMS-6.2.14-4.5.40-Cross-Site-Scripting.html
reference_id
reference_type
scores
0
value LOW
scoring_system generic_textual
scoring_elements
url http://packetstormsecurity.com/files/133551/Typo3-CMS-6.2.14-4.5.40-Cross-Site-Scripting.html
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-5956
reference_id
reference_type
scores
0
value 0.00169
scoring_system epss
scoring_elements 0.37817
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-5956
2
reference_url http://seclists.org/fulldisclosure/2015/Sep/57
reference_id
reference_type
scores
0
value LOW
scoring_system generic_textual
scoring_elements
url http://seclists.org/fulldisclosure/2015/Sep/57
3
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2015-5956.yaml
reference_id
reference_type
scores
0
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2015-5956.yaml
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2015-5956
reference_id
reference_type
scores
0
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2015-5956
5
reference_url https://review.typo3.org/#/c/43122/
reference_id
reference_type
scores
url https://review.typo3.org/#/c/43122/
6
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-009
reference_id
reference_type
scores
0
value LOW
scoring_system generic_textual
scoring_elements
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-009
7
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-009/
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-009/
8
reference_url http://www.securityfocus.com/archive/1/536464/100/0/threaded
reference_id
reference_type
scores
0
value LOW
scoring_system generic_textual
scoring_elements
url http://www.securityfocus.com/archive/1/536464/100/0/threaded
9
reference_url http://www.securitytracker.com/id/1033551
reference_id
reference_type
scores
0
value LOW
scoring_system generic_textual
scoring_elements
url http://www.securitytracker.com/id/1033551
fixed_packages
0
url pkg:composer/typo3/cms@7.4.0
purl pkg:composer/typo3/cms@7.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3ugj-6m1e-e3hr
1
vulnerability VCID-5hm4-ms5p-uuae
2
vulnerability VCID-8jcy-3kje-fqeh
3
vulnerability VCID-953t-q1cr-zyd6
4
vulnerability VCID-abjx-8v46-d7d8
5
vulnerability VCID-ansr-8m5j-pya6
6
vulnerability VCID-dsqm-9q3e-dudw
7
vulnerability VCID-e82x-2cdb-7fgn
8
vulnerability VCID-ev4k-5k1d-2bhu
9
vulnerability VCID-fdnw-2tz5-4fdr
10
vulnerability VCID-fqkx-v8t5-q3h6
11
vulnerability VCID-hp99-ncuh-6ugv
12
vulnerability VCID-jp1p-rfxa-hyd9
13
vulnerability VCID-jq5y-7h9g-mufa
14
vulnerability VCID-n18b-qe5x-z7cj
15
vulnerability VCID-nhjv-nke2-2kf8
16
vulnerability VCID-njsj-bwjq-fyap
17
vulnerability VCID-p7gd-anw2-1qbz
18
vulnerability VCID-u6h1-ccgw-jqds
19
vulnerability VCID-ub3e-hrb1-wqac
20
vulnerability VCID-vq15-t92r-5bhx
21
vulnerability VCID-wms8-dnuz-b3hc
22
vulnerability VCID-xw1s-93bu-wuh9
23
vulnerability VCID-yz6t-ge1y-qfgr
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.4.0
aliases CVE-2015-5956, GHSA-989h-wv8x-933p
risk_score 1.4
exploitability 0.5
weighted_severity 2.7
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-c57c-akce-xufq
9
url VCID-dsqm-9q3e-dudw
vulnerability_id VCID-dsqm-9q3e-dudw
summary 
Uncontrolled Resource Consumption
Denial of Service in Online Media Asset Handling.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-011/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2018-011/
fixed_packages
0
url pkg:composer/typo3/cms@7.6.32
purl pkg:composer/typo3/cms@7.6.32
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ev4k-5k1d-2bhu
1
vulnerability VCID-fqkx-v8t5-q3h6
2
vulnerability VCID-jp1p-rfxa-hyd9
3
vulnerability VCID-p7gd-anw2-1qbz
4
vulnerability VCID-tgyt-axv1-c7ag
5
vulnerability VCID-xw1s-93bu-wuh9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.32
1
url pkg:composer/typo3/cms@8.7.21
purl pkg:composer/typo3/cms@8.7.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-4eym-e6vt-8fbs
2
vulnerability VCID-7m6u-k5tp-gkhy
3
vulnerability VCID-848u-w88s-5bbe
4
vulnerability VCID-am6s-67bm-77dr
5
vulnerability VCID-bn3p-39sv-6fdg
6
vulnerability VCID-ev4k-5k1d-2bhu
7
vulnerability VCID-fqkx-v8t5-q3h6
8
vulnerability VCID-fut7-bb1f-37g7
9
vulnerability VCID-jp1p-rfxa-hyd9
10
vulnerability VCID-k5t3-28es-h3ez
11
vulnerability VCID-khpm-e1xb-hydb
12
vulnerability VCID-nney-azbc-pucg
13
vulnerability VCID-p7gd-anw2-1qbz
14
vulnerability VCID-pmvp-twk2-jqe4
15
vulnerability VCID-qv14-m93d-jyd9
16
vulnerability VCID-rqrw-t2kj-mud8
17
vulnerability VCID-ru6w-m6q6-27gn
18
vulnerability VCID-sdsa-mh76-kqch
19
vulnerability VCID-tgyt-axv1-c7ag
20
vulnerability VCID-u259-2sxq-tbct
21
vulnerability VCID-vw2r-g8yy-eyf4
22
vulnerability VCID-x5x1-w7yv-eye9
23
vulnerability VCID-xw1s-93bu-wuh9
24
vulnerability VCID-y7ds-p5r2-yuhq
25
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.21
2
url pkg:composer/typo3/cms@9.5.2
purl pkg:composer/typo3/cms@9.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1sfk-z8py-ykb8
2
vulnerability VCID-3ye6-vqje-abh4
3
vulnerability VCID-4an7-9ph4-mkd4
4
vulnerability VCID-4eym-e6vt-8fbs
5
vulnerability VCID-4jck-w9ct-budk
6
vulnerability VCID-6mnf-2fcw-dqgp
7
vulnerability VCID-7m6u-k5tp-gkhy
8
vulnerability VCID-7xv1-78u7-xufp
9
vulnerability VCID-848u-w88s-5bbe
10
vulnerability VCID-8w4e-d49b-nbg8
11
vulnerability VCID-9adx-p876-kyb5
12
vulnerability VCID-am6s-67bm-77dr
13
vulnerability VCID-bbh5-rss8-bfct
14
vulnerability VCID-cvk2-93hm-gkhx
15
vulnerability VCID-e6zr-4bgg-kkh5
16
vulnerability VCID-ev4k-5k1d-2bhu
17
vulnerability VCID-fqkx-v8t5-q3h6
18
vulnerability VCID-fut7-bb1f-37g7
19
vulnerability VCID-jp1p-rfxa-hyd9
20
vulnerability VCID-k5t3-28es-h3ez
21
vulnerability VCID-khpm-e1xb-hydb
22
vulnerability VCID-n1gz-y615-cbbk
23
vulnerability VCID-nney-azbc-pucg
24
vulnerability VCID-p7gd-anw2-1qbz
25
vulnerability VCID-pmvp-twk2-jqe4
26
vulnerability VCID-qv14-m93d-jyd9
27
vulnerability VCID-rqrw-t2kj-mud8
28
vulnerability VCID-ru6w-m6q6-27gn
29
vulnerability VCID-sdsa-mh76-kqch
30
vulnerability VCID-tgyt-axv1-c7ag
31
vulnerability VCID-u259-2sxq-tbct
32
vulnerability VCID-vw2r-g8yy-eyf4
33
vulnerability VCID-x5x1-w7yv-eye9
34
vulnerability VCID-xw1s-93bu-wuh9
35
vulnerability VCID-y7ds-p5r2-yuhq
36
vulnerability VCID-zeut-9wfp-q7et
37
vulnerability VCID-zkvq-bms4-gfcv
38
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.2
aliases GMS-2018-102
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-dsqm-9q3e-dudw
10
url VCID-dwjk-7sqh-hqa8
vulnerability_id VCID-dwjk-7sqh-hqa8
summary Frontend login Session Fixation.
references
0
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-003/
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-003/
fixed_packages
0
url pkg:composer/typo3/cms@7.3.0
purl pkg:composer/typo3/cms@7.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3ugj-6m1e-e3hr
1
vulnerability VCID-5hm4-ms5p-uuae
2
vulnerability VCID-8jcy-3kje-fqeh
3
vulnerability VCID-953t-q1cr-zyd6
4
vulnerability VCID-abjx-8v46-d7d8
5
vulnerability VCID-ansr-8m5j-pya6
6
vulnerability VCID-c57c-akce-xufq
7
vulnerability VCID-dsqm-9q3e-dudw
8
vulnerability VCID-e82x-2cdb-7fgn
9
vulnerability VCID-ev4k-5k1d-2bhu
10
vulnerability VCID-fdnw-2tz5-4fdr
11
vulnerability VCID-fqkx-v8t5-q3h6
12
vulnerability VCID-hp99-ncuh-6ugv
13
vulnerability VCID-j6x1-dfre-2bdq
14
vulnerability VCID-jp1p-rfxa-hyd9
15
vulnerability VCID-jq5y-7h9g-mufa
16
vulnerability VCID-n18b-qe5x-z7cj
17
vulnerability VCID-nhjv-nke2-2kf8
18
vulnerability VCID-njsj-bwjq-fyap
19
vulnerability VCID-p7gd-anw2-1qbz
20
vulnerability VCID-u6h1-ccgw-jqds
21
vulnerability VCID-ub3e-hrb1-wqac
22
vulnerability VCID-vq15-t92r-5bhx
23
vulnerability VCID-wms8-dnuz-b3hc
24
vulnerability VCID-xw1s-93bu-wuh9
25
vulnerability VCID-yz6t-ge1y-qfgr
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.3.0
aliases GMS-2015-81
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-dwjk-7sqh-hqa8
11
url VCID-e1gr-txgg-fqa6
vulnerability_id VCID-e1gr-txgg-fqa6
summary 
Information Exposure
Frontend: Unauthenticated Path Disclosure.
references
0
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-008/
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-008/
fixed_packages
0
url pkg:composer/typo3/cms@7.3.0
purl pkg:composer/typo3/cms@7.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3ugj-6m1e-e3hr
1
vulnerability VCID-5hm4-ms5p-uuae
2
vulnerability VCID-8jcy-3kje-fqeh
3
vulnerability VCID-953t-q1cr-zyd6
4
vulnerability VCID-abjx-8v46-d7d8
5
vulnerability VCID-ansr-8m5j-pya6
6
vulnerability VCID-c57c-akce-xufq
7
vulnerability VCID-dsqm-9q3e-dudw
8
vulnerability VCID-e82x-2cdb-7fgn
9
vulnerability VCID-ev4k-5k1d-2bhu
10
vulnerability VCID-fdnw-2tz5-4fdr
11
vulnerability VCID-fqkx-v8t5-q3h6
12
vulnerability VCID-hp99-ncuh-6ugv
13
vulnerability VCID-j6x1-dfre-2bdq
14
vulnerability VCID-jp1p-rfxa-hyd9
15
vulnerability VCID-jq5y-7h9g-mufa
16
vulnerability VCID-n18b-qe5x-z7cj
17
vulnerability VCID-nhjv-nke2-2kf8
18
vulnerability VCID-njsj-bwjq-fyap
19
vulnerability VCID-p7gd-anw2-1qbz
20
vulnerability VCID-u6h1-ccgw-jqds
21
vulnerability VCID-ub3e-hrb1-wqac
22
vulnerability VCID-vq15-t92r-5bhx
23
vulnerability VCID-wms8-dnuz-b3hc
24
vulnerability VCID-xw1s-93bu-wuh9
25
vulnerability VCID-yz6t-ge1y-qfgr
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.3.0
aliases GMS-2015-86
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-e1gr-txgg-fqa6
12
url VCID-e82x-2cdb-7fgn
vulnerability_id VCID-e82x-2cdb-7fgn
summary 
Cross-site Scripting
Cross-Site Scripting vulnerability in typolinks.
references
0
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-012/
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-012/
fixed_packages
0
url pkg:composer/typo3/cms@7.6.1
purl pkg:composer/typo3/cms@7.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2r7u-mc45-8yhe
1
vulnerability VCID-2vpx-fqb6-aqfa
2
vulnerability VCID-39jx-muqb-nkfq
3
vulnerability VCID-3ugj-6m1e-e3hr
4
vulnerability VCID-5dxs-cdht-27hw
5
vulnerability VCID-5hm4-ms5p-uuae
6
vulnerability VCID-66ru-n2df-b3ay
7
vulnerability VCID-727q-h3ey-6yc9
8
vulnerability VCID-8jcy-3kje-fqeh
9
vulnerability VCID-8p64-6zpt-t3av
10
vulnerability VCID-953t-q1cr-zyd6
11
vulnerability VCID-9saf-w56y-pugz
12
vulnerability VCID-abjx-8v46-d7d8
13
vulnerability VCID-dd9u-w2y2-87h9
14
vulnerability VCID-dsqm-9q3e-dudw
15
vulnerability VCID-e564-zdku-9fc6
16
vulnerability VCID-eutz-mj58-audb
17
vulnerability VCID-ev4k-5k1d-2bhu
18
vulnerability VCID-exjy-5cyn-zfg1
19
vulnerability VCID-fdnw-2tz5-4fdr
20
vulnerability VCID-fqkx-v8t5-q3h6
21
vulnerability VCID-g9ns-sxkx-aqh1
22
vulnerability VCID-h217-xe8x-nua3
23
vulnerability VCID-h7cg-64er-uya9
24
vulnerability VCID-h7hf-sf2q-73ay
25
vulnerability VCID-hp99-ncuh-6ugv
26
vulnerability VCID-hzma-cduk-3uhp
27
vulnerability VCID-jeqr-9tfu-f7b2
28
vulnerability VCID-jp1p-rfxa-hyd9
29
vulnerability VCID-jq5y-7h9g-mufa
30
vulnerability VCID-jqe4-8hzb-mfea
31
vulnerability VCID-ks1q-a8x2-uqht
32
vulnerability VCID-m3nc-xbb4-yubr
33
vulnerability VCID-mctp-nf36-7qdn
34
vulnerability VCID-nhjv-nke2-2kf8
35
vulnerability VCID-njsj-bwjq-fyap
36
vulnerability VCID-p7gd-anw2-1qbz
37
vulnerability VCID-s97a-nmk8-y3ay
38
vulnerability VCID-sy7r-d6pv-yba9
39
vulnerability VCID-tgyt-axv1-c7ag
40
vulnerability VCID-u4tq-8qnk-5fd7
41
vulnerability VCID-vq15-t92r-5bhx
42
vulnerability VCID-xh68-defe-f7ce
43
vulnerability VCID-xw1s-93bu-wuh9
44
vulnerability VCID-y1ap-y4az-x7ec
45
vulnerability VCID-ygw4-jdqu-4fbt
46
vulnerability VCID-yn6z-9v7k-x7br
47
vulnerability VCID-yz6t-ge1y-qfgr
48
vulnerability VCID-zrz3-3dnf-tbay
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.1
aliases GMS-2015-88
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-e82x-2cdb-7fgn
13
url VCID-ec17-eauu-67d3
vulnerability_id VCID-ec17-eauu-67d3
summary 
Improper Restriction of Excessive Authentication Attempts
Brute Force Protection Bypass in backend login.
references
0
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-006/
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-006/
fixed_packages
0
url pkg:composer/typo3/cms@7.3.0
purl pkg:composer/typo3/cms@7.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3ugj-6m1e-e3hr
1
vulnerability VCID-5hm4-ms5p-uuae
2
vulnerability VCID-8jcy-3kje-fqeh
3
vulnerability VCID-953t-q1cr-zyd6
4
vulnerability VCID-abjx-8v46-d7d8
5
vulnerability VCID-ansr-8m5j-pya6
6
vulnerability VCID-c57c-akce-xufq
7
vulnerability VCID-dsqm-9q3e-dudw
8
vulnerability VCID-e82x-2cdb-7fgn
9
vulnerability VCID-ev4k-5k1d-2bhu
10
vulnerability VCID-fdnw-2tz5-4fdr
11
vulnerability VCID-fqkx-v8t5-q3h6
12
vulnerability VCID-hp99-ncuh-6ugv
13
vulnerability VCID-j6x1-dfre-2bdq
14
vulnerability VCID-jp1p-rfxa-hyd9
15
vulnerability VCID-jq5y-7h9g-mufa
16
vulnerability VCID-n18b-qe5x-z7cj
17
vulnerability VCID-nhjv-nke2-2kf8
18
vulnerability VCID-njsj-bwjq-fyap
19
vulnerability VCID-p7gd-anw2-1qbz
20
vulnerability VCID-u6h1-ccgw-jqds
21
vulnerability VCID-ub3e-hrb1-wqac
22
vulnerability VCID-vq15-t92r-5bhx
23
vulnerability VCID-wms8-dnuz-b3hc
24
vulnerability VCID-xw1s-93bu-wuh9
25
vulnerability VCID-yz6t-ge1y-qfgr
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.3.0
aliases GMS-2015-84
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ec17-eauu-67d3
14
url VCID-ev4k-5k1d-2bhu
vulnerability_id VCID-ev4k-5k1d-2bhu
summary 
URL Redirection to Untrusted Site (Open Redirect)
Login Handling is susceptible to open redirection which allows attackers redirecting to arbitrary content, and conducting phishing attacks. No authentication is required in order to exploit this vulnerability.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-21338
reference_id
reference_type
scores
0
value 0.00253
scoring_system epss
scoring_elements 0.48774
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-21338
1
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21338.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21338.yaml
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21338.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21338.yaml
3
reference_url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-4jhw-2p6j-5wmp
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-4jhw-2p6j-5wmp
4
reference_url https://packagist.org/packages/typo3/cms-core
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://packagist.org/packages/typo3/cms-core
5
reference_url https://typo3.org/security/advisory/typo3-core-sa-2021-001
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2021-001
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-21338
reference_id CVE-2021-21338
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-21338
fixed_packages
0
url pkg:composer/typo3/cms@7.6.51
purl pkg:composer/typo3/cms@7.6.51
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-uq77-aax5-k7d8
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.51
1
url pkg:composer/typo3/cms@8.7.40
purl pkg:composer/typo3/cms@8.7.40
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-j8hk-bqnb-gycp
1
vulnerability VCID-sdjb-gp4t-vbgt
2
vulnerability VCID-uq77-aax5-k7d8
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.40
2
url pkg:composer/typo3/cms@9.5.25
purl pkg:composer/typo3/cms@9.5.25
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.25
3
url pkg:composer/typo3/cms@10.4.14
purl pkg:composer/typo3/cms@10.4.14
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@10.4.14
4
url pkg:composer/typo3/cms@11.1.1
purl pkg:composer/typo3/cms@11.1.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@11.1.1
aliases CVE-2021-21338, GHSA-4jhw-2p6j-5wmp
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ev4k-5k1d-2bhu
15
url VCID-fdnw-2tz5-4fdr
vulnerability_id VCID-fdnw-2tz5-4fdr
summary 
Uncontrolled Resource Consumption
Denial of Service in Frontend Record Registration.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-012/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2018-012/
fixed_packages
0
url pkg:composer/typo3/cms@7.6.32
purl pkg:composer/typo3/cms@7.6.32
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ev4k-5k1d-2bhu
1
vulnerability VCID-fqkx-v8t5-q3h6
2
vulnerability VCID-jp1p-rfxa-hyd9
3
vulnerability VCID-p7gd-anw2-1qbz
4
vulnerability VCID-tgyt-axv1-c7ag
5
vulnerability VCID-xw1s-93bu-wuh9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.32
1
url pkg:composer/typo3/cms@8.7.21
purl pkg:composer/typo3/cms@8.7.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-4eym-e6vt-8fbs
2
vulnerability VCID-7m6u-k5tp-gkhy
3
vulnerability VCID-848u-w88s-5bbe
4
vulnerability VCID-am6s-67bm-77dr
5
vulnerability VCID-bn3p-39sv-6fdg
6
vulnerability VCID-ev4k-5k1d-2bhu
7
vulnerability VCID-fqkx-v8t5-q3h6
8
vulnerability VCID-fut7-bb1f-37g7
9
vulnerability VCID-jp1p-rfxa-hyd9
10
vulnerability VCID-k5t3-28es-h3ez
11
vulnerability VCID-khpm-e1xb-hydb
12
vulnerability VCID-nney-azbc-pucg
13
vulnerability VCID-p7gd-anw2-1qbz
14
vulnerability VCID-pmvp-twk2-jqe4
15
vulnerability VCID-qv14-m93d-jyd9
16
vulnerability VCID-rqrw-t2kj-mud8
17
vulnerability VCID-ru6w-m6q6-27gn
18
vulnerability VCID-sdsa-mh76-kqch
19
vulnerability VCID-tgyt-axv1-c7ag
20
vulnerability VCID-u259-2sxq-tbct
21
vulnerability VCID-vw2r-g8yy-eyf4
22
vulnerability VCID-x5x1-w7yv-eye9
23
vulnerability VCID-xw1s-93bu-wuh9
24
vulnerability VCID-y7ds-p5r2-yuhq
25
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.21
2
url pkg:composer/typo3/cms@9.0.0
purl pkg:composer/typo3/cms@9.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-11u3-8xzy-jfhh
1
vulnerability VCID-1ffs-9vj5-27hk
2
vulnerability VCID-1sfk-z8py-ykb8
3
vulnerability VCID-28fn-ncj5-2ufk
4
vulnerability VCID-2rhr-8vaz-hqfj
5
vulnerability VCID-39vn-73mc-jqav
6
vulnerability VCID-3k2k-a3gb-n3ba
7
vulnerability VCID-3ugj-6m1e-e3hr
8
vulnerability VCID-3ye6-vqje-abh4
9
vulnerability VCID-4an7-9ph4-mkd4
10
vulnerability VCID-4eym-e6vt-8fbs
11
vulnerability VCID-4jck-w9ct-budk
12
vulnerability VCID-66kh-c1dm-8fbf
13
vulnerability VCID-6mnf-2fcw-dqgp
14
vulnerability VCID-7ch1-q9f4-a7bt
15
vulnerability VCID-7m6u-k5tp-gkhy
16
vulnerability VCID-7xv1-78u7-xufp
17
vulnerability VCID-848u-w88s-5bbe
18
vulnerability VCID-8w4e-d49b-nbg8
19
vulnerability VCID-94r9-hh4g-jkej
20
vulnerability VCID-953t-q1cr-zyd6
21
vulnerability VCID-9adx-p876-kyb5
22
vulnerability VCID-9yu1-z7c2-t3fj
23
vulnerability VCID-a1g9-pyz5-9fca
24
vulnerability VCID-abjx-8v46-d7d8
25
vulnerability VCID-am6s-67bm-77dr
26
vulnerability VCID-bbh5-rss8-bfct
27
vulnerability VCID-buj5-2t53-3kcr
28
vulnerability VCID-cvk2-93hm-gkhx
29
vulnerability VCID-dsqm-9q3e-dudw
30
vulnerability VCID-e6zr-4bgg-kkh5
31
vulnerability VCID-emqq-kwjg-3kfk
32
vulnerability VCID-ev4k-5k1d-2bhu
33
vulnerability VCID-f319-jpf5-hyex
34
vulnerability VCID-f4n7-q72x-3yea
35
vulnerability VCID-fpa2-ffg1-fyaa
36
vulnerability VCID-fqkc-utex-3kav
37
vulnerability VCID-fqkx-v8t5-q3h6
38
vulnerability VCID-fut7-bb1f-37g7
39
vulnerability VCID-gpv4-4tpd-tbaa
40
vulnerability VCID-hknp-f88a-kqec
41
vulnerability VCID-hp99-ncuh-6ugv
42
vulnerability VCID-j8hk-bqnb-gycp
43
vulnerability VCID-je4q-svfw-hqda
44
vulnerability VCID-jp1p-rfxa-hyd9
45
vulnerability VCID-jq5y-7h9g-mufa
46
vulnerability VCID-jwb1-3sbg-kfa5
47
vulnerability VCID-k5t3-28es-h3ez
48
vulnerability VCID-khpm-e1xb-hydb
49
vulnerability VCID-n1gz-y615-cbbk
50
vulnerability VCID-njsj-bwjq-fyap
51
vulnerability VCID-nney-azbc-pucg
52
vulnerability VCID-p576-w7dd-p3h7
53
vulnerability VCID-p7gd-anw2-1qbz
54
vulnerability VCID-pmvp-twk2-jqe4
55
vulnerability VCID-q2t1-kx56-s3c3
56
vulnerability VCID-q7vt-19eb-sqeq
57
vulnerability VCID-qcnh-z4zh-myaw
58
vulnerability VCID-qdxh-arxx-wbcr
59
vulnerability VCID-qv14-m93d-jyd9
60
vulnerability VCID-qxab-9uwr-yqhv
61
vulnerability VCID-rqrw-t2kj-mud8
62
vulnerability VCID-ru6w-m6q6-27gn
63
vulnerability VCID-sdjb-gp4t-vbgt
64
vulnerability VCID-sdsa-mh76-kqch
65
vulnerability VCID-teby-zvvw-zkhv
66
vulnerability VCID-tgyt-axv1-c7ag
67
vulnerability VCID-u259-2sxq-tbct
68
vulnerability VCID-u6as-cwxc-pkhk
69
vulnerability VCID-uq77-aax5-k7d8
70
vulnerability VCID-vq15-t92r-5bhx
71
vulnerability VCID-vw2r-g8yy-eyf4
72
vulnerability VCID-w1wb-mq2y-dfca
73
vulnerability VCID-w7z1-aw31-vugx
74
vulnerability VCID-wat8-4m83-hken
75
vulnerability VCID-x5x1-w7yv-eye9
76
vulnerability VCID-xvyu-2hb8-8ufh
77
vulnerability VCID-xw1s-93bu-wuh9
78
vulnerability VCID-y7ds-p5r2-yuhq
79
vulnerability VCID-yh6b-tc4u-v3bk
80
vulnerability VCID-yz6t-ge1y-qfgr
81
vulnerability VCID-zeut-9wfp-q7et
82
vulnerability VCID-zgfw-pk39-gyg8
83
vulnerability VCID-zkvq-bms4-gfcv
84
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.0.0
aliases GMS-2018-103
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-fdnw-2tz5-4fdr
16
url VCID-fqkx-v8t5-q3h6
vulnerability_id VCID-fqkx-v8t5-q3h6
summary 
Cleartext Storage of Sensitive Information
User session identifiers are stored in cleartext - without processing of additional cryptographic hashing algorithms. This vulnerability cannot be exploited directly and occurs in combination with a chained attack - for example SQL injection in any other component of the system.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-21339
reference_id
reference_type
scores
0
value 0.00132
scoring_system epss
scoring_elements 0.32224
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-21339
1
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21339.yaml
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21339.yaml
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21339.yaml
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21339.yaml
3
reference_url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-qx3w-4864-94ch
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-qx3w-4864-94ch
4
reference_url https://packagist.org/packages/typo3/cms-core
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://packagist.org/packages/typo3/cms-core
5
reference_url https://typo3.org/security/advisory/typo3-core-sa-2021-006
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2021-006
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-21339
reference_id CVE-2021-21339
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-21339
fixed_packages
0
url pkg:composer/typo3/cms@7.6.51
purl pkg:composer/typo3/cms@7.6.51
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-uq77-aax5-k7d8
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.51
1
url pkg:composer/typo3/cms@8.7.40
purl pkg:composer/typo3/cms@8.7.40
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-j8hk-bqnb-gycp
1
vulnerability VCID-sdjb-gp4t-vbgt
2
vulnerability VCID-uq77-aax5-k7d8
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.40
2
url pkg:composer/typo3/cms@9.5.25
purl pkg:composer/typo3/cms@9.5.25
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.25
3
url pkg:composer/typo3/cms@10.4.14
purl pkg:composer/typo3/cms@10.4.14
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@10.4.14
4
url pkg:composer/typo3/cms@11.1.1
purl pkg:composer/typo3/cms@11.1.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@11.1.1
aliases CVE-2021-21339, GHSA-qx3w-4864-94ch
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-fqkx-v8t5-q3h6
17
url VCID-hp99-ncuh-6ugv
vulnerability_id VCID-hp99-ncuh-6ugv
summary 
Cross-site Scripting
Cross-Site Scripting in Frontend User Login.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-008/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2018-008/
fixed_packages
0
url pkg:composer/typo3/cms@7.6.32
purl pkg:composer/typo3/cms@7.6.32
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ev4k-5k1d-2bhu
1
vulnerability VCID-fqkx-v8t5-q3h6
2
vulnerability VCID-jp1p-rfxa-hyd9
3
vulnerability VCID-p7gd-anw2-1qbz
4
vulnerability VCID-tgyt-axv1-c7ag
5
vulnerability VCID-xw1s-93bu-wuh9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.32
1
url pkg:composer/typo3/cms@8.7.21
purl pkg:composer/typo3/cms@8.7.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-4eym-e6vt-8fbs
2
vulnerability VCID-7m6u-k5tp-gkhy
3
vulnerability VCID-848u-w88s-5bbe
4
vulnerability VCID-am6s-67bm-77dr
5
vulnerability VCID-bn3p-39sv-6fdg
6
vulnerability VCID-ev4k-5k1d-2bhu
7
vulnerability VCID-fqkx-v8t5-q3h6
8
vulnerability VCID-fut7-bb1f-37g7
9
vulnerability VCID-jp1p-rfxa-hyd9
10
vulnerability VCID-k5t3-28es-h3ez
11
vulnerability VCID-khpm-e1xb-hydb
12
vulnerability VCID-nney-azbc-pucg
13
vulnerability VCID-p7gd-anw2-1qbz
14
vulnerability VCID-pmvp-twk2-jqe4
15
vulnerability VCID-qv14-m93d-jyd9
16
vulnerability VCID-rqrw-t2kj-mud8
17
vulnerability VCID-ru6w-m6q6-27gn
18
vulnerability VCID-sdsa-mh76-kqch
19
vulnerability VCID-tgyt-axv1-c7ag
20
vulnerability VCID-u259-2sxq-tbct
21
vulnerability VCID-vw2r-g8yy-eyf4
22
vulnerability VCID-x5x1-w7yv-eye9
23
vulnerability VCID-xw1s-93bu-wuh9
24
vulnerability VCID-y7ds-p5r2-yuhq
25
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.21
2
url pkg:composer/typo3/cms@9.5.2
purl pkg:composer/typo3/cms@9.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1sfk-z8py-ykb8
2
vulnerability VCID-3ye6-vqje-abh4
3
vulnerability VCID-4an7-9ph4-mkd4
4
vulnerability VCID-4eym-e6vt-8fbs
5
vulnerability VCID-4jck-w9ct-budk
6
vulnerability VCID-6mnf-2fcw-dqgp
7
vulnerability VCID-7m6u-k5tp-gkhy
8
vulnerability VCID-7xv1-78u7-xufp
9
vulnerability VCID-848u-w88s-5bbe
10
vulnerability VCID-8w4e-d49b-nbg8
11
vulnerability VCID-9adx-p876-kyb5
12
vulnerability VCID-am6s-67bm-77dr
13
vulnerability VCID-bbh5-rss8-bfct
14
vulnerability VCID-cvk2-93hm-gkhx
15
vulnerability VCID-e6zr-4bgg-kkh5
16
vulnerability VCID-ev4k-5k1d-2bhu
17
vulnerability VCID-fqkx-v8t5-q3h6
18
vulnerability VCID-fut7-bb1f-37g7
19
vulnerability VCID-jp1p-rfxa-hyd9
20
vulnerability VCID-k5t3-28es-h3ez
21
vulnerability VCID-khpm-e1xb-hydb
22
vulnerability VCID-n1gz-y615-cbbk
23
vulnerability VCID-nney-azbc-pucg
24
vulnerability VCID-p7gd-anw2-1qbz
25
vulnerability VCID-pmvp-twk2-jqe4
26
vulnerability VCID-qv14-m93d-jyd9
27
vulnerability VCID-rqrw-t2kj-mud8
28
vulnerability VCID-ru6w-m6q6-27gn
29
vulnerability VCID-sdsa-mh76-kqch
30
vulnerability VCID-tgyt-axv1-c7ag
31
vulnerability VCID-u259-2sxq-tbct
32
vulnerability VCID-vw2r-g8yy-eyf4
33
vulnerability VCID-x5x1-w7yv-eye9
34
vulnerability VCID-xw1s-93bu-wuh9
35
vulnerability VCID-y7ds-p5r2-yuhq
36
vulnerability VCID-zeut-9wfp-q7et
37
vulnerability VCID-zkvq-bms4-gfcv
38
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.2
aliases GMS-2018-99
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hp99-ncuh-6ugv
18
url VCID-j6x1-dfre-2bdq
vulnerability_id VCID-j6x1-dfre-2bdq
summary 
Unauthenticated Path Disclosure
It has been discovered, that calling a PHP script which is delivered with TYPO3 for testing purposes, discloses the absolute server path to the TYPO3 installation.
references
0
reference_url https://review.typo3.org/#/c/43120/
reference_id
reference_type
scores
url https://review.typo3.org/#/c/43120/
1
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-008/
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-008/
fixed_packages
0
url pkg:composer/typo3/cms@7.4.0
purl pkg:composer/typo3/cms@7.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3ugj-6m1e-e3hr
1
vulnerability VCID-5hm4-ms5p-uuae
2
vulnerability VCID-8jcy-3kje-fqeh
3
vulnerability VCID-953t-q1cr-zyd6
4
vulnerability VCID-abjx-8v46-d7d8
5
vulnerability VCID-ansr-8m5j-pya6
6
vulnerability VCID-dsqm-9q3e-dudw
7
vulnerability VCID-e82x-2cdb-7fgn
8
vulnerability VCID-ev4k-5k1d-2bhu
9
vulnerability VCID-fdnw-2tz5-4fdr
10
vulnerability VCID-fqkx-v8t5-q3h6
11
vulnerability VCID-hp99-ncuh-6ugv
12
vulnerability VCID-jp1p-rfxa-hyd9
13
vulnerability VCID-jq5y-7h9g-mufa
14
vulnerability VCID-n18b-qe5x-z7cj
15
vulnerability VCID-nhjv-nke2-2kf8
16
vulnerability VCID-njsj-bwjq-fyap
17
vulnerability VCID-p7gd-anw2-1qbz
18
vulnerability VCID-u6h1-ccgw-jqds
19
vulnerability VCID-ub3e-hrb1-wqac
20
vulnerability VCID-vq15-t92r-5bhx
21
vulnerability VCID-wms8-dnuz-b3hc
22
vulnerability VCID-xw1s-93bu-wuh9
23
vulnerability VCID-yz6t-ge1y-qfgr
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.4.0
aliases GMS-2015-25
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-j6x1-dfre-2bdq
19
url VCID-jp1p-rfxa-hyd9
vulnerability_id VCID-jp1p-rfxa-hyd9
summary 
Cross-site Scripting
Content elements of type `_menu_` are vulnerable to cross-site scripting when their referenced items get previewed in the page module. A valid backend user account is needed to exploit this vulnerability.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-21370
reference_id
reference_type
scores
0
value 0.00342
scoring_system epss
scoring_elements 0.57112
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-21370
1
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21370.yaml
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21370.yaml
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21370.yaml
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21370.yaml
3
reference_url https://packagist.org/packages/typo3/cms-backend
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://packagist.org/packages/typo3/cms-backend
4
reference_url https://typo3.org/security/advisory/typo3-core-sa-2021-008
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2021-008
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-21370
reference_id CVE-2021-21370
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-21370
6
reference_url https://github.com/advisories/GHSA-x7hc-x7fm-f7qh
reference_id GHSA-x7hc-x7fm-f7qh
reference_type
scores
url https://github.com/advisories/GHSA-x7hc-x7fm-f7qh
7
reference_url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-x7hc-x7fm-f7qh
reference_id GHSA-x7hc-x7fm-f7qh
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-x7hc-x7fm-f7qh
fixed_packages
0
url pkg:composer/typo3/cms@7.6.51
purl pkg:composer/typo3/cms@7.6.51
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-uq77-aax5-k7d8
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.51
1
url pkg:composer/typo3/cms@8.7.40
purl pkg:composer/typo3/cms@8.7.40
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-j8hk-bqnb-gycp
1
vulnerability VCID-sdjb-gp4t-vbgt
2
vulnerability VCID-uq77-aax5-k7d8
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.40
2
url pkg:composer/typo3/cms@9.5.25
purl pkg:composer/typo3/cms@9.5.25
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.25
3
url pkg:composer/typo3/cms@10.4.14
purl pkg:composer/typo3/cms@10.4.14
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@10.4.14
4
url pkg:composer/typo3/cms@11.1.1
purl pkg:composer/typo3/cms@11.1.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@11.1.1
aliases CVE-2021-21370, GHSA-x7hc-x7fm-f7qh
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-jp1p-rfxa-hyd9
20
url VCID-jq5y-7h9g-mufa
vulnerability_id VCID-jq5y-7h9g-mufa
summary Information Disclosure in Install Tool.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-010/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2018-010/
fixed_packages
0
url pkg:composer/typo3/cms@7.6.32
purl pkg:composer/typo3/cms@7.6.32
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ev4k-5k1d-2bhu
1
vulnerability VCID-fqkx-v8t5-q3h6
2
vulnerability VCID-jp1p-rfxa-hyd9
3
vulnerability VCID-p7gd-anw2-1qbz
4
vulnerability VCID-tgyt-axv1-c7ag
5
vulnerability VCID-xw1s-93bu-wuh9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.32
1
url pkg:composer/typo3/cms@8.7.21
purl pkg:composer/typo3/cms@8.7.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-4eym-e6vt-8fbs
2
vulnerability VCID-7m6u-k5tp-gkhy
3
vulnerability VCID-848u-w88s-5bbe
4
vulnerability VCID-am6s-67bm-77dr
5
vulnerability VCID-bn3p-39sv-6fdg
6
vulnerability VCID-ev4k-5k1d-2bhu
7
vulnerability VCID-fqkx-v8t5-q3h6
8
vulnerability VCID-fut7-bb1f-37g7
9
vulnerability VCID-jp1p-rfxa-hyd9
10
vulnerability VCID-k5t3-28es-h3ez
11
vulnerability VCID-khpm-e1xb-hydb
12
vulnerability VCID-nney-azbc-pucg
13
vulnerability VCID-p7gd-anw2-1qbz
14
vulnerability VCID-pmvp-twk2-jqe4
15
vulnerability VCID-qv14-m93d-jyd9
16
vulnerability VCID-rqrw-t2kj-mud8
17
vulnerability VCID-ru6w-m6q6-27gn
18
vulnerability VCID-sdsa-mh76-kqch
19
vulnerability VCID-tgyt-axv1-c7ag
20
vulnerability VCID-u259-2sxq-tbct
21
vulnerability VCID-vw2r-g8yy-eyf4
22
vulnerability VCID-x5x1-w7yv-eye9
23
vulnerability VCID-xw1s-93bu-wuh9
24
vulnerability VCID-y7ds-p5r2-yuhq
25
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.21
2
url pkg:composer/typo3/cms@9.5.2
purl pkg:composer/typo3/cms@9.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1sfk-z8py-ykb8
2
vulnerability VCID-3ye6-vqje-abh4
3
vulnerability VCID-4an7-9ph4-mkd4
4
vulnerability VCID-4eym-e6vt-8fbs
5
vulnerability VCID-4jck-w9ct-budk
6
vulnerability VCID-6mnf-2fcw-dqgp
7
vulnerability VCID-7m6u-k5tp-gkhy
8
vulnerability VCID-7xv1-78u7-xufp
9
vulnerability VCID-848u-w88s-5bbe
10
vulnerability VCID-8w4e-d49b-nbg8
11
vulnerability VCID-9adx-p876-kyb5
12
vulnerability VCID-am6s-67bm-77dr
13
vulnerability VCID-bbh5-rss8-bfct
14
vulnerability VCID-cvk2-93hm-gkhx
15
vulnerability VCID-e6zr-4bgg-kkh5
16
vulnerability VCID-ev4k-5k1d-2bhu
17
vulnerability VCID-fqkx-v8t5-q3h6
18
vulnerability VCID-fut7-bb1f-37g7
19
vulnerability VCID-jp1p-rfxa-hyd9
20
vulnerability VCID-k5t3-28es-h3ez
21
vulnerability VCID-khpm-e1xb-hydb
22
vulnerability VCID-n1gz-y615-cbbk
23
vulnerability VCID-nney-azbc-pucg
24
vulnerability VCID-p7gd-anw2-1qbz
25
vulnerability VCID-pmvp-twk2-jqe4
26
vulnerability VCID-qv14-m93d-jyd9
27
vulnerability VCID-rqrw-t2kj-mud8
28
vulnerability VCID-ru6w-m6q6-27gn
29
vulnerability VCID-sdsa-mh76-kqch
30
vulnerability VCID-tgyt-axv1-c7ag
31
vulnerability VCID-u259-2sxq-tbct
32
vulnerability VCID-vw2r-g8yy-eyf4
33
vulnerability VCID-x5x1-w7yv-eye9
34
vulnerability VCID-xw1s-93bu-wuh9
35
vulnerability VCID-y7ds-p5r2-yuhq
36
vulnerability VCID-zeut-9wfp-q7et
37
vulnerability VCID-zkvq-bms4-gfcv
38
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.2
aliases GMS-2018-101
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-jq5y-7h9g-mufa
21
url VCID-n18b-qe5x-z7cj
vulnerability_id VCID-n18b-qe5x-z7cj
summary 
Cross-Site Scripting vulnerability in typolinks
All link fields within the TYPO3 installation are vulnerable to Cross-Site Scripting as authorized editors can insert javascript commands by using the url scheme "javascript:".
references
0
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-012/
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-012/
fixed_packages
0
url pkg:composer/typo3/cms@7.6.1
purl pkg:composer/typo3/cms@7.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2r7u-mc45-8yhe
1
vulnerability VCID-2vpx-fqb6-aqfa
2
vulnerability VCID-39jx-muqb-nkfq
3
vulnerability VCID-3ugj-6m1e-e3hr
4
vulnerability VCID-5dxs-cdht-27hw
5
vulnerability VCID-5hm4-ms5p-uuae
6
vulnerability VCID-66ru-n2df-b3ay
7
vulnerability VCID-727q-h3ey-6yc9
8
vulnerability VCID-8jcy-3kje-fqeh
9
vulnerability VCID-8p64-6zpt-t3av
10
vulnerability VCID-953t-q1cr-zyd6
11
vulnerability VCID-9saf-w56y-pugz
12
vulnerability VCID-abjx-8v46-d7d8
13
vulnerability VCID-dd9u-w2y2-87h9
14
vulnerability VCID-dsqm-9q3e-dudw
15
vulnerability VCID-e564-zdku-9fc6
16
vulnerability VCID-eutz-mj58-audb
17
vulnerability VCID-ev4k-5k1d-2bhu
18
vulnerability VCID-exjy-5cyn-zfg1
19
vulnerability VCID-fdnw-2tz5-4fdr
20
vulnerability VCID-fqkx-v8t5-q3h6
21
vulnerability VCID-g9ns-sxkx-aqh1
22
vulnerability VCID-h217-xe8x-nua3
23
vulnerability VCID-h7cg-64er-uya9
24
vulnerability VCID-h7hf-sf2q-73ay
25
vulnerability VCID-hp99-ncuh-6ugv
26
vulnerability VCID-hzma-cduk-3uhp
27
vulnerability VCID-jeqr-9tfu-f7b2
28
vulnerability VCID-jp1p-rfxa-hyd9
29
vulnerability VCID-jq5y-7h9g-mufa
30
vulnerability VCID-jqe4-8hzb-mfea
31
vulnerability VCID-ks1q-a8x2-uqht
32
vulnerability VCID-m3nc-xbb4-yubr
33
vulnerability VCID-mctp-nf36-7qdn
34
vulnerability VCID-nhjv-nke2-2kf8
35
vulnerability VCID-njsj-bwjq-fyap
36
vulnerability VCID-p7gd-anw2-1qbz
37
vulnerability VCID-s97a-nmk8-y3ay
38
vulnerability VCID-sy7r-d6pv-yba9
39
vulnerability VCID-tgyt-axv1-c7ag
40
vulnerability VCID-u4tq-8qnk-5fd7
41
vulnerability VCID-vq15-t92r-5bhx
42
vulnerability VCID-xh68-defe-f7ce
43
vulnerability VCID-xw1s-93bu-wuh9
44
vulnerability VCID-y1ap-y4az-x7ec
45
vulnerability VCID-ygw4-jdqu-4fbt
46
vulnerability VCID-yn6z-9v7k-x7br
47
vulnerability VCID-yz6t-ge1y-qfgr
48
vulnerability VCID-zrz3-3dnf-tbay
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.1
aliases TYPO3-CORE-SA-2015-012
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-n18b-qe5x-z7cj
22
url VCID-nhjv-nke2-2kf8
vulnerability_id VCID-nhjv-nke2-2kf8
summary 
Missing Access Check
Extbase request handling fails to implement a proper access check for requested controller/ action combinations, which makes it possible for an attacker to execute arbitrary Extbase actions by crafting a special request. To successfully exploit this vulnerability, an attacker must have access to at least one Extbase plugin or module action in a TYPO3 installation. The missing access check inevitably leads to information disclosure or remote code execution, depending on the action that an attacker is able to execute.
references
0
reference_url https://github.com/TYPO3/TYPO3.CMS/commit/21ed4054212babb7ec75d80a24f95c6ba25bd2fb
reference_id
reference_type
scores
url https://github.com/TYPO3/TYPO3.CMS/commit/21ed4054212babb7ec75d80a24f95c6ba25bd2fb
1
reference_url https://github.com/TYPO3/TYPO3.CMS/commit/404f09d491c96b294ded5e2741277dfbeba92807
reference_id
reference_type
scores
url https://github.com/TYPO3/TYPO3.CMS/commit/404f09d491c96b294ded5e2741277dfbeba92807
2
reference_url https://github.com/TYPO3/TYPO3.CMS/commit/c10db60dfc87c33542c418fa316754a5309c3e26
reference_id
reference_type
scores
url https://github.com/TYPO3/TYPO3.CMS/commit/c10db60dfc87c33542c418fa316754a5309c3e26
3
reference_url https://typo3.org/teamssecuritysecurity-bulletins/security-bulletins-single-view/article/missing-access-check-in-typo3-cms/
reference_id
reference_type
scores
url https://typo3.org/teamssecuritysecurity-bulletins/security-bulletins-single-view/article/missing-access-check-in-typo3-cms/
fixed_packages
0
url pkg:composer/typo3/cms@7.6.8
purl pkg:composer/typo3/cms@7.6.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2vpx-fqb6-aqfa
1
vulnerability VCID-3ugj-6m1e-e3hr
2
vulnerability VCID-5dxs-cdht-27hw
3
vulnerability VCID-5hm4-ms5p-uuae
4
vulnerability VCID-66ru-n2df-b3ay
5
vulnerability VCID-727q-h3ey-6yc9
6
vulnerability VCID-8jcy-3kje-fqeh
7
vulnerability VCID-953t-q1cr-zyd6
8
vulnerability VCID-9saf-w56y-pugz
9
vulnerability VCID-abjx-8v46-d7d8
10
vulnerability VCID-dd9u-w2y2-87h9
11
vulnerability VCID-dsqm-9q3e-dudw
12
vulnerability VCID-e564-zdku-9fc6
13
vulnerability VCID-eutz-mj58-audb
14
vulnerability VCID-ev4k-5k1d-2bhu
15
vulnerability VCID-fdnw-2tz5-4fdr
16
vulnerability VCID-fqkx-v8t5-q3h6
17
vulnerability VCID-h217-xe8x-nua3
18
vulnerability VCID-h7cg-64er-uya9
19
vulnerability VCID-h7hf-sf2q-73ay
20
vulnerability VCID-hp99-ncuh-6ugv
21
vulnerability VCID-hzma-cduk-3uhp
22
vulnerability VCID-jeqr-9tfu-f7b2
23
vulnerability VCID-jp1p-rfxa-hyd9
24
vulnerability VCID-jq5y-7h9g-mufa
25
vulnerability VCID-jqe4-8hzb-mfea
26
vulnerability VCID-ks1q-a8x2-uqht
27
vulnerability VCID-m3nc-xbb4-yubr
28
vulnerability VCID-mctp-nf36-7qdn
29
vulnerability VCID-njsj-bwjq-fyap
30
vulnerability VCID-p7gd-anw2-1qbz
31
vulnerability VCID-sy7r-d6pv-yba9
32
vulnerability VCID-tgyt-axv1-c7ag
33
vulnerability VCID-vq15-t92r-5bhx
34
vulnerability VCID-xh68-defe-f7ce
35
vulnerability VCID-xw1s-93bu-wuh9
36
vulnerability VCID-ygw4-jdqu-4fbt
37
vulnerability VCID-yn6z-9v7k-x7br
38
vulnerability VCID-yz6t-ge1y-qfgr
39
vulnerability VCID-zrz3-3dnf-tbay
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.8
1
url pkg:composer/typo3/cms@8.1.1
purl pkg:composer/typo3/cms@8.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-2vpx-fqb6-aqfa
2
vulnerability VCID-3ugj-6m1e-e3hr
3
vulnerability VCID-4eym-e6vt-8fbs
4
vulnerability VCID-5dxs-cdht-27hw
5
vulnerability VCID-5hm4-ms5p-uuae
6
vulnerability VCID-66ru-n2df-b3ay
7
vulnerability VCID-727q-h3ey-6yc9
8
vulnerability VCID-7ch1-q9f4-a7bt
9
vulnerability VCID-7m6u-k5tp-gkhy
10
vulnerability VCID-848u-w88s-5bbe
11
vulnerability VCID-8jcy-3kje-fqeh
12
vulnerability VCID-953t-q1cr-zyd6
13
vulnerability VCID-9saf-w56y-pugz
14
vulnerability VCID-abjx-8v46-d7d8
15
vulnerability VCID-am6s-67bm-77dr
16
vulnerability VCID-bn3p-39sv-6fdg
17
vulnerability VCID-d6c2-upx1-e7cd
18
vulnerability VCID-dsqm-9q3e-dudw
19
vulnerability VCID-e564-zdku-9fc6
20
vulnerability VCID-emqq-kwjg-3kfk
21
vulnerability VCID-eutz-mj58-audb
22
vulnerability VCID-ev4k-5k1d-2bhu
23
vulnerability VCID-fdnw-2tz5-4fdr
24
vulnerability VCID-fqkx-v8t5-q3h6
25
vulnerability VCID-fut7-bb1f-37g7
26
vulnerability VCID-gk79-jtuz-myh6
27
vulnerability VCID-h217-xe8x-nua3
28
vulnerability VCID-h7cg-64er-uya9
29
vulnerability VCID-h7hf-sf2q-73ay
30
vulnerability VCID-hp99-ncuh-6ugv
31
vulnerability VCID-hzma-cduk-3uhp
32
vulnerability VCID-jeqr-9tfu-f7b2
33
vulnerability VCID-jp1p-rfxa-hyd9
34
vulnerability VCID-jq5y-7h9g-mufa
35
vulnerability VCID-jqe4-8hzb-mfea
36
vulnerability VCID-k5t3-28es-h3ez
37
vulnerability VCID-khpm-e1xb-hydb
38
vulnerability VCID-ks1q-a8x2-uqht
39
vulnerability VCID-m3nc-xbb4-yubr
40
vulnerability VCID-mctp-nf36-7qdn
41
vulnerability VCID-njsj-bwjq-fyap
42
vulnerability VCID-nney-azbc-pucg
43
vulnerability VCID-p7gd-anw2-1qbz
44
vulnerability VCID-pmvp-twk2-jqe4
45
vulnerability VCID-q52p-xfj8-gygd
46
vulnerability VCID-qxab-9uwr-yqhv
47
vulnerability VCID-rqrw-t2kj-mud8
48
vulnerability VCID-ru6w-m6q6-27gn
49
vulnerability VCID-sdsa-mh76-kqch
50
vulnerability VCID-sy7r-d6pv-yba9
51
vulnerability VCID-u259-2sxq-tbct
52
vulnerability VCID-vq15-t92r-5bhx
53
vulnerability VCID-vw2r-g8yy-eyf4
54
vulnerability VCID-wy45-2gmr-fkfg
55
vulnerability VCID-x5x1-w7yv-eye9
56
vulnerability VCID-xh68-defe-f7ce
57
vulnerability VCID-xw1s-93bu-wuh9
58
vulnerability VCID-y7ds-p5r2-yuhq
59
vulnerability VCID-ygw4-jdqu-4fbt
60
vulnerability VCID-yn6z-9v7k-x7br
61
vulnerability VCID-yz6t-ge1y-qfgr
62
vulnerability VCID-zmwv-gwq3-fkej
63
vulnerability VCID-zrz3-3dnf-tbay
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.1.1
aliases TYPO3-CORE-SA-2016-013
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-nhjv-nke2-2kf8
23
url VCID-njsj-bwjq-fyap
vulnerability_id VCID-njsj-bwjq-fyap
summary Insecure Deserialization & Arbitrary Code Execution in TYPO3 CMS.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-002/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2018-002/
fixed_packages
0
url pkg:composer/typo3/cms@7.6.30
purl pkg:composer/typo3/cms@7.6.30
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3ugj-6m1e-e3hr
1
vulnerability VCID-953t-q1cr-zyd6
2
vulnerability VCID-dsqm-9q3e-dudw
3
vulnerability VCID-ev4k-5k1d-2bhu
4
vulnerability VCID-fdnw-2tz5-4fdr
5
vulnerability VCID-fqkx-v8t5-q3h6
6
vulnerability VCID-hp99-ncuh-6ugv
7
vulnerability VCID-jp1p-rfxa-hyd9
8
vulnerability VCID-jq5y-7h9g-mufa
9
vulnerability VCID-p7gd-anw2-1qbz
10
vulnerability VCID-tgyt-axv1-c7ag
11
vulnerability VCID-xw1s-93bu-wuh9
12
vulnerability VCID-yz6t-ge1y-qfgr
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.30
1
url pkg:composer/typo3/cms@8.7.17
purl pkg:composer/typo3/cms@8.7.17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-3ugj-6m1e-e3hr
2
vulnerability VCID-4eym-e6vt-8fbs
3
vulnerability VCID-7ch1-q9f4-a7bt
4
vulnerability VCID-7m6u-k5tp-gkhy
5
vulnerability VCID-848u-w88s-5bbe
6
vulnerability VCID-953t-q1cr-zyd6
7
vulnerability VCID-am6s-67bm-77dr
8
vulnerability VCID-bn3p-39sv-6fdg
9
vulnerability VCID-dsqm-9q3e-dudw
10
vulnerability VCID-emqq-kwjg-3kfk
11
vulnerability VCID-ev4k-5k1d-2bhu
12
vulnerability VCID-fdnw-2tz5-4fdr
13
vulnerability VCID-fqkx-v8t5-q3h6
14
vulnerability VCID-fut7-bb1f-37g7
15
vulnerability VCID-hp99-ncuh-6ugv
16
vulnerability VCID-jp1p-rfxa-hyd9
17
vulnerability VCID-jq5y-7h9g-mufa
18
vulnerability VCID-k5t3-28es-h3ez
19
vulnerability VCID-khpm-e1xb-hydb
20
vulnerability VCID-nney-azbc-pucg
21
vulnerability VCID-p7gd-anw2-1qbz
22
vulnerability VCID-pmvp-twk2-jqe4
23
vulnerability VCID-qv14-m93d-jyd9
24
vulnerability VCID-qxab-9uwr-yqhv
25
vulnerability VCID-rqrw-t2kj-mud8
26
vulnerability VCID-ru6w-m6q6-27gn
27
vulnerability VCID-sdsa-mh76-kqch
28
vulnerability VCID-tgyt-axv1-c7ag
29
vulnerability VCID-u259-2sxq-tbct
30
vulnerability VCID-vw2r-g8yy-eyf4
31
vulnerability VCID-x5x1-w7yv-eye9
32
vulnerability VCID-xw1s-93bu-wuh9
33
vulnerability VCID-y7ds-p5r2-yuhq
34
vulnerability VCID-yz6t-ge1y-qfgr
35
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.17
2
url pkg:composer/typo3/cms@9.3.2
purl pkg:composer/typo3/cms@9.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1sfk-z8py-ykb8
2
vulnerability VCID-3ugj-6m1e-e3hr
3
vulnerability VCID-3ye6-vqje-abh4
4
vulnerability VCID-4an7-9ph4-mkd4
5
vulnerability VCID-4eym-e6vt-8fbs
6
vulnerability VCID-4jck-w9ct-budk
7
vulnerability VCID-6mnf-2fcw-dqgp
8
vulnerability VCID-7ch1-q9f4-a7bt
9
vulnerability VCID-7m6u-k5tp-gkhy
10
vulnerability VCID-7xv1-78u7-xufp
11
vulnerability VCID-848u-w88s-5bbe
12
vulnerability VCID-8w4e-d49b-nbg8
13
vulnerability VCID-953t-q1cr-zyd6
14
vulnerability VCID-9adx-p876-kyb5
15
vulnerability VCID-am6s-67bm-77dr
16
vulnerability VCID-bbh5-rss8-bfct
17
vulnerability VCID-cvk2-93hm-gkhx
18
vulnerability VCID-dsqm-9q3e-dudw
19
vulnerability VCID-e6zr-4bgg-kkh5
20
vulnerability VCID-emqq-kwjg-3kfk
21
vulnerability VCID-ev4k-5k1d-2bhu
22
vulnerability VCID-fqkx-v8t5-q3h6
23
vulnerability VCID-fut7-bb1f-37g7
24
vulnerability VCID-hp99-ncuh-6ugv
25
vulnerability VCID-jp1p-rfxa-hyd9
26
vulnerability VCID-jq5y-7h9g-mufa
27
vulnerability VCID-k5t3-28es-h3ez
28
vulnerability VCID-khpm-e1xb-hydb
29
vulnerability VCID-n1gz-y615-cbbk
30
vulnerability VCID-nney-azbc-pucg
31
vulnerability VCID-p7gd-anw2-1qbz
32
vulnerability VCID-pmvp-twk2-jqe4
33
vulnerability VCID-qv14-m93d-jyd9
34
vulnerability VCID-qxab-9uwr-yqhv
35
vulnerability VCID-rqrw-t2kj-mud8
36
vulnerability VCID-ru6w-m6q6-27gn
37
vulnerability VCID-sdsa-mh76-kqch
38
vulnerability VCID-tgyt-axv1-c7ag
39
vulnerability VCID-u259-2sxq-tbct
40
vulnerability VCID-vw2r-g8yy-eyf4
41
vulnerability VCID-x5x1-w7yv-eye9
42
vulnerability VCID-xw1s-93bu-wuh9
43
vulnerability VCID-y7ds-p5r2-yuhq
44
vulnerability VCID-yz6t-ge1y-qfgr
45
vulnerability VCID-zeut-9wfp-q7et
46
vulnerability VCID-zkvq-bms4-gfcv
47
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.3.2
aliases GMS-2018-94
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-njsj-bwjq-fyap
24
url VCID-nqqc-nkwq-rqhx
vulnerability_id VCID-nqqc-nkwq-rqhx
summary 
Cross-site Scripting
`svg.swf` in TYPO3 could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack on a targeted system. This may be at a `contrib/websvg/svg.swf` pathname.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-8091
reference_id
reference_type
scores
0
value 0.20517
scoring_system epss
scoring_elements 0.95671
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-8091
1
reference_url https://github.com/TYPO3/typo3
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3
2
reference_url https://github.com/TYPO3/typo3/blob/4cb53e828bd5138d180cdf9cac1ccf7fd31086d2/typo3/sysext/core/Documentation/Changelog/7.2/Breaking-65962-WebSVGLibraryAndAPIRemoved.rst
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/blob/4cb53e828bd5138d180cdf9cac1ccf7fd31086d2/typo3/sysext/core/Documentation/Changelog/7.2/Breaking-65962-WebSVGLibraryAndAPIRemoved.rst
3
reference_url https://github.com/TYPO3/typo3/commit/482e2e992f80f5e38cb48fcaea40fd9812a5252c
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/482e2e992f80f5e38cb48fcaea40fd9812a5252c
4
reference_url https://typo3.org/security/advisory/typo3-psa-2019-003
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-psa-2019-003
5
reference_url https://www.purplemet.com/blog/typo3-xss-vulnerability
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.purplemet.com/blog/typo3-xss-vulnerability
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-8091
reference_id CVE-2020-8091
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-8091
fixed_packages
0
url pkg:composer/typo3/cms@7.2.0
purl pkg:composer/typo3/cms@7.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1u4r-r97q-3yfk
1
vulnerability VCID-3ugj-6m1e-e3hr
2
vulnerability VCID-5hm4-ms5p-uuae
3
vulnerability VCID-7n9x-c9gs-9yb3
4
vulnerability VCID-8jcy-3kje-fqeh
5
vulnerability VCID-953t-q1cr-zyd6
6
vulnerability VCID-abjx-8v46-d7d8
7
vulnerability VCID-ansr-8m5j-pya6
8
vulnerability VCID-c57c-akce-xufq
9
vulnerability VCID-dsqm-9q3e-dudw
10
vulnerability VCID-dwjk-7sqh-hqa8
11
vulnerability VCID-e1gr-txgg-fqa6
12
vulnerability VCID-e82x-2cdb-7fgn
13
vulnerability VCID-ec17-eauu-67d3
14
vulnerability VCID-ev4k-5k1d-2bhu
15
vulnerability VCID-fdnw-2tz5-4fdr
16
vulnerability VCID-fqkx-v8t5-q3h6
17
vulnerability VCID-hp99-ncuh-6ugv
18
vulnerability VCID-j6x1-dfre-2bdq
19
vulnerability VCID-jp1p-rfxa-hyd9
20
vulnerability VCID-jq5y-7h9g-mufa
21
vulnerability VCID-n18b-qe5x-z7cj
22
vulnerability VCID-nhjv-nke2-2kf8
23
vulnerability VCID-njsj-bwjq-fyap
24
vulnerability VCID-p7gd-anw2-1qbz
25
vulnerability VCID-q5f3-nhjn-hyb4
26
vulnerability VCID-rae3-cugy-hbh5
27
vulnerability VCID-u6h1-ccgw-jqds
28
vulnerability VCID-ub3e-hrb1-wqac
29
vulnerability VCID-vq15-t92r-5bhx
30
vulnerability VCID-wms8-dnuz-b3hc
31
vulnerability VCID-xw1s-93bu-wuh9
32
vulnerability VCID-yz6t-ge1y-qfgr
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.2.0
aliases CVE-2020-8091, GHSA-qvhv-pwww-53jj
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-nqqc-nkwq-rqhx
25
url VCID-p7gd-anw2-1qbz
vulnerability_id VCID-p7gd-anw2-1qbz
summary 
Deserialization of Untrusted Data
It has been discovered that the classes `QueryGenerator` and `QueryView` are vulnerable to insecure deserialization. One exploitable scenario requires having the system extension `ext:lowlevel` (Backend Module `DB Check`) installed, with a valid backend user who has administrator privileges. The other exploitable scenario requires having the system extension `ext:sys_action` installed, with a valid backend user who has limited privileges.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-19849
reference_id
reference_type
scores
0
value 0.00746
scoring_system epss
scoring_elements 0.7342
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-19849
1
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2019-19849.yaml
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2019-19849.yaml
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2019-19849.yaml
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2019-19849.yaml
3
reference_url https://review.typo3.org/q/%2522Resolves:+%252389005%2522+topic:security
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://review.typo3.org/q/%2522Resolves:+%252389005%2522+topic:security
4
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-026
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2019-026
5
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-026/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-026/
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-19849
reference_id CVE-2019-19849
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-19849
fixed_packages
0
url pkg:composer/typo3/cms@8.7.30
purl pkg:composer/typo3/cms@8.7.30
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-848u-w88s-5bbe
2
vulnerability VCID-ev4k-5k1d-2bhu
3
vulnerability VCID-fqkx-v8t5-q3h6
4
vulnerability VCID-jp1p-rfxa-hyd9
5
vulnerability VCID-tgyt-axv1-c7ag
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.30
1
url pkg:composer/typo3/cms@9.5.12
purl pkg:composer/typo3/cms@9.5.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1sfk-z8py-ykb8
2
vulnerability VCID-4an7-9ph4-mkd4
3
vulnerability VCID-6mnf-2fcw-dqgp
4
vulnerability VCID-848u-w88s-5bbe
5
vulnerability VCID-8w4e-d49b-nbg8
6
vulnerability VCID-bbh5-rss8-bfct
7
vulnerability VCID-bcbd-zzet-mff6
8
vulnerability VCID-e6zr-4bgg-kkh5
9
vulnerability VCID-ev4k-5k1d-2bhu
10
vulnerability VCID-fqkx-v8t5-q3h6
11
vulnerability VCID-jp1p-rfxa-hyd9
12
vulnerability VCID-n1gz-y615-cbbk
13
vulnerability VCID-tgyt-axv1-c7ag
14
vulnerability VCID-zkvq-bms4-gfcv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.12
2
url pkg:composer/typo3/cms@10.2.1
purl pkg:composer/typo3/cms@10.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1sfk-z8py-ykb8
2
vulnerability VCID-2tz2-8qdm-2kcv
3
vulnerability VCID-4an7-9ph4-mkd4
4
vulnerability VCID-6mnf-2fcw-dqgp
5
vulnerability VCID-6urp-p9mn-cffv
6
vulnerability VCID-848u-w88s-5bbe
7
vulnerability VCID-8w4e-d49b-nbg8
8
vulnerability VCID-bbh5-rss8-bfct
9
vulnerability VCID-bcbd-zzet-mff6
10
vulnerability VCID-c46m-ht19-ybc4
11
vulnerability VCID-e6zr-4bgg-kkh5
12
vulnerability VCID-ev4k-5k1d-2bhu
13
vulnerability VCID-fqkx-v8t5-q3h6
14
vulnerability VCID-jp1p-rfxa-hyd9
15
vulnerability VCID-n1gz-y615-cbbk
16
vulnerability VCID-r3az-g422-gqf9
17
vulnerability VCID-tgyt-axv1-c7ag
18
vulnerability VCID-zkvq-bms4-gfcv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@10.2.1
3
url pkg:composer/typo3/cms@10.2.2
purl pkg:composer/typo3/cms@10.2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1sfk-z8py-ykb8
2
vulnerability VCID-2tz2-8qdm-2kcv
3
vulnerability VCID-4an7-9ph4-mkd4
4
vulnerability VCID-6mnf-2fcw-dqgp
5
vulnerability VCID-6urp-p9mn-cffv
6
vulnerability VCID-848u-w88s-5bbe
7
vulnerability VCID-8w4e-d49b-nbg8
8
vulnerability VCID-bbh5-rss8-bfct
9
vulnerability VCID-bcbd-zzet-mff6
10
vulnerability VCID-c46m-ht19-ybc4
11
vulnerability VCID-e6zr-4bgg-kkh5
12
vulnerability VCID-ev4k-5k1d-2bhu
13
vulnerability VCID-fqkx-v8t5-q3h6
14
vulnerability VCID-jp1p-rfxa-hyd9
15
vulnerability VCID-n1gz-y615-cbbk
16
vulnerability VCID-r3az-g422-gqf9
17
vulnerability VCID-tgyt-axv1-c7ag
18
vulnerability VCID-zkvq-bms4-gfcv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@10.2.2
aliases CVE-2019-19849, GHSA-rcgc-4xfc-564v
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-p7gd-anw2-1qbz
26
url VCID-q5f3-nhjn-hyb4
vulnerability_id VCID-q5f3-nhjn-hyb4
summary 
Cross-site Scripting
Cross-Site Scripting exploitable by Editors.
references
0
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-004/
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-004/
fixed_packages
0
url pkg:composer/typo3/cms@7.3.0
purl pkg:composer/typo3/cms@7.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3ugj-6m1e-e3hr
1
vulnerability VCID-5hm4-ms5p-uuae
2
vulnerability VCID-8jcy-3kje-fqeh
3
vulnerability VCID-953t-q1cr-zyd6
4
vulnerability VCID-abjx-8v46-d7d8
5
vulnerability VCID-ansr-8m5j-pya6
6
vulnerability VCID-c57c-akce-xufq
7
vulnerability VCID-dsqm-9q3e-dudw
8
vulnerability VCID-e82x-2cdb-7fgn
9
vulnerability VCID-ev4k-5k1d-2bhu
10
vulnerability VCID-fdnw-2tz5-4fdr
11
vulnerability VCID-fqkx-v8t5-q3h6
12
vulnerability VCID-hp99-ncuh-6ugv
13
vulnerability VCID-j6x1-dfre-2bdq
14
vulnerability VCID-jp1p-rfxa-hyd9
15
vulnerability VCID-jq5y-7h9g-mufa
16
vulnerability VCID-n18b-qe5x-z7cj
17
vulnerability VCID-nhjv-nke2-2kf8
18
vulnerability VCID-njsj-bwjq-fyap
19
vulnerability VCID-p7gd-anw2-1qbz
20
vulnerability VCID-u6h1-ccgw-jqds
21
vulnerability VCID-ub3e-hrb1-wqac
22
vulnerability VCID-vq15-t92r-5bhx
23
vulnerability VCID-wms8-dnuz-b3hc
24
vulnerability VCID-xw1s-93bu-wuh9
25
vulnerability VCID-yz6t-ge1y-qfgr
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.3.0
aliases GMS-2015-82
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-q5f3-nhjn-hyb4
27
url VCID-rae3-cugy-hbh5
vulnerability_id VCID-rae3-cugy-hbh5
summary 
Improper Access Control
Access bypass when editing file metadata.
references
0
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-002/
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-002/
fixed_packages
0
url pkg:composer/typo3/cms@7.3.0
purl pkg:composer/typo3/cms@7.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3ugj-6m1e-e3hr
1
vulnerability VCID-5hm4-ms5p-uuae
2
vulnerability VCID-8jcy-3kje-fqeh
3
vulnerability VCID-953t-q1cr-zyd6
4
vulnerability VCID-abjx-8v46-d7d8
5
vulnerability VCID-ansr-8m5j-pya6
6
vulnerability VCID-c57c-akce-xufq
7
vulnerability VCID-dsqm-9q3e-dudw
8
vulnerability VCID-e82x-2cdb-7fgn
9
vulnerability VCID-ev4k-5k1d-2bhu
10
vulnerability VCID-fdnw-2tz5-4fdr
11
vulnerability VCID-fqkx-v8t5-q3h6
12
vulnerability VCID-hp99-ncuh-6ugv
13
vulnerability VCID-j6x1-dfre-2bdq
14
vulnerability VCID-jp1p-rfxa-hyd9
15
vulnerability VCID-jq5y-7h9g-mufa
16
vulnerability VCID-n18b-qe5x-z7cj
17
vulnerability VCID-nhjv-nke2-2kf8
18
vulnerability VCID-njsj-bwjq-fyap
19
vulnerability VCID-p7gd-anw2-1qbz
20
vulnerability VCID-u6h1-ccgw-jqds
21
vulnerability VCID-ub3e-hrb1-wqac
22
vulnerability VCID-vq15-t92r-5bhx
23
vulnerability VCID-wms8-dnuz-b3hc
24
vulnerability VCID-xw1s-93bu-wuh9
25
vulnerability VCID-yz6t-ge1y-qfgr
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.3.0
aliases GMS-2015-80
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-rae3-cugy-hbh5
28
url VCID-u6h1-ccgw-jqds
vulnerability_id VCID-u6h1-ccgw-jqds
summary 
Cross-site Scripting
Multiple Cross-Site Scripting vulnerabilities in frontend.
references
0
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-013/
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-013/
fixed_packages
0
url pkg:composer/typo3/cms@7.6.1
purl pkg:composer/typo3/cms@7.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2r7u-mc45-8yhe
1
vulnerability VCID-2vpx-fqb6-aqfa
2
vulnerability VCID-39jx-muqb-nkfq
3
vulnerability VCID-3ugj-6m1e-e3hr
4
vulnerability VCID-5dxs-cdht-27hw
5
vulnerability VCID-5hm4-ms5p-uuae
6
vulnerability VCID-66ru-n2df-b3ay
7
vulnerability VCID-727q-h3ey-6yc9
8
vulnerability VCID-8jcy-3kje-fqeh
9
vulnerability VCID-8p64-6zpt-t3av
10
vulnerability VCID-953t-q1cr-zyd6
11
vulnerability VCID-9saf-w56y-pugz
12
vulnerability VCID-abjx-8v46-d7d8
13
vulnerability VCID-dd9u-w2y2-87h9
14
vulnerability VCID-dsqm-9q3e-dudw
15
vulnerability VCID-e564-zdku-9fc6
16
vulnerability VCID-eutz-mj58-audb
17
vulnerability VCID-ev4k-5k1d-2bhu
18
vulnerability VCID-exjy-5cyn-zfg1
19
vulnerability VCID-fdnw-2tz5-4fdr
20
vulnerability VCID-fqkx-v8t5-q3h6
21
vulnerability VCID-g9ns-sxkx-aqh1
22
vulnerability VCID-h217-xe8x-nua3
23
vulnerability VCID-h7cg-64er-uya9
24
vulnerability VCID-h7hf-sf2q-73ay
25
vulnerability VCID-hp99-ncuh-6ugv
26
vulnerability VCID-hzma-cduk-3uhp
27
vulnerability VCID-jeqr-9tfu-f7b2
28
vulnerability VCID-jp1p-rfxa-hyd9
29
vulnerability VCID-jq5y-7h9g-mufa
30
vulnerability VCID-jqe4-8hzb-mfea
31
vulnerability VCID-ks1q-a8x2-uqht
32
vulnerability VCID-m3nc-xbb4-yubr
33
vulnerability VCID-mctp-nf36-7qdn
34
vulnerability VCID-nhjv-nke2-2kf8
35
vulnerability VCID-njsj-bwjq-fyap
36
vulnerability VCID-p7gd-anw2-1qbz
37
vulnerability VCID-s97a-nmk8-y3ay
38
vulnerability VCID-sy7r-d6pv-yba9
39
vulnerability VCID-tgyt-axv1-c7ag
40
vulnerability VCID-u4tq-8qnk-5fd7
41
vulnerability VCID-vq15-t92r-5bhx
42
vulnerability VCID-xh68-defe-f7ce
43
vulnerability VCID-xw1s-93bu-wuh9
44
vulnerability VCID-y1ap-y4az-x7ec
45
vulnerability VCID-ygw4-jdqu-4fbt
46
vulnerability VCID-yn6z-9v7k-x7br
47
vulnerability VCID-yz6t-ge1y-qfgr
48
vulnerability VCID-zrz3-3dnf-tbay
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.1
aliases GMS-2015-89
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-u6h1-ccgw-jqds
29
url VCID-ub3e-hrb1-wqac
vulnerability_id VCID-ub3e-hrb1-wqac
summary 
Multiple Cross-Site Scripting vulnerabilities in frontend
Failing to properly encode editor input, several frontend components are susceptible to Cross-Site Scripting, allowing authenticated editors to inject arbitrary HTML.
references
0
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-013/
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-013/
fixed_packages
0
url pkg:composer/typo3/cms@7.6.1
purl pkg:composer/typo3/cms@7.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2r7u-mc45-8yhe
1
vulnerability VCID-2vpx-fqb6-aqfa
2
vulnerability VCID-39jx-muqb-nkfq
3
vulnerability VCID-3ugj-6m1e-e3hr
4
vulnerability VCID-5dxs-cdht-27hw
5
vulnerability VCID-5hm4-ms5p-uuae
6
vulnerability VCID-66ru-n2df-b3ay
7
vulnerability VCID-727q-h3ey-6yc9
8
vulnerability VCID-8jcy-3kje-fqeh
9
vulnerability VCID-8p64-6zpt-t3av
10
vulnerability VCID-953t-q1cr-zyd6
11
vulnerability VCID-9saf-w56y-pugz
12
vulnerability VCID-abjx-8v46-d7d8
13
vulnerability VCID-dd9u-w2y2-87h9
14
vulnerability VCID-dsqm-9q3e-dudw
15
vulnerability VCID-e564-zdku-9fc6
16
vulnerability VCID-eutz-mj58-audb
17
vulnerability VCID-ev4k-5k1d-2bhu
18
vulnerability VCID-exjy-5cyn-zfg1
19
vulnerability VCID-fdnw-2tz5-4fdr
20
vulnerability VCID-fqkx-v8t5-q3h6
21
vulnerability VCID-g9ns-sxkx-aqh1
22
vulnerability VCID-h217-xe8x-nua3
23
vulnerability VCID-h7cg-64er-uya9
24
vulnerability VCID-h7hf-sf2q-73ay
25
vulnerability VCID-hp99-ncuh-6ugv
26
vulnerability VCID-hzma-cduk-3uhp
27
vulnerability VCID-jeqr-9tfu-f7b2
28
vulnerability VCID-jp1p-rfxa-hyd9
29
vulnerability VCID-jq5y-7h9g-mufa
30
vulnerability VCID-jqe4-8hzb-mfea
31
vulnerability VCID-ks1q-a8x2-uqht
32
vulnerability VCID-m3nc-xbb4-yubr
33
vulnerability VCID-mctp-nf36-7qdn
34
vulnerability VCID-nhjv-nke2-2kf8
35
vulnerability VCID-njsj-bwjq-fyap
36
vulnerability VCID-p7gd-anw2-1qbz
37
vulnerability VCID-s97a-nmk8-y3ay
38
vulnerability VCID-sy7r-d6pv-yba9
39
vulnerability VCID-tgyt-axv1-c7ag
40
vulnerability VCID-u4tq-8qnk-5fd7
41
vulnerability VCID-vq15-t92r-5bhx
42
vulnerability VCID-xh68-defe-f7ce
43
vulnerability VCID-xw1s-93bu-wuh9
44
vulnerability VCID-y1ap-y4az-x7ec
45
vulnerability VCID-ygw4-jdqu-4fbt
46
vulnerability VCID-yn6z-9v7k-x7br
47
vulnerability VCID-yz6t-ge1y-qfgr
48
vulnerability VCID-zrz3-3dnf-tbay
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.1
aliases TYPO3-CORE-SA-2015-013
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ub3e-hrb1-wqac
30
url VCID-vq15-t92r-5bhx
vulnerability_id VCID-vq15-t92r-5bhx
summary 
Cross-site Scripting
The page module in TYPO3 is vulnerable to XSS via `$GLOBALS['TYPO3_CONF_VARS']['SYS']['sitename']`, as demonstrated by an admin entering a crafted site name during the installation process.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-6905
reference_id
reference_type
scores
0
value 0.02274
scoring_system epss
scoring_elements 0.8496
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-6905
1
reference_url https://forge.typo3.org/issues/84191
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://forge.typo3.org/issues/84191
2
reference_url https://github.com/pradeepjairamani/TYPO3-XSS-POC
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pradeepjairamani/TYPO3-XSS-POC
3
reference_url https://github.com/TYPO3/typo3/commit/d2c0ea7db3b31a796a82f9d39f77f9983beb7c35
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/d2c0ea7db3b31a796a82f9d39f77f9983beb7c35
4
reference_url http://www.securitytracker.com/id/1040755
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.securitytracker.com/id/1040755
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-6905
reference_id CVE-2018-6905
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-6905
fixed_packages
0
url pkg:composer/typo3/cms@8.7.11
purl pkg:composer/typo3/cms@8.7.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-3ugj-6m1e-e3hr
2
vulnerability VCID-4eym-e6vt-8fbs
3
vulnerability VCID-7ch1-q9f4-a7bt
4
vulnerability VCID-7m6u-k5tp-gkhy
5
vulnerability VCID-848u-w88s-5bbe
6
vulnerability VCID-953t-q1cr-zyd6
7
vulnerability VCID-abjx-8v46-d7d8
8
vulnerability VCID-am6s-67bm-77dr
9
vulnerability VCID-bn3p-39sv-6fdg
10
vulnerability VCID-dsqm-9q3e-dudw
11
vulnerability VCID-emqq-kwjg-3kfk
12
vulnerability VCID-ev4k-5k1d-2bhu
13
vulnerability VCID-fdnw-2tz5-4fdr
14
vulnerability VCID-fqkx-v8t5-q3h6
15
vulnerability VCID-fut7-bb1f-37g7
16
vulnerability VCID-hp99-ncuh-6ugv
17
vulnerability VCID-je4q-svfw-hqda
18
vulnerability VCID-jp1p-rfxa-hyd9
19
vulnerability VCID-jq5y-7h9g-mufa
20
vulnerability VCID-k5t3-28es-h3ez
21
vulnerability VCID-khpm-e1xb-hydb
22
vulnerability VCID-njsj-bwjq-fyap
23
vulnerability VCID-nney-azbc-pucg
24
vulnerability VCID-p7gd-anw2-1qbz
25
vulnerability VCID-pmvp-twk2-jqe4
26
vulnerability VCID-qv14-m93d-jyd9
27
vulnerability VCID-qxab-9uwr-yqhv
28
vulnerability VCID-rqrw-t2kj-mud8
29
vulnerability VCID-ru6w-m6q6-27gn
30
vulnerability VCID-sdsa-mh76-kqch
31
vulnerability VCID-tgyt-axv1-c7ag
32
vulnerability VCID-u259-2sxq-tbct
33
vulnerability VCID-vw2r-g8yy-eyf4
34
vulnerability VCID-w1wb-mq2y-dfca
35
vulnerability VCID-x5x1-w7yv-eye9
36
vulnerability VCID-xw1s-93bu-wuh9
37
vulnerability VCID-y7ds-p5r2-yuhq
38
vulnerability VCID-yz6t-ge1y-qfgr
39
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.11
1
url pkg:composer/typo3/cms@9.1.0
purl pkg:composer/typo3/cms@9.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1sfk-z8py-ykb8
2
vulnerability VCID-3ugj-6m1e-e3hr
3
vulnerability VCID-3ye6-vqje-abh4
4
vulnerability VCID-4an7-9ph4-mkd4
5
vulnerability VCID-4eym-e6vt-8fbs
6
vulnerability VCID-4jck-w9ct-budk
7
vulnerability VCID-6mnf-2fcw-dqgp
8
vulnerability VCID-7ch1-q9f4-a7bt
9
vulnerability VCID-7m6u-k5tp-gkhy
10
vulnerability VCID-7xv1-78u7-xufp
11
vulnerability VCID-848u-w88s-5bbe
12
vulnerability VCID-8w4e-d49b-nbg8
13
vulnerability VCID-953t-q1cr-zyd6
14
vulnerability VCID-9adx-p876-kyb5
15
vulnerability VCID-abjx-8v46-d7d8
16
vulnerability VCID-am6s-67bm-77dr
17
vulnerability VCID-bbh5-rss8-bfct
18
vulnerability VCID-cvk2-93hm-gkhx
19
vulnerability VCID-dsqm-9q3e-dudw
20
vulnerability VCID-e6zr-4bgg-kkh5
21
vulnerability VCID-emqq-kwjg-3kfk
22
vulnerability VCID-ev4k-5k1d-2bhu
23
vulnerability VCID-fqkx-v8t5-q3h6
24
vulnerability VCID-fut7-bb1f-37g7
25
vulnerability VCID-hp99-ncuh-6ugv
26
vulnerability VCID-je4q-svfw-hqda
27
vulnerability VCID-jp1p-rfxa-hyd9
28
vulnerability VCID-jq5y-7h9g-mufa
29
vulnerability VCID-k5t3-28es-h3ez
30
vulnerability VCID-khpm-e1xb-hydb
31
vulnerability VCID-n1gz-y615-cbbk
32
vulnerability VCID-njsj-bwjq-fyap
33
vulnerability VCID-nney-azbc-pucg
34
vulnerability VCID-p7gd-anw2-1qbz
35
vulnerability VCID-pmvp-twk2-jqe4
36
vulnerability VCID-qv14-m93d-jyd9
37
vulnerability VCID-qxab-9uwr-yqhv
38
vulnerability VCID-rqrw-t2kj-mud8
39
vulnerability VCID-ru6w-m6q6-27gn
40
vulnerability VCID-sdsa-mh76-kqch
41
vulnerability VCID-tgyt-axv1-c7ag
42
vulnerability VCID-u259-2sxq-tbct
43
vulnerability VCID-vw2r-g8yy-eyf4
44
vulnerability VCID-w1wb-mq2y-dfca
45
vulnerability VCID-x5x1-w7yv-eye9
46
vulnerability VCID-xw1s-93bu-wuh9
47
vulnerability VCID-y7ds-p5r2-yuhq
48
vulnerability VCID-yz6t-ge1y-qfgr
49
vulnerability VCID-zeut-9wfp-q7et
50
vulnerability VCID-zkvq-bms4-gfcv
51
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.1.0
2
url pkg:composer/typo3/cms@9.2.0
purl pkg:composer/typo3/cms@9.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1sfk-z8py-ykb8
2
vulnerability VCID-3ugj-6m1e-e3hr
3
vulnerability VCID-3ye6-vqje-abh4
4
vulnerability VCID-4an7-9ph4-mkd4
5
vulnerability VCID-4eym-e6vt-8fbs
6
vulnerability VCID-4jck-w9ct-budk
7
vulnerability VCID-6mnf-2fcw-dqgp
8
vulnerability VCID-7ch1-q9f4-a7bt
9
vulnerability VCID-7m6u-k5tp-gkhy
10
vulnerability VCID-7xv1-78u7-xufp
11
vulnerability VCID-848u-w88s-5bbe
12
vulnerability VCID-8w4e-d49b-nbg8
13
vulnerability VCID-953t-q1cr-zyd6
14
vulnerability VCID-9adx-p876-kyb5
15
vulnerability VCID-abjx-8v46-d7d8
16
vulnerability VCID-am6s-67bm-77dr
17
vulnerability VCID-bbh5-rss8-bfct
18
vulnerability VCID-cvk2-93hm-gkhx
19
vulnerability VCID-dsqm-9q3e-dudw
20
vulnerability VCID-e6zr-4bgg-kkh5
21
vulnerability VCID-emqq-kwjg-3kfk
22
vulnerability VCID-ev4k-5k1d-2bhu
23
vulnerability VCID-fqkx-v8t5-q3h6
24
vulnerability VCID-fut7-bb1f-37g7
25
vulnerability VCID-hp99-ncuh-6ugv
26
vulnerability VCID-je4q-svfw-hqda
27
vulnerability VCID-jp1p-rfxa-hyd9
28
vulnerability VCID-jq5y-7h9g-mufa
29
vulnerability VCID-k5t3-28es-h3ez
30
vulnerability VCID-khpm-e1xb-hydb
31
vulnerability VCID-n1gz-y615-cbbk
32
vulnerability VCID-njsj-bwjq-fyap
33
vulnerability VCID-nney-azbc-pucg
34
vulnerability VCID-p7gd-anw2-1qbz
35
vulnerability VCID-pmvp-twk2-jqe4
36
vulnerability VCID-qv14-m93d-jyd9
37
vulnerability VCID-qxab-9uwr-yqhv
38
vulnerability VCID-rqrw-t2kj-mud8
39
vulnerability VCID-ru6w-m6q6-27gn
40
vulnerability VCID-sdsa-mh76-kqch
41
vulnerability VCID-tgyt-axv1-c7ag
42
vulnerability VCID-u259-2sxq-tbct
43
vulnerability VCID-vw2r-g8yy-eyf4
44
vulnerability VCID-w1wb-mq2y-dfca
45
vulnerability VCID-x5x1-w7yv-eye9
46
vulnerability VCID-xw1s-93bu-wuh9
47
vulnerability VCID-y7ds-p5r2-yuhq
48
vulnerability VCID-yz6t-ge1y-qfgr
49
vulnerability VCID-zeut-9wfp-q7et
50
vulnerability VCID-zkvq-bms4-gfcv
51
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.2.0
aliases CVE-2018-6905, GHSA-3w22-wrwx-2r75
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-vq15-t92r-5bhx
31
url VCID-wms8-dnuz-b3hc
vulnerability_id VCID-wms8-dnuz-b3hc
summary 
Multiple Cross-Site Scripting vulnerabilities in backend
Failing to properly encode user input, several backend components are susceptible to Cross-Site Scripting, allowing authenticated editors to inject arbitrary HTML or JavaScript.
references
0
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-011/
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-011/
fixed_packages
0
url pkg:composer/typo3/cms@7.6.1
purl pkg:composer/typo3/cms@7.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2r7u-mc45-8yhe
1
vulnerability VCID-2vpx-fqb6-aqfa
2
vulnerability VCID-39jx-muqb-nkfq
3
vulnerability VCID-3ugj-6m1e-e3hr
4
vulnerability VCID-5dxs-cdht-27hw
5
vulnerability VCID-5hm4-ms5p-uuae
6
vulnerability VCID-66ru-n2df-b3ay
7
vulnerability VCID-727q-h3ey-6yc9
8
vulnerability VCID-8jcy-3kje-fqeh
9
vulnerability VCID-8p64-6zpt-t3av
10
vulnerability VCID-953t-q1cr-zyd6
11
vulnerability VCID-9saf-w56y-pugz
12
vulnerability VCID-abjx-8v46-d7d8
13
vulnerability VCID-dd9u-w2y2-87h9
14
vulnerability VCID-dsqm-9q3e-dudw
15
vulnerability VCID-e564-zdku-9fc6
16
vulnerability VCID-eutz-mj58-audb
17
vulnerability VCID-ev4k-5k1d-2bhu
18
vulnerability VCID-exjy-5cyn-zfg1
19
vulnerability VCID-fdnw-2tz5-4fdr
20
vulnerability VCID-fqkx-v8t5-q3h6
21
vulnerability VCID-g9ns-sxkx-aqh1
22
vulnerability VCID-h217-xe8x-nua3
23
vulnerability VCID-h7cg-64er-uya9
24
vulnerability VCID-h7hf-sf2q-73ay
25
vulnerability VCID-hp99-ncuh-6ugv
26
vulnerability VCID-hzma-cduk-3uhp
27
vulnerability VCID-jeqr-9tfu-f7b2
28
vulnerability VCID-jp1p-rfxa-hyd9
29
vulnerability VCID-jq5y-7h9g-mufa
30
vulnerability VCID-jqe4-8hzb-mfea
31
vulnerability VCID-ks1q-a8x2-uqht
32
vulnerability VCID-m3nc-xbb4-yubr
33
vulnerability VCID-mctp-nf36-7qdn
34
vulnerability VCID-nhjv-nke2-2kf8
35
vulnerability VCID-njsj-bwjq-fyap
36
vulnerability VCID-p7gd-anw2-1qbz
37
vulnerability VCID-s97a-nmk8-y3ay
38
vulnerability VCID-sy7r-d6pv-yba9
39
vulnerability VCID-tgyt-axv1-c7ag
40
vulnerability VCID-u4tq-8qnk-5fd7
41
vulnerability VCID-vq15-t92r-5bhx
42
vulnerability VCID-xh68-defe-f7ce
43
vulnerability VCID-xw1s-93bu-wuh9
44
vulnerability VCID-y1ap-y4az-x7ec
45
vulnerability VCID-ygw4-jdqu-4fbt
46
vulnerability VCID-yn6z-9v7k-x7br
47
vulnerability VCID-yz6t-ge1y-qfgr
48
vulnerability VCID-zrz3-3dnf-tbay
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.1
aliases TYPO3-CORE-SA-2015-011
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wms8-dnuz-b3hc
32
url VCID-xw1s-93bu-wuh9
vulnerability_id VCID-xw1s-93bu-wuh9
summary 
Path Traversal
It has been discovered that the extraction of manually uploaded ZIP archives in Extension Manager is vulnerable to directory traversal. Admin privileges are required in order to exploit this vulnerability.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-19848
reference_id
reference_type
scores
0
value 0.00374
scoring_system epss
scoring_elements 0.59393
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-19848
1
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2019-19848.yaml
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2019-19848.yaml
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2019-19848.yaml
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2019-19848.yaml
3
reference_url https://review.typo3.org/q/%2522Resolves:+%252388764%2522+topic:security
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://review.typo3.org/q/%2522Resolves:+%252388764%2522+topic:security
4
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-024
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2019-024
5
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-024/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-024/
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-19848
reference_id CVE-2019-19848
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-19848
fixed_packages
0
url pkg:composer/typo3/cms@8.7.30
purl pkg:composer/typo3/cms@8.7.30
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-848u-w88s-5bbe
2
vulnerability VCID-ev4k-5k1d-2bhu
3
vulnerability VCID-fqkx-v8t5-q3h6
4
vulnerability VCID-jp1p-rfxa-hyd9
5
vulnerability VCID-tgyt-axv1-c7ag
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.30
1
url pkg:composer/typo3/cms@9.5.12
purl pkg:composer/typo3/cms@9.5.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1sfk-z8py-ykb8
2
vulnerability VCID-4an7-9ph4-mkd4
3
vulnerability VCID-6mnf-2fcw-dqgp
4
vulnerability VCID-848u-w88s-5bbe
5
vulnerability VCID-8w4e-d49b-nbg8
6
vulnerability VCID-bbh5-rss8-bfct
7
vulnerability VCID-bcbd-zzet-mff6
8
vulnerability VCID-e6zr-4bgg-kkh5
9
vulnerability VCID-ev4k-5k1d-2bhu
10
vulnerability VCID-fqkx-v8t5-q3h6
11
vulnerability VCID-jp1p-rfxa-hyd9
12
vulnerability VCID-n1gz-y615-cbbk
13
vulnerability VCID-tgyt-axv1-c7ag
14
vulnerability VCID-zkvq-bms4-gfcv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.12
2
url pkg:composer/typo3/cms@10.2.2
purl pkg:composer/typo3/cms@10.2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1sfk-z8py-ykb8
2
vulnerability VCID-2tz2-8qdm-2kcv
3
vulnerability VCID-4an7-9ph4-mkd4
4
vulnerability VCID-6mnf-2fcw-dqgp
5
vulnerability VCID-6urp-p9mn-cffv
6
vulnerability VCID-848u-w88s-5bbe
7
vulnerability VCID-8w4e-d49b-nbg8
8
vulnerability VCID-bbh5-rss8-bfct
9
vulnerability VCID-bcbd-zzet-mff6
10
vulnerability VCID-c46m-ht19-ybc4
11
vulnerability VCID-e6zr-4bgg-kkh5
12
vulnerability VCID-ev4k-5k1d-2bhu
13
vulnerability VCID-fqkx-v8t5-q3h6
14
vulnerability VCID-jp1p-rfxa-hyd9
15
vulnerability VCID-n1gz-y615-cbbk
16
vulnerability VCID-r3az-g422-gqf9
17
vulnerability VCID-tgyt-axv1-c7ag
18
vulnerability VCID-zkvq-bms4-gfcv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@10.2.2
aliases CVE-2019-19848, GHSA-77p4-wfr8-977w
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xw1s-93bu-wuh9
33
url VCID-yz6t-ge1y-qfgr
vulnerability_id VCID-yz6t-ge1y-qfgr
summary Security Misconfiguration in Install Tool Cookie.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-009/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2018-009/
fixed_packages
0
url pkg:composer/typo3/cms@7.6.32
purl pkg:composer/typo3/cms@7.6.32
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ev4k-5k1d-2bhu
1
vulnerability VCID-fqkx-v8t5-q3h6
2
vulnerability VCID-jp1p-rfxa-hyd9
3
vulnerability VCID-p7gd-anw2-1qbz
4
vulnerability VCID-tgyt-axv1-c7ag
5
vulnerability VCID-xw1s-93bu-wuh9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.32
1
url pkg:composer/typo3/cms@8.7.21
purl pkg:composer/typo3/cms@8.7.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-4eym-e6vt-8fbs
2
vulnerability VCID-7m6u-k5tp-gkhy
3
vulnerability VCID-848u-w88s-5bbe
4
vulnerability VCID-am6s-67bm-77dr
5
vulnerability VCID-bn3p-39sv-6fdg
6
vulnerability VCID-ev4k-5k1d-2bhu
7
vulnerability VCID-fqkx-v8t5-q3h6
8
vulnerability VCID-fut7-bb1f-37g7
9
vulnerability VCID-jp1p-rfxa-hyd9
10
vulnerability VCID-k5t3-28es-h3ez
11
vulnerability VCID-khpm-e1xb-hydb
12
vulnerability VCID-nney-azbc-pucg
13
vulnerability VCID-p7gd-anw2-1qbz
14
vulnerability VCID-pmvp-twk2-jqe4
15
vulnerability VCID-qv14-m93d-jyd9
16
vulnerability VCID-rqrw-t2kj-mud8
17
vulnerability VCID-ru6w-m6q6-27gn
18
vulnerability VCID-sdsa-mh76-kqch
19
vulnerability VCID-tgyt-axv1-c7ag
20
vulnerability VCID-u259-2sxq-tbct
21
vulnerability VCID-vw2r-g8yy-eyf4
22
vulnerability VCID-x5x1-w7yv-eye9
23
vulnerability VCID-xw1s-93bu-wuh9
24
vulnerability VCID-y7ds-p5r2-yuhq
25
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.21
2
url pkg:composer/typo3/cms@9.5.2
purl pkg:composer/typo3/cms@9.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1sfk-z8py-ykb8
2
vulnerability VCID-3ye6-vqje-abh4
3
vulnerability VCID-4an7-9ph4-mkd4
4
vulnerability VCID-4eym-e6vt-8fbs
5
vulnerability VCID-4jck-w9ct-budk
6
vulnerability VCID-6mnf-2fcw-dqgp
7
vulnerability VCID-7m6u-k5tp-gkhy
8
vulnerability VCID-7xv1-78u7-xufp
9
vulnerability VCID-848u-w88s-5bbe
10
vulnerability VCID-8w4e-d49b-nbg8
11
vulnerability VCID-9adx-p876-kyb5
12
vulnerability VCID-am6s-67bm-77dr
13
vulnerability VCID-bbh5-rss8-bfct
14
vulnerability VCID-cvk2-93hm-gkhx
15
vulnerability VCID-e6zr-4bgg-kkh5
16
vulnerability VCID-ev4k-5k1d-2bhu
17
vulnerability VCID-fqkx-v8t5-q3h6
18
vulnerability VCID-fut7-bb1f-37g7
19
vulnerability VCID-jp1p-rfxa-hyd9
20
vulnerability VCID-k5t3-28es-h3ez
21
vulnerability VCID-khpm-e1xb-hydb
22
vulnerability VCID-n1gz-y615-cbbk
23
vulnerability VCID-nney-azbc-pucg
24
vulnerability VCID-p7gd-anw2-1qbz
25
vulnerability VCID-pmvp-twk2-jqe4
26
vulnerability VCID-qv14-m93d-jyd9
27
vulnerability VCID-rqrw-t2kj-mud8
28
vulnerability VCID-ru6w-m6q6-27gn
29
vulnerability VCID-sdsa-mh76-kqch
30
vulnerability VCID-tgyt-axv1-c7ag
31
vulnerability VCID-u259-2sxq-tbct
32
vulnerability VCID-vw2r-g8yy-eyf4
33
vulnerability VCID-x5x1-w7yv-eye9
34
vulnerability VCID-xw1s-93bu-wuh9
35
vulnerability VCID-y7ds-p5r2-yuhq
36
vulnerability VCID-zeut-9wfp-q7et
37
vulnerability VCID-zkvq-bms4-gfcv
38
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.2
aliases GMS-2018-100
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-yz6t-ge1y-qfgr
Fixing_vulnerabilities
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.0.1