Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/212835?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/212835?format=api", "purl": "pkg:composer/typo3/cms@7.6.20", "type": "composer", "namespace": "typo3", "name": "cms", "version": "7.6.20", "qualifiers": {}, "subpath": "", "is_vulnerable": true, "next_non_vulnerable_version": "9.5.25", "latest_non_vulnerable_version": "12.2.0", "affected_by_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40509?format=api", "vulnerability_id": "VCID-3ugj-6m1e-e3hr", "summary": "Cross-site Scripting\nCross-Site Scripting in Online Media Asset Rendering.", "references": [ { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2018-006/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2018-006/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/57123?format=api", "purl": "pkg:composer/typo3/cms@7.6.32", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ev4k-5k1d-2bhu" }, { "vulnerability": "VCID-fqkx-v8t5-q3h6" }, { "vulnerability": "VCID-jp1p-rfxa-hyd9" }, { "vulnerability": "VCID-p7gd-anw2-1qbz" }, { "vulnerability": "VCID-tgyt-axv1-c7ag" }, { "vulnerability": "VCID-xw1s-93bu-wuh9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.32" }, { "url": "http://public2.vulnerablecode.io/api/packages/57073?format=api", "purl": "pkg:composer/typo3/cms@8.7.21", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ffs-9vj5-27hk" }, { "vulnerability": "VCID-4eym-e6vt-8fbs" }, { "vulnerability": "VCID-7m6u-k5tp-gkhy" }, { "vulnerability": "VCID-848u-w88s-5bbe" }, { "vulnerability": "VCID-am6s-67bm-77dr" }, { "vulnerability": "VCID-bn3p-39sv-6fdg" }, { "vulnerability": "VCID-ev4k-5k1d-2bhu" }, { "vulnerability": "VCID-fqkx-v8t5-q3h6" }, { "vulnerability": "VCID-fut7-bb1f-37g7" }, { "vulnerability": "VCID-jp1p-rfxa-hyd9" }, { "vulnerability": "VCID-k5t3-28es-h3ez" }, { "vulnerability": "VCID-khpm-e1xb-hydb" }, { "vulnerability": "VCID-nney-azbc-pucg" }, { "vulnerability": "VCID-p7gd-anw2-1qbz" }, { "vulnerability": "VCID-pmvp-twk2-jqe4" }, { "vulnerability": "VCID-qv14-m93d-jyd9" }, { "vulnerability": "VCID-rqrw-t2kj-mud8" }, { "vulnerability": "VCID-ru6w-m6q6-27gn" }, { "vulnerability": "VCID-sdsa-mh76-kqch" }, { "vulnerability": "VCID-tgyt-axv1-c7ag" }, { "vulnerability": "VCID-u259-2sxq-tbct" }, { "vulnerability": "VCID-vw2r-g8yy-eyf4" }, { "vulnerability": "VCID-x5x1-w7yv-eye9" }, { "vulnerability": "VCID-xw1s-93bu-wuh9" }, { "vulnerability": "VCID-y7ds-p5r2-yuhq" }, { "vulnerability": "VCID-zmwv-gwq3-fkej" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.21" }, { "url": "http://public2.vulnerablecode.io/api/packages/57074?format=api", "purl": "pkg:composer/typo3/cms@9.5.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ffs-9vj5-27hk" }, { "vulnerability": "VCID-1sfk-z8py-ykb8" }, { "vulnerability": "VCID-3ye6-vqje-abh4" }, { "vulnerability": "VCID-4an7-9ph4-mkd4" }, { "vulnerability": "VCID-4eym-e6vt-8fbs" }, { "vulnerability": "VCID-4jck-w9ct-budk" }, { "vulnerability": "VCID-6mnf-2fcw-dqgp" }, { "vulnerability": "VCID-7m6u-k5tp-gkhy" }, { "vulnerability": "VCID-7xv1-78u7-xufp" }, { "vulnerability": "VCID-848u-w88s-5bbe" }, { "vulnerability": "VCID-8w4e-d49b-nbg8" }, { "vulnerability": "VCID-9adx-p876-kyb5" }, { "vulnerability": "VCID-am6s-67bm-77dr" }, { "vulnerability": "VCID-bbh5-rss8-bfct" }, { "vulnerability": "VCID-cvk2-93hm-gkhx" }, { "vulnerability": "VCID-e6zr-4bgg-kkh5" }, { "vulnerability": "VCID-ev4k-5k1d-2bhu" }, { "vulnerability": "VCID-fqkx-v8t5-q3h6" }, { "vulnerability": "VCID-fut7-bb1f-37g7" }, { "vulnerability": "VCID-jp1p-rfxa-hyd9" }, { "vulnerability": "VCID-k5t3-28es-h3ez" }, { "vulnerability": "VCID-khpm-e1xb-hydb" }, { "vulnerability": "VCID-n1gz-y615-cbbk" }, { "vulnerability": "VCID-nney-azbc-pucg" }, { "vulnerability": "VCID-p7gd-anw2-1qbz" }, { "vulnerability": "VCID-pmvp-twk2-jqe4" }, { "vulnerability": "VCID-qv14-m93d-jyd9" }, { "vulnerability": "VCID-rqrw-t2kj-mud8" }, { "vulnerability": "VCID-ru6w-m6q6-27gn" }, { "vulnerability": "VCID-sdsa-mh76-kqch" }, { "vulnerability": "VCID-tgyt-axv1-c7ag" }, { "vulnerability": "VCID-u259-2sxq-tbct" }, { "vulnerability": "VCID-vw2r-g8yy-eyf4" }, { "vulnerability": "VCID-x5x1-w7yv-eye9" }, { "vulnerability": "VCID-xw1s-93bu-wuh9" }, { "vulnerability": "VCID-y7ds-p5r2-yuhq" }, { "vulnerability": "VCID-zeut-9wfp-q7et" }, { "vulnerability": "VCID-zkvq-bms4-gfcv" }, { "vulnerability": "VCID-zmwv-gwq3-fkej" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.2" } ], "aliases": [ "GMS-2018-97" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-3ugj-6m1e-e3hr" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40505?format=api", "vulnerability_id": "VCID-953t-q1cr-zyd6", "summary": "Cross-site Scripting\nCross-Site Scripting in Backend Modal Component.", "references": [ { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2018-007/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2018-007/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/57123?format=api", "purl": "pkg:composer/typo3/cms@7.6.32", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ev4k-5k1d-2bhu" }, { "vulnerability": "VCID-fqkx-v8t5-q3h6" }, { "vulnerability": "VCID-jp1p-rfxa-hyd9" }, { "vulnerability": "VCID-p7gd-anw2-1qbz" }, { "vulnerability": "VCID-tgyt-axv1-c7ag" }, { "vulnerability": "VCID-xw1s-93bu-wuh9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.32" }, { "url": "http://public2.vulnerablecode.io/api/packages/57073?format=api", "purl": "pkg:composer/typo3/cms@8.7.21", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ffs-9vj5-27hk" }, { "vulnerability": "VCID-4eym-e6vt-8fbs" }, { "vulnerability": "VCID-7m6u-k5tp-gkhy" }, { "vulnerability": "VCID-848u-w88s-5bbe" }, { "vulnerability": "VCID-am6s-67bm-77dr" }, { "vulnerability": "VCID-bn3p-39sv-6fdg" }, { "vulnerability": "VCID-ev4k-5k1d-2bhu" }, { "vulnerability": "VCID-fqkx-v8t5-q3h6" }, { "vulnerability": "VCID-fut7-bb1f-37g7" }, { "vulnerability": "VCID-jp1p-rfxa-hyd9" }, { "vulnerability": "VCID-k5t3-28es-h3ez" }, { "vulnerability": "VCID-khpm-e1xb-hydb" }, { "vulnerability": "VCID-nney-azbc-pucg" }, { "vulnerability": "VCID-p7gd-anw2-1qbz" }, { "vulnerability": "VCID-pmvp-twk2-jqe4" }, { "vulnerability": "VCID-qv14-m93d-jyd9" }, { "vulnerability": "VCID-rqrw-t2kj-mud8" }, { "vulnerability": "VCID-ru6w-m6q6-27gn" }, { "vulnerability": "VCID-sdsa-mh76-kqch" }, { "vulnerability": "VCID-tgyt-axv1-c7ag" }, { "vulnerability": "VCID-u259-2sxq-tbct" }, { "vulnerability": "VCID-vw2r-g8yy-eyf4" }, { "vulnerability": "VCID-x5x1-w7yv-eye9" }, { "vulnerability": "VCID-xw1s-93bu-wuh9" }, { "vulnerability": "VCID-y7ds-p5r2-yuhq" }, { "vulnerability": "VCID-zmwv-gwq3-fkej" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.21" }, { "url": "http://public2.vulnerablecode.io/api/packages/57074?format=api", "purl": "pkg:composer/typo3/cms@9.5.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ffs-9vj5-27hk" }, { "vulnerability": "VCID-1sfk-z8py-ykb8" }, { "vulnerability": "VCID-3ye6-vqje-abh4" }, { "vulnerability": "VCID-4an7-9ph4-mkd4" }, { "vulnerability": "VCID-4eym-e6vt-8fbs" }, { "vulnerability": "VCID-4jck-w9ct-budk" }, { "vulnerability": "VCID-6mnf-2fcw-dqgp" }, { "vulnerability": "VCID-7m6u-k5tp-gkhy" }, { "vulnerability": "VCID-7xv1-78u7-xufp" }, { "vulnerability": "VCID-848u-w88s-5bbe" }, { "vulnerability": "VCID-8w4e-d49b-nbg8" }, { "vulnerability": "VCID-9adx-p876-kyb5" }, { "vulnerability": "VCID-am6s-67bm-77dr" }, { "vulnerability": "VCID-bbh5-rss8-bfct" }, { "vulnerability": "VCID-cvk2-93hm-gkhx" }, { "vulnerability": "VCID-e6zr-4bgg-kkh5" }, { "vulnerability": "VCID-ev4k-5k1d-2bhu" }, { "vulnerability": "VCID-fqkx-v8t5-q3h6" }, { "vulnerability": "VCID-fut7-bb1f-37g7" }, { "vulnerability": "VCID-jp1p-rfxa-hyd9" }, { "vulnerability": "VCID-k5t3-28es-h3ez" }, { "vulnerability": "VCID-khpm-e1xb-hydb" }, { "vulnerability": "VCID-n1gz-y615-cbbk" }, { "vulnerability": "VCID-nney-azbc-pucg" }, { "vulnerability": "VCID-p7gd-anw2-1qbz" }, { "vulnerability": "VCID-pmvp-twk2-jqe4" }, { "vulnerability": "VCID-qv14-m93d-jyd9" }, { "vulnerability": "VCID-rqrw-t2kj-mud8" }, { "vulnerability": "VCID-ru6w-m6q6-27gn" }, { "vulnerability": "VCID-sdsa-mh76-kqch" }, { "vulnerability": "VCID-tgyt-axv1-c7ag" }, { "vulnerability": "VCID-u259-2sxq-tbct" }, { "vulnerability": "VCID-vw2r-g8yy-eyf4" }, { "vulnerability": "VCID-x5x1-w7yv-eye9" }, { "vulnerability": "VCID-xw1s-93bu-wuh9" }, { "vulnerability": "VCID-y7ds-p5r2-yuhq" }, { "vulnerability": "VCID-zeut-9wfp-q7et" }, { "vulnerability": "VCID-zkvq-bms4-gfcv" }, { "vulnerability": "VCID-zmwv-gwq3-fkej" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.2" } ], "aliases": [ "GMS-2018-98" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-953t-q1cr-zyd6" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/38811?format=api", "vulnerability_id": "VCID-9saf-w56y-pugz", "summary": "Information Disclosure in TYPO3 CMS.", "references": [ { "reference_url": "https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-005/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-005/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/54049?format=api", "purl": "pkg:composer/typo3/cms@7.6.22", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3ugj-6m1e-e3hr" }, { "vulnerability": "VCID-953t-q1cr-zyd6" }, { "vulnerability": "VCID-abjx-8v46-d7d8" }, { "vulnerability": "VCID-dsqm-9q3e-dudw" }, { "vulnerability": "VCID-ev4k-5k1d-2bhu" }, { "vulnerability": "VCID-fdnw-2tz5-4fdr" }, { "vulnerability": "VCID-fqkx-v8t5-q3h6" }, { "vulnerability": "VCID-hp99-ncuh-6ugv" }, { "vulnerability": "VCID-jp1p-rfxa-hyd9" }, { "vulnerability": "VCID-jq5y-7h9g-mufa" }, { "vulnerability": "VCID-njsj-bwjq-fyap" }, { "vulnerability": "VCID-p7gd-anw2-1qbz" }, { "vulnerability": "VCID-tgyt-axv1-c7ag" }, { "vulnerability": "VCID-vq15-t92r-5bhx" }, { "vulnerability": "VCID-xw1s-93bu-wuh9" }, { "vulnerability": "VCID-yz6t-ge1y-qfgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.22" }, { "url": "http://public2.vulnerablecode.io/api/packages/54050?format=api", "purl": "pkg:composer/typo3/cms@8.7.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ffs-9vj5-27hk" }, { "vulnerability": "VCID-3ugj-6m1e-e3hr" }, { "vulnerability": "VCID-4eym-e6vt-8fbs" }, { "vulnerability": "VCID-6a22-c7x5-sqe2" }, { "vulnerability": "VCID-7ch1-q9f4-a7bt" }, { "vulnerability": "VCID-7m6u-k5tp-gkhy" }, { "vulnerability": "VCID-848u-w88s-5bbe" }, { "vulnerability": "VCID-953t-q1cr-zyd6" }, { "vulnerability": "VCID-abjx-8v46-d7d8" }, { "vulnerability": "VCID-am6s-67bm-77dr" }, { "vulnerability": "VCID-bn3p-39sv-6fdg" }, { "vulnerability": "VCID-dsqm-9q3e-dudw" }, { "vulnerability": "VCID-e564-zdku-9fc6" }, { "vulnerability": "VCID-emqq-kwjg-3kfk" }, { "vulnerability": "VCID-ev4k-5k1d-2bhu" }, { "vulnerability": "VCID-fdnw-2tz5-4fdr" }, { "vulnerability": "VCID-fqkx-v8t5-q3h6" }, { "vulnerability": "VCID-fut7-bb1f-37g7" }, { "vulnerability": "VCID-h7cg-64er-uya9" }, { "vulnerability": "VCID-hp99-ncuh-6ugv" }, { "vulnerability": "VCID-je4q-svfw-hqda" }, { "vulnerability": "VCID-jp1p-rfxa-hyd9" }, { "vulnerability": "VCID-jq5y-7h9g-mufa" }, { "vulnerability": "VCID-jqe4-8hzb-mfea" }, { "vulnerability": "VCID-k5t3-28es-h3ez" }, { "vulnerability": "VCID-khpm-e1xb-hydb" }, { "vulnerability": "VCID-mctp-nf36-7qdn" }, { "vulnerability": "VCID-njsj-bwjq-fyap" }, { "vulnerability": "VCID-nney-azbc-pucg" }, { "vulnerability": "VCID-p7gd-anw2-1qbz" }, { "vulnerability": "VCID-pmvp-twk2-jqe4" }, { "vulnerability": "VCID-qv14-m93d-jyd9" }, { "vulnerability": "VCID-qxab-9uwr-yqhv" }, { "vulnerability": "VCID-rqrw-t2kj-mud8" }, { "vulnerability": "VCID-ru6w-m6q6-27gn" }, { "vulnerability": "VCID-sdsa-mh76-kqch" }, { "vulnerability": "VCID-tgyt-axv1-c7ag" }, { "vulnerability": "VCID-u259-2sxq-tbct" }, { "vulnerability": "VCID-vq15-t92r-5bhx" }, { "vulnerability": "VCID-vw2r-g8yy-eyf4" }, { "vulnerability": "VCID-w1wb-mq2y-dfca" }, { "vulnerability": "VCID-wy45-2gmr-fkfg" }, { "vulnerability": "VCID-x5x1-w7yv-eye9" }, { "vulnerability": "VCID-xw1s-93bu-wuh9" }, { "vulnerability": "VCID-y7ds-p5r2-yuhq" }, { "vulnerability": "VCID-yz6t-ge1y-qfgr" }, { "vulnerability": "VCID-zmwv-gwq3-fkej" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.0" } ], "aliases": [ "GMS-2017-351" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-9saf-w56y-pugz" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40086?format=api", "vulnerability_id": "VCID-abjx-8v46-d7d8", "summary": "Improper Authentication\nAuthentication Bypass in TYPO3 CMS.", "references": [ { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2018-001/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2018-001/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/56093?format=api", "purl": "pkg:composer/typo3/cms@7.6.30", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3ugj-6m1e-e3hr" }, { "vulnerability": "VCID-953t-q1cr-zyd6" }, { "vulnerability": "VCID-dsqm-9q3e-dudw" }, { "vulnerability": "VCID-ev4k-5k1d-2bhu" }, { "vulnerability": "VCID-fdnw-2tz5-4fdr" }, { "vulnerability": "VCID-fqkx-v8t5-q3h6" }, { "vulnerability": "VCID-hp99-ncuh-6ugv" }, { "vulnerability": "VCID-jp1p-rfxa-hyd9" }, { "vulnerability": "VCID-jq5y-7h9g-mufa" }, { "vulnerability": "VCID-p7gd-anw2-1qbz" }, { "vulnerability": "VCID-tgyt-axv1-c7ag" }, { "vulnerability": "VCID-xw1s-93bu-wuh9" }, { "vulnerability": "VCID-yz6t-ge1y-qfgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.30" }, { "url": "http://public2.vulnerablecode.io/api/packages/56094?format=api", "purl": "pkg:composer/typo3/cms@8.7.17", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ffs-9vj5-27hk" }, { "vulnerability": "VCID-3ugj-6m1e-e3hr" }, { "vulnerability": "VCID-4eym-e6vt-8fbs" }, { "vulnerability": "VCID-7ch1-q9f4-a7bt" }, { "vulnerability": "VCID-7m6u-k5tp-gkhy" }, { "vulnerability": "VCID-848u-w88s-5bbe" }, { "vulnerability": "VCID-953t-q1cr-zyd6" }, { "vulnerability": "VCID-am6s-67bm-77dr" }, { "vulnerability": "VCID-bn3p-39sv-6fdg" }, { "vulnerability": "VCID-dsqm-9q3e-dudw" }, { "vulnerability": "VCID-emqq-kwjg-3kfk" }, { "vulnerability": "VCID-ev4k-5k1d-2bhu" }, { "vulnerability": "VCID-fdnw-2tz5-4fdr" }, { "vulnerability": "VCID-fqkx-v8t5-q3h6" }, { "vulnerability": "VCID-fut7-bb1f-37g7" }, { "vulnerability": "VCID-hp99-ncuh-6ugv" }, { "vulnerability": "VCID-jp1p-rfxa-hyd9" }, { "vulnerability": "VCID-jq5y-7h9g-mufa" }, { "vulnerability": "VCID-k5t3-28es-h3ez" }, { "vulnerability": "VCID-khpm-e1xb-hydb" }, { "vulnerability": "VCID-nney-azbc-pucg" }, { "vulnerability": "VCID-p7gd-anw2-1qbz" }, { "vulnerability": "VCID-pmvp-twk2-jqe4" }, { "vulnerability": "VCID-qv14-m93d-jyd9" }, { "vulnerability": "VCID-qxab-9uwr-yqhv" }, { "vulnerability": "VCID-rqrw-t2kj-mud8" }, { "vulnerability": "VCID-ru6w-m6q6-27gn" }, { "vulnerability": "VCID-sdsa-mh76-kqch" }, { "vulnerability": "VCID-tgyt-axv1-c7ag" }, { "vulnerability": "VCID-u259-2sxq-tbct" }, { "vulnerability": "VCID-vw2r-g8yy-eyf4" }, { "vulnerability": "VCID-x5x1-w7yv-eye9" }, { "vulnerability": "VCID-xw1s-93bu-wuh9" }, { "vulnerability": "VCID-y7ds-p5r2-yuhq" }, { "vulnerability": "VCID-yz6t-ge1y-qfgr" }, { "vulnerability": "VCID-zmwv-gwq3-fkej" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.17" }, { "url": "http://public2.vulnerablecode.io/api/packages/56095?format=api", "purl": "pkg:composer/typo3/cms@9.3.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ffs-9vj5-27hk" }, { "vulnerability": "VCID-1sfk-z8py-ykb8" }, { "vulnerability": "VCID-3ugj-6m1e-e3hr" }, { "vulnerability": "VCID-3ye6-vqje-abh4" }, { "vulnerability": "VCID-4an7-9ph4-mkd4" }, { "vulnerability": "VCID-4eym-e6vt-8fbs" }, { "vulnerability": "VCID-4jck-w9ct-budk" }, { "vulnerability": "VCID-6mnf-2fcw-dqgp" }, { "vulnerability": "VCID-7ch1-q9f4-a7bt" }, { "vulnerability": "VCID-7m6u-k5tp-gkhy" }, { "vulnerability": "VCID-7xv1-78u7-xufp" }, { "vulnerability": "VCID-848u-w88s-5bbe" }, { "vulnerability": "VCID-8w4e-d49b-nbg8" }, { "vulnerability": "VCID-953t-q1cr-zyd6" }, { "vulnerability": "VCID-9adx-p876-kyb5" }, { "vulnerability": "VCID-am6s-67bm-77dr" }, { "vulnerability": "VCID-bbh5-rss8-bfct" }, { "vulnerability": "VCID-cvk2-93hm-gkhx" }, { "vulnerability": "VCID-dsqm-9q3e-dudw" }, { "vulnerability": "VCID-e6zr-4bgg-kkh5" }, { "vulnerability": "VCID-emqq-kwjg-3kfk" }, { "vulnerability": "VCID-ev4k-5k1d-2bhu" }, { "vulnerability": "VCID-fqkx-v8t5-q3h6" }, { "vulnerability": "VCID-fut7-bb1f-37g7" }, { "vulnerability": "VCID-hp99-ncuh-6ugv" }, { "vulnerability": "VCID-jp1p-rfxa-hyd9" }, { "vulnerability": "VCID-jq5y-7h9g-mufa" }, { "vulnerability": "VCID-k5t3-28es-h3ez" }, { "vulnerability": "VCID-khpm-e1xb-hydb" }, { "vulnerability": "VCID-n1gz-y615-cbbk" }, { "vulnerability": "VCID-nney-azbc-pucg" }, { "vulnerability": "VCID-p7gd-anw2-1qbz" }, { "vulnerability": "VCID-pmvp-twk2-jqe4" }, { "vulnerability": "VCID-qv14-m93d-jyd9" }, { "vulnerability": "VCID-qxab-9uwr-yqhv" }, { "vulnerability": "VCID-rqrw-t2kj-mud8" }, { "vulnerability": "VCID-ru6w-m6q6-27gn" }, { "vulnerability": "VCID-sdsa-mh76-kqch" }, { "vulnerability": "VCID-tgyt-axv1-c7ag" }, { "vulnerability": "VCID-u259-2sxq-tbct" }, { "vulnerability": "VCID-vw2r-g8yy-eyf4" }, { "vulnerability": "VCID-x5x1-w7yv-eye9" }, { "vulnerability": "VCID-xw1s-93bu-wuh9" }, { "vulnerability": "VCID-y7ds-p5r2-yuhq" }, { "vulnerability": "VCID-yz6t-ge1y-qfgr" }, { "vulnerability": "VCID-zeut-9wfp-q7et" }, { "vulnerability": "VCID-zkvq-bms4-gfcv" }, { "vulnerability": "VCID-zmwv-gwq3-fkej" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.3.2" } ], "aliases": [ "GMS-2018-93" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-abjx-8v46-d7d8" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40497?format=api", "vulnerability_id": "VCID-dsqm-9q3e-dudw", "summary": "Uncontrolled Resource Consumption\nDenial of Service in Online Media Asset Handling.", "references": [ { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2018-011/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2018-011/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/57123?format=api", "purl": "pkg:composer/typo3/cms@7.6.32", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ev4k-5k1d-2bhu" }, { "vulnerability": "VCID-fqkx-v8t5-q3h6" }, { "vulnerability": "VCID-jp1p-rfxa-hyd9" }, { "vulnerability": "VCID-p7gd-anw2-1qbz" }, { "vulnerability": "VCID-tgyt-axv1-c7ag" }, { "vulnerability": "VCID-xw1s-93bu-wuh9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.32" }, { "url": "http://public2.vulnerablecode.io/api/packages/57073?format=api", "purl": "pkg:composer/typo3/cms@8.7.21", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ffs-9vj5-27hk" }, { "vulnerability": "VCID-4eym-e6vt-8fbs" }, { "vulnerability": "VCID-7m6u-k5tp-gkhy" }, { "vulnerability": "VCID-848u-w88s-5bbe" }, { "vulnerability": "VCID-am6s-67bm-77dr" }, { "vulnerability": "VCID-bn3p-39sv-6fdg" }, { "vulnerability": "VCID-ev4k-5k1d-2bhu" }, { "vulnerability": "VCID-fqkx-v8t5-q3h6" }, { "vulnerability": "VCID-fut7-bb1f-37g7" }, { "vulnerability": "VCID-jp1p-rfxa-hyd9" }, { "vulnerability": "VCID-k5t3-28es-h3ez" }, { "vulnerability": "VCID-khpm-e1xb-hydb" }, { "vulnerability": "VCID-nney-azbc-pucg" }, { "vulnerability": "VCID-p7gd-anw2-1qbz" }, { "vulnerability": "VCID-pmvp-twk2-jqe4" }, { "vulnerability": "VCID-qv14-m93d-jyd9" }, { "vulnerability": "VCID-rqrw-t2kj-mud8" }, { "vulnerability": "VCID-ru6w-m6q6-27gn" }, { "vulnerability": "VCID-sdsa-mh76-kqch" }, { "vulnerability": "VCID-tgyt-axv1-c7ag" }, { "vulnerability": "VCID-u259-2sxq-tbct" }, { "vulnerability": "VCID-vw2r-g8yy-eyf4" }, { "vulnerability": "VCID-x5x1-w7yv-eye9" }, { "vulnerability": "VCID-xw1s-93bu-wuh9" }, { "vulnerability": "VCID-y7ds-p5r2-yuhq" }, { "vulnerability": "VCID-zmwv-gwq3-fkej" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.21" }, { "url": "http://public2.vulnerablecode.io/api/packages/57074?format=api", "purl": "pkg:composer/typo3/cms@9.5.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ffs-9vj5-27hk" }, { "vulnerability": "VCID-1sfk-z8py-ykb8" }, { "vulnerability": "VCID-3ye6-vqje-abh4" }, { "vulnerability": "VCID-4an7-9ph4-mkd4" }, { "vulnerability": "VCID-4eym-e6vt-8fbs" }, { "vulnerability": "VCID-4jck-w9ct-budk" }, { "vulnerability": "VCID-6mnf-2fcw-dqgp" }, { "vulnerability": "VCID-7m6u-k5tp-gkhy" }, { "vulnerability": "VCID-7xv1-78u7-xufp" }, { "vulnerability": "VCID-848u-w88s-5bbe" }, { "vulnerability": "VCID-8w4e-d49b-nbg8" }, { "vulnerability": "VCID-9adx-p876-kyb5" }, { "vulnerability": "VCID-am6s-67bm-77dr" }, { "vulnerability": "VCID-bbh5-rss8-bfct" }, { "vulnerability": "VCID-cvk2-93hm-gkhx" }, { "vulnerability": "VCID-e6zr-4bgg-kkh5" }, { "vulnerability": "VCID-ev4k-5k1d-2bhu" }, { "vulnerability": "VCID-fqkx-v8t5-q3h6" }, { "vulnerability": "VCID-fut7-bb1f-37g7" }, { "vulnerability": "VCID-jp1p-rfxa-hyd9" }, { "vulnerability": "VCID-k5t3-28es-h3ez" }, { "vulnerability": "VCID-khpm-e1xb-hydb" }, { "vulnerability": "VCID-n1gz-y615-cbbk" }, { "vulnerability": "VCID-nney-azbc-pucg" }, { "vulnerability": "VCID-p7gd-anw2-1qbz" }, { "vulnerability": "VCID-pmvp-twk2-jqe4" }, { "vulnerability": "VCID-qv14-m93d-jyd9" }, { "vulnerability": "VCID-rqrw-t2kj-mud8" }, { "vulnerability": "VCID-ru6w-m6q6-27gn" }, { "vulnerability": "VCID-sdsa-mh76-kqch" }, { "vulnerability": "VCID-tgyt-axv1-c7ag" }, { "vulnerability": "VCID-u259-2sxq-tbct" }, { "vulnerability": "VCID-vw2r-g8yy-eyf4" }, { "vulnerability": "VCID-x5x1-w7yv-eye9" }, { "vulnerability": "VCID-xw1s-93bu-wuh9" }, { "vulnerability": "VCID-y7ds-p5r2-yuhq" }, { "vulnerability": "VCID-zeut-9wfp-q7et" }, { "vulnerability": "VCID-zkvq-bms4-gfcv" }, { "vulnerability": "VCID-zmwv-gwq3-fkej" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.2" } ], "aliases": [ "GMS-2018-102" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-dsqm-9q3e-dudw" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/38807?format=api", "vulnerability_id": "VCID-e564-zdku-9fc6", "summary": "Information Disclosure\nHTTP requests being performed using the TYPO3 API expose the specific TYPO3 version to the called endpoint.", "references": [ { "reference_url": "https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-006/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-006/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/54049?format=api", "purl": "pkg:composer/typo3/cms@7.6.22", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3ugj-6m1e-e3hr" }, { "vulnerability": "VCID-953t-q1cr-zyd6" }, { "vulnerability": "VCID-abjx-8v46-d7d8" }, { "vulnerability": "VCID-dsqm-9q3e-dudw" }, { "vulnerability": "VCID-ev4k-5k1d-2bhu" }, { "vulnerability": "VCID-fdnw-2tz5-4fdr" }, { "vulnerability": "VCID-fqkx-v8t5-q3h6" }, { "vulnerability": "VCID-hp99-ncuh-6ugv" }, { "vulnerability": "VCID-jp1p-rfxa-hyd9" }, { "vulnerability": "VCID-jq5y-7h9g-mufa" }, { "vulnerability": "VCID-njsj-bwjq-fyap" }, { "vulnerability": "VCID-p7gd-anw2-1qbz" }, { "vulnerability": "VCID-tgyt-axv1-c7ag" }, { "vulnerability": "VCID-vq15-t92r-5bhx" }, { "vulnerability": "VCID-xw1s-93bu-wuh9" }, { "vulnerability": "VCID-yz6t-ge1y-qfgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.22" }, { "url": "http://public2.vulnerablecode.io/api/packages/54048?format=api", "purl": "pkg:composer/typo3/cms@8.7.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ffs-9vj5-27hk" }, { "vulnerability": "VCID-3ugj-6m1e-e3hr" }, { "vulnerability": "VCID-4eym-e6vt-8fbs" }, { "vulnerability": "VCID-7ch1-q9f4-a7bt" }, { "vulnerability": "VCID-7m6u-k5tp-gkhy" }, { "vulnerability": "VCID-848u-w88s-5bbe" }, { "vulnerability": "VCID-953t-q1cr-zyd6" }, { "vulnerability": "VCID-abjx-8v46-d7d8" }, { "vulnerability": "VCID-am6s-67bm-77dr" }, { "vulnerability": "VCID-bn3p-39sv-6fdg" }, { "vulnerability": "VCID-dsqm-9q3e-dudw" }, { "vulnerability": "VCID-emqq-kwjg-3kfk" }, { "vulnerability": "VCID-ev4k-5k1d-2bhu" }, { "vulnerability": "VCID-fdnw-2tz5-4fdr" }, { "vulnerability": "VCID-fqkx-v8t5-q3h6" }, { "vulnerability": "VCID-fut7-bb1f-37g7" }, { "vulnerability": "VCID-hp99-ncuh-6ugv" }, { "vulnerability": "VCID-je4q-svfw-hqda" }, { "vulnerability": "VCID-jp1p-rfxa-hyd9" }, { "vulnerability": "VCID-jq5y-7h9g-mufa" }, { "vulnerability": "VCID-k5t3-28es-h3ez" }, { "vulnerability": "VCID-khpm-e1xb-hydb" }, { "vulnerability": "VCID-njsj-bwjq-fyap" }, { "vulnerability": "VCID-nney-azbc-pucg" }, { "vulnerability": "VCID-p7gd-anw2-1qbz" }, { "vulnerability": "VCID-pmvp-twk2-jqe4" }, { "vulnerability": "VCID-qv14-m93d-jyd9" }, { "vulnerability": "VCID-qxab-9uwr-yqhv" }, { "vulnerability": "VCID-rqrw-t2kj-mud8" }, { "vulnerability": "VCID-ru6w-m6q6-27gn" }, { "vulnerability": "VCID-sdsa-mh76-kqch" }, { "vulnerability": "VCID-tgyt-axv1-c7ag" }, { "vulnerability": "VCID-u259-2sxq-tbct" }, { "vulnerability": "VCID-vq15-t92r-5bhx" }, { "vulnerability": "VCID-vw2r-g8yy-eyf4" }, { "vulnerability": "VCID-w1wb-mq2y-dfca" }, { "vulnerability": "VCID-x5x1-w7yv-eye9" }, { "vulnerability": "VCID-xw1s-93bu-wuh9" }, { "vulnerability": "VCID-y7ds-p5r2-yuhq" }, { "vulnerability": "VCID-yz6t-ge1y-qfgr" }, { "vulnerability": "VCID-zmwv-gwq3-fkej" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.5" } ], "aliases": [ "TYPO3-CORE-SA-2017-006" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-e564-zdku-9fc6" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/54233?format=api", "vulnerability_id": "VCID-ev4k-5k1d-2bhu", "summary": "URL Redirection to Untrusted Site (Open Redirect)\nLogin Handling is susceptible to open redirection which allows attackers redirecting to arbitrary content, and conducting phishing attacks. No authentication is required in order to exploit this vulnerability.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-21338", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00253", "scoring_system": "epss", "scoring_elements": "0.48774", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-21338" }, { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21338.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21338.yaml" }, { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21338.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21338.yaml" }, { "reference_url": "https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-4jhw-2p6j-5wmp", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-4jhw-2p6j-5wmp" }, { "reference_url": "https://packagist.org/packages/typo3/cms-core", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://packagist.org/packages/typo3/cms-core" }, { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2021-001", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://typo3.org/security/advisory/typo3-core-sa-2021-001" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-21338", "reference_id": "CVE-2021-21338", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-21338" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/58449?format=api", "purl": "pkg:composer/typo3/cms@7.6.51", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-uq77-aax5-k7d8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.51" }, { "url": "http://public2.vulnerablecode.io/api/packages/58450?format=api", "purl": "pkg:composer/typo3/cms@8.7.40", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-j8hk-bqnb-gycp" }, { "vulnerability": "VCID-sdjb-gp4t-vbgt" }, { "vulnerability": "VCID-uq77-aax5-k7d8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.40" }, { "url": "http://public2.vulnerablecode.io/api/packages/80032?format=api", "purl": "pkg:composer/typo3/cms@9.5.25", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.25" }, { "url": "http://public2.vulnerablecode.io/api/packages/80033?format=api", "purl": "pkg:composer/typo3/cms@10.4.14", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@10.4.14" }, { "url": "http://public2.vulnerablecode.io/api/packages/80034?format=api", "purl": "pkg:composer/typo3/cms@11.1.1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@11.1.1" } ], "aliases": [ "CVE-2021-21338", "GHSA-4jhw-2p6j-5wmp" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ev4k-5k1d-2bhu" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40504?format=api", "vulnerability_id": "VCID-fdnw-2tz5-4fdr", "summary": "Uncontrolled Resource Consumption\nDenial of Service in Frontend Record Registration.", "references": [ { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2018-012/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2018-012/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/57123?format=api", "purl": "pkg:composer/typo3/cms@7.6.32", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ev4k-5k1d-2bhu" }, { "vulnerability": "VCID-fqkx-v8t5-q3h6" }, { "vulnerability": "VCID-jp1p-rfxa-hyd9" }, { "vulnerability": "VCID-p7gd-anw2-1qbz" }, { "vulnerability": "VCID-tgyt-axv1-c7ag" }, { "vulnerability": "VCID-xw1s-93bu-wuh9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.32" }, { "url": "http://public2.vulnerablecode.io/api/packages/57073?format=api", "purl": "pkg:composer/typo3/cms@8.7.21", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ffs-9vj5-27hk" }, { "vulnerability": "VCID-4eym-e6vt-8fbs" }, { "vulnerability": "VCID-7m6u-k5tp-gkhy" }, { "vulnerability": "VCID-848u-w88s-5bbe" }, { "vulnerability": "VCID-am6s-67bm-77dr" }, { "vulnerability": "VCID-bn3p-39sv-6fdg" }, { "vulnerability": "VCID-ev4k-5k1d-2bhu" }, { "vulnerability": "VCID-fqkx-v8t5-q3h6" }, { "vulnerability": "VCID-fut7-bb1f-37g7" }, { "vulnerability": "VCID-jp1p-rfxa-hyd9" }, { "vulnerability": "VCID-k5t3-28es-h3ez" }, { "vulnerability": "VCID-khpm-e1xb-hydb" }, { "vulnerability": "VCID-nney-azbc-pucg" }, { "vulnerability": "VCID-p7gd-anw2-1qbz" }, { "vulnerability": "VCID-pmvp-twk2-jqe4" }, { "vulnerability": "VCID-qv14-m93d-jyd9" }, { "vulnerability": "VCID-rqrw-t2kj-mud8" }, { "vulnerability": "VCID-ru6w-m6q6-27gn" }, { "vulnerability": "VCID-sdsa-mh76-kqch" }, { "vulnerability": "VCID-tgyt-axv1-c7ag" }, { "vulnerability": "VCID-u259-2sxq-tbct" }, { "vulnerability": "VCID-vw2r-g8yy-eyf4" }, { "vulnerability": "VCID-x5x1-w7yv-eye9" }, { "vulnerability": "VCID-xw1s-93bu-wuh9" }, { "vulnerability": "VCID-y7ds-p5r2-yuhq" }, { "vulnerability": "VCID-zmwv-gwq3-fkej" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.21" }, { "url": "http://public2.vulnerablecode.io/api/packages/55352?format=api", "purl": "pkg:composer/typo3/cms@9.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-11sw-6x9k-vued" }, { "vulnerability": "VCID-11u3-8xzy-jfhh" }, { "vulnerability": "VCID-1ffs-9vj5-27hk" }, { "vulnerability": "VCID-1sfk-z8py-ykb8" }, { "vulnerability": "VCID-28fn-ncj5-2ufk" }, { "vulnerability": "VCID-2rhr-8vaz-hqfj" }, { "vulnerability": "VCID-2rmv-a83x-9ka8" }, { "vulnerability": "VCID-39vn-73mc-jqav" }, { "vulnerability": "VCID-3k2k-a3gb-n3ba" }, { "vulnerability": "VCID-3ugj-6m1e-e3hr" }, { "vulnerability": "VCID-3ye6-vqje-abh4" }, { "vulnerability": "VCID-4an7-9ph4-mkd4" }, { "vulnerability": "VCID-4eym-e6vt-8fbs" }, { "vulnerability": "VCID-4jck-w9ct-budk" }, { "vulnerability": "VCID-5k47-9k7t-rqak" }, { "vulnerability": "VCID-66kh-c1dm-8fbf" }, { "vulnerability": "VCID-6mnf-2fcw-dqgp" }, { "vulnerability": "VCID-7ch1-q9f4-a7bt" }, { "vulnerability": "VCID-7m6u-k5tp-gkhy" }, { "vulnerability": "VCID-7xv1-78u7-xufp" }, { "vulnerability": "VCID-848u-w88s-5bbe" }, { "vulnerability": "VCID-8w4e-d49b-nbg8" }, { "vulnerability": "VCID-94r9-hh4g-jkej" }, { "vulnerability": "VCID-953t-q1cr-zyd6" }, { "vulnerability": "VCID-9adx-p876-kyb5" }, { "vulnerability": "VCID-9yu1-z7c2-t3fj" }, { "vulnerability": "VCID-a1g9-pyz5-9fca" }, { "vulnerability": "VCID-abjx-8v46-d7d8" }, { "vulnerability": "VCID-am6s-67bm-77dr" }, { "vulnerability": "VCID-bbh5-rss8-bfct" }, { "vulnerability": "VCID-bcbd-zzet-mff6" }, { "vulnerability": "VCID-buj5-2t53-3kcr" }, { "vulnerability": "VCID-cbmm-1b2k-8qaz" }, { "vulnerability": "VCID-cvk2-93hm-gkhx" }, { "vulnerability": "VCID-dsqm-9q3e-dudw" }, { "vulnerability": "VCID-e6zr-4bgg-kkh5" }, { "vulnerability": "VCID-emqq-kwjg-3kfk" }, { "vulnerability": "VCID-ev4k-5k1d-2bhu" }, { "vulnerability": "VCID-f319-jpf5-hyex" }, { "vulnerability": "VCID-f4n7-q72x-3yea" }, { "vulnerability": "VCID-fpa2-ffg1-fyaa" }, { "vulnerability": "VCID-fqkc-utex-3kav" }, { "vulnerability": "VCID-fqkx-v8t5-q3h6" }, { "vulnerability": "VCID-fut7-bb1f-37g7" }, { "vulnerability": "VCID-gpv4-4tpd-tbaa" }, { "vulnerability": "VCID-hknp-f88a-kqec" }, { "vulnerability": "VCID-hp99-ncuh-6ugv" }, { "vulnerability": "VCID-hsw8-nbs6-auaa" }, { "vulnerability": "VCID-j8hk-bqnb-gycp" }, { "vulnerability": "VCID-je4q-svfw-hqda" }, { "vulnerability": "VCID-jp1p-rfxa-hyd9" }, { "vulnerability": "VCID-jq5y-7h9g-mufa" }, { "vulnerability": "VCID-jwb1-3sbg-kfa5" }, { "vulnerability": "VCID-k5t3-28es-h3ez" }, { "vulnerability": "VCID-khpm-e1xb-hydb" }, { "vulnerability": "VCID-n1gz-y615-cbbk" }, { "vulnerability": "VCID-njsj-bwjq-fyap" }, { "vulnerability": "VCID-nney-azbc-pucg" }, { "vulnerability": "VCID-p576-w7dd-p3h7" }, { "vulnerability": "VCID-p7gd-anw2-1qbz" }, { "vulnerability": "VCID-pmvp-twk2-jqe4" }, { "vulnerability": "VCID-q2t1-kx56-s3c3" }, { "vulnerability": "VCID-q7vt-19eb-sqeq" }, { "vulnerability": "VCID-qcnh-z4zh-myaw" }, { "vulnerability": "VCID-qdxh-arxx-wbcr" }, { "vulnerability": "VCID-qv14-m93d-jyd9" }, { "vulnerability": "VCID-qxab-9uwr-yqhv" }, { "vulnerability": "VCID-rqrw-t2kj-mud8" }, { "vulnerability": "VCID-ru6w-m6q6-27gn" }, { "vulnerability": "VCID-sdjb-gp4t-vbgt" }, { "vulnerability": "VCID-sdsa-mh76-kqch" }, { "vulnerability": "VCID-teby-zvvw-zkhv" }, { "vulnerability": "VCID-tgyt-axv1-c7ag" }, { "vulnerability": "VCID-tzpj-j3x1-ekgk" }, { "vulnerability": "VCID-u259-2sxq-tbct" }, { "vulnerability": "VCID-u6as-cwxc-pkhk" }, { "vulnerability": "VCID-un7r-8sah-33cr" }, { "vulnerability": "VCID-uq77-aax5-k7d8" }, { "vulnerability": "VCID-vq15-t92r-5bhx" }, { "vulnerability": "VCID-vw2r-g8yy-eyf4" }, { "vulnerability": "VCID-w1wb-mq2y-dfca" }, { "vulnerability": "VCID-w7z1-aw31-vugx" }, { "vulnerability": "VCID-wat8-4m83-hken" }, { "vulnerability": "VCID-x5x1-w7yv-eye9" }, { "vulnerability": "VCID-xvyu-2hb8-8ufh" }, { "vulnerability": "VCID-xw1s-93bu-wuh9" }, { "vulnerability": "VCID-y7ds-p5r2-yuhq" }, { "vulnerability": "VCID-yh6b-tc4u-v3bk" }, { "vulnerability": "VCID-yz6t-ge1y-qfgr" }, { "vulnerability": "VCID-zeut-9wfp-q7et" }, { "vulnerability": "VCID-zgfw-pk39-gyg8" }, { "vulnerability": "VCID-zkvq-bms4-gfcv" }, { "vulnerability": "VCID-zmwv-gwq3-fkej" }, { "vulnerability": "VCID-zybp-mb3d-jyee" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.0.0" } ], "aliases": [ "GMS-2018-103" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-fdnw-2tz5-4fdr" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/54220?format=api", "vulnerability_id": "VCID-fqkx-v8t5-q3h6", "summary": "Cleartext Storage of Sensitive Information\nUser session identifiers are stored in cleartext - without processing of additional cryptographic hashing algorithms. This vulnerability cannot be exploited directly and occurs in combination with a chained attack - for example SQL injection in any other component of the system.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-21339", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00132", "scoring_system": "epss", "scoring_elements": "0.32224", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-21339" }, { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21339.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21339.yaml" }, { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21339.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21339.yaml" }, { "reference_url": "https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-qx3w-4864-94ch", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-qx3w-4864-94ch" }, { "reference_url": "https://packagist.org/packages/typo3/cms-core", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://packagist.org/packages/typo3/cms-core" }, { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2021-006", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://typo3.org/security/advisory/typo3-core-sa-2021-006" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-21339", "reference_id": "CVE-2021-21339", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-21339" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/58449?format=api", "purl": "pkg:composer/typo3/cms@7.6.51", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-uq77-aax5-k7d8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.51" }, { "url": "http://public2.vulnerablecode.io/api/packages/58450?format=api", "purl": "pkg:composer/typo3/cms@8.7.40", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-j8hk-bqnb-gycp" }, { "vulnerability": "VCID-sdjb-gp4t-vbgt" }, { "vulnerability": "VCID-uq77-aax5-k7d8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.40" }, { "url": "http://public2.vulnerablecode.io/api/packages/80032?format=api", "purl": "pkg:composer/typo3/cms@9.5.25", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.25" }, { "url": "http://public2.vulnerablecode.io/api/packages/80033?format=api", "purl": "pkg:composer/typo3/cms@10.4.14", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@10.4.14" }, { "url": "http://public2.vulnerablecode.io/api/packages/80034?format=api", "purl": "pkg:composer/typo3/cms@11.1.1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@11.1.1" } ], "aliases": [ "CVE-2021-21339", "GHSA-qx3w-4864-94ch" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-fqkx-v8t5-q3h6" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/38829?format=api", "vulnerability_id": "VCID-h7cg-64er-uya9", "summary": "Unrestricted Upload of File with Dangerous Type\nUnrestricted File Upload vulnerability in the `fileDenyPattern` in `sysext/core/Classes/Core/SystemEnvironmentBuilder`.", "references": [ { "reference_url": "http://blog.emaze.net/2017/12/typo3-unrestricted-file-upload-remote.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://blog.emaze.net/2017/12/typo3-unrestricted-file-upload-remote.html" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-14251", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.03536", "scoring_system": "epss", "scoring_elements": "0.8788", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-14251" }, { "reference_url": "https://github.com/TYPO3/typo3", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3/typo3" }, { "reference_url": "https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-007", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-007" }, { "reference_url": "https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-007/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-007/" }, { "reference_url": "http://www.securityfocus.com/bid/100620", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.securityfocus.com/bid/100620" }, { "reference_url": "http://www.securitytracker.com/id/1039295", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.securitytracker.com/id/1039295" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-14251", "reference_id": "CVE-2017-14251", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-14251" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/54049?format=api", "purl": "pkg:composer/typo3/cms@7.6.22", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3ugj-6m1e-e3hr" }, { "vulnerability": "VCID-953t-q1cr-zyd6" }, { "vulnerability": "VCID-abjx-8v46-d7d8" }, { "vulnerability": "VCID-dsqm-9q3e-dudw" }, { "vulnerability": "VCID-ev4k-5k1d-2bhu" }, { "vulnerability": "VCID-fdnw-2tz5-4fdr" }, { "vulnerability": "VCID-fqkx-v8t5-q3h6" }, { "vulnerability": "VCID-hp99-ncuh-6ugv" }, { "vulnerability": "VCID-jp1p-rfxa-hyd9" }, { "vulnerability": "VCID-jq5y-7h9g-mufa" }, { "vulnerability": "VCID-njsj-bwjq-fyap" }, { "vulnerability": "VCID-p7gd-anw2-1qbz" }, { "vulnerability": "VCID-tgyt-axv1-c7ag" }, { "vulnerability": "VCID-vq15-t92r-5bhx" }, { "vulnerability": "VCID-xw1s-93bu-wuh9" }, { "vulnerability": "VCID-yz6t-ge1y-qfgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.22" }, { "url": "http://public2.vulnerablecode.io/api/packages/54048?format=api", "purl": "pkg:composer/typo3/cms@8.7.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ffs-9vj5-27hk" }, { "vulnerability": "VCID-3ugj-6m1e-e3hr" }, { "vulnerability": "VCID-4eym-e6vt-8fbs" }, { "vulnerability": "VCID-7ch1-q9f4-a7bt" }, { "vulnerability": "VCID-7m6u-k5tp-gkhy" }, { "vulnerability": "VCID-848u-w88s-5bbe" }, { "vulnerability": "VCID-953t-q1cr-zyd6" }, { "vulnerability": "VCID-abjx-8v46-d7d8" }, { "vulnerability": "VCID-am6s-67bm-77dr" }, { "vulnerability": "VCID-bn3p-39sv-6fdg" }, { "vulnerability": "VCID-dsqm-9q3e-dudw" }, { "vulnerability": "VCID-emqq-kwjg-3kfk" }, { "vulnerability": "VCID-ev4k-5k1d-2bhu" }, { "vulnerability": "VCID-fdnw-2tz5-4fdr" }, { "vulnerability": "VCID-fqkx-v8t5-q3h6" }, { "vulnerability": "VCID-fut7-bb1f-37g7" }, { "vulnerability": "VCID-hp99-ncuh-6ugv" }, { "vulnerability": "VCID-je4q-svfw-hqda" }, { "vulnerability": "VCID-jp1p-rfxa-hyd9" }, { "vulnerability": "VCID-jq5y-7h9g-mufa" }, { "vulnerability": "VCID-k5t3-28es-h3ez" }, { "vulnerability": "VCID-khpm-e1xb-hydb" }, { "vulnerability": "VCID-njsj-bwjq-fyap" }, { "vulnerability": "VCID-nney-azbc-pucg" }, { "vulnerability": "VCID-p7gd-anw2-1qbz" }, { "vulnerability": "VCID-pmvp-twk2-jqe4" }, { "vulnerability": "VCID-qv14-m93d-jyd9" }, { "vulnerability": "VCID-qxab-9uwr-yqhv" }, { "vulnerability": "VCID-rqrw-t2kj-mud8" }, { "vulnerability": "VCID-ru6w-m6q6-27gn" }, { "vulnerability": "VCID-sdsa-mh76-kqch" }, { "vulnerability": "VCID-tgyt-axv1-c7ag" }, { "vulnerability": "VCID-u259-2sxq-tbct" }, { "vulnerability": "VCID-vq15-t92r-5bhx" }, { "vulnerability": "VCID-vw2r-g8yy-eyf4" }, { "vulnerability": "VCID-w1wb-mq2y-dfca" }, { "vulnerability": "VCID-x5x1-w7yv-eye9" }, { "vulnerability": "VCID-xw1s-93bu-wuh9" }, { "vulnerability": "VCID-y7ds-p5r2-yuhq" }, { "vulnerability": "VCID-yz6t-ge1y-qfgr" }, { "vulnerability": "VCID-zmwv-gwq3-fkej" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.5" } ], "aliases": [ "CVE-2017-14251", "GHSA-fh4q-hxrw-cjqq" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-h7cg-64er-uya9" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40507?format=api", "vulnerability_id": "VCID-hp99-ncuh-6ugv", "summary": "Cross-site Scripting\nCross-Site Scripting in Frontend User Login.", "references": [ { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2018-008/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2018-008/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/57123?format=api", "purl": "pkg:composer/typo3/cms@7.6.32", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ev4k-5k1d-2bhu" }, { "vulnerability": "VCID-fqkx-v8t5-q3h6" }, { "vulnerability": "VCID-jp1p-rfxa-hyd9" }, { "vulnerability": "VCID-p7gd-anw2-1qbz" }, { "vulnerability": "VCID-tgyt-axv1-c7ag" }, { "vulnerability": "VCID-xw1s-93bu-wuh9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.32" }, { "url": "http://public2.vulnerablecode.io/api/packages/57073?format=api", "purl": "pkg:composer/typo3/cms@8.7.21", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ffs-9vj5-27hk" }, { "vulnerability": "VCID-4eym-e6vt-8fbs" }, { "vulnerability": "VCID-7m6u-k5tp-gkhy" }, { "vulnerability": "VCID-848u-w88s-5bbe" }, { "vulnerability": "VCID-am6s-67bm-77dr" }, { "vulnerability": "VCID-bn3p-39sv-6fdg" }, { "vulnerability": "VCID-ev4k-5k1d-2bhu" }, { "vulnerability": "VCID-fqkx-v8t5-q3h6" }, { "vulnerability": "VCID-fut7-bb1f-37g7" }, { "vulnerability": "VCID-jp1p-rfxa-hyd9" }, { "vulnerability": "VCID-k5t3-28es-h3ez" }, { "vulnerability": "VCID-khpm-e1xb-hydb" }, { "vulnerability": "VCID-nney-azbc-pucg" }, { "vulnerability": "VCID-p7gd-anw2-1qbz" }, { "vulnerability": "VCID-pmvp-twk2-jqe4" }, { "vulnerability": "VCID-qv14-m93d-jyd9" }, { "vulnerability": "VCID-rqrw-t2kj-mud8" }, { "vulnerability": "VCID-ru6w-m6q6-27gn" }, { "vulnerability": "VCID-sdsa-mh76-kqch" }, { "vulnerability": "VCID-tgyt-axv1-c7ag" }, { "vulnerability": "VCID-u259-2sxq-tbct" }, { "vulnerability": "VCID-vw2r-g8yy-eyf4" }, { "vulnerability": "VCID-x5x1-w7yv-eye9" }, { "vulnerability": "VCID-xw1s-93bu-wuh9" }, { "vulnerability": "VCID-y7ds-p5r2-yuhq" }, { "vulnerability": "VCID-zmwv-gwq3-fkej" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.21" }, { "url": "http://public2.vulnerablecode.io/api/packages/57074?format=api", "purl": "pkg:composer/typo3/cms@9.5.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ffs-9vj5-27hk" }, { "vulnerability": "VCID-1sfk-z8py-ykb8" }, { "vulnerability": "VCID-3ye6-vqje-abh4" }, { "vulnerability": "VCID-4an7-9ph4-mkd4" }, { "vulnerability": "VCID-4eym-e6vt-8fbs" }, { "vulnerability": "VCID-4jck-w9ct-budk" }, { "vulnerability": "VCID-6mnf-2fcw-dqgp" }, { "vulnerability": "VCID-7m6u-k5tp-gkhy" }, { "vulnerability": "VCID-7xv1-78u7-xufp" }, { "vulnerability": "VCID-848u-w88s-5bbe" }, { "vulnerability": "VCID-8w4e-d49b-nbg8" }, { "vulnerability": "VCID-9adx-p876-kyb5" }, { "vulnerability": "VCID-am6s-67bm-77dr" }, { "vulnerability": "VCID-bbh5-rss8-bfct" }, { "vulnerability": "VCID-cvk2-93hm-gkhx" }, { "vulnerability": "VCID-e6zr-4bgg-kkh5" }, { "vulnerability": "VCID-ev4k-5k1d-2bhu" }, { "vulnerability": "VCID-fqkx-v8t5-q3h6" }, { "vulnerability": "VCID-fut7-bb1f-37g7" }, { "vulnerability": "VCID-jp1p-rfxa-hyd9" }, { "vulnerability": "VCID-k5t3-28es-h3ez" }, { "vulnerability": "VCID-khpm-e1xb-hydb" }, { "vulnerability": "VCID-n1gz-y615-cbbk" }, { "vulnerability": "VCID-nney-azbc-pucg" }, { "vulnerability": "VCID-p7gd-anw2-1qbz" }, { "vulnerability": "VCID-pmvp-twk2-jqe4" }, { "vulnerability": "VCID-qv14-m93d-jyd9" }, { "vulnerability": "VCID-rqrw-t2kj-mud8" }, { "vulnerability": "VCID-ru6w-m6q6-27gn" }, { "vulnerability": "VCID-sdsa-mh76-kqch" }, { "vulnerability": "VCID-tgyt-axv1-c7ag" }, { "vulnerability": "VCID-u259-2sxq-tbct" }, { "vulnerability": "VCID-vw2r-g8yy-eyf4" }, { "vulnerability": "VCID-x5x1-w7yv-eye9" }, { "vulnerability": "VCID-xw1s-93bu-wuh9" }, { "vulnerability": "VCID-y7ds-p5r2-yuhq" }, { "vulnerability": "VCID-zeut-9wfp-q7et" }, { "vulnerability": "VCID-zkvq-bms4-gfcv" }, { "vulnerability": "VCID-zmwv-gwq3-fkej" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.2" } ], "aliases": [ "GMS-2018-99" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-hp99-ncuh-6ugv" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/54221?format=api", "vulnerability_id": "VCID-jp1p-rfxa-hyd9", "summary": "Cross-site Scripting\nContent elements of type `_menu_` are vulnerable to cross-site scripting when their referenced items get previewed in the page module. A valid backend user account is needed to exploit this vulnerability.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-21370", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00342", "scoring_system": "epss", "scoring_elements": "0.57112", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-21370" }, { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21370.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21370.yaml" }, { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21370.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21370.yaml" }, { "reference_url": "https://packagist.org/packages/typo3/cms-backend", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://packagist.org/packages/typo3/cms-backend" }, { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2021-008", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://typo3.org/security/advisory/typo3-core-sa-2021-008" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-21370", "reference_id": "CVE-2021-21370", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-21370" }, { "reference_url": "https://github.com/advisories/GHSA-x7hc-x7fm-f7qh", "reference_id": "GHSA-x7hc-x7fm-f7qh", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-x7hc-x7fm-f7qh" }, { "reference_url": "https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-x7hc-x7fm-f7qh", "reference_id": "GHSA-x7hc-x7fm-f7qh", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-x7hc-x7fm-f7qh" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/58449?format=api", "purl": "pkg:composer/typo3/cms@7.6.51", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-uq77-aax5-k7d8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.51" }, { "url": "http://public2.vulnerablecode.io/api/packages/58450?format=api", "purl": "pkg:composer/typo3/cms@8.7.40", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-j8hk-bqnb-gycp" }, { "vulnerability": "VCID-sdjb-gp4t-vbgt" }, { "vulnerability": "VCID-uq77-aax5-k7d8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.40" }, { "url": "http://public2.vulnerablecode.io/api/packages/80032?format=api", "purl": "pkg:composer/typo3/cms@9.5.25", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.25" }, { "url": "http://public2.vulnerablecode.io/api/packages/80033?format=api", "purl": "pkg:composer/typo3/cms@10.4.14", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@10.4.14" }, { "url": "http://public2.vulnerablecode.io/api/packages/80034?format=api", "purl": "pkg:composer/typo3/cms@11.1.1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@11.1.1" } ], "aliases": [ "CVE-2021-21370", "GHSA-x7hc-x7fm-f7qh" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-jp1p-rfxa-hyd9" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40511?format=api", "vulnerability_id": "VCID-jq5y-7h9g-mufa", "summary": "Information Disclosure in Install Tool.", "references": [ { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2018-010/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2018-010/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/57123?format=api", "purl": "pkg:composer/typo3/cms@7.6.32", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ev4k-5k1d-2bhu" }, { "vulnerability": "VCID-fqkx-v8t5-q3h6" }, { "vulnerability": "VCID-jp1p-rfxa-hyd9" }, { "vulnerability": "VCID-p7gd-anw2-1qbz" }, { "vulnerability": "VCID-tgyt-axv1-c7ag" }, { "vulnerability": "VCID-xw1s-93bu-wuh9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.32" }, { "url": "http://public2.vulnerablecode.io/api/packages/57073?format=api", "purl": "pkg:composer/typo3/cms@8.7.21", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ffs-9vj5-27hk" }, { "vulnerability": "VCID-4eym-e6vt-8fbs" }, { "vulnerability": "VCID-7m6u-k5tp-gkhy" }, { "vulnerability": "VCID-848u-w88s-5bbe" }, { "vulnerability": "VCID-am6s-67bm-77dr" }, { "vulnerability": "VCID-bn3p-39sv-6fdg" }, { "vulnerability": "VCID-ev4k-5k1d-2bhu" }, { "vulnerability": "VCID-fqkx-v8t5-q3h6" }, { "vulnerability": "VCID-fut7-bb1f-37g7" }, { "vulnerability": "VCID-jp1p-rfxa-hyd9" }, { "vulnerability": "VCID-k5t3-28es-h3ez" }, { "vulnerability": "VCID-khpm-e1xb-hydb" }, { "vulnerability": "VCID-nney-azbc-pucg" }, { "vulnerability": "VCID-p7gd-anw2-1qbz" }, { "vulnerability": "VCID-pmvp-twk2-jqe4" }, { "vulnerability": "VCID-qv14-m93d-jyd9" }, { "vulnerability": "VCID-rqrw-t2kj-mud8" }, { "vulnerability": "VCID-ru6w-m6q6-27gn" }, { "vulnerability": "VCID-sdsa-mh76-kqch" }, { "vulnerability": "VCID-tgyt-axv1-c7ag" }, { "vulnerability": "VCID-u259-2sxq-tbct" }, { "vulnerability": "VCID-vw2r-g8yy-eyf4" }, { "vulnerability": "VCID-x5x1-w7yv-eye9" }, { "vulnerability": "VCID-xw1s-93bu-wuh9" }, { "vulnerability": "VCID-y7ds-p5r2-yuhq" }, { "vulnerability": "VCID-zmwv-gwq3-fkej" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.21" }, { "url": "http://public2.vulnerablecode.io/api/packages/57074?format=api", "purl": "pkg:composer/typo3/cms@9.5.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ffs-9vj5-27hk" }, { "vulnerability": "VCID-1sfk-z8py-ykb8" }, { "vulnerability": "VCID-3ye6-vqje-abh4" }, { "vulnerability": "VCID-4an7-9ph4-mkd4" }, { "vulnerability": "VCID-4eym-e6vt-8fbs" }, { "vulnerability": "VCID-4jck-w9ct-budk" }, { "vulnerability": "VCID-6mnf-2fcw-dqgp" }, { "vulnerability": "VCID-7m6u-k5tp-gkhy" }, { "vulnerability": "VCID-7xv1-78u7-xufp" }, { "vulnerability": "VCID-848u-w88s-5bbe" }, { "vulnerability": "VCID-8w4e-d49b-nbg8" }, { "vulnerability": "VCID-9adx-p876-kyb5" }, { "vulnerability": "VCID-am6s-67bm-77dr" }, { "vulnerability": "VCID-bbh5-rss8-bfct" }, { "vulnerability": "VCID-cvk2-93hm-gkhx" }, { "vulnerability": "VCID-e6zr-4bgg-kkh5" }, { "vulnerability": "VCID-ev4k-5k1d-2bhu" }, { "vulnerability": "VCID-fqkx-v8t5-q3h6" }, { "vulnerability": "VCID-fut7-bb1f-37g7" }, { "vulnerability": "VCID-jp1p-rfxa-hyd9" }, { "vulnerability": "VCID-k5t3-28es-h3ez" }, { "vulnerability": "VCID-khpm-e1xb-hydb" }, { "vulnerability": "VCID-n1gz-y615-cbbk" }, { "vulnerability": "VCID-nney-azbc-pucg" }, { "vulnerability": "VCID-p7gd-anw2-1qbz" }, { "vulnerability": "VCID-pmvp-twk2-jqe4" }, { "vulnerability": "VCID-qv14-m93d-jyd9" }, { "vulnerability": "VCID-rqrw-t2kj-mud8" }, { "vulnerability": "VCID-ru6w-m6q6-27gn" }, { "vulnerability": "VCID-sdsa-mh76-kqch" }, { "vulnerability": "VCID-tgyt-axv1-c7ag" }, { "vulnerability": "VCID-u259-2sxq-tbct" }, { "vulnerability": "VCID-vw2r-g8yy-eyf4" }, { "vulnerability": "VCID-x5x1-w7yv-eye9" }, { "vulnerability": "VCID-xw1s-93bu-wuh9" }, { "vulnerability": "VCID-y7ds-p5r2-yuhq" }, { "vulnerability": "VCID-zeut-9wfp-q7et" }, { "vulnerability": "VCID-zkvq-bms4-gfcv" }, { "vulnerability": "VCID-zmwv-gwq3-fkej" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.2" } ], "aliases": [ "GMS-2018-101" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-jq5y-7h9g-mufa" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/38806?format=api", "vulnerability_id": "VCID-jqe4-8hzb-mfea", "summary": "Arbitrary Code Execution\nDue to a missing file extension in the `fileDenyPattern`, backend user are allowed to upload *.pht files which can be executed in certain web server setups.", "references": [ { "reference_url": "https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-007/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-007/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/54049?format=api", "purl": "pkg:composer/typo3/cms@7.6.22", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3ugj-6m1e-e3hr" }, { "vulnerability": "VCID-953t-q1cr-zyd6" }, { "vulnerability": "VCID-abjx-8v46-d7d8" }, { "vulnerability": "VCID-dsqm-9q3e-dudw" }, { "vulnerability": "VCID-ev4k-5k1d-2bhu" }, { "vulnerability": "VCID-fdnw-2tz5-4fdr" }, { "vulnerability": "VCID-fqkx-v8t5-q3h6" }, { "vulnerability": "VCID-hp99-ncuh-6ugv" }, { "vulnerability": "VCID-jp1p-rfxa-hyd9" }, { "vulnerability": "VCID-jq5y-7h9g-mufa" }, { "vulnerability": "VCID-njsj-bwjq-fyap" }, { "vulnerability": "VCID-p7gd-anw2-1qbz" }, { "vulnerability": "VCID-tgyt-axv1-c7ag" }, { "vulnerability": "VCID-vq15-t92r-5bhx" }, { "vulnerability": "VCID-xw1s-93bu-wuh9" }, { "vulnerability": "VCID-yz6t-ge1y-qfgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.22" }, { "url": "http://public2.vulnerablecode.io/api/packages/54048?format=api", "purl": "pkg:composer/typo3/cms@8.7.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ffs-9vj5-27hk" }, { "vulnerability": "VCID-3ugj-6m1e-e3hr" }, { "vulnerability": "VCID-4eym-e6vt-8fbs" }, { "vulnerability": "VCID-7ch1-q9f4-a7bt" }, { "vulnerability": "VCID-7m6u-k5tp-gkhy" }, { "vulnerability": "VCID-848u-w88s-5bbe" }, { "vulnerability": "VCID-953t-q1cr-zyd6" }, { "vulnerability": "VCID-abjx-8v46-d7d8" }, { "vulnerability": "VCID-am6s-67bm-77dr" }, { "vulnerability": "VCID-bn3p-39sv-6fdg" }, { "vulnerability": "VCID-dsqm-9q3e-dudw" }, { "vulnerability": "VCID-emqq-kwjg-3kfk" }, { "vulnerability": "VCID-ev4k-5k1d-2bhu" }, { "vulnerability": "VCID-fdnw-2tz5-4fdr" }, { "vulnerability": "VCID-fqkx-v8t5-q3h6" }, { "vulnerability": "VCID-fut7-bb1f-37g7" }, { "vulnerability": "VCID-hp99-ncuh-6ugv" }, { "vulnerability": "VCID-je4q-svfw-hqda" }, { "vulnerability": "VCID-jp1p-rfxa-hyd9" }, { "vulnerability": "VCID-jq5y-7h9g-mufa" }, { "vulnerability": "VCID-k5t3-28es-h3ez" }, { "vulnerability": "VCID-khpm-e1xb-hydb" }, { "vulnerability": "VCID-njsj-bwjq-fyap" }, { "vulnerability": "VCID-nney-azbc-pucg" }, { "vulnerability": "VCID-p7gd-anw2-1qbz" }, { "vulnerability": "VCID-pmvp-twk2-jqe4" }, { "vulnerability": "VCID-qv14-m93d-jyd9" }, { "vulnerability": "VCID-qxab-9uwr-yqhv" }, { "vulnerability": "VCID-rqrw-t2kj-mud8" }, { "vulnerability": "VCID-ru6w-m6q6-27gn" }, { "vulnerability": "VCID-sdsa-mh76-kqch" }, { "vulnerability": "VCID-tgyt-axv1-c7ag" }, { "vulnerability": "VCID-u259-2sxq-tbct" }, { "vulnerability": "VCID-vq15-t92r-5bhx" }, { "vulnerability": "VCID-vw2r-g8yy-eyf4" }, { "vulnerability": "VCID-w1wb-mq2y-dfca" }, { "vulnerability": "VCID-x5x1-w7yv-eye9" }, { "vulnerability": "VCID-xw1s-93bu-wuh9" }, { "vulnerability": "VCID-y7ds-p5r2-yuhq" }, { "vulnerability": "VCID-yz6t-ge1y-qfgr" }, { "vulnerability": "VCID-zmwv-gwq3-fkej" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.5" } ], "aliases": [ "TYPO3-CORE-SA-2017-007" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-jqe4-8hzb-mfea" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/38810?format=api", "vulnerability_id": "VCID-mctp-nf36-7qdn", "summary": "Information Disclosure\nFailing to properly check user permission on file storages, editors could gain knowledge of protected storages and its folders as well as using them in a file collection being rendered in the frontend. A valid backend user account is needed to exploit this vulnerability.", "references": [ { "reference_url": "https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-005/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-005/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/54049?format=api", "purl": "pkg:composer/typo3/cms@7.6.22", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3ugj-6m1e-e3hr" }, { "vulnerability": "VCID-953t-q1cr-zyd6" }, { "vulnerability": "VCID-abjx-8v46-d7d8" }, { "vulnerability": "VCID-dsqm-9q3e-dudw" }, { "vulnerability": "VCID-ev4k-5k1d-2bhu" }, { "vulnerability": "VCID-fdnw-2tz5-4fdr" }, { "vulnerability": "VCID-fqkx-v8t5-q3h6" }, { "vulnerability": "VCID-hp99-ncuh-6ugv" }, { "vulnerability": "VCID-jp1p-rfxa-hyd9" }, { "vulnerability": "VCID-jq5y-7h9g-mufa" }, { "vulnerability": "VCID-njsj-bwjq-fyap" }, { "vulnerability": "VCID-p7gd-anw2-1qbz" }, { "vulnerability": "VCID-tgyt-axv1-c7ag" }, { "vulnerability": "VCID-vq15-t92r-5bhx" }, { "vulnerability": "VCID-xw1s-93bu-wuh9" }, { "vulnerability": "VCID-yz6t-ge1y-qfgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.22" }, { "url": "http://public2.vulnerablecode.io/api/packages/54048?format=api", "purl": "pkg:composer/typo3/cms@8.7.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ffs-9vj5-27hk" }, { "vulnerability": "VCID-3ugj-6m1e-e3hr" }, { "vulnerability": "VCID-4eym-e6vt-8fbs" }, { "vulnerability": "VCID-7ch1-q9f4-a7bt" }, { "vulnerability": "VCID-7m6u-k5tp-gkhy" }, { "vulnerability": "VCID-848u-w88s-5bbe" }, { "vulnerability": "VCID-953t-q1cr-zyd6" }, { "vulnerability": "VCID-abjx-8v46-d7d8" }, { "vulnerability": "VCID-am6s-67bm-77dr" }, { "vulnerability": "VCID-bn3p-39sv-6fdg" }, { "vulnerability": "VCID-dsqm-9q3e-dudw" }, { "vulnerability": "VCID-emqq-kwjg-3kfk" }, { "vulnerability": "VCID-ev4k-5k1d-2bhu" }, { "vulnerability": "VCID-fdnw-2tz5-4fdr" }, { "vulnerability": "VCID-fqkx-v8t5-q3h6" }, { "vulnerability": "VCID-fut7-bb1f-37g7" }, { "vulnerability": "VCID-hp99-ncuh-6ugv" }, { "vulnerability": "VCID-je4q-svfw-hqda" }, { "vulnerability": "VCID-jp1p-rfxa-hyd9" }, { "vulnerability": "VCID-jq5y-7h9g-mufa" }, { "vulnerability": "VCID-k5t3-28es-h3ez" }, { "vulnerability": "VCID-khpm-e1xb-hydb" }, { "vulnerability": "VCID-njsj-bwjq-fyap" }, { "vulnerability": "VCID-nney-azbc-pucg" }, { "vulnerability": "VCID-p7gd-anw2-1qbz" }, { "vulnerability": "VCID-pmvp-twk2-jqe4" }, { "vulnerability": "VCID-qv14-m93d-jyd9" }, { "vulnerability": "VCID-qxab-9uwr-yqhv" }, { "vulnerability": "VCID-rqrw-t2kj-mud8" }, { "vulnerability": "VCID-ru6w-m6q6-27gn" }, { "vulnerability": "VCID-sdsa-mh76-kqch" }, { "vulnerability": "VCID-tgyt-axv1-c7ag" }, { "vulnerability": "VCID-u259-2sxq-tbct" }, { "vulnerability": "VCID-vq15-t92r-5bhx" }, { "vulnerability": "VCID-vw2r-g8yy-eyf4" }, { "vulnerability": "VCID-w1wb-mq2y-dfca" }, { "vulnerability": "VCID-x5x1-w7yv-eye9" }, { "vulnerability": "VCID-xw1s-93bu-wuh9" }, { "vulnerability": "VCID-y7ds-p5r2-yuhq" }, { "vulnerability": "VCID-yz6t-ge1y-qfgr" }, { "vulnerability": "VCID-zmwv-gwq3-fkej" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.5" } ], "aliases": [ "TYPO3-CORE-SA-2017-005" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-mctp-nf36-7qdn" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40087?format=api", "vulnerability_id": "VCID-njsj-bwjq-fyap", "summary": "Insecure Deserialization & Arbitrary Code Execution in TYPO3 CMS.", "references": [ { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2018-002/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2018-002/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/56093?format=api", "purl": "pkg:composer/typo3/cms@7.6.30", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3ugj-6m1e-e3hr" }, { "vulnerability": "VCID-953t-q1cr-zyd6" }, { "vulnerability": "VCID-dsqm-9q3e-dudw" }, { "vulnerability": "VCID-ev4k-5k1d-2bhu" }, { "vulnerability": "VCID-fdnw-2tz5-4fdr" }, { "vulnerability": "VCID-fqkx-v8t5-q3h6" }, { "vulnerability": "VCID-hp99-ncuh-6ugv" }, { "vulnerability": "VCID-jp1p-rfxa-hyd9" }, { "vulnerability": "VCID-jq5y-7h9g-mufa" }, { "vulnerability": "VCID-p7gd-anw2-1qbz" }, { "vulnerability": "VCID-tgyt-axv1-c7ag" }, { "vulnerability": "VCID-xw1s-93bu-wuh9" }, { "vulnerability": "VCID-yz6t-ge1y-qfgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.30" }, { "url": "http://public2.vulnerablecode.io/api/packages/56094?format=api", "purl": "pkg:composer/typo3/cms@8.7.17", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ffs-9vj5-27hk" }, { "vulnerability": "VCID-3ugj-6m1e-e3hr" }, { "vulnerability": "VCID-4eym-e6vt-8fbs" }, { "vulnerability": "VCID-7ch1-q9f4-a7bt" }, { "vulnerability": "VCID-7m6u-k5tp-gkhy" }, { "vulnerability": "VCID-848u-w88s-5bbe" }, { "vulnerability": "VCID-953t-q1cr-zyd6" }, { "vulnerability": "VCID-am6s-67bm-77dr" }, { "vulnerability": "VCID-bn3p-39sv-6fdg" }, { "vulnerability": "VCID-dsqm-9q3e-dudw" }, { "vulnerability": "VCID-emqq-kwjg-3kfk" }, { "vulnerability": "VCID-ev4k-5k1d-2bhu" }, { "vulnerability": "VCID-fdnw-2tz5-4fdr" }, { "vulnerability": "VCID-fqkx-v8t5-q3h6" }, { "vulnerability": "VCID-fut7-bb1f-37g7" }, { "vulnerability": "VCID-hp99-ncuh-6ugv" }, { "vulnerability": "VCID-jp1p-rfxa-hyd9" }, { "vulnerability": "VCID-jq5y-7h9g-mufa" }, { "vulnerability": "VCID-k5t3-28es-h3ez" }, { "vulnerability": "VCID-khpm-e1xb-hydb" }, { "vulnerability": "VCID-nney-azbc-pucg" }, { "vulnerability": "VCID-p7gd-anw2-1qbz" }, { "vulnerability": "VCID-pmvp-twk2-jqe4" }, { "vulnerability": "VCID-qv14-m93d-jyd9" }, { "vulnerability": "VCID-qxab-9uwr-yqhv" }, { "vulnerability": "VCID-rqrw-t2kj-mud8" }, { "vulnerability": "VCID-ru6w-m6q6-27gn" }, { "vulnerability": "VCID-sdsa-mh76-kqch" }, { "vulnerability": "VCID-tgyt-axv1-c7ag" }, { "vulnerability": "VCID-u259-2sxq-tbct" }, { "vulnerability": "VCID-vw2r-g8yy-eyf4" }, { "vulnerability": "VCID-x5x1-w7yv-eye9" }, { "vulnerability": "VCID-xw1s-93bu-wuh9" }, { "vulnerability": "VCID-y7ds-p5r2-yuhq" }, { "vulnerability": "VCID-yz6t-ge1y-qfgr" }, { "vulnerability": "VCID-zmwv-gwq3-fkej" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.17" }, { "url": "http://public2.vulnerablecode.io/api/packages/56095?format=api", "purl": "pkg:composer/typo3/cms@9.3.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ffs-9vj5-27hk" }, { "vulnerability": "VCID-1sfk-z8py-ykb8" }, { "vulnerability": "VCID-3ugj-6m1e-e3hr" }, { "vulnerability": "VCID-3ye6-vqje-abh4" }, { "vulnerability": "VCID-4an7-9ph4-mkd4" }, { "vulnerability": "VCID-4eym-e6vt-8fbs" }, { "vulnerability": "VCID-4jck-w9ct-budk" }, { "vulnerability": "VCID-6mnf-2fcw-dqgp" }, { "vulnerability": "VCID-7ch1-q9f4-a7bt" }, { "vulnerability": "VCID-7m6u-k5tp-gkhy" }, { "vulnerability": "VCID-7xv1-78u7-xufp" }, { "vulnerability": "VCID-848u-w88s-5bbe" }, { "vulnerability": "VCID-8w4e-d49b-nbg8" }, { "vulnerability": "VCID-953t-q1cr-zyd6" }, { "vulnerability": "VCID-9adx-p876-kyb5" }, { "vulnerability": "VCID-am6s-67bm-77dr" }, { "vulnerability": "VCID-bbh5-rss8-bfct" }, { "vulnerability": "VCID-cvk2-93hm-gkhx" }, { "vulnerability": "VCID-dsqm-9q3e-dudw" }, { "vulnerability": "VCID-e6zr-4bgg-kkh5" }, { "vulnerability": "VCID-emqq-kwjg-3kfk" }, { "vulnerability": "VCID-ev4k-5k1d-2bhu" }, { "vulnerability": "VCID-fqkx-v8t5-q3h6" }, { "vulnerability": "VCID-fut7-bb1f-37g7" }, { "vulnerability": "VCID-hp99-ncuh-6ugv" }, { "vulnerability": "VCID-jp1p-rfxa-hyd9" }, { "vulnerability": "VCID-jq5y-7h9g-mufa" }, { "vulnerability": "VCID-k5t3-28es-h3ez" }, { "vulnerability": "VCID-khpm-e1xb-hydb" }, { "vulnerability": "VCID-n1gz-y615-cbbk" }, { "vulnerability": "VCID-nney-azbc-pucg" }, { "vulnerability": "VCID-p7gd-anw2-1qbz" }, { "vulnerability": "VCID-pmvp-twk2-jqe4" }, { "vulnerability": "VCID-qv14-m93d-jyd9" }, { "vulnerability": "VCID-qxab-9uwr-yqhv" }, { "vulnerability": "VCID-rqrw-t2kj-mud8" }, { "vulnerability": "VCID-ru6w-m6q6-27gn" }, { "vulnerability": "VCID-sdsa-mh76-kqch" }, { "vulnerability": "VCID-tgyt-axv1-c7ag" }, { "vulnerability": "VCID-u259-2sxq-tbct" }, { "vulnerability": "VCID-vw2r-g8yy-eyf4" }, { "vulnerability": "VCID-x5x1-w7yv-eye9" }, { "vulnerability": "VCID-xw1s-93bu-wuh9" }, { "vulnerability": "VCID-y7ds-p5r2-yuhq" }, { "vulnerability": "VCID-yz6t-ge1y-qfgr" }, { "vulnerability": "VCID-zeut-9wfp-q7et" }, { "vulnerability": "VCID-zkvq-bms4-gfcv" }, { "vulnerability": "VCID-zmwv-gwq3-fkej" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.3.2" } ], "aliases": [ "GMS-2018-94" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-njsj-bwjq-fyap" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/52113?format=api", "vulnerability_id": "VCID-p7gd-anw2-1qbz", "summary": "Deserialization of Untrusted Data\nIt has been discovered that the classes `QueryGenerator` and `QueryView` are vulnerable to insecure deserialization. One exploitable scenario requires having the system extension `ext:lowlevel` (Backend Module `DB Check`) installed, with a valid backend user who has administrator privileges. The other exploitable scenario requires having the system extension `ext:sys_action` installed, with a valid backend user who has limited privileges.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-19849", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00746", "scoring_system": "epss", "scoring_elements": "0.7342", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-19849" }, { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2019-19849.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2019-19849.yaml" }, { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2019-19849.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2019-19849.yaml" }, { "reference_url": "https://review.typo3.org/q/%2522Resolves:+%252389005%2522+topic:security", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://review.typo3.org/q/%2522Resolves:+%252389005%2522+topic:security" }, { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2019-026", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://typo3.org/security/advisory/typo3-core-sa-2019-026" }, { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2019-026/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2019-026/" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19849", "reference_id": "CVE-2019-19849", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19849" }, { "reference_url": "https://github.com/advisories/GHSA-rcgc-4xfc-564v", "reference_id": "GHSA-rcgc-4xfc-564v", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-rcgc-4xfc-564v" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/76375?format=api", "purl": "pkg:composer/typo3/cms@8.7.30", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ffs-9vj5-27hk" }, { "vulnerability": "VCID-848u-w88s-5bbe" }, { "vulnerability": "VCID-ev4k-5k1d-2bhu" }, { "vulnerability": "VCID-fqkx-v8t5-q3h6" }, { "vulnerability": "VCID-jp1p-rfxa-hyd9" }, { "vulnerability": "VCID-tgyt-axv1-c7ag" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.30" }, { "url": "http://public2.vulnerablecode.io/api/packages/76376?format=api", "purl": "pkg:composer/typo3/cms@9.5.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ffs-9vj5-27hk" }, { "vulnerability": "VCID-1sfk-z8py-ykb8" }, { "vulnerability": "VCID-4an7-9ph4-mkd4" }, { "vulnerability": "VCID-6mnf-2fcw-dqgp" }, { "vulnerability": "VCID-848u-w88s-5bbe" }, { "vulnerability": "VCID-8w4e-d49b-nbg8" }, { "vulnerability": "VCID-bbh5-rss8-bfct" }, { "vulnerability": "VCID-bcbd-zzet-mff6" }, { "vulnerability": "VCID-e6zr-4bgg-kkh5" }, { "vulnerability": "VCID-ev4k-5k1d-2bhu" }, { "vulnerability": "VCID-fqkx-v8t5-q3h6" }, { "vulnerability": "VCID-jp1p-rfxa-hyd9" }, { "vulnerability": "VCID-n1gz-y615-cbbk" }, { "vulnerability": "VCID-tgyt-axv1-c7ag" }, { "vulnerability": "VCID-zkvq-bms4-gfcv" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/81802?format=api", "purl": "pkg:composer/typo3/cms@10.2.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ffs-9vj5-27hk" }, { "vulnerability": "VCID-1sfk-z8py-ykb8" }, { "vulnerability": "VCID-2tz2-8qdm-2kcv" }, { "vulnerability": "VCID-4an7-9ph4-mkd4" }, { "vulnerability": "VCID-6mnf-2fcw-dqgp" }, { "vulnerability": "VCID-6urp-p9mn-cffv" }, { "vulnerability": "VCID-848u-w88s-5bbe" }, { "vulnerability": "VCID-8w4e-d49b-nbg8" }, { "vulnerability": "VCID-bbh5-rss8-bfct" }, { "vulnerability": "VCID-bcbd-zzet-mff6" }, { "vulnerability": "VCID-c46m-ht19-ybc4" }, { "vulnerability": "VCID-e6zr-4bgg-kkh5" }, { "vulnerability": "VCID-ev4k-5k1d-2bhu" }, { "vulnerability": "VCID-fqkx-v8t5-q3h6" }, { "vulnerability": "VCID-jp1p-rfxa-hyd9" }, { "vulnerability": "VCID-n1gz-y615-cbbk" }, { "vulnerability": "VCID-r3az-g422-gqf9" }, { "vulnerability": "VCID-tgyt-axv1-c7ag" }, { "vulnerability": "VCID-zkvq-bms4-gfcv" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@10.2.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/76377?format=api", "purl": "pkg:composer/typo3/cms@10.2.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ffs-9vj5-27hk" }, { "vulnerability": "VCID-1sfk-z8py-ykb8" }, { "vulnerability": "VCID-2tz2-8qdm-2kcv" }, { "vulnerability": "VCID-4an7-9ph4-mkd4" }, { "vulnerability": "VCID-6mnf-2fcw-dqgp" }, { "vulnerability": "VCID-6urp-p9mn-cffv" }, { "vulnerability": "VCID-848u-w88s-5bbe" }, { "vulnerability": "VCID-8w4e-d49b-nbg8" }, { "vulnerability": "VCID-bbh5-rss8-bfct" }, { "vulnerability": "VCID-bcbd-zzet-mff6" }, { "vulnerability": "VCID-c46m-ht19-ybc4" }, { "vulnerability": "VCID-e6zr-4bgg-kkh5" }, { "vulnerability": "VCID-ev4k-5k1d-2bhu" }, { "vulnerability": "VCID-fqkx-v8t5-q3h6" }, { "vulnerability": "VCID-jp1p-rfxa-hyd9" }, { "vulnerability": "VCID-n1gz-y615-cbbk" }, { "vulnerability": "VCID-r3az-g422-gqf9" }, { "vulnerability": "VCID-tgyt-axv1-c7ag" }, { "vulnerability": "VCID-zkvq-bms4-gfcv" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@10.2.2" } ], "aliases": [ "CVE-2019-19849", "GHSA-rcgc-4xfc-564v" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-p7gd-anw2-1qbz" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/38809?format=api", "vulnerability_id": "VCID-sy7r-d6pv-yba9", "summary": "Code Injection\nArbitrary Code Execution in TYPO3 CMS.", "references": [ { "reference_url": "https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-007/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-007/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/54049?format=api", "purl": "pkg:composer/typo3/cms@7.6.22", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3ugj-6m1e-e3hr" }, { "vulnerability": "VCID-953t-q1cr-zyd6" }, { "vulnerability": "VCID-abjx-8v46-d7d8" }, { "vulnerability": "VCID-dsqm-9q3e-dudw" }, { "vulnerability": "VCID-ev4k-5k1d-2bhu" }, { "vulnerability": "VCID-fdnw-2tz5-4fdr" }, { "vulnerability": "VCID-fqkx-v8t5-q3h6" }, { "vulnerability": "VCID-hp99-ncuh-6ugv" }, { "vulnerability": "VCID-jp1p-rfxa-hyd9" }, { "vulnerability": "VCID-jq5y-7h9g-mufa" }, { "vulnerability": "VCID-njsj-bwjq-fyap" }, { "vulnerability": "VCID-p7gd-anw2-1qbz" }, { "vulnerability": "VCID-tgyt-axv1-c7ag" }, { "vulnerability": "VCID-vq15-t92r-5bhx" }, { "vulnerability": "VCID-xw1s-93bu-wuh9" }, { "vulnerability": "VCID-yz6t-ge1y-qfgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.22" }, { "url": "http://public2.vulnerablecode.io/api/packages/54050?format=api", "purl": "pkg:composer/typo3/cms@8.7.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ffs-9vj5-27hk" }, { "vulnerability": "VCID-3ugj-6m1e-e3hr" }, { "vulnerability": "VCID-4eym-e6vt-8fbs" }, { "vulnerability": "VCID-6a22-c7x5-sqe2" }, { "vulnerability": "VCID-7ch1-q9f4-a7bt" }, { "vulnerability": "VCID-7m6u-k5tp-gkhy" }, { "vulnerability": "VCID-848u-w88s-5bbe" }, { "vulnerability": "VCID-953t-q1cr-zyd6" }, { "vulnerability": "VCID-abjx-8v46-d7d8" }, { "vulnerability": "VCID-am6s-67bm-77dr" }, { "vulnerability": "VCID-bn3p-39sv-6fdg" }, { "vulnerability": "VCID-dsqm-9q3e-dudw" }, { "vulnerability": "VCID-e564-zdku-9fc6" }, { "vulnerability": "VCID-emqq-kwjg-3kfk" }, { "vulnerability": "VCID-ev4k-5k1d-2bhu" }, { "vulnerability": "VCID-fdnw-2tz5-4fdr" }, { "vulnerability": "VCID-fqkx-v8t5-q3h6" }, { "vulnerability": "VCID-fut7-bb1f-37g7" }, { "vulnerability": "VCID-h7cg-64er-uya9" }, { "vulnerability": "VCID-hp99-ncuh-6ugv" }, { "vulnerability": "VCID-je4q-svfw-hqda" }, { "vulnerability": "VCID-jp1p-rfxa-hyd9" }, { "vulnerability": "VCID-jq5y-7h9g-mufa" }, { "vulnerability": "VCID-jqe4-8hzb-mfea" }, { "vulnerability": "VCID-k5t3-28es-h3ez" }, { "vulnerability": "VCID-khpm-e1xb-hydb" }, { "vulnerability": "VCID-mctp-nf36-7qdn" }, { "vulnerability": "VCID-njsj-bwjq-fyap" }, { "vulnerability": "VCID-nney-azbc-pucg" }, { "vulnerability": "VCID-p7gd-anw2-1qbz" }, { "vulnerability": "VCID-pmvp-twk2-jqe4" }, { "vulnerability": "VCID-qv14-m93d-jyd9" }, { "vulnerability": "VCID-qxab-9uwr-yqhv" }, { "vulnerability": "VCID-rqrw-t2kj-mud8" }, { "vulnerability": "VCID-ru6w-m6q6-27gn" }, { "vulnerability": "VCID-sdsa-mh76-kqch" }, { "vulnerability": "VCID-tgyt-axv1-c7ag" }, { "vulnerability": "VCID-u259-2sxq-tbct" }, { "vulnerability": "VCID-vq15-t92r-5bhx" }, { "vulnerability": "VCID-vw2r-g8yy-eyf4" }, { "vulnerability": "VCID-w1wb-mq2y-dfca" }, { "vulnerability": "VCID-wy45-2gmr-fkfg" }, { "vulnerability": "VCID-x5x1-w7yv-eye9" }, { "vulnerability": "VCID-xw1s-93bu-wuh9" }, { "vulnerability": "VCID-y7ds-p5r2-yuhq" }, { "vulnerability": "VCID-yz6t-ge1y-qfgr" }, { "vulnerability": "VCID-zmwv-gwq3-fkej" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.0" } ], "aliases": [ "GMS-2017-353" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-sy7r-d6pv-yba9" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/53815?format=api", "vulnerability_id": "VCID-tgyt-axv1-c7ag", "summary": "Cross-site Scripting\nTYPO3 is an open source PHP based web content management system. In TYPO3 the system extension Fluid (typo3/cms-fluid) of the TYPO3 core is vulnerable to cross-site scripting passing user-controlled data as argument to Fluid view helpers. Update to TYPO3 that fix the problem described.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-26227", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00359", "scoring_system": "epss", "scoring_elements": "0.5838", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-26227" }, { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2020-26227.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2020-26227.yaml" }, { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2020-26227.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2020-26227.yaml" }, { "reference_url": "https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-vqqx-jw6p-q3rf", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-vqqx-jw6p-q3rf" }, { "reference_url": "https://packagist.org/packages/typo3/cms-core", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://packagist.org/packages/typo3/cms-core" }, { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2020-010", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://typo3.org/security/advisory/typo3-core-sa-2020-010" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-26227", "reference_id": "CVE-2020-26227", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-26227" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/52638?format=api", "purl": "pkg:composer/typo3/cms@8.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-11sw-6x9k-vued" }, { "vulnerability": "VCID-11u3-8xzy-jfhh" }, { "vulnerability": "VCID-1ffs-9vj5-27hk" }, { "vulnerability": "VCID-28fn-ncj5-2ufk" }, { "vulnerability": "VCID-2r7u-mc45-8yhe" }, { "vulnerability": "VCID-2rhr-8vaz-hqfj" }, { "vulnerability": "VCID-2rmv-a83x-9ka8" }, { "vulnerability": "VCID-2vpx-fqb6-aqfa" }, { "vulnerability": "VCID-39jx-muqb-nkfq" }, { "vulnerability": "VCID-39vn-73mc-jqav" }, { "vulnerability": "VCID-3ugj-6m1e-e3hr" }, { "vulnerability": "VCID-4eym-e6vt-8fbs" }, { "vulnerability": "VCID-4wnp-gusy-43b8" }, { "vulnerability": "VCID-5dxs-cdht-27hw" }, { "vulnerability": "VCID-5k47-9k7t-rqak" }, { "vulnerability": "VCID-5u2f-5zzf-j3e4" }, { "vulnerability": "VCID-66kh-c1dm-8fbf" }, { "vulnerability": "VCID-66ru-n2df-b3ay" }, { "vulnerability": "VCID-6su8-bbrw-hbhp" }, { "vulnerability": "VCID-727q-h3ey-6yc9" }, { "vulnerability": "VCID-7ch1-q9f4-a7bt" }, { "vulnerability": "VCID-7m6u-k5tp-gkhy" }, { "vulnerability": "VCID-848u-w88s-5bbe" }, { "vulnerability": "VCID-8p64-6zpt-t3av" }, { "vulnerability": "VCID-94r9-hh4g-jkej" }, { "vulnerability": "VCID-953t-q1cr-zyd6" }, { "vulnerability": "VCID-9726-hafj-wkay" }, { "vulnerability": "VCID-9saf-w56y-pugz" }, { "vulnerability": "VCID-9yu1-z7c2-t3fj" }, { "vulnerability": "VCID-abjx-8v46-d7d8" }, { "vulnerability": "VCID-am6s-67bm-77dr" }, { "vulnerability": "VCID-bn3p-39sv-6fdg" }, { "vulnerability": "VCID-bq2j-t19h-zyad" }, { "vulnerability": "VCID-bstt-ybrs-5ua3" }, { "vulnerability": "VCID-buj5-2t53-3kcr" }, { "vulnerability": "VCID-cbmm-1b2k-8qaz" }, { "vulnerability": "VCID-d6c2-upx1-e7cd" }, { "vulnerability": "VCID-dsqm-9q3e-dudw" }, { "vulnerability": "VCID-e564-zdku-9fc6" }, { "vulnerability": "VCID-emqq-kwjg-3kfk" }, { "vulnerability": "VCID-eutz-mj58-audb" }, { "vulnerability": "VCID-ev4k-5k1d-2bhu" }, { "vulnerability": "VCID-f319-jpf5-hyex" }, { "vulnerability": "VCID-fdnw-2tz5-4fdr" }, { "vulnerability": "VCID-fgqa-5fx9-nkaz" }, { "vulnerability": "VCID-fh61-7rfy-s3hg" }, { "vulnerability": "VCID-fqkc-utex-3kav" }, { "vulnerability": "VCID-fqkx-v8t5-q3h6" }, { "vulnerability": "VCID-fut7-bb1f-37g7" }, { "vulnerability": "VCID-g7mm-vjbw-bbhd" }, { "vulnerability": "VCID-gk79-jtuz-myh6" }, { "vulnerability": "VCID-gpv4-4tpd-tbaa" }, { "vulnerability": "VCID-h217-xe8x-nua3" }, { "vulnerability": "VCID-h7cg-64er-uya9" }, { "vulnerability": "VCID-h7hf-sf2q-73ay" }, { "vulnerability": "VCID-hp99-ncuh-6ugv" }, { "vulnerability": "VCID-hsw8-nbs6-auaa" }, { "vulnerability": "VCID-hyx9-8ae6-sba8" }, { "vulnerability": "VCID-hzma-cduk-3uhp" }, { "vulnerability": "VCID-j8hk-bqnb-gycp" }, { "vulnerability": "VCID-j8sh-5evd-dkaz" }, { "vulnerability": "VCID-jeqr-9tfu-f7b2" }, { "vulnerability": "VCID-jf28-91be-6kbr" }, { "vulnerability": "VCID-jmea-qzsr-wkf4" }, { "vulnerability": "VCID-jn38-wfec-7bb2" }, { "vulnerability": "VCID-jp1p-rfxa-hyd9" }, { "vulnerability": "VCID-jq5y-7h9g-mufa" }, { "vulnerability": "VCID-jqe4-8hzb-mfea" }, { "vulnerability": "VCID-jwb1-3sbg-kfa5" }, { "vulnerability": "VCID-k5t3-28es-h3ez" }, { "vulnerability": "VCID-khpm-e1xb-hydb" }, { "vulnerability": "VCID-ks1q-a8x2-uqht" }, { "vulnerability": "VCID-m3nc-xbb4-yubr" }, { "vulnerability": "VCID-mctp-nf36-7qdn" }, { "vulnerability": "VCID-nhjv-nke2-2kf8" }, { "vulnerability": "VCID-njsj-bwjq-fyap" }, { "vulnerability": "VCID-nney-azbc-pucg" }, { "vulnerability": "VCID-nvbp-pbjw-3qgx" }, { "vulnerability": "VCID-p576-w7dd-p3h7" }, { "vulnerability": "VCID-p7gd-anw2-1qbz" }, { "vulnerability": "VCID-pmvp-twk2-jqe4" }, { "vulnerability": "VCID-q2ym-y2rz-1bdn" }, { "vulnerability": "VCID-q52p-xfj8-gygd" }, { "vulnerability": "VCID-q7vt-19eb-sqeq" }, { "vulnerability": "VCID-qcnh-z4zh-myaw" }, { "vulnerability": "VCID-qdxh-arxx-wbcr" }, { "vulnerability": "VCID-qv14-m93d-jyd9" }, { "vulnerability": "VCID-qxab-9uwr-yqhv" }, { "vulnerability": "VCID-rqrw-t2kj-mud8" }, { "vulnerability": "VCID-ru6w-m6q6-27gn" }, { "vulnerability": "VCID-sdjb-gp4t-vbgt" }, { "vulnerability": "VCID-sdsa-mh76-kqch" }, { "vulnerability": "VCID-sdz8-hju8-4bcb" }, { "vulnerability": "VCID-sy7r-d6pv-yba9" }, { "vulnerability": "VCID-teby-zvvw-zkhv" }, { "vulnerability": "VCID-tzpj-j3x1-ekgk" }, { "vulnerability": "VCID-u259-2sxq-tbct" }, { "vulnerability": "VCID-u4tq-8qnk-5fd7" }, { "vulnerability": "VCID-u5he-6tqb-gqaf" }, { "vulnerability": "VCID-u6as-cwxc-pkhk" }, { "vulnerability": "VCID-uq77-aax5-k7d8" }, { "vulnerability": "VCID-vq15-t92r-5bhx" }, { "vulnerability": "VCID-vw2r-g8yy-eyf4" }, { "vulnerability": "VCID-w483-prq4-rycx" }, { "vulnerability": "VCID-w58p-3wg1-7ycr" }, { "vulnerability": "VCID-wat8-4m83-hken" }, { "vulnerability": "VCID-wy45-2gmr-fkfg" }, { "vulnerability": "VCID-x175-xjek-97ds" }, { "vulnerability": "VCID-x5x1-w7yv-eye9" }, { "vulnerability": "VCID-xh68-defe-f7ce" }, { "vulnerability": "VCID-xpxg-qq49-b7fd" }, { "vulnerability": "VCID-xvyu-2hb8-8ufh" }, { "vulnerability": "VCID-xw1s-93bu-wuh9" }, { "vulnerability": "VCID-y7ds-p5r2-yuhq" }, { "vulnerability": "VCID-ygw4-jdqu-4fbt" }, { "vulnerability": "VCID-yh6b-tc4u-v3bk" }, { "vulnerability": "VCID-yn6z-9v7k-x7br" }, { "vulnerability": "VCID-yz6t-ge1y-qfgr" }, { "vulnerability": "VCID-zgfw-pk39-gyg8" }, { "vulnerability": "VCID-zmwv-gwq3-fkej" }, { "vulnerability": "VCID-zrz3-3dnf-tbay" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/140218?format=api", "purl": "pkg:composer/typo3/cms@8.7.38", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.38" }, { "url": "http://public2.vulnerablecode.io/api/packages/79196?format=api", "purl": "pkg:composer/typo3/cms@9.5.23", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ffs-9vj5-27hk" }, { "vulnerability": "VCID-6mnf-2fcw-dqgp" }, { "vulnerability": "VCID-848u-w88s-5bbe" }, { "vulnerability": "VCID-ev4k-5k1d-2bhu" }, { "vulnerability": "VCID-fqkx-v8t5-q3h6" }, { "vulnerability": "VCID-jp1p-rfxa-hyd9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.23" }, { "url": "http://public2.vulnerablecode.io/api/packages/79197?format=api", "purl": "pkg:composer/typo3/cms@10.4.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ffs-9vj5-27hk" }, { "vulnerability": "VCID-6mnf-2fcw-dqgp" }, { "vulnerability": "VCID-6urp-p9mn-cffv" }, { "vulnerability": "VCID-848u-w88s-5bbe" }, { "vulnerability": "VCID-c46m-ht19-ybc4" }, { "vulnerability": "VCID-ev4k-5k1d-2bhu" }, { "vulnerability": "VCID-fqkx-v8t5-q3h6" }, { "vulnerability": "VCID-jp1p-rfxa-hyd9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@10.4.10" } ], "aliases": [ "CVE-2020-26227", "GHSA-vqqx-jw6p-q3rf" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-tgyt-axv1-c7ag" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/39555?format=api", "vulnerability_id": "VCID-vq15-t92r-5bhx", "summary": "Cross-site Scripting\nThe page module in TYPO3 is vulnerable to XSS via `$GLOBALS['TYPO3_CONF_VARS']['SYS']['sitename']`, as demonstrated by an admin entering a crafted site name during the installation process.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-6905", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.02274", "scoring_system": "epss", "scoring_elements": "0.8496", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-6905" }, { "reference_url": "https://forge.typo3.org/issues/84191", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://forge.typo3.org/issues/84191" }, { "reference_url": "https://github.com/pradeepjairamani/TYPO3-XSS-POC", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pradeepjairamani/TYPO3-XSS-POC" }, { "reference_url": "https://github.com/TYPO3/typo3/commit/d2c0ea7db3b31a796a82f9d39f77f9983beb7c35", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3/typo3/commit/d2c0ea7db3b31a796a82f9d39f77f9983beb7c35" }, { "reference_url": "http://www.securitytracker.com/id/1040755", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.securitytracker.com/id/1040755" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-6905", "reference_id": "CVE-2018-6905", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-6905" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/55353?format=api", "purl": "pkg:composer/typo3/cms@8.7.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ffs-9vj5-27hk" }, { "vulnerability": "VCID-3ugj-6m1e-e3hr" }, { "vulnerability": "VCID-4eym-e6vt-8fbs" }, { "vulnerability": "VCID-7ch1-q9f4-a7bt" }, { "vulnerability": "VCID-7m6u-k5tp-gkhy" }, { "vulnerability": "VCID-848u-w88s-5bbe" }, { "vulnerability": "VCID-953t-q1cr-zyd6" }, { "vulnerability": "VCID-abjx-8v46-d7d8" }, { "vulnerability": "VCID-am6s-67bm-77dr" }, { "vulnerability": "VCID-bn3p-39sv-6fdg" }, { "vulnerability": "VCID-dsqm-9q3e-dudw" }, { "vulnerability": "VCID-emqq-kwjg-3kfk" }, { "vulnerability": "VCID-ev4k-5k1d-2bhu" }, { "vulnerability": "VCID-fdnw-2tz5-4fdr" }, { "vulnerability": "VCID-fqkx-v8t5-q3h6" }, { "vulnerability": "VCID-fut7-bb1f-37g7" }, { "vulnerability": "VCID-hp99-ncuh-6ugv" }, { "vulnerability": "VCID-je4q-svfw-hqda" }, { "vulnerability": "VCID-jp1p-rfxa-hyd9" }, { "vulnerability": "VCID-jq5y-7h9g-mufa" }, { "vulnerability": "VCID-k5t3-28es-h3ez" }, { "vulnerability": "VCID-khpm-e1xb-hydb" }, { "vulnerability": "VCID-njsj-bwjq-fyap" }, { "vulnerability": "VCID-nney-azbc-pucg" }, { "vulnerability": "VCID-p7gd-anw2-1qbz" }, { "vulnerability": "VCID-pmvp-twk2-jqe4" }, { "vulnerability": "VCID-qv14-m93d-jyd9" }, { "vulnerability": "VCID-qxab-9uwr-yqhv" }, { "vulnerability": "VCID-rqrw-t2kj-mud8" }, { "vulnerability": "VCID-ru6w-m6q6-27gn" }, { "vulnerability": "VCID-sdsa-mh76-kqch" }, { "vulnerability": "VCID-tgyt-axv1-c7ag" }, { "vulnerability": "VCID-u259-2sxq-tbct" }, { "vulnerability": "VCID-vw2r-g8yy-eyf4" }, { "vulnerability": "VCID-w1wb-mq2y-dfca" }, { "vulnerability": "VCID-x5x1-w7yv-eye9" }, { "vulnerability": "VCID-xw1s-93bu-wuh9" }, { "vulnerability": "VCID-y7ds-p5r2-yuhq" }, { "vulnerability": "VCID-yz6t-ge1y-qfgr" }, { "vulnerability": "VCID-zmwv-gwq3-fkej" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/55354?format=api", "purl": "pkg:composer/typo3/cms@9.1.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ffs-9vj5-27hk" }, { "vulnerability": "VCID-1sfk-z8py-ykb8" }, { "vulnerability": "VCID-3ugj-6m1e-e3hr" }, { "vulnerability": "VCID-3ye6-vqje-abh4" }, { "vulnerability": "VCID-4an7-9ph4-mkd4" }, { "vulnerability": "VCID-4eym-e6vt-8fbs" }, { "vulnerability": "VCID-4jck-w9ct-budk" }, { "vulnerability": "VCID-6mnf-2fcw-dqgp" }, { "vulnerability": "VCID-7ch1-q9f4-a7bt" }, { "vulnerability": "VCID-7m6u-k5tp-gkhy" }, { "vulnerability": "VCID-7xv1-78u7-xufp" }, { "vulnerability": "VCID-848u-w88s-5bbe" }, { "vulnerability": "VCID-8w4e-d49b-nbg8" }, { "vulnerability": "VCID-953t-q1cr-zyd6" }, { "vulnerability": "VCID-9adx-p876-kyb5" }, { "vulnerability": "VCID-abjx-8v46-d7d8" }, { "vulnerability": "VCID-am6s-67bm-77dr" }, { "vulnerability": "VCID-bbh5-rss8-bfct" }, { "vulnerability": "VCID-cvk2-93hm-gkhx" }, { "vulnerability": "VCID-dsqm-9q3e-dudw" }, { "vulnerability": "VCID-e6zr-4bgg-kkh5" }, { "vulnerability": "VCID-emqq-kwjg-3kfk" }, { "vulnerability": "VCID-ev4k-5k1d-2bhu" }, { "vulnerability": "VCID-fqkx-v8t5-q3h6" }, { "vulnerability": "VCID-fut7-bb1f-37g7" }, { "vulnerability": "VCID-hp99-ncuh-6ugv" }, { "vulnerability": "VCID-je4q-svfw-hqda" }, { "vulnerability": "VCID-jp1p-rfxa-hyd9" }, { "vulnerability": "VCID-jq5y-7h9g-mufa" }, { "vulnerability": "VCID-k5t3-28es-h3ez" }, { "vulnerability": "VCID-khpm-e1xb-hydb" }, { "vulnerability": "VCID-n1gz-y615-cbbk" }, { "vulnerability": "VCID-njsj-bwjq-fyap" }, { "vulnerability": "VCID-nney-azbc-pucg" }, { "vulnerability": "VCID-p7gd-anw2-1qbz" }, { "vulnerability": "VCID-pmvp-twk2-jqe4" }, { "vulnerability": "VCID-qv14-m93d-jyd9" }, { "vulnerability": "VCID-qxab-9uwr-yqhv" }, { "vulnerability": "VCID-rqrw-t2kj-mud8" }, { "vulnerability": "VCID-ru6w-m6q6-27gn" }, { "vulnerability": "VCID-sdsa-mh76-kqch" }, { "vulnerability": "VCID-tgyt-axv1-c7ag" }, { "vulnerability": "VCID-u259-2sxq-tbct" }, { "vulnerability": "VCID-vw2r-g8yy-eyf4" }, { "vulnerability": "VCID-w1wb-mq2y-dfca" }, { "vulnerability": "VCID-x5x1-w7yv-eye9" }, { "vulnerability": "VCID-xw1s-93bu-wuh9" }, { "vulnerability": "VCID-y7ds-p5r2-yuhq" }, { "vulnerability": "VCID-yz6t-ge1y-qfgr" }, { "vulnerability": "VCID-zeut-9wfp-q7et" }, { "vulnerability": "VCID-zkvq-bms4-gfcv" }, { "vulnerability": "VCID-zmwv-gwq3-fkej" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.1.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/155544?format=api", "purl": "pkg:composer/typo3/cms@9.2.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ffs-9vj5-27hk" }, { "vulnerability": "VCID-1sfk-z8py-ykb8" }, { "vulnerability": "VCID-3ugj-6m1e-e3hr" }, { "vulnerability": "VCID-3ye6-vqje-abh4" }, { "vulnerability": "VCID-4an7-9ph4-mkd4" }, { "vulnerability": "VCID-4eym-e6vt-8fbs" }, { "vulnerability": "VCID-4jck-w9ct-budk" }, { "vulnerability": "VCID-6mnf-2fcw-dqgp" }, { "vulnerability": "VCID-7ch1-q9f4-a7bt" }, { "vulnerability": "VCID-7m6u-k5tp-gkhy" }, { "vulnerability": "VCID-7xv1-78u7-xufp" }, { "vulnerability": "VCID-848u-w88s-5bbe" }, { "vulnerability": "VCID-8w4e-d49b-nbg8" }, { "vulnerability": "VCID-953t-q1cr-zyd6" }, { "vulnerability": "VCID-9adx-p876-kyb5" }, { "vulnerability": "VCID-abjx-8v46-d7d8" }, { "vulnerability": "VCID-am6s-67bm-77dr" }, { "vulnerability": "VCID-bbh5-rss8-bfct" }, { "vulnerability": "VCID-cvk2-93hm-gkhx" }, { "vulnerability": "VCID-dsqm-9q3e-dudw" }, { "vulnerability": "VCID-e6zr-4bgg-kkh5" }, { "vulnerability": "VCID-emqq-kwjg-3kfk" }, { "vulnerability": "VCID-ev4k-5k1d-2bhu" }, { "vulnerability": "VCID-fqkx-v8t5-q3h6" }, { "vulnerability": "VCID-fut7-bb1f-37g7" }, { "vulnerability": "VCID-hp99-ncuh-6ugv" }, { "vulnerability": "VCID-je4q-svfw-hqda" }, { "vulnerability": "VCID-jp1p-rfxa-hyd9" }, { "vulnerability": "VCID-jq5y-7h9g-mufa" }, { "vulnerability": "VCID-k5t3-28es-h3ez" }, { "vulnerability": "VCID-khpm-e1xb-hydb" }, { "vulnerability": "VCID-n1gz-y615-cbbk" }, { "vulnerability": "VCID-njsj-bwjq-fyap" }, { "vulnerability": "VCID-nney-azbc-pucg" }, { "vulnerability": "VCID-p7gd-anw2-1qbz" }, { "vulnerability": "VCID-pmvp-twk2-jqe4" }, { "vulnerability": "VCID-qv14-m93d-jyd9" }, { "vulnerability": "VCID-qxab-9uwr-yqhv" }, { "vulnerability": "VCID-rqrw-t2kj-mud8" }, { "vulnerability": "VCID-ru6w-m6q6-27gn" }, { "vulnerability": "VCID-sdsa-mh76-kqch" }, { "vulnerability": "VCID-tgyt-axv1-c7ag" }, { "vulnerability": "VCID-u259-2sxq-tbct" }, { "vulnerability": "VCID-vw2r-g8yy-eyf4" }, { "vulnerability": "VCID-w1wb-mq2y-dfca" }, { "vulnerability": "VCID-x5x1-w7yv-eye9" }, { "vulnerability": "VCID-xw1s-93bu-wuh9" }, { "vulnerability": "VCID-y7ds-p5r2-yuhq" }, { "vulnerability": "VCID-yz6t-ge1y-qfgr" }, { "vulnerability": "VCID-zeut-9wfp-q7et" }, { "vulnerability": "VCID-zkvq-bms4-gfcv" }, { "vulnerability": "VCID-zmwv-gwq3-fkej" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.2.0" } ], "aliases": [ "CVE-2018-6905", "GHSA-3w22-wrwx-2r75" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-vq15-t92r-5bhx" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/52106?format=api", "vulnerability_id": "VCID-xw1s-93bu-wuh9", "summary": "Path Traversal\nIt has been discovered that the extraction of manually uploaded ZIP archives in Extension Manager is vulnerable to directory traversal. Admin privileges are required in order to exploit this vulnerability.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-19848", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00374", "scoring_system": "epss", "scoring_elements": "0.59393", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-19848" }, { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2019-19848.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2019-19848.yaml" }, { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2019-19848.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2019-19848.yaml" }, { "reference_url": "https://review.typo3.org/q/%2522Resolves:+%252388764%2522+topic:security", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://review.typo3.org/q/%2522Resolves:+%252388764%2522+topic:security" }, { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2019-024", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://typo3.org/security/advisory/typo3-core-sa-2019-024" }, { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2019-024/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2019-024/" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19848", "reference_id": "CVE-2019-19848", "reference_type": "", "scores": [ { "value": "6.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19848" }, { "reference_url": "https://github.com/advisories/GHSA-77p4-wfr8-977w", "reference_id": "GHSA-77p4-wfr8-977w", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-77p4-wfr8-977w" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/76375?format=api", "purl": "pkg:composer/typo3/cms@8.7.30", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ffs-9vj5-27hk" }, { "vulnerability": "VCID-848u-w88s-5bbe" }, { "vulnerability": "VCID-ev4k-5k1d-2bhu" }, { "vulnerability": "VCID-fqkx-v8t5-q3h6" }, { "vulnerability": "VCID-jp1p-rfxa-hyd9" }, { "vulnerability": "VCID-tgyt-axv1-c7ag" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.30" }, { "url": "http://public2.vulnerablecode.io/api/packages/76376?format=api", "purl": "pkg:composer/typo3/cms@9.5.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ffs-9vj5-27hk" }, { "vulnerability": "VCID-1sfk-z8py-ykb8" }, { "vulnerability": "VCID-4an7-9ph4-mkd4" }, { "vulnerability": "VCID-6mnf-2fcw-dqgp" }, { "vulnerability": "VCID-848u-w88s-5bbe" }, { "vulnerability": "VCID-8w4e-d49b-nbg8" }, { "vulnerability": "VCID-bbh5-rss8-bfct" }, { "vulnerability": "VCID-bcbd-zzet-mff6" }, { "vulnerability": "VCID-e6zr-4bgg-kkh5" }, { "vulnerability": "VCID-ev4k-5k1d-2bhu" }, { "vulnerability": "VCID-fqkx-v8t5-q3h6" }, { "vulnerability": "VCID-jp1p-rfxa-hyd9" }, { "vulnerability": "VCID-n1gz-y615-cbbk" }, { "vulnerability": "VCID-tgyt-axv1-c7ag" }, { "vulnerability": "VCID-zkvq-bms4-gfcv" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/76377?format=api", "purl": "pkg:composer/typo3/cms@10.2.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ffs-9vj5-27hk" }, { "vulnerability": "VCID-1sfk-z8py-ykb8" }, { "vulnerability": "VCID-2tz2-8qdm-2kcv" }, { "vulnerability": "VCID-4an7-9ph4-mkd4" }, { "vulnerability": "VCID-6mnf-2fcw-dqgp" }, { "vulnerability": "VCID-6urp-p9mn-cffv" }, { "vulnerability": "VCID-848u-w88s-5bbe" }, { "vulnerability": "VCID-8w4e-d49b-nbg8" }, { "vulnerability": "VCID-bbh5-rss8-bfct" }, { "vulnerability": "VCID-bcbd-zzet-mff6" }, { "vulnerability": "VCID-c46m-ht19-ybc4" }, { "vulnerability": "VCID-e6zr-4bgg-kkh5" }, { "vulnerability": "VCID-ev4k-5k1d-2bhu" }, { "vulnerability": "VCID-fqkx-v8t5-q3h6" }, { "vulnerability": "VCID-jp1p-rfxa-hyd9" }, { "vulnerability": "VCID-n1gz-y615-cbbk" }, { "vulnerability": "VCID-r3az-g422-gqf9" }, { "vulnerability": "VCID-tgyt-axv1-c7ag" }, { "vulnerability": "VCID-zkvq-bms4-gfcv" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@10.2.2" } ], "aliases": [ "CVE-2019-19848", "GHSA-77p4-wfr8-977w" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-xw1s-93bu-wuh9" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/38805?format=api", "vulnerability_id": "VCID-ygw4-jdqu-4fbt", "summary": "Information Disclosure in TYPO3 CMS.", "references": [ { "reference_url": "https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-006/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-006/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/54049?format=api", "purl": "pkg:composer/typo3/cms@7.6.22", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3ugj-6m1e-e3hr" }, { "vulnerability": "VCID-953t-q1cr-zyd6" }, { "vulnerability": "VCID-abjx-8v46-d7d8" }, { "vulnerability": "VCID-dsqm-9q3e-dudw" }, { "vulnerability": "VCID-ev4k-5k1d-2bhu" }, { "vulnerability": "VCID-fdnw-2tz5-4fdr" }, { "vulnerability": "VCID-fqkx-v8t5-q3h6" }, { "vulnerability": "VCID-hp99-ncuh-6ugv" }, { "vulnerability": "VCID-jp1p-rfxa-hyd9" }, { "vulnerability": "VCID-jq5y-7h9g-mufa" }, { "vulnerability": "VCID-njsj-bwjq-fyap" }, { "vulnerability": "VCID-p7gd-anw2-1qbz" }, { "vulnerability": "VCID-tgyt-axv1-c7ag" }, { "vulnerability": "VCID-vq15-t92r-5bhx" }, { "vulnerability": "VCID-xw1s-93bu-wuh9" }, { "vulnerability": "VCID-yz6t-ge1y-qfgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.22" }, { "url": "http://public2.vulnerablecode.io/api/packages/54050?format=api", "purl": "pkg:composer/typo3/cms@8.7.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ffs-9vj5-27hk" }, { "vulnerability": "VCID-3ugj-6m1e-e3hr" }, { "vulnerability": "VCID-4eym-e6vt-8fbs" }, { "vulnerability": "VCID-6a22-c7x5-sqe2" }, { "vulnerability": "VCID-7ch1-q9f4-a7bt" }, { "vulnerability": "VCID-7m6u-k5tp-gkhy" }, { "vulnerability": "VCID-848u-w88s-5bbe" }, { "vulnerability": "VCID-953t-q1cr-zyd6" }, { "vulnerability": "VCID-abjx-8v46-d7d8" }, { "vulnerability": "VCID-am6s-67bm-77dr" }, { "vulnerability": "VCID-bn3p-39sv-6fdg" }, { "vulnerability": "VCID-dsqm-9q3e-dudw" }, { "vulnerability": "VCID-e564-zdku-9fc6" }, { "vulnerability": "VCID-emqq-kwjg-3kfk" }, { "vulnerability": "VCID-ev4k-5k1d-2bhu" }, { "vulnerability": "VCID-fdnw-2tz5-4fdr" }, { "vulnerability": "VCID-fqkx-v8t5-q3h6" }, { "vulnerability": "VCID-fut7-bb1f-37g7" }, { "vulnerability": "VCID-h7cg-64er-uya9" }, { "vulnerability": "VCID-hp99-ncuh-6ugv" }, { "vulnerability": "VCID-je4q-svfw-hqda" }, { "vulnerability": "VCID-jp1p-rfxa-hyd9" }, { "vulnerability": "VCID-jq5y-7h9g-mufa" }, { "vulnerability": "VCID-jqe4-8hzb-mfea" }, { "vulnerability": "VCID-k5t3-28es-h3ez" }, { "vulnerability": "VCID-khpm-e1xb-hydb" }, { "vulnerability": "VCID-mctp-nf36-7qdn" }, { "vulnerability": "VCID-njsj-bwjq-fyap" }, { "vulnerability": "VCID-nney-azbc-pucg" }, { "vulnerability": "VCID-p7gd-anw2-1qbz" }, { "vulnerability": "VCID-pmvp-twk2-jqe4" }, { "vulnerability": "VCID-qv14-m93d-jyd9" }, { "vulnerability": "VCID-qxab-9uwr-yqhv" }, { "vulnerability": "VCID-rqrw-t2kj-mud8" }, { "vulnerability": "VCID-ru6w-m6q6-27gn" }, { "vulnerability": "VCID-sdsa-mh76-kqch" }, { "vulnerability": "VCID-tgyt-axv1-c7ag" }, { "vulnerability": "VCID-u259-2sxq-tbct" }, { "vulnerability": "VCID-vq15-t92r-5bhx" }, { "vulnerability": "VCID-vw2r-g8yy-eyf4" }, { "vulnerability": "VCID-w1wb-mq2y-dfca" }, { "vulnerability": "VCID-wy45-2gmr-fkfg" }, { "vulnerability": "VCID-x5x1-w7yv-eye9" }, { "vulnerability": "VCID-xw1s-93bu-wuh9" }, { "vulnerability": "VCID-y7ds-p5r2-yuhq" }, { "vulnerability": "VCID-yz6t-ge1y-qfgr" }, { "vulnerability": "VCID-zmwv-gwq3-fkej" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.0" } ], "aliases": [ "GMS-2017-352" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ygw4-jdqu-4fbt" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40503?format=api", "vulnerability_id": "VCID-yz6t-ge1y-qfgr", "summary": "Security Misconfiguration in Install Tool Cookie.", "references": [ { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2018-009/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2018-009/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/57123?format=api", "purl": "pkg:composer/typo3/cms@7.6.32", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ev4k-5k1d-2bhu" }, { "vulnerability": "VCID-fqkx-v8t5-q3h6" }, { "vulnerability": "VCID-jp1p-rfxa-hyd9" }, { "vulnerability": "VCID-p7gd-anw2-1qbz" }, { "vulnerability": "VCID-tgyt-axv1-c7ag" }, { "vulnerability": "VCID-xw1s-93bu-wuh9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.32" }, { "url": "http://public2.vulnerablecode.io/api/packages/57073?format=api", "purl": "pkg:composer/typo3/cms@8.7.21", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ffs-9vj5-27hk" }, { "vulnerability": "VCID-4eym-e6vt-8fbs" }, { "vulnerability": "VCID-7m6u-k5tp-gkhy" }, { "vulnerability": "VCID-848u-w88s-5bbe" }, { "vulnerability": "VCID-am6s-67bm-77dr" }, { "vulnerability": "VCID-bn3p-39sv-6fdg" }, { "vulnerability": "VCID-ev4k-5k1d-2bhu" }, { "vulnerability": "VCID-fqkx-v8t5-q3h6" }, { "vulnerability": "VCID-fut7-bb1f-37g7" }, { "vulnerability": "VCID-jp1p-rfxa-hyd9" }, { "vulnerability": "VCID-k5t3-28es-h3ez" }, { "vulnerability": "VCID-khpm-e1xb-hydb" }, { "vulnerability": "VCID-nney-azbc-pucg" }, { "vulnerability": "VCID-p7gd-anw2-1qbz" }, { "vulnerability": "VCID-pmvp-twk2-jqe4" }, { "vulnerability": "VCID-qv14-m93d-jyd9" }, { "vulnerability": "VCID-rqrw-t2kj-mud8" }, { "vulnerability": "VCID-ru6w-m6q6-27gn" }, { "vulnerability": "VCID-sdsa-mh76-kqch" }, { "vulnerability": "VCID-tgyt-axv1-c7ag" }, { "vulnerability": "VCID-u259-2sxq-tbct" }, { "vulnerability": "VCID-vw2r-g8yy-eyf4" }, { "vulnerability": "VCID-x5x1-w7yv-eye9" }, { "vulnerability": "VCID-xw1s-93bu-wuh9" }, { "vulnerability": "VCID-y7ds-p5r2-yuhq" }, { "vulnerability": "VCID-zmwv-gwq3-fkej" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.21" }, { "url": "http://public2.vulnerablecode.io/api/packages/57074?format=api", "purl": "pkg:composer/typo3/cms@9.5.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ffs-9vj5-27hk" }, { "vulnerability": "VCID-1sfk-z8py-ykb8" }, { "vulnerability": "VCID-3ye6-vqje-abh4" }, { "vulnerability": "VCID-4an7-9ph4-mkd4" }, { "vulnerability": "VCID-4eym-e6vt-8fbs" }, { "vulnerability": "VCID-4jck-w9ct-budk" }, { "vulnerability": "VCID-6mnf-2fcw-dqgp" }, { "vulnerability": "VCID-7m6u-k5tp-gkhy" }, { "vulnerability": "VCID-7xv1-78u7-xufp" }, { "vulnerability": "VCID-848u-w88s-5bbe" }, { "vulnerability": "VCID-8w4e-d49b-nbg8" }, { "vulnerability": "VCID-9adx-p876-kyb5" }, { "vulnerability": "VCID-am6s-67bm-77dr" }, { "vulnerability": "VCID-bbh5-rss8-bfct" }, { "vulnerability": "VCID-cvk2-93hm-gkhx" }, { "vulnerability": "VCID-e6zr-4bgg-kkh5" }, { "vulnerability": "VCID-ev4k-5k1d-2bhu" }, { "vulnerability": "VCID-fqkx-v8t5-q3h6" }, { "vulnerability": "VCID-fut7-bb1f-37g7" }, { "vulnerability": "VCID-jp1p-rfxa-hyd9" }, { "vulnerability": "VCID-k5t3-28es-h3ez" }, { "vulnerability": "VCID-khpm-e1xb-hydb" }, { "vulnerability": "VCID-n1gz-y615-cbbk" }, { "vulnerability": "VCID-nney-azbc-pucg" }, { "vulnerability": "VCID-p7gd-anw2-1qbz" }, { "vulnerability": "VCID-pmvp-twk2-jqe4" }, { "vulnerability": "VCID-qv14-m93d-jyd9" }, { "vulnerability": "VCID-rqrw-t2kj-mud8" }, { "vulnerability": "VCID-ru6w-m6q6-27gn" }, { "vulnerability": "VCID-sdsa-mh76-kqch" }, { "vulnerability": "VCID-tgyt-axv1-c7ag" }, { "vulnerability": "VCID-u259-2sxq-tbct" }, { "vulnerability": "VCID-vw2r-g8yy-eyf4" }, { "vulnerability": "VCID-x5x1-w7yv-eye9" }, { "vulnerability": "VCID-xw1s-93bu-wuh9" }, { "vulnerability": "VCID-y7ds-p5r2-yuhq" }, { "vulnerability": "VCID-zeut-9wfp-q7et" }, { "vulnerability": "VCID-zkvq-bms4-gfcv" }, { "vulnerability": "VCID-zmwv-gwq3-fkej" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.2" } ], "aliases": [ "GMS-2018-100" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-yz6t-ge1y-qfgr" } ], "fixing_vulnerabilities": [], "risk_score": "4.0", "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.20" }