Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/23261?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/23261?format=api", "purl": "pkg:composer/typo3/cms@6.2.29", "type": "composer", "namespace": "typo3", "name": "cms", "version": "6.2.29", "qualifiers": {}, "subpath": "", "is_vulnerable": true, "next_non_vulnerable_version": "10.4.35", "latest_non_vulnerable_version": "12.2.0", "affected_by_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/42154?format=api", "vulnerability_id": "VCID-5jgb-dsyx-hyb4", "summary": "Open Redirection in Login Handling\n### Problem\nIt has been discovered that Login Handling is susceptible to open redirection which allows attackers redirecting to arbitrary content, and conducting phishing attacks. No authentication is required in order to exploit this vulnerability.\n\n### Solution\nUpdate to TYPO3 versions 6.2.57, 7.6.51, 8.7.40, 9.5.25, 10.4.14, 11.1.1 that fix the problem described.\n\n### Credits\nThanks to Alexander Kellner who reported this issue and to TYPO3 security team member Torben Hansen who fixed the issue.\n\n### References\n* [TYPO3-CORE-SA-2021-001](https://typo3.org/security/advisory/typo3-core-sa-2021-001)", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-21338", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00253", "scoring_system": "epss", "scoring_elements": "0.48589", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00253", "scoring_system": "epss", "scoring_elements": "0.48583", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.00253", "scoring_system": "epss", "scoring_elements": "0.48529", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.00253", "scoring_system": "epss", "scoring_elements": "0.4861", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00253", "scoring_system": "epss", "scoring_elements": "0.48564", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00253", "scoring_system": "epss", "scoring_elements": "0.48587", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00253", "scoring_system": "epss", "scoring_elements": "0.48539", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00253", "scoring_system": "epss", "scoring_elements": "0.48593", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00253", "scoring_system": "epss", "scoring_elements": "0.48598", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00253", "scoring_system": "epss", "scoring_elements": "0.48641", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00253", "scoring_system": "epss", "scoring_elements": "0.48646", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00253", "scoring_system": "epss", "scoring_elements": "0.48596", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00253", "scoring_system": "epss", "scoring_elements": "0.48584", "published_at": "2026-04-12T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-21338" }, { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21338.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21338.yaml" }, { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21338.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21338.yaml" }, { "reference_url": "https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-4jhw-2p6j-5wmp", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-4jhw-2p6j-5wmp" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-21338", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-21338" }, { "reference_url": "https://packagist.org/packages/typo3/cms-core", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://packagist.org/packages/typo3/cms-core" }, { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2021-001", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://typo3.org/security/advisory/typo3-core-sa-2021-001" }, { "reference_url": "https://github.com/advisories/GHSA-4jhw-2p6j-5wmp", "reference_id": "GHSA-4jhw-2p6j-5wmp", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-4jhw-2p6j-5wmp" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/569418?format=api", "purl": "pkg:composer/typo3/cms@6.2.57", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@6.2.57" }, { "url": "http://public2.vulnerablecode.io/api/packages/37610?format=api", "purl": "pkg:composer/typo3/cms@7.6.51", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-n15v-ta9h-6ffb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.51" }, { "url": "http://public2.vulnerablecode.io/api/packages/37612?format=api", "purl": "pkg:composer/typo3/cms@8.7.40", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-s64f-x81f-b7ce" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.40" }, { "url": "http://public2.vulnerablecode.io/api/packages/75853?format=api", "purl": "pkg:composer/typo3/cms@9.5.25", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-6a9t-8dmn-s3bv" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.25" }, { "url": "http://public2.vulnerablecode.io/api/packages/75849?format=api", "purl": "pkg:composer/typo3/cms@10.4.14", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1yxw-saf5-wue7" }, { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-6a9t-8dmn-s3bv" }, { "vulnerability": "VCID-8sdd-b1bn-cuhx" }, { "vulnerability": "VCID-av8u-rvzq-4fc7" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-e32h-8q61-hbgc" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-remd-55jh-r3g5" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vwb2-a84s-5qak" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-w13x-3rp9-wyej" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-yj9g-uz1a-jkf2" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@10.4.14" }, { "url": "http://public2.vulnerablecode.io/api/packages/75850?format=api", "purl": "pkg:composer/typo3/cms@11.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1yxw-saf5-wue7" }, { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-6a9t-8dmn-s3bv" }, { "vulnerability": "VCID-8sdd-b1bn-cuhx" }, { "vulnerability": "VCID-av8u-rvzq-4fc7" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-e32h-8q61-hbgc" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-remd-55jh-r3g5" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-uyeu-a3xr-fkh4" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vwb2-a84s-5qak" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-w13x-3rp9-wyej" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-yj9g-uz1a-jkf2" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@11.1.1" } ], "aliases": [ "CVE-2021-21338", "GHSA-4jhw-2p6j-5wmp" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-5jgb-dsyx-hyb4" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/42097?format=api", "vulnerability_id": "VCID-dsu7-jjjq-f3e1", "summary": "Cleartext storage of session identifier\n### Problem\nUser session identifiers were stored in cleartext - without processing of additional cryptographic hashing algorithms. This vulnerability cannot be exploited directly and occurs in combination with a chained attack - like for instance SQL injection in any other component of the system.\n\n### Solution\nUpdate to TYPO3 versions 6.2.57, 7.6.51, 8.7.40, 9.5.25, 10.4.14, 11.1.1 that fix the problem described.\n\n### Credits\nThanks to TYPO3 security team member Oliver Hader who reported this issue and to TYPO3 core & security team members Benni Mack & Oliver Hader who fixed the issue.\n\n### References\n* [TYPO3-CORE-SA-2021-006](https://typo3.org/security/advisory/typo3-core-sa-2021-006)", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-21339", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00132", "scoring_system": "epss", "scoring_elements": "0.32709", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00132", "scoring_system": "epss", "scoring_elements": "0.32671", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.00132", "scoring_system": "epss", "scoring_elements": "0.32736", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00132", "scoring_system": "epss", "scoring_elements": "0.32804", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00132", "scoring_system": "epss", "scoring_elements": "0.3284", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00132", "scoring_system": "epss", "scoring_elements": "0.32661", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00132", "scoring_system": "epss", "scoring_elements": "0.32735", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00132", "scoring_system": "epss", "scoring_elements": "0.32504", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.00132", "scoring_system": "epss", "scoring_elements": "0.32659", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00132", "scoring_system": "epss", "scoring_elements": "0.32688", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00132", "scoring_system": "epss", "scoring_elements": "0.32711", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00132", "scoring_system": "epss", "scoring_elements": "0.32672", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00132", "scoring_system": "epss", "scoring_elements": "0.327", "published_at": "2026-04-12T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-21339" }, { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21339.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21339.yaml" }, { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21339.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21339.yaml" }, { "reference_url": "https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-qx3w-4864-94ch", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-qx3w-4864-94ch" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-21339", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-21339" }, { "reference_url": "https://packagist.org/packages/typo3/cms-core", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://packagist.org/packages/typo3/cms-core" }, { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2021-006", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://typo3.org/security/advisory/typo3-core-sa-2021-006" }, { "reference_url": "https://github.com/advisories/GHSA-qx3w-4864-94ch", "reference_id": "GHSA-qx3w-4864-94ch", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-qx3w-4864-94ch" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/569418?format=api", "purl": "pkg:composer/typo3/cms@6.2.57", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@6.2.57" }, { "url": "http://public2.vulnerablecode.io/api/packages/37610?format=api", "purl": "pkg:composer/typo3/cms@7.6.51", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-n15v-ta9h-6ffb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.51" }, { "url": "http://public2.vulnerablecode.io/api/packages/37612?format=api", "purl": "pkg:composer/typo3/cms@8.7.40", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-s64f-x81f-b7ce" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.40" }, { "url": "http://public2.vulnerablecode.io/api/packages/75853?format=api", "purl": "pkg:composer/typo3/cms@9.5.25", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-6a9t-8dmn-s3bv" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.25" }, { "url": "http://public2.vulnerablecode.io/api/packages/75849?format=api", "purl": "pkg:composer/typo3/cms@10.4.14", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1yxw-saf5-wue7" }, { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-6a9t-8dmn-s3bv" }, { "vulnerability": "VCID-8sdd-b1bn-cuhx" }, { "vulnerability": "VCID-av8u-rvzq-4fc7" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-e32h-8q61-hbgc" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-remd-55jh-r3g5" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vwb2-a84s-5qak" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-w13x-3rp9-wyej" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-yj9g-uz1a-jkf2" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@10.4.14" }, { "url": "http://public2.vulnerablecode.io/api/packages/75850?format=api", "purl": "pkg:composer/typo3/cms@11.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1yxw-saf5-wue7" }, { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-6a9t-8dmn-s3bv" }, { "vulnerability": "VCID-8sdd-b1bn-cuhx" }, { "vulnerability": "VCID-av8u-rvzq-4fc7" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-e32h-8q61-hbgc" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-remd-55jh-r3g5" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-uyeu-a3xr-fkh4" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vwb2-a84s-5qak" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-w13x-3rp9-wyej" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-yj9g-uz1a-jkf2" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@11.1.1" } ], "aliases": [ "CVE-2021-21339", "GHSA-qx3w-4864-94ch" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-dsu7-jjjq-f3e1" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/33212?format=api", "vulnerability_id": "VCID-f963-qur3-2qb7", "summary": "Cross-Site Scripting in Fluid view helpers\n> ### Meta\n> * CVSS: `CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:F/RL:O/RC:C` (5.7)\n> * CWE-79\n\n### Problem\nIt has been discovered that system extension Fluid (`typo3/cms-fluid`) of the TYPO3 core is vulnerable to cross-site scripting passing user-controlled data as argument to Fluid view helpers.\n\n```\n<f:form ... fieldNamePrefix=\"{payload}\" />\n<f:be.labels.csh ... label=\"{payload}\" />\n<f:be.menus.actionMenu ... label=\"{payload}\" />\n```\n\n### Solution\nUpdate to TYPO3 versions 9.5.23 or 10.4.10 that fix the problem described.\n\n### Credits\nThanks to TYPO3 security team member Oliver Hader who reported this issue and to TYPO3 security team members Helmut Hummel & Oliver Hader who fixed the issue.\n\n### References\n* [TYPO3-CORE-SA-2020-010](https://typo3.org/security/advisory/typo3-core-sa-2020-010)", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-26227", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00359", "scoring_system": "epss", "scoring_elements": "0.58079", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00359", "scoring_system": "epss", "scoring_elements": "0.58082", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.00359", "scoring_system": "epss", "scoring_elements": "0.58115", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00359", "scoring_system": "epss", "scoring_elements": "0.5814", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00359", "scoring_system": "epss", "scoring_elements": "0.57999", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.00359", "scoring_system": "epss", "scoring_elements": "0.58137", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00359", "scoring_system": "epss", "scoring_elements": "0.58083", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00359", "scoring_system": "epss", "scoring_elements": "0.58104", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00359", "scoring_system": "epss", "scoring_elements": "0.58133", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00359", "scoring_system": "epss", "scoring_elements": "0.58139", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00359", "scoring_system": "epss", "scoring_elements": "0.58109", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00359", "scoring_system": "epss", "scoring_elements": "0.5813", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00359", "scoring_system": "epss", "scoring_elements": "0.58153", "published_at": "2026-04-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-26227" }, { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2020-26227.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2020-26227.yaml" }, { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2020-26227.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2020-26227.yaml" }, { "reference_url": "https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-vqqx-jw6p-q3rf", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-vqqx-jw6p-q3rf" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-26227", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-26227" }, { "reference_url": "https://packagist.org/packages/typo3/cms-core", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://packagist.org/packages/typo3/cms-core" }, { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2020-010", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://typo3.org/security/advisory/typo3-core-sa-2020-010" }, { "reference_url": "https://github.com/advisories/GHSA-vqqx-jw6p-q3rf", "reference_id": "GHSA-vqqx-jw6p-q3rf", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-vqqx-jw6p-q3rf" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/20921?format=api", "purl": "pkg:composer/typo3/cms@7.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ng4-5tkh-g7h5" }, { "vulnerability": "VCID-28bf-jvah-zkhw" }, { "vulnerability": "VCID-2rhx-afay-97da" }, { "vulnerability": "VCID-37wu-bjfj-k7eg" }, { "vulnerability": "VCID-4etp-u4pt-v7hm" }, { "vulnerability": "VCID-51ba-3ag9-rucn" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-6b5q-vzs3-pkcc" }, { "vulnerability": "VCID-6gms-w48j-4ffh" }, { "vulnerability": "VCID-6pvx-1qan-ukef" }, { "vulnerability": "VCID-6spw-66jg-syb1" }, { "vulnerability": "VCID-7zx9-8afq-y3hc" }, { "vulnerability": "VCID-99uu-rfrf-bqa7" }, { "vulnerability": "VCID-asym-tgh2-1kg8" }, { "vulnerability": "VCID-b45y-dr1a-7qd7" }, { "vulnerability": "VCID-b5ht-z6zp-pbht" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-bnne-7p2q-eqd2" }, { "vulnerability": "VCID-buax-rz7x-r7c2" }, { "vulnerability": "VCID-bxjw-7426-gyb8" }, { "vulnerability": "VCID-cczn-x8q7-k7ba" }, { "vulnerability": "VCID-cjgc-q6p5-2ydc" }, { "vulnerability": "VCID-ck23-cxn6-bbf3" }, { "vulnerability": "VCID-dbrh-t8zx-nkd9" }, { "vulnerability": "VCID-dm97-51uu-r7gw" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-ehzg-bzrd-kbcc" }, { "vulnerability": "VCID-f4pm-9tq5-q3ch" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-h958-d3pm-kfcs" }, { "vulnerability": "VCID-kgcq-paqm-9ya6" }, { "vulnerability": "VCID-kpze-14jy-xud9" }, { "vulnerability": "VCID-kqbk-4q4z-nkec" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n78p-x7hh-gqcf" }, { "vulnerability": "VCID-ne8w-dpjw-7qf1" }, { "vulnerability": "VCID-nwxj-3ajk-rkh5" }, { "vulnerability": "VCID-pgzu-kxuj-j3fh" }, { "vulnerability": "VCID-pk8d-8u15-5bfq" }, { "vulnerability": "VCID-q6dx-uskc-y3hs" }, { "vulnerability": "VCID-qemc-8kj8-r3cd" }, { "vulnerability": "VCID-rdrs-mhaw-b3ge" }, { "vulnerability": "VCID-re9h-ze98-rbhu" }, { "vulnerability": "VCID-rwgf-2pfh-ufdz" }, { "vulnerability": "VCID-se8w-fv8x-tqde" }, { "vulnerability": "VCID-sr3p-pdxy-4yhu" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-tmrt-6fxw-5ugh" }, { "vulnerability": "VCID-tw1y-t4qj-j3d1" }, { "vulnerability": "VCID-vbbx-pk8m-jfhd" }, { "vulnerability": "VCID-vndb-w8e1-4ugv" }, { "vulnerability": "VCID-wr5t-xqnn-gkcj" }, { "vulnerability": "VCID-ww44-zmx7-47ft" }, { "vulnerability": "VCID-wxps-mnue-6bbh" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xhq3-ts9t-sbdy" }, { "vulnerability": "VCID-xkpp-psz2-2kag" }, { "vulnerability": "VCID-xp55-jxjr-zqcb" }, { "vulnerability": "VCID-xqew-bx7v-1qfk" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zspb-bd6j-wyd2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/22097?format=api", "purl": "pkg:composer/typo3/cms@8.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-18dg-eevv-3ug9" }, { "vulnerability": "VCID-1bnd-6xsq-nbec" }, { "vulnerability": "VCID-1jcy-nx8g-z3d3" }, { "vulnerability": "VCID-1kae-ffj3-xyc7" }, { "vulnerability": "VCID-1qjx-grvf-y7bk" }, { "vulnerability": "VCID-25t3-1sm6-3kdn" }, { "vulnerability": "VCID-28bf-jvah-zkhw" }, { "vulnerability": "VCID-2fs8-bscc-3ye2" }, { "vulnerability": "VCID-2meq-x4kd-bbdn" }, { "vulnerability": "VCID-3gg5-1921-rbfs" }, { "vulnerability": "VCID-3n2r-awja-dug9" }, { "vulnerability": "VCID-3v4n-fzxa-bfaw" }, { "vulnerability": "VCID-435j-f3yx-9yep" }, { "vulnerability": "VCID-47px-4d98-ubab" }, { "vulnerability": "VCID-4ack-haf2-cfbe" }, { "vulnerability": "VCID-4btk-jt5n-2ugf" }, { "vulnerability": "VCID-551q-gpyd-ffe8" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-5ppt-avmb-cqb2" }, { "vulnerability": "VCID-5qfv-y43v-akdm" }, { "vulnerability": "VCID-5yg8-2cbr-d3as" }, { "vulnerability": "VCID-6487-15z5-pkd4" }, { "vulnerability": "VCID-6b5q-vzs3-pkcc" }, { "vulnerability": "VCID-6wsa-4ywc-8fh4" }, { "vulnerability": "VCID-7d1g-j3k5-gub8" }, { "vulnerability": "VCID-8jp8-a363-67be" }, { "vulnerability": "VCID-9g62-zd1x-3bdg" }, { "vulnerability": "VCID-9gpp-ez8w-rqav" }, { "vulnerability": "VCID-auw7-pc55-73hj" }, { "vulnerability": "VCID-axaf-45kr-kbfe" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-bck9-34jp-6ydx" }, { "vulnerability": "VCID-bmj2-4k58-tqa4" }, { "vulnerability": "VCID-bnne-7p2q-eqd2" }, { "vulnerability": "VCID-bxjw-7426-gyb8" }, { "vulnerability": "VCID-c2tm-eqmm-1ugt" }, { "vulnerability": "VCID-c6zq-cfg5-u7d9" }, { "vulnerability": "VCID-cm14-t8uv-k3es" }, { "vulnerability": "VCID-cmka-8484-27bu" }, { "vulnerability": "VCID-dbrh-t8zx-nkd9" }, { "vulnerability": "VCID-dj88-f3p8-cfbn" }, { "vulnerability": "VCID-dm97-51uu-r7gw" }, { "vulnerability": "VCID-dquc-7amf-e7cs" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-e72u-tpc3-23g3" }, { "vulnerability": "VCID-e7sv-4xc2-m3d5" }, { "vulnerability": "VCID-eajg-ctpd-2bby" }, { "vulnerability": "VCID-ehzg-bzrd-kbcc" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-ep6t-zwd1-4bb3" }, { "vulnerability": "VCID-euk5-hagy-xqfz" }, { "vulnerability": "VCID-f1rq-qudk-zkf2" }, { "vulnerability": "VCID-fber-yp9q-f7dr" }, { "vulnerability": "VCID-fqbx-7xyq-fkav" }, { "vulnerability": "VCID-fy3g-uegw-2bew" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-gezz-pvpj-p3c6" }, { "vulnerability": "VCID-gspd-apwy-efgu" }, { "vulnerability": "VCID-h63t-9enx-qfdn" }, { "vulnerability": "VCID-h958-d3pm-kfcs" }, { "vulnerability": "VCID-he5m-6wj4-rbhc" }, { "vulnerability": "VCID-hpgq-deze-p7dp" }, { "vulnerability": "VCID-hv3n-j8ck-1ufx" }, { "vulnerability": "VCID-j77k-hjgx-5kc5" }, { "vulnerability": "VCID-jppe-cbgm-k3cz" }, { "vulnerability": "VCID-jqth-wfgx-87cx" }, { "vulnerability": "VCID-k4h1-mvnf-1ybx" }, { "vulnerability": "VCID-k8af-cg9k-87a9" }, { "vulnerability": "VCID-m3nf-1qbv-d3dj" }, { "vulnerability": "VCID-m7w6-b2xu-6uee" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-mqbh-k9n3-nbed" }, { "vulnerability": "VCID-mqk6-z77g-bfdv" }, { "vulnerability": "VCID-mub5-s7h1-57cy" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n61z-6v8a-hygf" }, { "vulnerability": "VCID-n78p-x7hh-gqcf" }, { "vulnerability": "VCID-nnh9-udcj-m7fv" }, { "vulnerability": "VCID-npn5-rand-q3dg" }, { "vulnerability": "VCID-nt6a-5zkv-pbcm" }, { "vulnerability": "VCID-nwxj-3ajk-rkh5" }, { "vulnerability": "VCID-p1u9-66hm-47er" }, { "vulnerability": "VCID-p545-vwe6-9kfr" }, { "vulnerability": "VCID-pk8d-8u15-5bfq" }, { "vulnerability": "VCID-pnfa-cksc-43de" }, { "vulnerability": "VCID-prbd-r82t-87dm" }, { "vulnerability": "VCID-px44-19tj-h7aa" }, { "vulnerability": "VCID-q8hy-wjd9-nbgp" }, { "vulnerability": "VCID-q9ak-qcq6-qfhy" }, { "vulnerability": "VCID-qb4j-9tz7-m7a2" }, { "vulnerability": "VCID-rdrs-mhaw-b3ge" }, { "vulnerability": "VCID-rg5d-d8nc-9qfu" }, { "vulnerability": "VCID-rzw5-8d1u-sfam" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-shqd-udhm-pff8" }, { "vulnerability": "VCID-sr3p-pdxy-4yhu" }, { "vulnerability": "VCID-stzu-sxe6-5yf5" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-tmrt-6fxw-5ugh" }, { "vulnerability": "VCID-tqf5-2fsm-8fch" }, { "vulnerability": "VCID-tw1y-t4qj-j3d1" }, { "vulnerability": "VCID-uckg-j48d-efad" }, { "vulnerability": "VCID-utpu-q2dv-m3hm" }, { "vulnerability": "VCID-vndb-w8e1-4ugv" }, { "vulnerability": "VCID-vrt1-aj9v-2kb6" }, { "vulnerability": "VCID-vxj6-wvyz-zbaq" }, { "vulnerability": "VCID-vxry-uvph-kbfd" }, { "vulnerability": "VCID-vybh-pxr3-17hn" }, { "vulnerability": "VCID-wea9-egep-h7g5" }, { "vulnerability": "VCID-wge3-kxdq-f3bz" }, { "vulnerability": "VCID-wr5t-xqnn-gkcj" }, { "vulnerability": "VCID-wxps-mnue-6bbh" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xh7y-56vy-5ud8" }, { "vulnerability": "VCID-xqew-bx7v-1qfk" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zawz-vky5-tkgt" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zkea-ge1t-z7gn" }, { "vulnerability": "VCID-zspb-bd6j-wyd2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/73051?format=api", "purl": "pkg:composer/typo3/cms@8.7.38", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.38" }, { "url": "http://public2.vulnerablecode.io/api/packages/73050?format=api", "purl": "pkg:composer/typo3/cms@9.5.23", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-6a9t-8dmn-s3bv" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-d8d1-sat6-muhe" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-he5m-6wj4-rbhc" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-xh7y-56vy-5ud8" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.23" }, { "url": "http://public2.vulnerablecode.io/api/packages/73049?format=api", "purl": "pkg:composer/typo3/cms@10.4.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1yxw-saf5-wue7" }, { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-6a9t-8dmn-s3bv" }, { "vulnerability": "VCID-8sdd-b1bn-cuhx" }, { "vulnerability": "VCID-a89c-jvwa-6kh5" }, { "vulnerability": "VCID-av8u-rvzq-4fc7" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-d8d1-sat6-muhe" }, { "vulnerability": "VCID-dhrm-uxuv-zfaj" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-e32h-8q61-hbgc" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-he5m-6wj4-rbhc" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-remd-55jh-r3g5" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vwb2-a84s-5qak" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-w13x-3rp9-wyej" }, { "vulnerability": "VCID-xh7y-56vy-5ud8" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-yj9g-uz1a-jkf2" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@10.4.10" } ], "aliases": [ "CVE-2020-26227", "GHSA-vqqx-jw6p-q3rf" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-f963-qur3-2qb7" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/55045?format=api", "vulnerability_id": "VCID-gcnj-6qb6-pbgz", "summary": "TYPO3 Directory Traversal on ZIP extraction\nAn issue was discovered in TYPO3 before 8.7.30, 9.x before 9.5.12, and 10.x before 10.2.2. It has been discovered that the extraction of manually uploaded ZIP archives in Extension Manager is vulnerable to directory traversal. Admin privileges are required in order to exploit this vulnerability. (In v9 LTS and later, System Maintainer privileges are also required.)", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-19848", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00374", "scoring_system": "epss", "scoring_elements": "0.59088", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.00374", "scoring_system": "epss", "scoring_elements": "0.58989", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.00374", "scoring_system": "epss", "scoring_elements": "0.59064", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00374", "scoring_system": "epss", "scoring_elements": "0.59087", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00374", "scoring_system": "epss", "scoring_elements": "0.59051", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00374", "scoring_system": "epss", "scoring_elements": "0.59102", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00374", "scoring_system": "epss", "scoring_elements": "0.59106", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00374", "scoring_system": "epss", "scoring_elements": "0.59125", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00374", "scoring_system": "epss", "scoring_elements": "0.59124", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00374", "scoring_system": "epss", "scoring_elements": "0.59128", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00374", "scoring_system": "epss", "scoring_elements": "0.59108", "published_at": "2026-04-21T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-19848" }, { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2019-19848.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2019-19848.yaml" }, { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2019-19848.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2019-19848.yaml" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19848", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19848" }, { "reference_url": "https://review.typo3.org/q/%2522Resolves:+%252388764%2522+topic:security", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://review.typo3.org/q/%2522Resolves:+%252388764%2522+topic:security" }, { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2019-024", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://typo3.org/security/advisory/typo3-core-sa-2019-024" }, { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2019-024/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2019-024/" }, { "reference_url": "https://github.com/advisories/GHSA-77p4-wfr8-977w", "reference_id": "GHSA-77p4-wfr8-977w", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-77p4-wfr8-977w" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/58878?format=api", "purl": "pkg:composer/typo3/cms@8.7.30", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-he5m-6wj4-rbhc" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-xh7y-56vy-5ud8" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.30" }, { "url": "http://public2.vulnerablecode.io/api/packages/58879?format=api", "purl": "pkg:composer/typo3/cms@9.5.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2mn6-mdmz-4yd9" }, { "vulnerability": "VCID-543x-cnbz-1kb9" }, { "vulnerability": "VCID-58js-jzm4-4fc7" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5kzs-ex81-bbaj" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-6a9t-8dmn-s3bv" }, { "vulnerability": "VCID-7kjw-j8st-mqfr" }, { "vulnerability": "VCID-a49c-fqrj-nbb3" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-d8d1-sat6-muhe" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-he5m-6wj4-rbhc" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-phgh-sd4m-zbdx" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-sw7v-fbjk-13hy" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-xh7y-56vy-5ud8" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/82226?format=api", "purl": "pkg:composer/typo3/cms@10.2.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1yxw-saf5-wue7" }, { "vulnerability": "VCID-2mn6-mdmz-4yd9" }, { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-543x-cnbz-1kb9" }, { "vulnerability": "VCID-58js-jzm4-4fc7" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5kzs-ex81-bbaj" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-6a9t-8dmn-s3bv" }, { "vulnerability": "VCID-7kjw-j8st-mqfr" }, { "vulnerability": "VCID-8sdd-b1bn-cuhx" }, { "vulnerability": "VCID-a49c-fqrj-nbb3" }, { "vulnerability": "VCID-a89c-jvwa-6kh5" }, { "vulnerability": "VCID-av8u-rvzq-4fc7" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-cdjv-fp71-y3dv" }, { "vulnerability": "VCID-d8d1-sat6-muhe" }, { "vulnerability": "VCID-dhrm-uxuv-zfaj" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-e32h-8q61-hbgc" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-he5m-6wj4-rbhc" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-phgh-sd4m-zbdx" }, { "vulnerability": "VCID-remd-55jh-r3g5" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-sw7v-fbjk-13hy" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-usmv-r64u-m7cb" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vwb2-a84s-5qak" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-w13x-3rp9-wyej" }, { "vulnerability": "VCID-xh7y-56vy-5ud8" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-yj9g-uz1a-jkf2" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@10.2.2" } ], "aliases": [ "CVE-2019-19848", "GHSA-77p4-wfr8-977w" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-gcnj-6qb6-pbgz" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/18263?format=api", "vulnerability_id": "VCID-hv3n-j8ck-1ufx", "summary": "TYPO3 Remote Code Execution in third party library swiftmailer\nTYPO3 uses the package swiftmailer/swiftmailer for mail actions. This package is known to be vulnerable to Remote Code Execution.", "references": [ { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2017-01-03-1.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2017-01-03-1.yaml" }, { "reference_url": "https://github.com/TYPO3/typo3", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3/typo3" }, { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2017-001", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://typo3.org/security/advisory/typo3-core-sa-2017-001" }, { "reference_url": "https://github.com/advisories/GHSA-g4pf-3jvq-2gcw", "reference_id": "GHSA-g4pf-3jvq-2gcw", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-g4pf-3jvq-2gcw" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/23748?format=api", "purl": "pkg:composer/typo3/cms@6.2.30", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-nwxj-3ajk-rkh5" }, { "vulnerability": "VCID-re9h-ze98-rbhu" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@6.2.30" }, { "url": "http://public2.vulnerablecode.io/api/packages/23749?format=api", "purl": "pkg:composer/typo3/cms@7.6.15", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-28bf-jvah-zkhw" }, { "vulnerability": "VCID-2fs8-bscc-3ye2" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-6b5q-vzs3-pkcc" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-bnne-7p2q-eqd2" }, { "vulnerability": "VCID-bxjw-7426-gyb8" }, { "vulnerability": "VCID-dbrh-t8zx-nkd9" }, { "vulnerability": "VCID-dm97-51uu-r7gw" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-ehzg-bzrd-kbcc" }, { "vulnerability": "VCID-ep6t-zwd1-4bb3" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-fy3g-uegw-2bew" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-h63t-9enx-qfdn" }, { "vulnerability": "VCID-hpgq-deze-p7dp" }, { "vulnerability": "VCID-jqth-wfgx-87cx" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-mqbh-k9n3-nbed" }, { "vulnerability": "VCID-mub5-s7h1-57cy" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n78p-x7hh-gqcf" }, { "vulnerability": "VCID-nt6a-5zkv-pbcm" }, { "vulnerability": "VCID-nwxj-3ajk-rkh5" }, { "vulnerability": "VCID-pk8d-8u15-5bfq" }, { "vulnerability": "VCID-pnfa-cksc-43de" }, { "vulnerability": "VCID-rdrs-mhaw-b3ge" }, { "vulnerability": "VCID-rzw5-8d1u-sfam" }, { "vulnerability": "VCID-sr3p-pdxy-4yhu" }, { "vulnerability": "VCID-sxr7-cutf-8kh6" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-tmrt-6fxw-5ugh" }, { "vulnerability": "VCID-tw1y-t4qj-j3d1" }, { "vulnerability": "VCID-vndb-w8e1-4ugv" }, { "vulnerability": "VCID-vrt1-aj9v-2kb6" }, { "vulnerability": "VCID-wge3-kxdq-f3bz" }, { "vulnerability": "VCID-wr5t-xqnn-gkcj" }, { "vulnerability": "VCID-wxps-mnue-6bbh" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xqew-bx7v-1qfk" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zspb-bd6j-wyd2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.15" }, { "url": "http://public2.vulnerablecode.io/api/packages/24659?format=api", "purl": "pkg:composer/typo3/cms@8.5.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-18dg-eevv-3ug9" }, { "vulnerability": "VCID-1jp6-qjpr-xfev" }, { "vulnerability": "VCID-1kae-ffj3-xyc7" }, { "vulnerability": "VCID-28bf-jvah-zkhw" }, { "vulnerability": "VCID-2fs8-bscc-3ye2" }, { "vulnerability": "VCID-2meq-x4kd-bbdn" }, { "vulnerability": "VCID-3gg5-1921-rbfs" }, { "vulnerability": "VCID-3n2r-awja-dug9" }, { "vulnerability": "VCID-3v4n-fzxa-bfaw" }, { "vulnerability": "VCID-4ack-haf2-cfbe" }, { "vulnerability": "VCID-4btk-jt5n-2ugf" }, { "vulnerability": "VCID-551q-gpyd-ffe8" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-5qfv-y43v-akdm" }, { "vulnerability": "VCID-5yg8-2cbr-d3as" }, { "vulnerability": "VCID-6487-15z5-pkd4" }, { "vulnerability": "VCID-6b5q-vzs3-pkcc" }, { "vulnerability": "VCID-9g62-zd1x-3bdg" }, { "vulnerability": "VCID-9gpp-ez8w-rqav" }, { "vulnerability": "VCID-9jj4-ec9n-qbhs" }, { "vulnerability": "VCID-axaf-45kr-kbfe" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-bnne-7p2q-eqd2" }, { "vulnerability": "VCID-bxjw-7426-gyb8" }, { "vulnerability": "VCID-byp6-edft-fbhm" }, { "vulnerability": "VCID-c2tm-eqmm-1ugt" }, { "vulnerability": "VCID-cm14-t8uv-k3es" }, { "vulnerability": "VCID-cmka-8484-27bu" }, { "vulnerability": "VCID-dbrh-t8zx-nkd9" }, { "vulnerability": "VCID-dj88-f3p8-cfbn" }, { "vulnerability": "VCID-dm97-51uu-r7gw" }, { "vulnerability": "VCID-dquc-7amf-e7cs" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-e72u-tpc3-23g3" }, { "vulnerability": "VCID-e7sv-4xc2-m3d5" }, { "vulnerability": "VCID-eajg-ctpd-2bby" }, { "vulnerability": "VCID-ehzg-bzrd-kbcc" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-ep6t-zwd1-4bb3" }, { "vulnerability": "VCID-euk5-hagy-xqfz" }, { "vulnerability": "VCID-fy3g-uegw-2bew" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-h63t-9enx-qfdn" }, { "vulnerability": "VCID-he5m-6wj4-rbhc" }, { "vulnerability": "VCID-hpgq-deze-p7dp" }, { "vulnerability": "VCID-j77k-hjgx-5kc5" }, { "vulnerability": "VCID-jppe-cbgm-k3cz" }, { "vulnerability": "VCID-jqth-wfgx-87cx" }, { "vulnerability": "VCID-k4h1-mvnf-1ybx" }, { "vulnerability": "VCID-k8af-cg9k-87a9" }, { "vulnerability": "VCID-m7w6-b2xu-6uee" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-mqbh-k9n3-nbed" }, { "vulnerability": "VCID-mub5-s7h1-57cy" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n78p-x7hh-gqcf" }, { "vulnerability": "VCID-nt6a-5zkv-pbcm" }, { "vulnerability": "VCID-nwxj-3ajk-rkh5" }, { "vulnerability": "VCID-pk8d-8u15-5bfq" }, { "vulnerability": "VCID-pnfa-cksc-43de" }, { "vulnerability": "VCID-px44-19tj-h7aa" }, { "vulnerability": "VCID-q8hy-wjd9-nbgp" }, { "vulnerability": "VCID-qb4j-9tz7-m7a2" }, { "vulnerability": "VCID-rdrs-mhaw-b3ge" }, { "vulnerability": "VCID-rzw5-8d1u-sfam" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-shqd-udhm-pff8" }, { "vulnerability": "VCID-sr3p-pdxy-4yhu" }, { "vulnerability": "VCID-stzu-sxe6-5yf5" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-tgma-cyvk-97ay" }, { "vulnerability": "VCID-tmrt-6fxw-5ugh" }, { "vulnerability": "VCID-tqf5-2fsm-8fch" }, { "vulnerability": "VCID-tw1y-t4qj-j3d1" }, { "vulnerability": "VCID-uw2r-3gvq-bbcq" }, { "vulnerability": "VCID-vndb-w8e1-4ugv" }, { "vulnerability": "VCID-vrt1-aj9v-2kb6" }, { "vulnerability": "VCID-vxj6-wvyz-zbaq" }, { "vulnerability": "VCID-vxry-uvph-kbfd" }, { "vulnerability": "VCID-vybh-pxr3-17hn" }, { "vulnerability": "VCID-wea9-egep-h7g5" }, { "vulnerability": "VCID-wge3-kxdq-f3bz" }, { "vulnerability": "VCID-wkm6-cgc8-bfa8" }, { "vulnerability": "VCID-wr5t-xqnn-gkcj" }, { "vulnerability": "VCID-wxps-mnue-6bbh" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xh7y-56vy-5ud8" }, { "vulnerability": "VCID-xqew-bx7v-1qfk" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zkea-ge1t-z7gn" }, { "vulnerability": "VCID-zspb-bd6j-wyd2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.5.1" } ], "aliases": [ "GHSA-g4pf-3jvq-2gcw" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-hv3n-j8ck-1ufx" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/8948?format=api", "vulnerability_id": "VCID-nwxj-3ajk-rkh5", "summary": "Cross-site Scripting\nThe page module in TYPO3 is vulnerable to XSS via `$GLOBALS['TYPO3_CONF_VARS']['SYS']['sitename']`, as demonstrated by an admin entering a crafted site name during the installation process.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-6905", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.02274", "scoring_system": "epss", "scoring_elements": "0.84621", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.02274", "scoring_system": "epss", "scoring_elements": "0.84708", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.02274", "scoring_system": "epss", "scoring_elements": "0.84681", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.02274", "scoring_system": "epss", "scoring_elements": "0.84679", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.02274", "scoring_system": "epss", "scoring_elements": "0.84619", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.02274", "scoring_system": "epss", "scoring_elements": "0.84642", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.02274", "scoring_system": "epss", "scoring_elements": "0.84678", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.02274", "scoring_system": "epss", "scoring_elements": "0.84657", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.02274", "scoring_system": "epss", "scoring_elements": "0.84662", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.02274", "scoring_system": "epss", "scoring_elements": "0.84666", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.02274", "scoring_system": "epss", "scoring_elements": "0.84584", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.02274", "scoring_system": "epss", "scoring_elements": "0.84599", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.02274", "scoring_system": "epss", "scoring_elements": "0.84649", "published_at": "2026-04-09T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-6905" }, { "reference_url": "https://forge.typo3.org/issues/84191", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://forge.typo3.org/issues/84191" }, { "reference_url": "https://github.com/pradeepjairamani/TYPO3-XSS-POC", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pradeepjairamani/TYPO3-XSS-POC" }, { "reference_url": "https://github.com/TYPO3/typo3/commit/d2c0ea7db3b31a796a82f9d39f77f9983beb7c35", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3/typo3/commit/d2c0ea7db3b31a796a82f9d39f77f9983beb7c35" }, { "reference_url": "http://www.securitytracker.com/id/1040755", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.securitytracker.com/id/1040755" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-6905", "reference_id": "CVE-2018-6905", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-6905" }, { "reference_url": "https://github.com/advisories/GHSA-3w22-wrwx-2r75", "reference_id": "GHSA-3w22-wrwx-2r75", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-3w22-wrwx-2r75" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/27471?format=api", "purl": "pkg:composer/typo3/cms@8.7.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-18dg-eevv-3ug9" }, { "vulnerability": "VCID-1jp6-qjpr-xfev" }, { "vulnerability": "VCID-1kae-ffj3-xyc7" }, { "vulnerability": "VCID-28bf-jvah-zkhw" }, { "vulnerability": "VCID-2meq-x4kd-bbdn" }, { "vulnerability": "VCID-3gg5-1921-rbfs" }, { "vulnerability": "VCID-3n2r-awja-dug9" }, { "vulnerability": "VCID-3v4n-fzxa-bfaw" }, { "vulnerability": "VCID-4ack-haf2-cfbe" }, { "vulnerability": "VCID-4btk-jt5n-2ugf" }, { "vulnerability": "VCID-551q-gpyd-ffe8" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-5qfv-y43v-akdm" }, { "vulnerability": "VCID-6487-15z5-pkd4" }, { "vulnerability": "VCID-6b5q-vzs3-pkcc" }, { "vulnerability": "VCID-9g62-zd1x-3bdg" }, { "vulnerability": "VCID-9gpp-ez8w-rqav" }, { "vulnerability": "VCID-9jj4-ec9n-qbhs" }, { "vulnerability": "VCID-axaf-45kr-kbfe" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-bnne-7p2q-eqd2" }, { "vulnerability": "VCID-bxjw-7426-gyb8" }, { "vulnerability": "VCID-byp6-edft-fbhm" }, { "vulnerability": "VCID-c2tm-eqmm-1ugt" }, { "vulnerability": "VCID-cm14-t8uv-k3es" }, { "vulnerability": "VCID-cmka-8484-27bu" }, { "vulnerability": "VCID-dbrh-t8zx-nkd9" }, { "vulnerability": "VCID-dj88-f3p8-cfbn" }, { "vulnerability": "VCID-dm97-51uu-r7gw" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-e72u-tpc3-23g3" }, { "vulnerability": "VCID-eajg-ctpd-2bby" }, { "vulnerability": "VCID-ehzg-bzrd-kbcc" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-he5m-6wj4-rbhc" }, { "vulnerability": "VCID-j77k-hjgx-5kc5" }, { "vulnerability": "VCID-jppe-cbgm-k3cz" }, { "vulnerability": "VCID-k4h1-mvnf-1ybx" }, { "vulnerability": "VCID-k8af-cg9k-87a9" }, { "vulnerability": "VCID-m7w6-b2xu-6uee" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n78p-x7hh-gqcf" }, { "vulnerability": "VCID-pk8d-8u15-5bfq" }, { "vulnerability": "VCID-px44-19tj-h7aa" }, { "vulnerability": "VCID-q8hy-wjd9-nbgp" }, { "vulnerability": "VCID-qb4j-9tz7-m7a2" }, { "vulnerability": "VCID-rdrs-mhaw-b3ge" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-shqd-udhm-pff8" }, { "vulnerability": "VCID-sr3p-pdxy-4yhu" }, { "vulnerability": "VCID-stzu-sxe6-5yf5" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-tmrt-6fxw-5ugh" }, { "vulnerability": "VCID-tqf5-2fsm-8fch" }, { "vulnerability": "VCID-tw1y-t4qj-j3d1" }, { "vulnerability": "VCID-vndb-w8e1-4ugv" }, { "vulnerability": "VCID-vxj6-wvyz-zbaq" }, { "vulnerability": "VCID-vxry-uvph-kbfd" }, { "vulnerability": "VCID-vybh-pxr3-17hn" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-wea9-egep-h7g5" }, { "vulnerability": "VCID-wkm6-cgc8-bfa8" }, { "vulnerability": "VCID-wr5t-xqnn-gkcj" }, { "vulnerability": "VCID-wxps-mnue-6bbh" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xh7y-56vy-5ud8" }, { "vulnerability": "VCID-xqew-bx7v-1qfk" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zkea-ge1t-z7gn" }, { "vulnerability": "VCID-zspb-bd6j-wyd2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/27472?format=api", "purl": "pkg:composer/typo3/cms@9.1.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-18dg-eevv-3ug9" }, { "vulnerability": "VCID-1jp6-qjpr-xfev" }, { "vulnerability": "VCID-1kae-ffj3-xyc7" }, { "vulnerability": "VCID-28bf-jvah-zkhw" }, { "vulnerability": "VCID-2meq-x4kd-bbdn" }, { "vulnerability": "VCID-2mn6-mdmz-4yd9" }, { "vulnerability": "VCID-3gg5-1921-rbfs" }, { "vulnerability": "VCID-3n2r-awja-dug9" }, { "vulnerability": "VCID-3v4n-fzxa-bfaw" }, { "vulnerability": "VCID-4ack-haf2-cfbe" }, { "vulnerability": "VCID-4btk-jt5n-2ugf" }, { "vulnerability": "VCID-4mkw-tv16-jyca" }, { "vulnerability": "VCID-543x-cnbz-1kb9" }, { "vulnerability": "VCID-551q-gpyd-ffe8" }, { "vulnerability": "VCID-58js-jzm4-4fc7" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5kzs-ex81-bbaj" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-6487-15z5-pkd4" }, { "vulnerability": "VCID-6a9t-8dmn-s3bv" }, { "vulnerability": "VCID-6b5q-vzs3-pkcc" }, { "vulnerability": "VCID-9g62-zd1x-3bdg" }, { "vulnerability": "VCID-9gpp-ez8w-rqav" }, { "vulnerability": "VCID-9jj4-ec9n-qbhs" }, { "vulnerability": "VCID-a49c-fqrj-nbb3" }, { "vulnerability": "VCID-anfj-pmkg-skhe" }, { "vulnerability": "VCID-axaf-45kr-kbfe" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-bnne-7p2q-eqd2" }, { "vulnerability": "VCID-bxjw-7426-gyb8" }, { "vulnerability": "VCID-byp6-edft-fbhm" }, { "vulnerability": "VCID-c2tm-eqmm-1ugt" }, { "vulnerability": "VCID-cm14-t8uv-k3es" }, { "vulnerability": "VCID-cmka-8484-27bu" }, { "vulnerability": "VCID-d8d1-sat6-muhe" }, { "vulnerability": "VCID-dbrh-t8zx-nkd9" }, { "vulnerability": "VCID-dcy2-efyc-6qgq" }, { "vulnerability": "VCID-dj88-f3p8-cfbn" }, { "vulnerability": "VCID-dm97-51uu-r7gw" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-e72u-tpc3-23g3" }, { "vulnerability": "VCID-eajg-ctpd-2bby" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-he5m-6wj4-rbhc" }, { "vulnerability": "VCID-jppe-cbgm-k3cz" }, { "vulnerability": "VCID-k4h1-mvnf-1ybx" }, { "vulnerability": "VCID-k8af-cg9k-87a9" }, { "vulnerability": "VCID-kc67-7kf7-s3d7" }, { "vulnerability": "VCID-kj9x-psfz-2ug1" }, { "vulnerability": "VCID-m7w6-b2xu-6uee" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n78p-x7hh-gqcf" }, { "vulnerability": "VCID-p715-yexd-jfgc" }, { "vulnerability": "VCID-phgh-sd4m-zbdx" }, { "vulnerability": "VCID-pk8d-8u15-5bfq" }, { "vulnerability": "VCID-px44-19tj-h7aa" }, { "vulnerability": "VCID-q8hy-wjd9-nbgp" }, { "vulnerability": "VCID-qb4j-9tz7-m7a2" }, { "vulnerability": "VCID-raxk-rm9v-hubn" }, { "vulnerability": "VCID-rdrs-mhaw-b3ge" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-shqd-udhm-pff8" }, { "vulnerability": "VCID-sr3p-pdxy-4yhu" }, { "vulnerability": "VCID-stzu-sxe6-5yf5" }, { "vulnerability": "VCID-sw7v-fbjk-13hy" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-tmrt-6fxw-5ugh" }, { "vulnerability": "VCID-tqf5-2fsm-8fch" }, { "vulnerability": "VCID-tw1y-t4qj-j3d1" }, { "vulnerability": "VCID-u9bx-8e86-wbew" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vndb-w8e1-4ugv" }, { "vulnerability": "VCID-vxj6-wvyz-zbaq" }, { "vulnerability": "VCID-vxry-uvph-kbfd" }, { "vulnerability": "VCID-vybh-pxr3-17hn" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-wea9-egep-h7g5" }, { "vulnerability": "VCID-wkm6-cgc8-bfa8" }, { "vulnerability": "VCID-wr5t-xqnn-gkcj" }, { "vulnerability": "VCID-wxps-mnue-6bbh" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xh7y-56vy-5ud8" }, { "vulnerability": "VCID-xtdg-uj46-rkcm" }, { "vulnerability": "VCID-xwc2-z7hx-4qa7" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zkea-ge1t-z7gn" }, { "vulnerability": "VCID-zspb-bd6j-wyd2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.1.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/84142?format=api", "purl": "pkg:composer/typo3/cms@9.2.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-18dg-eevv-3ug9" }, { "vulnerability": "VCID-1jp6-qjpr-xfev" }, { "vulnerability": "VCID-1kae-ffj3-xyc7" }, { "vulnerability": "VCID-28bf-jvah-zkhw" }, { "vulnerability": "VCID-2meq-x4kd-bbdn" }, { "vulnerability": "VCID-2mn6-mdmz-4yd9" }, { "vulnerability": "VCID-3gg5-1921-rbfs" }, { "vulnerability": "VCID-3n2r-awja-dug9" }, { "vulnerability": "VCID-3v4n-fzxa-bfaw" }, { "vulnerability": "VCID-4ack-haf2-cfbe" }, { "vulnerability": "VCID-4btk-jt5n-2ugf" }, { "vulnerability": "VCID-4mkw-tv16-jyca" }, { "vulnerability": "VCID-543x-cnbz-1kb9" }, { "vulnerability": "VCID-551q-gpyd-ffe8" }, { "vulnerability": "VCID-58js-jzm4-4fc7" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5kzs-ex81-bbaj" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-6487-15z5-pkd4" }, { "vulnerability": "VCID-6a9t-8dmn-s3bv" }, { "vulnerability": "VCID-6b5q-vzs3-pkcc" }, { "vulnerability": "VCID-9g62-zd1x-3bdg" }, { "vulnerability": "VCID-9gpp-ez8w-rqav" }, { "vulnerability": "VCID-9jj4-ec9n-qbhs" }, { "vulnerability": "VCID-a49c-fqrj-nbb3" }, { "vulnerability": "VCID-anfj-pmkg-skhe" }, { "vulnerability": "VCID-axaf-45kr-kbfe" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-bnne-7p2q-eqd2" }, { "vulnerability": "VCID-bxjw-7426-gyb8" }, { "vulnerability": "VCID-byp6-edft-fbhm" }, { "vulnerability": "VCID-c2tm-eqmm-1ugt" }, { "vulnerability": "VCID-cm14-t8uv-k3es" }, { "vulnerability": "VCID-cmka-8484-27bu" }, { "vulnerability": "VCID-d8d1-sat6-muhe" }, { "vulnerability": "VCID-dbrh-t8zx-nkd9" }, { "vulnerability": "VCID-dcy2-efyc-6qgq" }, { "vulnerability": "VCID-dj88-f3p8-cfbn" }, { "vulnerability": "VCID-dm97-51uu-r7gw" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-e72u-tpc3-23g3" }, { "vulnerability": "VCID-eajg-ctpd-2bby" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-he5m-6wj4-rbhc" }, { "vulnerability": "VCID-jppe-cbgm-k3cz" }, { "vulnerability": "VCID-k4h1-mvnf-1ybx" }, { "vulnerability": "VCID-k8af-cg9k-87a9" }, { "vulnerability": "VCID-kc67-7kf7-s3d7" }, { "vulnerability": "VCID-kj9x-psfz-2ug1" }, { "vulnerability": "VCID-m7w6-b2xu-6uee" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n78p-x7hh-gqcf" }, { "vulnerability": "VCID-p715-yexd-jfgc" }, { "vulnerability": "VCID-phgh-sd4m-zbdx" }, { "vulnerability": "VCID-pk8d-8u15-5bfq" }, { "vulnerability": "VCID-px44-19tj-h7aa" }, { "vulnerability": "VCID-q8hy-wjd9-nbgp" }, { "vulnerability": "VCID-qb4j-9tz7-m7a2" }, { "vulnerability": "VCID-raxk-rm9v-hubn" }, { "vulnerability": "VCID-rdrs-mhaw-b3ge" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-shqd-udhm-pff8" }, { "vulnerability": "VCID-sr3p-pdxy-4yhu" }, { "vulnerability": "VCID-stzu-sxe6-5yf5" }, { "vulnerability": "VCID-sw7v-fbjk-13hy" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-tmrt-6fxw-5ugh" }, { "vulnerability": "VCID-tqf5-2fsm-8fch" }, { "vulnerability": "VCID-tw1y-t4qj-j3d1" }, { "vulnerability": "VCID-u9bx-8e86-wbew" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vndb-w8e1-4ugv" }, { "vulnerability": "VCID-vxj6-wvyz-zbaq" }, { "vulnerability": "VCID-vxry-uvph-kbfd" }, { "vulnerability": "VCID-vybh-pxr3-17hn" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-wea9-egep-h7g5" }, { "vulnerability": "VCID-wkm6-cgc8-bfa8" }, { "vulnerability": "VCID-wr5t-xqnn-gkcj" }, { "vulnerability": "VCID-wxps-mnue-6bbh" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xh7y-56vy-5ud8" }, { "vulnerability": "VCID-xtdg-uj46-rkcm" }, { "vulnerability": "VCID-xwc2-z7hx-4qa7" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zkea-ge1t-z7gn" }, { "vulnerability": "VCID-zspb-bd6j-wyd2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.2.0" } ], "aliases": [ "CVE-2018-6905", "GHSA-3w22-wrwx-2r75" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-nwxj-3ajk-rkh5" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7765?format=api", "vulnerability_id": "VCID-q9ak-qcq6-qfhy", "summary": "Code Injection\nRemote Code Execution in third party library swiftmailer.", "references": [ { "reference_url": "https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-001/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-001/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/23748?format=api", "purl": "pkg:composer/typo3/cms@6.2.30", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-nwxj-3ajk-rkh5" }, { "vulnerability": "VCID-re9h-ze98-rbhu" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@6.2.30" }, { "url": "http://public2.vulnerablecode.io/api/packages/20921?format=api", "purl": "pkg:composer/typo3/cms@7.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ng4-5tkh-g7h5" }, { "vulnerability": "VCID-28bf-jvah-zkhw" }, { "vulnerability": "VCID-2rhx-afay-97da" }, { "vulnerability": "VCID-37wu-bjfj-k7eg" }, { "vulnerability": "VCID-4etp-u4pt-v7hm" }, { "vulnerability": "VCID-51ba-3ag9-rucn" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-6b5q-vzs3-pkcc" }, { "vulnerability": "VCID-6gms-w48j-4ffh" }, { "vulnerability": "VCID-6pvx-1qan-ukef" }, { "vulnerability": "VCID-6spw-66jg-syb1" }, { "vulnerability": "VCID-7zx9-8afq-y3hc" }, { "vulnerability": "VCID-99uu-rfrf-bqa7" }, { "vulnerability": "VCID-asym-tgh2-1kg8" }, { "vulnerability": "VCID-b45y-dr1a-7qd7" }, { "vulnerability": "VCID-b5ht-z6zp-pbht" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-bnne-7p2q-eqd2" }, { "vulnerability": "VCID-buax-rz7x-r7c2" }, { "vulnerability": "VCID-bxjw-7426-gyb8" }, { "vulnerability": "VCID-cczn-x8q7-k7ba" }, { "vulnerability": "VCID-cjgc-q6p5-2ydc" }, { "vulnerability": "VCID-ck23-cxn6-bbf3" }, { "vulnerability": "VCID-dbrh-t8zx-nkd9" }, { "vulnerability": "VCID-dm97-51uu-r7gw" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-ehzg-bzrd-kbcc" }, { "vulnerability": "VCID-f4pm-9tq5-q3ch" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-h958-d3pm-kfcs" }, { "vulnerability": "VCID-kgcq-paqm-9ya6" }, { "vulnerability": "VCID-kpze-14jy-xud9" }, { "vulnerability": "VCID-kqbk-4q4z-nkec" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n78p-x7hh-gqcf" }, { "vulnerability": "VCID-ne8w-dpjw-7qf1" }, { "vulnerability": "VCID-nwxj-3ajk-rkh5" }, { "vulnerability": "VCID-pgzu-kxuj-j3fh" }, { "vulnerability": "VCID-pk8d-8u15-5bfq" }, { "vulnerability": "VCID-q6dx-uskc-y3hs" }, { "vulnerability": "VCID-qemc-8kj8-r3cd" }, { "vulnerability": "VCID-rdrs-mhaw-b3ge" }, { "vulnerability": "VCID-re9h-ze98-rbhu" }, { "vulnerability": "VCID-rwgf-2pfh-ufdz" }, { "vulnerability": "VCID-se8w-fv8x-tqde" }, { "vulnerability": "VCID-sr3p-pdxy-4yhu" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-tmrt-6fxw-5ugh" }, { "vulnerability": "VCID-tw1y-t4qj-j3d1" }, { "vulnerability": "VCID-vbbx-pk8m-jfhd" }, { "vulnerability": "VCID-vndb-w8e1-4ugv" }, { "vulnerability": "VCID-wr5t-xqnn-gkcj" }, { "vulnerability": "VCID-ww44-zmx7-47ft" }, { "vulnerability": "VCID-wxps-mnue-6bbh" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xhq3-ts9t-sbdy" }, { "vulnerability": "VCID-xkpp-psz2-2kag" }, { "vulnerability": "VCID-xp55-jxjr-zqcb" }, { "vulnerability": "VCID-xqew-bx7v-1qfk" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zspb-bd6j-wyd2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/23749?format=api", "purl": "pkg:composer/typo3/cms@7.6.15", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-28bf-jvah-zkhw" }, { "vulnerability": "VCID-2fs8-bscc-3ye2" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-6b5q-vzs3-pkcc" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-bnne-7p2q-eqd2" }, { "vulnerability": "VCID-bxjw-7426-gyb8" }, { "vulnerability": "VCID-dbrh-t8zx-nkd9" }, { "vulnerability": "VCID-dm97-51uu-r7gw" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-ehzg-bzrd-kbcc" }, { "vulnerability": "VCID-ep6t-zwd1-4bb3" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-fy3g-uegw-2bew" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-h63t-9enx-qfdn" }, { "vulnerability": "VCID-hpgq-deze-p7dp" }, { "vulnerability": "VCID-jqth-wfgx-87cx" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-mqbh-k9n3-nbed" }, { "vulnerability": "VCID-mub5-s7h1-57cy" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n78p-x7hh-gqcf" }, { "vulnerability": "VCID-nt6a-5zkv-pbcm" }, { "vulnerability": "VCID-nwxj-3ajk-rkh5" }, { "vulnerability": "VCID-pk8d-8u15-5bfq" }, { "vulnerability": "VCID-pnfa-cksc-43de" }, { "vulnerability": "VCID-rdrs-mhaw-b3ge" }, { "vulnerability": "VCID-rzw5-8d1u-sfam" }, { "vulnerability": "VCID-sr3p-pdxy-4yhu" }, { "vulnerability": "VCID-sxr7-cutf-8kh6" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-tmrt-6fxw-5ugh" }, { "vulnerability": "VCID-tw1y-t4qj-j3d1" }, { "vulnerability": "VCID-vndb-w8e1-4ugv" }, { "vulnerability": "VCID-vrt1-aj9v-2kb6" }, { "vulnerability": "VCID-wge3-kxdq-f3bz" }, { "vulnerability": "VCID-wr5t-xqnn-gkcj" }, { "vulnerability": "VCID-wxps-mnue-6bbh" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xqew-bx7v-1qfk" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zspb-bd6j-wyd2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.15" }, { "url": "http://public2.vulnerablecode.io/api/packages/23750?format=api", "purl": "pkg:composer/typo3/cms@8.5.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-18dg-eevv-3ug9" }, { "vulnerability": "VCID-1jp6-qjpr-xfev" }, { "vulnerability": "VCID-1kae-ffj3-xyc7" }, { "vulnerability": "VCID-28bf-jvah-zkhw" }, { "vulnerability": "VCID-2fs8-bscc-3ye2" }, { "vulnerability": "VCID-2meq-x4kd-bbdn" }, { "vulnerability": "VCID-3gg5-1921-rbfs" }, { "vulnerability": "VCID-3n2r-awja-dug9" }, { "vulnerability": "VCID-3v4n-fzxa-bfaw" }, { "vulnerability": "VCID-4ack-haf2-cfbe" }, { "vulnerability": "VCID-4btk-jt5n-2ugf" }, { "vulnerability": "VCID-551q-gpyd-ffe8" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-5qfv-y43v-akdm" }, { "vulnerability": "VCID-5yg8-2cbr-d3as" }, { "vulnerability": "VCID-6487-15z5-pkd4" }, { "vulnerability": "VCID-6b5q-vzs3-pkcc" }, { "vulnerability": "VCID-9g62-zd1x-3bdg" }, { "vulnerability": "VCID-9gpp-ez8w-rqav" }, { "vulnerability": "VCID-9jj4-ec9n-qbhs" }, { "vulnerability": "VCID-axaf-45kr-kbfe" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-bnne-7p2q-eqd2" }, { "vulnerability": "VCID-bxjw-7426-gyb8" }, { "vulnerability": "VCID-byp6-edft-fbhm" }, { "vulnerability": "VCID-c2tm-eqmm-1ugt" }, { "vulnerability": "VCID-cm14-t8uv-k3es" }, { "vulnerability": "VCID-cmka-8484-27bu" }, { "vulnerability": "VCID-dbrh-t8zx-nkd9" }, { "vulnerability": "VCID-dj88-f3p8-cfbn" }, { "vulnerability": "VCID-dm97-51uu-r7gw" }, { "vulnerability": "VCID-dquc-7amf-e7cs" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-e72u-tpc3-23g3" }, { "vulnerability": "VCID-e7sv-4xc2-m3d5" }, { "vulnerability": "VCID-eajg-ctpd-2bby" }, { "vulnerability": "VCID-ehzg-bzrd-kbcc" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-ep6t-zwd1-4bb3" }, { "vulnerability": "VCID-euk5-hagy-xqfz" }, { "vulnerability": "VCID-fy3g-uegw-2bew" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-h63t-9enx-qfdn" }, { "vulnerability": "VCID-he5m-6wj4-rbhc" }, { "vulnerability": "VCID-hpgq-deze-p7dp" }, { "vulnerability": "VCID-hv3n-j8ck-1ufx" }, { "vulnerability": "VCID-j77k-hjgx-5kc5" }, { "vulnerability": "VCID-jppe-cbgm-k3cz" }, { "vulnerability": "VCID-jqth-wfgx-87cx" }, { "vulnerability": "VCID-k4h1-mvnf-1ybx" }, { "vulnerability": "VCID-k8af-cg9k-87a9" }, { "vulnerability": "VCID-m7w6-b2xu-6uee" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-mqbh-k9n3-nbed" }, { "vulnerability": "VCID-mub5-s7h1-57cy" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n78p-x7hh-gqcf" }, { "vulnerability": "VCID-nt6a-5zkv-pbcm" }, { "vulnerability": "VCID-nwxj-3ajk-rkh5" }, { "vulnerability": "VCID-pk8d-8u15-5bfq" }, { "vulnerability": "VCID-pnfa-cksc-43de" }, { "vulnerability": "VCID-px44-19tj-h7aa" }, { "vulnerability": "VCID-q8hy-wjd9-nbgp" }, { "vulnerability": "VCID-qb4j-9tz7-m7a2" }, { "vulnerability": "VCID-rdrs-mhaw-b3ge" }, { "vulnerability": "VCID-rzw5-8d1u-sfam" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-shqd-udhm-pff8" }, { "vulnerability": "VCID-sr3p-pdxy-4yhu" }, { "vulnerability": "VCID-stzu-sxe6-5yf5" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-tgma-cyvk-97ay" }, { "vulnerability": "VCID-tmrt-6fxw-5ugh" }, { "vulnerability": "VCID-tqf5-2fsm-8fch" }, { "vulnerability": "VCID-tw1y-t4qj-j3d1" }, { "vulnerability": "VCID-uw2r-3gvq-bbcq" }, { "vulnerability": "VCID-vndb-w8e1-4ugv" }, { "vulnerability": "VCID-vrt1-aj9v-2kb6" }, { "vulnerability": "VCID-vxj6-wvyz-zbaq" }, { "vulnerability": "VCID-vxry-uvph-kbfd" }, { "vulnerability": "VCID-vybh-pxr3-17hn" }, { "vulnerability": "VCID-wea9-egep-h7g5" }, { "vulnerability": "VCID-wge3-kxdq-f3bz" }, { "vulnerability": "VCID-wkm6-cgc8-bfa8" }, { "vulnerability": "VCID-wr5t-xqnn-gkcj" }, { "vulnerability": "VCID-wxps-mnue-6bbh" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xh7y-56vy-5ud8" }, { "vulnerability": "VCID-xqew-bx7v-1qfk" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zkea-ge1t-z7gn" }, { "vulnerability": "VCID-zspb-bd6j-wyd2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.5.0" } ], "aliases": [ "2017-01-03-1" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-q9ak-qcq6-qfhy" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/57345?format=api", "vulnerability_id": "VCID-re9h-ze98-rbhu", "summary": "Typo3 Cross-Site Scripting in Flash component (ELTS)\nTYPO3 6.2.0 to 6.2.38 ELTS and 7.0.0 to 7.1.0 included a vulnerable external component, which could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack on a targeted system.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-8091", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.20517", "scoring_system": "epss", "scoring_elements": "0.95574", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.20517", "scoring_system": "epss", "scoring_elements": "0.95524", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.20517", "scoring_system": "epss", "scoring_elements": "0.95532", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.20517", "scoring_system": "epss", "scoring_elements": "0.95538", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.20517", "scoring_system": "epss", "scoring_elements": "0.95542", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.20517", "scoring_system": "epss", "scoring_elements": "0.95549", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.20517", "scoring_system": "epss", "scoring_elements": "0.95552", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.20517", "scoring_system": "epss", "scoring_elements": "0.95556", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.20517", "scoring_system": "epss", "scoring_elements": "0.95557", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.20517", "scoring_system": "epss", "scoring_elements": "0.95559", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.20517", "scoring_system": "epss", "scoring_elements": "0.95567", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.20517", "scoring_system": "epss", "scoring_elements": "0.95573", "published_at": "2026-04-21T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-8091" }, { "reference_url": "https://github.com/TYPO3/typo3", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3/typo3" }, { "reference_url": "https://github.com/TYPO3/typo3/blob/4cb53e828bd5138d180cdf9cac1ccf7fd31086d2/typo3/sysext/core/Documentation/Changelog/7.2/Breaking-65962-WebSVGLibraryAndAPIRemoved.rst", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3/typo3/blob/4cb53e828bd5138d180cdf9cac1ccf7fd31086d2/typo3/sysext/core/Documentation/Changelog/7.2/Breaking-65962-WebSVGLibraryAndAPIRemoved.rst" }, { "reference_url": "https://github.com/TYPO3/typo3/commit/482e2e992f80f5e38cb48fcaea40fd9812a5252c", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3/typo3/commit/482e2e992f80f5e38cb48fcaea40fd9812a5252c" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8091", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8091" }, { "reference_url": "https://typo3.org/security/advisory/typo3-psa-2019-003", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://typo3.org/security/advisory/typo3-psa-2019-003" }, { "reference_url": "https://typo3.org/security/advisory/typo3-psa-2019-003/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-psa-2019-003/" }, { "reference_url": "https://www.purplemet.com/blog/typo3-xss-vulnerability", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.purplemet.com/blog/typo3-xss-vulnerability" }, { "reference_url": "https://github.com/advisories/GHSA-qvhv-pwww-53jj", "reference_id": "GHSA-qvhv-pwww-53jj", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-qvhv-pwww-53jj" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/83395?format=api", "purl": "pkg:composer/typo3/cms@6.2.39", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@6.2.39" }, { "url": "http://public2.vulnerablecode.io/api/packages/83394?format=api", "purl": "pkg:composer/typo3/cms@7.2.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ng4-5tkh-g7h5" }, { "vulnerability": "VCID-28bf-jvah-zkhw" }, { "vulnerability": "VCID-2rhx-afay-97da" }, { "vulnerability": "VCID-37wu-bjfj-k7eg" }, { "vulnerability": "VCID-4etp-u4pt-v7hm" }, { "vulnerability": "VCID-51ba-3ag9-rucn" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-6b5q-vzs3-pkcc" }, { "vulnerability": "VCID-6gms-w48j-4ffh" }, { "vulnerability": "VCID-6pvx-1qan-ukef" }, { "vulnerability": "VCID-6spw-66jg-syb1" }, { "vulnerability": "VCID-7zx9-8afq-y3hc" }, { "vulnerability": "VCID-b5ht-z6zp-pbht" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-bnne-7p2q-eqd2" }, { "vulnerability": "VCID-buax-rz7x-r7c2" }, { "vulnerability": "VCID-bxjw-7426-gyb8" }, { "vulnerability": "VCID-cczn-x8q7-k7ba" }, { "vulnerability": "VCID-cjgc-q6p5-2ydc" }, { "vulnerability": "VCID-ck23-cxn6-bbf3" }, { "vulnerability": "VCID-dbrh-t8zx-nkd9" }, { "vulnerability": "VCID-dm97-51uu-r7gw" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-ehzg-bzrd-kbcc" }, { "vulnerability": "VCID-f4pm-9tq5-q3ch" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-h958-d3pm-kfcs" }, { "vulnerability": "VCID-jmu3-5k7e-x7ch" }, { "vulnerability": "VCID-jqx9-41zx-dbcy" }, { "vulnerability": "VCID-kgcq-paqm-9ya6" }, { "vulnerability": "VCID-kpze-14jy-xud9" }, { "vulnerability": "VCID-kqbk-4q4z-nkec" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n78p-x7hh-gqcf" }, { "vulnerability": "VCID-ne8w-dpjw-7qf1" }, { "vulnerability": "VCID-nwxj-3ajk-rkh5" }, { "vulnerability": "VCID-pgzu-kxuj-j3fh" }, { "vulnerability": "VCID-pk8d-8u15-5bfq" }, { "vulnerability": "VCID-q6dx-uskc-y3hs" }, { "vulnerability": "VCID-qemc-8kj8-r3cd" }, { "vulnerability": "VCID-rdrs-mhaw-b3ge" }, { "vulnerability": "VCID-rwgf-2pfh-ufdz" }, { "vulnerability": "VCID-se8w-fv8x-tqde" }, { "vulnerability": "VCID-sr3p-pdxy-4yhu" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-tmrt-6fxw-5ugh" }, { "vulnerability": "VCID-tw1y-t4qj-j3d1" }, { "vulnerability": "VCID-vndb-w8e1-4ugv" }, { "vulnerability": "VCID-wr5t-xqnn-gkcj" }, { "vulnerability": "VCID-ww44-zmx7-47ft" }, { "vulnerability": "VCID-wxps-mnue-6bbh" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xhq3-ts9t-sbdy" }, { "vulnerability": "VCID-xkpp-psz2-2kag" }, { "vulnerability": "VCID-xqew-bx7v-1qfk" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zspb-bd6j-wyd2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.2.0" } ], "aliases": [ "CVE-2020-8091", "GHSA-qvhv-pwww-53jj" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-re9h-ze98-rbhu" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/56690?format=api", "vulnerability_id": "VCID-xa4m-xpa9-v7h8", "summary": "TYPO3 Insecure Deserialization in Query Generator & Query View\nAn issue was discovered in TYPO3 before 8.7.30, 9.x before 9.5.12, and 10.x before 10.2.2. It has been discovered that the classes QueryGenerator and QueryView are vulnerable to insecure deserialization. One exploitable scenario requires having the system extension ext:lowlevel (Backend Module: DB Check) installed, with a valid backend user who has administrator privileges. The other exploitable scenario requires having the system extension ext:sys_action installed, with a valid backend user who has limited privileges.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-19849", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00746", "scoring_system": "epss", "scoring_elements": "0.73036", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00746", "scoring_system": "epss", "scoring_elements": "0.73142", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.00746", "scoring_system": "epss", "scoring_elements": "0.73104", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00746", "scoring_system": "epss", "scoring_elements": "0.73111", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00746", "scoring_system": "epss", "scoring_elements": "0.73101", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00746", "scoring_system": "epss", "scoring_elements": "0.73058", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00746", "scoring_system": "epss", "scoring_elements": "0.73065", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00746", "scoring_system": "epss", "scoring_elements": "0.73085", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00746", "scoring_system": "epss", "scoring_elements": "0.73061", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00746", "scoring_system": "epss", "scoring_elements": "0.73048", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00746", "scoring_system": "epss", "scoring_elements": "0.73005", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.00746", "scoring_system": "epss", "scoring_elements": "0.73015", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00746", "scoring_system": "epss", "scoring_elements": "0.73011", "published_at": "2026-04-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-19849" }, { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2019-19849.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2019-19849.yaml" }, { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2019-19849.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2019-19849.yaml" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19849", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19849" }, { "reference_url": "https://review.typo3.org/q/%2522Resolves:+%252389005%2522+topic:security", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://review.typo3.org/q/%2522Resolves:+%252389005%2522+topic:security" }, { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2019-026", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://typo3.org/security/advisory/typo3-core-sa-2019-026" }, { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2019-026/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2019-026/" }, { "reference_url": "https://github.com/advisories/GHSA-rcgc-4xfc-564v", "reference_id": "GHSA-rcgc-4xfc-564v", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-rcgc-4xfc-564v" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/58878?format=api", "purl": "pkg:composer/typo3/cms@8.7.30", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-he5m-6wj4-rbhc" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-xh7y-56vy-5ud8" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.30" }, { "url": "http://public2.vulnerablecode.io/api/packages/58879?format=api", "purl": "pkg:composer/typo3/cms@9.5.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2mn6-mdmz-4yd9" }, { "vulnerability": "VCID-543x-cnbz-1kb9" }, { "vulnerability": "VCID-58js-jzm4-4fc7" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5kzs-ex81-bbaj" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-6a9t-8dmn-s3bv" }, { "vulnerability": "VCID-7kjw-j8st-mqfr" }, { "vulnerability": "VCID-a49c-fqrj-nbb3" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-d8d1-sat6-muhe" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-he5m-6wj4-rbhc" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-phgh-sd4m-zbdx" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-sw7v-fbjk-13hy" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-xh7y-56vy-5ud8" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/58877?format=api", "purl": "pkg:composer/typo3/cms@10.2.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1yxw-saf5-wue7" }, { "vulnerability": "VCID-2mn6-mdmz-4yd9" }, { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-543x-cnbz-1kb9" }, { "vulnerability": "VCID-58js-jzm4-4fc7" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5kzs-ex81-bbaj" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-6a9t-8dmn-s3bv" }, { "vulnerability": "VCID-7kjw-j8st-mqfr" }, { "vulnerability": "VCID-8sdd-b1bn-cuhx" }, { "vulnerability": "VCID-a49c-fqrj-nbb3" }, { "vulnerability": "VCID-a89c-jvwa-6kh5" }, { "vulnerability": "VCID-av8u-rvzq-4fc7" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-cdjv-fp71-y3dv" }, { "vulnerability": "VCID-d8d1-sat6-muhe" }, { "vulnerability": "VCID-dhrm-uxuv-zfaj" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-e32h-8q61-hbgc" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-he5m-6wj4-rbhc" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-phgh-sd4m-zbdx" }, { "vulnerability": "VCID-remd-55jh-r3g5" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-sw7v-fbjk-13hy" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-usmv-r64u-m7cb" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vwb2-a84s-5qak" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-w13x-3rp9-wyej" }, { "vulnerability": "VCID-xh7y-56vy-5ud8" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-yj9g-uz1a-jkf2" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@10.2.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/82226?format=api", "purl": "pkg:composer/typo3/cms@10.2.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1yxw-saf5-wue7" }, { "vulnerability": "VCID-2mn6-mdmz-4yd9" }, { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-543x-cnbz-1kb9" }, { "vulnerability": "VCID-58js-jzm4-4fc7" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5kzs-ex81-bbaj" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-6a9t-8dmn-s3bv" }, { "vulnerability": "VCID-7kjw-j8st-mqfr" }, { "vulnerability": "VCID-8sdd-b1bn-cuhx" }, { "vulnerability": "VCID-a49c-fqrj-nbb3" }, { "vulnerability": "VCID-a89c-jvwa-6kh5" }, { "vulnerability": "VCID-av8u-rvzq-4fc7" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-cdjv-fp71-y3dv" }, { "vulnerability": "VCID-d8d1-sat6-muhe" }, { "vulnerability": "VCID-dhrm-uxuv-zfaj" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-e32h-8q61-hbgc" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-he5m-6wj4-rbhc" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-phgh-sd4m-zbdx" }, { "vulnerability": "VCID-remd-55jh-r3g5" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-sw7v-fbjk-13hy" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-usmv-r64u-m7cb" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vwb2-a84s-5qak" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-w13x-3rp9-wyej" }, { "vulnerability": "VCID-xh7y-56vy-5ud8" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-yj9g-uz1a-jkf2" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@10.2.2" } ], "aliases": [ "CVE-2019-19849", "GHSA-rcgc-4xfc-564v" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-xa4m-xpa9-v7h8" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/52642?format=api", "vulnerability_id": "VCID-zdq2-dhb2-6kaq", "summary": "TYPO3 CMS vulnerable to Weak Authentication in Frontend Login\n### Problem\nRestricting frontend login to specific users, organized in different storage folders (partitions), can be bypassed. A potential attacker might use this ambiguity in usernames to get access to a different account - however, credentials must be known to the adversary.\n\n### Solution\nUpdate to TYPO3 versions 8.7.49 ELTS, 9.5.38 ELTS, 10.4.33, 11.5.20, 12.1.1 that fix the problem described above.\n\n### References\n* [TYPO3-CORE-SA-2022-013](https://typo3.org/security/advisory/typo3-core-sa-2022-013)", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-23501", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00229", "scoring_system": "epss", "scoring_elements": "0.45744", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00229", "scoring_system": "epss", "scoring_elements": "0.45668", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.00229", "scoring_system": "epss", "scoring_elements": "0.4579", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00229", "scoring_system": "epss", "scoring_elements": "0.45795", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00229", "scoring_system": "epss", "scoring_elements": "0.45746", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00229", "scoring_system": "epss", "scoring_elements": "0.45738", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00229", "scoring_system": "epss", "scoring_elements": "0.45768", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00229", "scoring_system": "epss", "scoring_elements": "0.45745", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00229", "scoring_system": "epss", "scoring_elements": "0.45749", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00229", "scoring_system": "epss", "scoring_elements": "0.45693", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00229", "scoring_system": "epss", "scoring_elements": "0.45724", "published_at": "2026-04-02T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-23501" }, { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2022-23501.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2022-23501.yaml" }, { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2022-23501.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2022-23501.yaml" }, { "reference_url": "https://github.com/TYPO3/typo3", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3/typo3" }, { "reference_url": "https://github.com/TYPO3/typo3/commit/28be9cdb3fed02ce4cfc6fa2d39f7d8e2266eced", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3/typo3/commit/28be9cdb3fed02ce4cfc6fa2d39f7d8e2266eced" }, { "reference_url": "https://github.com/TYPO3/typo3/security/advisories/GHSA-jfp7-79g7-89rf", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-21T18:48:00Z/" } ], "url": "https://github.com/TYPO3/typo3/security/advisories/GHSA-jfp7-79g7-89rf" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-23501", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-23501" }, { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2022-013", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://typo3.org/security/advisory/typo3-core-sa-2022-013" }, { "reference_url": "https://github.com/advisories/GHSA-jfp7-79g7-89rf", "reference_id": "GHSA-jfp7-79g7-89rf", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-jfp7-79g7-89rf" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/80269?format=api", "purl": "pkg:composer/typo3/cms@10.4.33", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-vyvy-y3cw-hbgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@10.4.33" }, { "url": "http://public2.vulnerablecode.io/api/packages/80270?format=api", "purl": "pkg:composer/typo3/cms@11.5.20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-vyvy-y3cw-hbgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@11.5.20" }, { "url": "http://public2.vulnerablecode.io/api/packages/80271?format=api", "purl": "pkg:composer/typo3/cms@12.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-vyvy-y3cw-hbgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@12.1.1" } ], "aliases": [ "CVE-2022-23501", "GHSA-jfp7-79g7-89rf", "GMS-2022-8134" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-zdq2-dhb2-6kaq" } ], "fixing_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7556?format=api", "vulnerability_id": "VCID-1jcy-nx8g-z3d3", "summary": "Insecure Deserialization\nInsecure Unserialize in TYPO3 Backend.", "references": [ { "reference_url": "https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2016-023/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2016-023/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/23261?format=api", "purl": "pkg:composer/typo3/cms@6.2.29", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-hv3n-j8ck-1ufx" }, { "vulnerability": "VCID-nwxj-3ajk-rkh5" }, { "vulnerability": "VCID-q9ak-qcq6-qfhy" }, { "vulnerability": "VCID-re9h-ze98-rbhu" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@6.2.29" }, { "url": "http://public2.vulnerablecode.io/api/packages/20921?format=api", "purl": "pkg:composer/typo3/cms@7.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ng4-5tkh-g7h5" }, { "vulnerability": "VCID-28bf-jvah-zkhw" }, { "vulnerability": "VCID-2rhx-afay-97da" }, { "vulnerability": "VCID-37wu-bjfj-k7eg" }, { "vulnerability": "VCID-4etp-u4pt-v7hm" }, { "vulnerability": "VCID-51ba-3ag9-rucn" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-6b5q-vzs3-pkcc" }, { "vulnerability": "VCID-6gms-w48j-4ffh" }, { "vulnerability": "VCID-6pvx-1qan-ukef" }, { "vulnerability": "VCID-6spw-66jg-syb1" }, { "vulnerability": "VCID-7zx9-8afq-y3hc" }, { "vulnerability": "VCID-99uu-rfrf-bqa7" }, { "vulnerability": "VCID-asym-tgh2-1kg8" }, { "vulnerability": "VCID-b45y-dr1a-7qd7" }, { "vulnerability": "VCID-b5ht-z6zp-pbht" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-bnne-7p2q-eqd2" }, { "vulnerability": "VCID-buax-rz7x-r7c2" }, { "vulnerability": "VCID-bxjw-7426-gyb8" }, { "vulnerability": "VCID-cczn-x8q7-k7ba" }, { "vulnerability": "VCID-cjgc-q6p5-2ydc" }, { "vulnerability": "VCID-ck23-cxn6-bbf3" }, { "vulnerability": "VCID-dbrh-t8zx-nkd9" }, { "vulnerability": "VCID-dm97-51uu-r7gw" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-ehzg-bzrd-kbcc" }, { "vulnerability": "VCID-f4pm-9tq5-q3ch" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-h958-d3pm-kfcs" }, { "vulnerability": "VCID-kgcq-paqm-9ya6" }, { "vulnerability": "VCID-kpze-14jy-xud9" }, { "vulnerability": "VCID-kqbk-4q4z-nkec" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n78p-x7hh-gqcf" }, { "vulnerability": "VCID-ne8w-dpjw-7qf1" }, { "vulnerability": "VCID-nwxj-3ajk-rkh5" }, { "vulnerability": "VCID-pgzu-kxuj-j3fh" }, { "vulnerability": "VCID-pk8d-8u15-5bfq" }, { "vulnerability": "VCID-q6dx-uskc-y3hs" }, { "vulnerability": "VCID-qemc-8kj8-r3cd" }, { "vulnerability": "VCID-rdrs-mhaw-b3ge" }, { "vulnerability": "VCID-re9h-ze98-rbhu" }, { "vulnerability": "VCID-rwgf-2pfh-ufdz" }, { "vulnerability": "VCID-se8w-fv8x-tqde" }, { "vulnerability": "VCID-sr3p-pdxy-4yhu" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-tmrt-6fxw-5ugh" }, { "vulnerability": "VCID-tw1y-t4qj-j3d1" }, { "vulnerability": "VCID-vbbx-pk8m-jfhd" }, { "vulnerability": "VCID-vndb-w8e1-4ugv" }, { "vulnerability": "VCID-wr5t-xqnn-gkcj" }, { "vulnerability": "VCID-ww44-zmx7-47ft" }, { "vulnerability": "VCID-wxps-mnue-6bbh" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xhq3-ts9t-sbdy" }, { "vulnerability": "VCID-xkpp-psz2-2kag" }, { "vulnerability": "VCID-xp55-jxjr-zqcb" }, { "vulnerability": "VCID-xqew-bx7v-1qfk" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zspb-bd6j-wyd2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/23262?format=api", "purl": "pkg:composer/typo3/cms@7.6.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-28bf-jvah-zkhw" }, { "vulnerability": "VCID-2fs8-bscc-3ye2" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-6b5q-vzs3-pkcc" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-bnne-7p2q-eqd2" }, { "vulnerability": "VCID-bxjw-7426-gyb8" }, { "vulnerability": "VCID-dbrh-t8zx-nkd9" }, { "vulnerability": "VCID-dm97-51uu-r7gw" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-ehzg-bzrd-kbcc" }, { "vulnerability": "VCID-ep6t-zwd1-4bb3" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-fy3g-uegw-2bew" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-h63t-9enx-qfdn" }, { "vulnerability": "VCID-hpgq-deze-p7dp" }, { "vulnerability": "VCID-hv3n-j8ck-1ufx" }, { "vulnerability": "VCID-jqth-wfgx-87cx" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-mqbh-k9n3-nbed" }, { "vulnerability": "VCID-mub5-s7h1-57cy" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n78p-x7hh-gqcf" }, { "vulnerability": "VCID-nt6a-5zkv-pbcm" }, { "vulnerability": "VCID-nwxj-3ajk-rkh5" }, { "vulnerability": "VCID-pk8d-8u15-5bfq" }, { "vulnerability": "VCID-pnfa-cksc-43de" }, { "vulnerability": "VCID-q9ak-qcq6-qfhy" }, { "vulnerability": "VCID-rdrs-mhaw-b3ge" }, { "vulnerability": "VCID-rzw5-8d1u-sfam" }, { "vulnerability": "VCID-sr3p-pdxy-4yhu" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-tmrt-6fxw-5ugh" }, { "vulnerability": "VCID-tw1y-t4qj-j3d1" }, { "vulnerability": "VCID-vndb-w8e1-4ugv" }, { "vulnerability": "VCID-vrt1-aj9v-2kb6" }, { "vulnerability": "VCID-wge3-kxdq-f3bz" }, { "vulnerability": "VCID-wr5t-xqnn-gkcj" }, { "vulnerability": "VCID-wxps-mnue-6bbh" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xqew-bx7v-1qfk" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zspb-bd6j-wyd2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/23263?format=api", "purl": "pkg:composer/typo3/cms@8.4.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-18dg-eevv-3ug9" }, { "vulnerability": "VCID-1kae-ffj3-xyc7" }, { "vulnerability": "VCID-28bf-jvah-zkhw" }, { "vulnerability": "VCID-2fs8-bscc-3ye2" }, { "vulnerability": "VCID-2meq-x4kd-bbdn" }, { "vulnerability": "VCID-3gg5-1921-rbfs" }, { "vulnerability": "VCID-3n2r-awja-dug9" }, { "vulnerability": "VCID-3v4n-fzxa-bfaw" }, { "vulnerability": "VCID-4ack-haf2-cfbe" }, { "vulnerability": "VCID-4btk-jt5n-2ugf" }, { "vulnerability": "VCID-551q-gpyd-ffe8" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-5qfv-y43v-akdm" }, { "vulnerability": "VCID-5yg8-2cbr-d3as" }, { "vulnerability": "VCID-6487-15z5-pkd4" }, { "vulnerability": "VCID-6b5q-vzs3-pkcc" }, { "vulnerability": "VCID-9g62-zd1x-3bdg" }, { "vulnerability": "VCID-9gpp-ez8w-rqav" }, { "vulnerability": "VCID-axaf-45kr-kbfe" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-bnne-7p2q-eqd2" }, { "vulnerability": "VCID-bxjw-7426-gyb8" }, { "vulnerability": "VCID-c2tm-eqmm-1ugt" }, { "vulnerability": "VCID-cm14-t8uv-k3es" }, { "vulnerability": "VCID-cmka-8484-27bu" }, { "vulnerability": "VCID-dbrh-t8zx-nkd9" }, { "vulnerability": "VCID-dj88-f3p8-cfbn" }, { "vulnerability": "VCID-dm97-51uu-r7gw" }, { "vulnerability": "VCID-dquc-7amf-e7cs" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-e72u-tpc3-23g3" }, { "vulnerability": "VCID-e7sv-4xc2-m3d5" }, { "vulnerability": "VCID-eajg-ctpd-2bby" }, { "vulnerability": "VCID-ehzg-bzrd-kbcc" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-ep6t-zwd1-4bb3" }, { "vulnerability": "VCID-euk5-hagy-xqfz" }, { "vulnerability": "VCID-fy3g-uegw-2bew" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-h63t-9enx-qfdn" }, { "vulnerability": "VCID-he5m-6wj4-rbhc" }, { "vulnerability": "VCID-hpgq-deze-p7dp" }, { "vulnerability": "VCID-hv3n-j8ck-1ufx" }, { "vulnerability": "VCID-j77k-hjgx-5kc5" }, { "vulnerability": "VCID-jppe-cbgm-k3cz" }, { "vulnerability": "VCID-jqth-wfgx-87cx" }, { "vulnerability": "VCID-k4h1-mvnf-1ybx" }, { "vulnerability": "VCID-k8af-cg9k-87a9" }, { "vulnerability": "VCID-m7w6-b2xu-6uee" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-mqbh-k9n3-nbed" }, { "vulnerability": "VCID-mub5-s7h1-57cy" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n78p-x7hh-gqcf" }, { "vulnerability": "VCID-nt6a-5zkv-pbcm" }, { "vulnerability": "VCID-nwxj-3ajk-rkh5" }, { "vulnerability": "VCID-pk8d-8u15-5bfq" }, { "vulnerability": "VCID-pnfa-cksc-43de" }, { "vulnerability": "VCID-px44-19tj-h7aa" }, { "vulnerability": "VCID-q8hy-wjd9-nbgp" }, { "vulnerability": "VCID-q9ak-qcq6-qfhy" }, { "vulnerability": "VCID-qb4j-9tz7-m7a2" }, { "vulnerability": "VCID-rdrs-mhaw-b3ge" }, { "vulnerability": "VCID-rzw5-8d1u-sfam" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-shqd-udhm-pff8" }, { "vulnerability": "VCID-sr3p-pdxy-4yhu" }, { "vulnerability": "VCID-stzu-sxe6-5yf5" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-tgma-cyvk-97ay" }, { "vulnerability": "VCID-tmrt-6fxw-5ugh" }, { "vulnerability": "VCID-tqf5-2fsm-8fch" }, { "vulnerability": "VCID-tw1y-t4qj-j3d1" }, { "vulnerability": "VCID-uw2r-3gvq-bbcq" }, { "vulnerability": "VCID-vndb-w8e1-4ugv" }, { "vulnerability": "VCID-vrt1-aj9v-2kb6" }, { "vulnerability": "VCID-vxj6-wvyz-zbaq" }, { "vulnerability": "VCID-vxry-uvph-kbfd" }, { "vulnerability": "VCID-vybh-pxr3-17hn" }, { "vulnerability": "VCID-wea9-egep-h7g5" }, { "vulnerability": "VCID-wge3-kxdq-f3bz" }, { "vulnerability": "VCID-wr5t-xqnn-gkcj" }, { "vulnerability": "VCID-wxps-mnue-6bbh" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xh7y-56vy-5ud8" }, { "vulnerability": "VCID-xqew-bx7v-1qfk" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zkea-ge1t-z7gn" }, { "vulnerability": "VCID-zspb-bd6j-wyd2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.4.1" } ], "aliases": [ "2016-11-22-1" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-1jcy-nx8g-z3d3" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/18457?format=api", "vulnerability_id": "VCID-1qjx-grvf-y7bk", "summary": "Insecure Unserialize in TYPO3 Backend\nFailing to properly validate incoming data, the suggest wizard is susceptible to insecure unserialize. To exploit this vulnerability a valid backend user account is needed.", "references": [ { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2016-11-22-1.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2016-11-22-1.yaml" }, { "reference_url": "https://github.com/advisories/GHSA-c7rj-92xr-wprg", "reference_id": "GHSA-c7rj-92xr-wprg", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-c7rj-92xr-wprg" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/23261?format=api", "purl": "pkg:composer/typo3/cms@6.2.29", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-hv3n-j8ck-1ufx" }, { "vulnerability": "VCID-nwxj-3ajk-rkh5" }, { "vulnerability": "VCID-q9ak-qcq6-qfhy" }, { "vulnerability": "VCID-re9h-ze98-rbhu" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@6.2.29" }, { "url": "http://public2.vulnerablecode.io/api/packages/23262?format=api", "purl": "pkg:composer/typo3/cms@7.6.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-28bf-jvah-zkhw" }, { "vulnerability": "VCID-2fs8-bscc-3ye2" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-6b5q-vzs3-pkcc" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-bnne-7p2q-eqd2" }, { "vulnerability": "VCID-bxjw-7426-gyb8" }, { "vulnerability": "VCID-dbrh-t8zx-nkd9" }, { "vulnerability": "VCID-dm97-51uu-r7gw" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-ehzg-bzrd-kbcc" }, { "vulnerability": "VCID-ep6t-zwd1-4bb3" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-fy3g-uegw-2bew" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-h63t-9enx-qfdn" }, { "vulnerability": "VCID-hpgq-deze-p7dp" }, { "vulnerability": "VCID-hv3n-j8ck-1ufx" }, { "vulnerability": "VCID-jqth-wfgx-87cx" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-mqbh-k9n3-nbed" }, { "vulnerability": "VCID-mub5-s7h1-57cy" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n78p-x7hh-gqcf" }, { "vulnerability": "VCID-nt6a-5zkv-pbcm" }, { "vulnerability": "VCID-nwxj-3ajk-rkh5" }, { "vulnerability": "VCID-pk8d-8u15-5bfq" }, { "vulnerability": "VCID-pnfa-cksc-43de" }, { "vulnerability": "VCID-q9ak-qcq6-qfhy" }, { "vulnerability": "VCID-rdrs-mhaw-b3ge" }, { "vulnerability": "VCID-rzw5-8d1u-sfam" }, { "vulnerability": "VCID-sr3p-pdxy-4yhu" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-tmrt-6fxw-5ugh" }, { "vulnerability": "VCID-tw1y-t4qj-j3d1" }, { "vulnerability": "VCID-vndb-w8e1-4ugv" }, { "vulnerability": "VCID-vrt1-aj9v-2kb6" }, { "vulnerability": "VCID-wge3-kxdq-f3bz" }, { "vulnerability": "VCID-wr5t-xqnn-gkcj" }, { "vulnerability": "VCID-wxps-mnue-6bbh" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xqew-bx7v-1qfk" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zspb-bd6j-wyd2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/23263?format=api", "purl": "pkg:composer/typo3/cms@8.4.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-18dg-eevv-3ug9" }, { "vulnerability": "VCID-1kae-ffj3-xyc7" }, { "vulnerability": "VCID-28bf-jvah-zkhw" }, { "vulnerability": "VCID-2fs8-bscc-3ye2" }, { "vulnerability": "VCID-2meq-x4kd-bbdn" }, { "vulnerability": "VCID-3gg5-1921-rbfs" }, { "vulnerability": "VCID-3n2r-awja-dug9" }, { "vulnerability": "VCID-3v4n-fzxa-bfaw" }, { "vulnerability": "VCID-4ack-haf2-cfbe" }, { "vulnerability": "VCID-4btk-jt5n-2ugf" }, { "vulnerability": "VCID-551q-gpyd-ffe8" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-5qfv-y43v-akdm" }, { "vulnerability": "VCID-5yg8-2cbr-d3as" }, { "vulnerability": "VCID-6487-15z5-pkd4" }, { "vulnerability": "VCID-6b5q-vzs3-pkcc" }, { "vulnerability": "VCID-9g62-zd1x-3bdg" }, { "vulnerability": "VCID-9gpp-ez8w-rqav" }, { "vulnerability": "VCID-axaf-45kr-kbfe" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-bnne-7p2q-eqd2" }, { "vulnerability": "VCID-bxjw-7426-gyb8" }, { "vulnerability": "VCID-c2tm-eqmm-1ugt" }, { "vulnerability": "VCID-cm14-t8uv-k3es" }, { "vulnerability": "VCID-cmka-8484-27bu" }, { "vulnerability": "VCID-dbrh-t8zx-nkd9" }, { "vulnerability": "VCID-dj88-f3p8-cfbn" }, { "vulnerability": "VCID-dm97-51uu-r7gw" }, { "vulnerability": "VCID-dquc-7amf-e7cs" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-e72u-tpc3-23g3" }, { "vulnerability": "VCID-e7sv-4xc2-m3d5" }, { "vulnerability": "VCID-eajg-ctpd-2bby" }, { "vulnerability": "VCID-ehzg-bzrd-kbcc" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-ep6t-zwd1-4bb3" }, { "vulnerability": "VCID-euk5-hagy-xqfz" }, { "vulnerability": "VCID-fy3g-uegw-2bew" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-h63t-9enx-qfdn" }, { "vulnerability": "VCID-he5m-6wj4-rbhc" }, { "vulnerability": "VCID-hpgq-deze-p7dp" }, { "vulnerability": "VCID-hv3n-j8ck-1ufx" }, { "vulnerability": "VCID-j77k-hjgx-5kc5" }, { "vulnerability": "VCID-jppe-cbgm-k3cz" }, { "vulnerability": "VCID-jqth-wfgx-87cx" }, { "vulnerability": "VCID-k4h1-mvnf-1ybx" }, { "vulnerability": "VCID-k8af-cg9k-87a9" }, { "vulnerability": "VCID-m7w6-b2xu-6uee" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-mqbh-k9n3-nbed" }, { "vulnerability": "VCID-mub5-s7h1-57cy" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n78p-x7hh-gqcf" }, { "vulnerability": "VCID-nt6a-5zkv-pbcm" }, { "vulnerability": "VCID-nwxj-3ajk-rkh5" }, { "vulnerability": "VCID-pk8d-8u15-5bfq" }, { "vulnerability": "VCID-pnfa-cksc-43de" }, { "vulnerability": "VCID-px44-19tj-h7aa" }, { "vulnerability": "VCID-q8hy-wjd9-nbgp" }, { "vulnerability": "VCID-q9ak-qcq6-qfhy" }, { "vulnerability": "VCID-qb4j-9tz7-m7a2" }, { "vulnerability": "VCID-rdrs-mhaw-b3ge" }, { "vulnerability": "VCID-rzw5-8d1u-sfam" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-shqd-udhm-pff8" }, { "vulnerability": "VCID-sr3p-pdxy-4yhu" }, { "vulnerability": "VCID-stzu-sxe6-5yf5" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-tgma-cyvk-97ay" }, { "vulnerability": "VCID-tmrt-6fxw-5ugh" }, { "vulnerability": "VCID-tqf5-2fsm-8fch" }, { "vulnerability": "VCID-tw1y-t4qj-j3d1" }, { "vulnerability": "VCID-uw2r-3gvq-bbcq" }, { "vulnerability": "VCID-vndb-w8e1-4ugv" }, { "vulnerability": "VCID-vrt1-aj9v-2kb6" }, { "vulnerability": "VCID-vxj6-wvyz-zbaq" }, { "vulnerability": "VCID-vxry-uvph-kbfd" }, { "vulnerability": "VCID-vybh-pxr3-17hn" }, { "vulnerability": "VCID-wea9-egep-h7g5" }, { "vulnerability": "VCID-wge3-kxdq-f3bz" }, { "vulnerability": "VCID-wr5t-xqnn-gkcj" }, { "vulnerability": "VCID-wxps-mnue-6bbh" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xh7y-56vy-5ud8" }, { "vulnerability": "VCID-xqew-bx7v-1qfk" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zkea-ge1t-z7gn" }, { "vulnerability": "VCID-zspb-bd6j-wyd2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.4.1" } ], "aliases": [ "GHSA-c7rj-92xr-wprg" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-1qjx-grvf-y7bk" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7555?format=api", "vulnerability_id": "VCID-435j-f3yx-9yep", "summary": "Path Traversal in TYPO3 Core.", "references": [ { "reference_url": "https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2016-024/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2016-024/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/23261?format=api", "purl": "pkg:composer/typo3/cms@6.2.29", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-hv3n-j8ck-1ufx" }, { "vulnerability": "VCID-nwxj-3ajk-rkh5" }, { "vulnerability": "VCID-q9ak-qcq6-qfhy" }, { "vulnerability": "VCID-re9h-ze98-rbhu" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@6.2.29" }, { "url": "http://public2.vulnerablecode.io/api/packages/20921?format=api", "purl": "pkg:composer/typo3/cms@7.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ng4-5tkh-g7h5" }, { "vulnerability": "VCID-28bf-jvah-zkhw" }, { "vulnerability": "VCID-2rhx-afay-97da" }, { "vulnerability": "VCID-37wu-bjfj-k7eg" }, { "vulnerability": "VCID-4etp-u4pt-v7hm" }, { "vulnerability": "VCID-51ba-3ag9-rucn" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-6b5q-vzs3-pkcc" }, { "vulnerability": "VCID-6gms-w48j-4ffh" }, { "vulnerability": "VCID-6pvx-1qan-ukef" }, { "vulnerability": "VCID-6spw-66jg-syb1" }, { "vulnerability": "VCID-7zx9-8afq-y3hc" }, { "vulnerability": "VCID-99uu-rfrf-bqa7" }, { "vulnerability": "VCID-asym-tgh2-1kg8" }, { "vulnerability": "VCID-b45y-dr1a-7qd7" }, { "vulnerability": "VCID-b5ht-z6zp-pbht" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-bnne-7p2q-eqd2" }, { "vulnerability": "VCID-buax-rz7x-r7c2" }, { "vulnerability": "VCID-bxjw-7426-gyb8" }, { "vulnerability": "VCID-cczn-x8q7-k7ba" }, { "vulnerability": "VCID-cjgc-q6p5-2ydc" }, { "vulnerability": "VCID-ck23-cxn6-bbf3" }, { "vulnerability": "VCID-dbrh-t8zx-nkd9" }, { "vulnerability": "VCID-dm97-51uu-r7gw" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-ehzg-bzrd-kbcc" }, { "vulnerability": "VCID-f4pm-9tq5-q3ch" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-h958-d3pm-kfcs" }, { "vulnerability": "VCID-kgcq-paqm-9ya6" }, { "vulnerability": "VCID-kpze-14jy-xud9" }, { "vulnerability": "VCID-kqbk-4q4z-nkec" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n78p-x7hh-gqcf" }, { "vulnerability": "VCID-ne8w-dpjw-7qf1" }, { "vulnerability": "VCID-nwxj-3ajk-rkh5" }, { "vulnerability": "VCID-pgzu-kxuj-j3fh" }, { "vulnerability": "VCID-pk8d-8u15-5bfq" }, { "vulnerability": "VCID-q6dx-uskc-y3hs" }, { "vulnerability": "VCID-qemc-8kj8-r3cd" }, { "vulnerability": "VCID-rdrs-mhaw-b3ge" }, { "vulnerability": "VCID-re9h-ze98-rbhu" }, { "vulnerability": "VCID-rwgf-2pfh-ufdz" }, { "vulnerability": "VCID-se8w-fv8x-tqde" }, { "vulnerability": "VCID-sr3p-pdxy-4yhu" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-tmrt-6fxw-5ugh" }, { "vulnerability": "VCID-tw1y-t4qj-j3d1" }, { "vulnerability": "VCID-vbbx-pk8m-jfhd" }, { "vulnerability": "VCID-vndb-w8e1-4ugv" }, { "vulnerability": "VCID-wr5t-xqnn-gkcj" }, { "vulnerability": "VCID-ww44-zmx7-47ft" }, { "vulnerability": "VCID-wxps-mnue-6bbh" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xhq3-ts9t-sbdy" }, { "vulnerability": "VCID-xkpp-psz2-2kag" }, { "vulnerability": "VCID-xp55-jxjr-zqcb" }, { "vulnerability": "VCID-xqew-bx7v-1qfk" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zspb-bd6j-wyd2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/23262?format=api", "purl": "pkg:composer/typo3/cms@7.6.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-28bf-jvah-zkhw" }, { "vulnerability": "VCID-2fs8-bscc-3ye2" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-6b5q-vzs3-pkcc" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-bnne-7p2q-eqd2" }, { "vulnerability": "VCID-bxjw-7426-gyb8" }, { "vulnerability": "VCID-dbrh-t8zx-nkd9" }, { "vulnerability": "VCID-dm97-51uu-r7gw" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-ehzg-bzrd-kbcc" }, { "vulnerability": "VCID-ep6t-zwd1-4bb3" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-fy3g-uegw-2bew" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-h63t-9enx-qfdn" }, { "vulnerability": "VCID-hpgq-deze-p7dp" }, { "vulnerability": "VCID-hv3n-j8ck-1ufx" }, { "vulnerability": "VCID-jqth-wfgx-87cx" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-mqbh-k9n3-nbed" }, { "vulnerability": "VCID-mub5-s7h1-57cy" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n78p-x7hh-gqcf" }, { "vulnerability": "VCID-nt6a-5zkv-pbcm" }, { "vulnerability": "VCID-nwxj-3ajk-rkh5" }, { "vulnerability": "VCID-pk8d-8u15-5bfq" }, { "vulnerability": "VCID-pnfa-cksc-43de" }, { "vulnerability": "VCID-q9ak-qcq6-qfhy" }, { "vulnerability": "VCID-rdrs-mhaw-b3ge" }, { "vulnerability": "VCID-rzw5-8d1u-sfam" }, { "vulnerability": "VCID-sr3p-pdxy-4yhu" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-tmrt-6fxw-5ugh" }, { "vulnerability": "VCID-tw1y-t4qj-j3d1" }, { "vulnerability": "VCID-vndb-w8e1-4ugv" }, { "vulnerability": "VCID-vrt1-aj9v-2kb6" }, { "vulnerability": "VCID-wge3-kxdq-f3bz" }, { "vulnerability": "VCID-wr5t-xqnn-gkcj" }, { "vulnerability": "VCID-wxps-mnue-6bbh" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xqew-bx7v-1qfk" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zspb-bd6j-wyd2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/23263?format=api", "purl": "pkg:composer/typo3/cms@8.4.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-18dg-eevv-3ug9" }, { "vulnerability": "VCID-1kae-ffj3-xyc7" }, { "vulnerability": "VCID-28bf-jvah-zkhw" }, { "vulnerability": "VCID-2fs8-bscc-3ye2" }, { "vulnerability": "VCID-2meq-x4kd-bbdn" }, { "vulnerability": "VCID-3gg5-1921-rbfs" }, { "vulnerability": "VCID-3n2r-awja-dug9" }, { "vulnerability": "VCID-3v4n-fzxa-bfaw" }, { "vulnerability": "VCID-4ack-haf2-cfbe" }, { "vulnerability": "VCID-4btk-jt5n-2ugf" }, { "vulnerability": "VCID-551q-gpyd-ffe8" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-5qfv-y43v-akdm" }, { "vulnerability": "VCID-5yg8-2cbr-d3as" }, { "vulnerability": "VCID-6487-15z5-pkd4" }, { "vulnerability": "VCID-6b5q-vzs3-pkcc" }, { "vulnerability": "VCID-9g62-zd1x-3bdg" }, { "vulnerability": "VCID-9gpp-ez8w-rqav" }, { "vulnerability": "VCID-axaf-45kr-kbfe" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-bnne-7p2q-eqd2" }, { "vulnerability": "VCID-bxjw-7426-gyb8" }, { "vulnerability": "VCID-c2tm-eqmm-1ugt" }, { "vulnerability": "VCID-cm14-t8uv-k3es" }, { "vulnerability": "VCID-cmka-8484-27bu" }, { "vulnerability": "VCID-dbrh-t8zx-nkd9" }, { "vulnerability": "VCID-dj88-f3p8-cfbn" }, { "vulnerability": "VCID-dm97-51uu-r7gw" }, { "vulnerability": "VCID-dquc-7amf-e7cs" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-e72u-tpc3-23g3" }, { "vulnerability": "VCID-e7sv-4xc2-m3d5" }, { "vulnerability": "VCID-eajg-ctpd-2bby" }, { "vulnerability": "VCID-ehzg-bzrd-kbcc" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-ep6t-zwd1-4bb3" }, { "vulnerability": "VCID-euk5-hagy-xqfz" }, { "vulnerability": "VCID-fy3g-uegw-2bew" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-h63t-9enx-qfdn" }, { "vulnerability": "VCID-he5m-6wj4-rbhc" }, { "vulnerability": "VCID-hpgq-deze-p7dp" }, { "vulnerability": "VCID-hv3n-j8ck-1ufx" }, { "vulnerability": "VCID-j77k-hjgx-5kc5" }, { "vulnerability": "VCID-jppe-cbgm-k3cz" }, { "vulnerability": "VCID-jqth-wfgx-87cx" }, { "vulnerability": "VCID-k4h1-mvnf-1ybx" }, { "vulnerability": "VCID-k8af-cg9k-87a9" }, { "vulnerability": "VCID-m7w6-b2xu-6uee" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-mqbh-k9n3-nbed" }, { "vulnerability": "VCID-mub5-s7h1-57cy" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n78p-x7hh-gqcf" }, { "vulnerability": "VCID-nt6a-5zkv-pbcm" }, { "vulnerability": "VCID-nwxj-3ajk-rkh5" }, { "vulnerability": "VCID-pk8d-8u15-5bfq" }, { "vulnerability": "VCID-pnfa-cksc-43de" }, { "vulnerability": "VCID-px44-19tj-h7aa" }, { "vulnerability": "VCID-q8hy-wjd9-nbgp" }, { "vulnerability": "VCID-q9ak-qcq6-qfhy" }, { "vulnerability": "VCID-qb4j-9tz7-m7a2" }, { "vulnerability": "VCID-rdrs-mhaw-b3ge" }, { "vulnerability": "VCID-rzw5-8d1u-sfam" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-shqd-udhm-pff8" }, { "vulnerability": "VCID-sr3p-pdxy-4yhu" }, { "vulnerability": "VCID-stzu-sxe6-5yf5" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-tgma-cyvk-97ay" }, { "vulnerability": "VCID-tmrt-6fxw-5ugh" }, { "vulnerability": "VCID-tqf5-2fsm-8fch" }, { "vulnerability": "VCID-tw1y-t4qj-j3d1" }, { "vulnerability": "VCID-uw2r-3gvq-bbcq" }, { "vulnerability": "VCID-vndb-w8e1-4ugv" }, { "vulnerability": "VCID-vrt1-aj9v-2kb6" }, { "vulnerability": "VCID-vxj6-wvyz-zbaq" }, { "vulnerability": "VCID-vxry-uvph-kbfd" }, { "vulnerability": "VCID-vybh-pxr3-17hn" }, { "vulnerability": "VCID-wea9-egep-h7g5" }, { "vulnerability": "VCID-wge3-kxdq-f3bz" }, { "vulnerability": "VCID-wr5t-xqnn-gkcj" }, { "vulnerability": "VCID-wxps-mnue-6bbh" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xh7y-56vy-5ud8" }, { "vulnerability": "VCID-xqew-bx7v-1qfk" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zkea-ge1t-z7gn" }, { "vulnerability": "VCID-zspb-bd6j-wyd2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.4.1" } ], "aliases": [ "2016-11-22-2" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-435j-f3yx-9yep" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/15561?format=api", "vulnerability_id": "VCID-c6zq-cfg5-u7d9", "summary": "Path Traversal in TYPO3 Core\nDue to a too loose type check in an API method, attackers could bypass the directory traversal check by providing an invalid UTF-8 encoding sequence.", "references": [ { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2016-11-22-2.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2016-11-22-2.yaml" }, { "reference_url": "https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2016-024", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2016-024" }, { "reference_url": "https://github.com/advisories/GHSA-gj48-w74w-8gvm", "reference_id": "GHSA-gj48-w74w-8gvm", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-gj48-w74w-8gvm" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/23261?format=api", "purl": "pkg:composer/typo3/cms@6.2.29", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-hv3n-j8ck-1ufx" }, { "vulnerability": "VCID-nwxj-3ajk-rkh5" }, { "vulnerability": "VCID-q9ak-qcq6-qfhy" }, { "vulnerability": "VCID-re9h-ze98-rbhu" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@6.2.29" }, { "url": "http://public2.vulnerablecode.io/api/packages/23262?format=api", "purl": "pkg:composer/typo3/cms@7.6.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-28bf-jvah-zkhw" }, { "vulnerability": "VCID-2fs8-bscc-3ye2" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-6b5q-vzs3-pkcc" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-bnne-7p2q-eqd2" }, { "vulnerability": "VCID-bxjw-7426-gyb8" }, { "vulnerability": "VCID-dbrh-t8zx-nkd9" }, { "vulnerability": "VCID-dm97-51uu-r7gw" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-ehzg-bzrd-kbcc" }, { "vulnerability": "VCID-ep6t-zwd1-4bb3" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-fy3g-uegw-2bew" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-h63t-9enx-qfdn" }, { "vulnerability": "VCID-hpgq-deze-p7dp" }, { "vulnerability": "VCID-hv3n-j8ck-1ufx" }, { "vulnerability": "VCID-jqth-wfgx-87cx" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-mqbh-k9n3-nbed" }, { "vulnerability": "VCID-mub5-s7h1-57cy" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n78p-x7hh-gqcf" }, { "vulnerability": "VCID-nt6a-5zkv-pbcm" }, { "vulnerability": "VCID-nwxj-3ajk-rkh5" }, { "vulnerability": "VCID-pk8d-8u15-5bfq" }, { "vulnerability": "VCID-pnfa-cksc-43de" }, { "vulnerability": "VCID-q9ak-qcq6-qfhy" }, { "vulnerability": "VCID-rdrs-mhaw-b3ge" }, { "vulnerability": "VCID-rzw5-8d1u-sfam" }, { "vulnerability": "VCID-sr3p-pdxy-4yhu" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-tmrt-6fxw-5ugh" }, { "vulnerability": "VCID-tw1y-t4qj-j3d1" }, { "vulnerability": "VCID-vndb-w8e1-4ugv" }, { "vulnerability": "VCID-vrt1-aj9v-2kb6" }, { "vulnerability": "VCID-wge3-kxdq-f3bz" }, { "vulnerability": "VCID-wr5t-xqnn-gkcj" }, { "vulnerability": "VCID-wxps-mnue-6bbh" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xqew-bx7v-1qfk" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zspb-bd6j-wyd2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/23263?format=api", "purl": "pkg:composer/typo3/cms@8.4.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-18dg-eevv-3ug9" }, { "vulnerability": "VCID-1kae-ffj3-xyc7" }, { "vulnerability": "VCID-28bf-jvah-zkhw" }, { "vulnerability": "VCID-2fs8-bscc-3ye2" }, { "vulnerability": "VCID-2meq-x4kd-bbdn" }, { "vulnerability": "VCID-3gg5-1921-rbfs" }, { "vulnerability": "VCID-3n2r-awja-dug9" }, { "vulnerability": "VCID-3v4n-fzxa-bfaw" }, { "vulnerability": "VCID-4ack-haf2-cfbe" }, { "vulnerability": "VCID-4btk-jt5n-2ugf" }, { "vulnerability": "VCID-551q-gpyd-ffe8" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-5qfv-y43v-akdm" }, { "vulnerability": "VCID-5yg8-2cbr-d3as" }, { "vulnerability": "VCID-6487-15z5-pkd4" }, { "vulnerability": "VCID-6b5q-vzs3-pkcc" }, { "vulnerability": "VCID-9g62-zd1x-3bdg" }, { "vulnerability": "VCID-9gpp-ez8w-rqav" }, { "vulnerability": "VCID-axaf-45kr-kbfe" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-bnne-7p2q-eqd2" }, { "vulnerability": "VCID-bxjw-7426-gyb8" }, { "vulnerability": "VCID-c2tm-eqmm-1ugt" }, { "vulnerability": "VCID-cm14-t8uv-k3es" }, { "vulnerability": "VCID-cmka-8484-27bu" }, { "vulnerability": "VCID-dbrh-t8zx-nkd9" }, { "vulnerability": "VCID-dj88-f3p8-cfbn" }, { "vulnerability": "VCID-dm97-51uu-r7gw" }, { "vulnerability": "VCID-dquc-7amf-e7cs" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-e72u-tpc3-23g3" }, { "vulnerability": "VCID-e7sv-4xc2-m3d5" }, { "vulnerability": "VCID-eajg-ctpd-2bby" }, { "vulnerability": "VCID-ehzg-bzrd-kbcc" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-ep6t-zwd1-4bb3" }, { "vulnerability": "VCID-euk5-hagy-xqfz" }, { "vulnerability": "VCID-fy3g-uegw-2bew" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-h63t-9enx-qfdn" }, { "vulnerability": "VCID-he5m-6wj4-rbhc" }, { "vulnerability": "VCID-hpgq-deze-p7dp" }, { "vulnerability": "VCID-hv3n-j8ck-1ufx" }, { "vulnerability": "VCID-j77k-hjgx-5kc5" }, { "vulnerability": "VCID-jppe-cbgm-k3cz" }, { "vulnerability": "VCID-jqth-wfgx-87cx" }, { "vulnerability": "VCID-k4h1-mvnf-1ybx" }, { "vulnerability": "VCID-k8af-cg9k-87a9" }, { "vulnerability": "VCID-m7w6-b2xu-6uee" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-mqbh-k9n3-nbed" }, { "vulnerability": "VCID-mub5-s7h1-57cy" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n78p-x7hh-gqcf" }, { "vulnerability": "VCID-nt6a-5zkv-pbcm" }, { "vulnerability": "VCID-nwxj-3ajk-rkh5" }, { "vulnerability": "VCID-pk8d-8u15-5bfq" }, { "vulnerability": "VCID-pnfa-cksc-43de" }, { "vulnerability": "VCID-px44-19tj-h7aa" }, { "vulnerability": "VCID-q8hy-wjd9-nbgp" }, { "vulnerability": "VCID-q9ak-qcq6-qfhy" }, { "vulnerability": "VCID-qb4j-9tz7-m7a2" }, { "vulnerability": "VCID-rdrs-mhaw-b3ge" }, { "vulnerability": "VCID-rzw5-8d1u-sfam" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-shqd-udhm-pff8" }, { "vulnerability": "VCID-sr3p-pdxy-4yhu" }, { "vulnerability": "VCID-stzu-sxe6-5yf5" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-tgma-cyvk-97ay" }, { "vulnerability": "VCID-tmrt-6fxw-5ugh" }, { "vulnerability": "VCID-tqf5-2fsm-8fch" }, { "vulnerability": "VCID-tw1y-t4qj-j3d1" }, { "vulnerability": "VCID-uw2r-3gvq-bbcq" }, { "vulnerability": "VCID-vndb-w8e1-4ugv" }, { "vulnerability": "VCID-vrt1-aj9v-2kb6" }, { "vulnerability": "VCID-vxj6-wvyz-zbaq" }, { "vulnerability": "VCID-vxry-uvph-kbfd" }, { "vulnerability": "VCID-vybh-pxr3-17hn" }, { "vulnerability": "VCID-wea9-egep-h7g5" }, { "vulnerability": "VCID-wge3-kxdq-f3bz" }, { "vulnerability": "VCID-wr5t-xqnn-gkcj" }, { "vulnerability": "VCID-wxps-mnue-6bbh" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xh7y-56vy-5ud8" }, { "vulnerability": "VCID-xqew-bx7v-1qfk" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zkea-ge1t-z7gn" }, { "vulnerability": "VCID-zspb-bd6j-wyd2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.4.1" } ], "aliases": [ "GHSA-gj48-w74w-8gvm", "GMS-2024-342" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-c6zq-cfg5-u7d9" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7553?format=api", "vulnerability_id": "VCID-nnh9-udcj-m7fv", "summary": "Path Traversal\nDue to a too loose type check in an API method, attackers could bypass the directory traversal check by providing an invalid UTF-8 encoding sequence.", "references": [ { "reference_url": "https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2016-024", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2016-024" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/23261?format=api", "purl": "pkg:composer/typo3/cms@6.2.29", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-hv3n-j8ck-1ufx" }, { "vulnerability": "VCID-nwxj-3ajk-rkh5" }, { "vulnerability": "VCID-q9ak-qcq6-qfhy" }, { "vulnerability": "VCID-re9h-ze98-rbhu" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@6.2.29" }, { "url": "http://public2.vulnerablecode.io/api/packages/20921?format=api", "purl": "pkg:composer/typo3/cms@7.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ng4-5tkh-g7h5" }, { "vulnerability": "VCID-28bf-jvah-zkhw" }, { "vulnerability": "VCID-2rhx-afay-97da" }, { "vulnerability": "VCID-37wu-bjfj-k7eg" }, { "vulnerability": "VCID-4etp-u4pt-v7hm" }, { "vulnerability": "VCID-51ba-3ag9-rucn" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-6b5q-vzs3-pkcc" }, { "vulnerability": "VCID-6gms-w48j-4ffh" }, { "vulnerability": "VCID-6pvx-1qan-ukef" }, { "vulnerability": "VCID-6spw-66jg-syb1" }, { "vulnerability": "VCID-7zx9-8afq-y3hc" }, { "vulnerability": "VCID-99uu-rfrf-bqa7" }, { "vulnerability": "VCID-asym-tgh2-1kg8" }, { "vulnerability": "VCID-b45y-dr1a-7qd7" }, { "vulnerability": "VCID-b5ht-z6zp-pbht" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-bnne-7p2q-eqd2" }, { "vulnerability": "VCID-buax-rz7x-r7c2" }, { "vulnerability": "VCID-bxjw-7426-gyb8" }, { "vulnerability": "VCID-cczn-x8q7-k7ba" }, { "vulnerability": "VCID-cjgc-q6p5-2ydc" }, { "vulnerability": "VCID-ck23-cxn6-bbf3" }, { "vulnerability": "VCID-dbrh-t8zx-nkd9" }, { "vulnerability": "VCID-dm97-51uu-r7gw" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-ehzg-bzrd-kbcc" }, { "vulnerability": "VCID-f4pm-9tq5-q3ch" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-h958-d3pm-kfcs" }, { "vulnerability": "VCID-kgcq-paqm-9ya6" }, { "vulnerability": "VCID-kpze-14jy-xud9" }, { "vulnerability": "VCID-kqbk-4q4z-nkec" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n78p-x7hh-gqcf" }, { "vulnerability": "VCID-ne8w-dpjw-7qf1" }, { "vulnerability": "VCID-nwxj-3ajk-rkh5" }, { "vulnerability": "VCID-pgzu-kxuj-j3fh" }, { "vulnerability": "VCID-pk8d-8u15-5bfq" }, { "vulnerability": "VCID-q6dx-uskc-y3hs" }, { "vulnerability": "VCID-qemc-8kj8-r3cd" }, { "vulnerability": "VCID-rdrs-mhaw-b3ge" }, { "vulnerability": "VCID-re9h-ze98-rbhu" }, { "vulnerability": "VCID-rwgf-2pfh-ufdz" }, { "vulnerability": "VCID-se8w-fv8x-tqde" }, { "vulnerability": "VCID-sr3p-pdxy-4yhu" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-tmrt-6fxw-5ugh" }, { "vulnerability": "VCID-tw1y-t4qj-j3d1" }, { "vulnerability": "VCID-vbbx-pk8m-jfhd" }, { "vulnerability": "VCID-vndb-w8e1-4ugv" }, { "vulnerability": "VCID-wr5t-xqnn-gkcj" }, { "vulnerability": "VCID-ww44-zmx7-47ft" }, { "vulnerability": "VCID-wxps-mnue-6bbh" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xhq3-ts9t-sbdy" }, { "vulnerability": "VCID-xkpp-psz2-2kag" }, { "vulnerability": "VCID-xp55-jxjr-zqcb" }, { "vulnerability": "VCID-xqew-bx7v-1qfk" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zspb-bd6j-wyd2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/23262?format=api", "purl": "pkg:composer/typo3/cms@7.6.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-28bf-jvah-zkhw" }, { "vulnerability": "VCID-2fs8-bscc-3ye2" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-6b5q-vzs3-pkcc" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-bnne-7p2q-eqd2" }, { "vulnerability": "VCID-bxjw-7426-gyb8" }, { "vulnerability": "VCID-dbrh-t8zx-nkd9" }, { "vulnerability": "VCID-dm97-51uu-r7gw" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-ehzg-bzrd-kbcc" }, { "vulnerability": "VCID-ep6t-zwd1-4bb3" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-fy3g-uegw-2bew" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-h63t-9enx-qfdn" }, { "vulnerability": "VCID-hpgq-deze-p7dp" }, { "vulnerability": "VCID-hv3n-j8ck-1ufx" }, { "vulnerability": "VCID-jqth-wfgx-87cx" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-mqbh-k9n3-nbed" }, { "vulnerability": "VCID-mub5-s7h1-57cy" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n78p-x7hh-gqcf" }, { "vulnerability": "VCID-nt6a-5zkv-pbcm" }, { "vulnerability": "VCID-nwxj-3ajk-rkh5" }, { "vulnerability": "VCID-pk8d-8u15-5bfq" }, { "vulnerability": "VCID-pnfa-cksc-43de" }, { "vulnerability": "VCID-q9ak-qcq6-qfhy" }, { "vulnerability": "VCID-rdrs-mhaw-b3ge" }, { "vulnerability": "VCID-rzw5-8d1u-sfam" }, { "vulnerability": "VCID-sr3p-pdxy-4yhu" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-tmrt-6fxw-5ugh" }, { "vulnerability": "VCID-tw1y-t4qj-j3d1" }, { "vulnerability": "VCID-vndb-w8e1-4ugv" }, { "vulnerability": "VCID-vrt1-aj9v-2kb6" }, { "vulnerability": "VCID-wge3-kxdq-f3bz" }, { "vulnerability": "VCID-wr5t-xqnn-gkcj" }, { "vulnerability": "VCID-wxps-mnue-6bbh" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xqew-bx7v-1qfk" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zspb-bd6j-wyd2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/23263?format=api", "purl": "pkg:composer/typo3/cms@8.4.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-18dg-eevv-3ug9" }, { "vulnerability": "VCID-1kae-ffj3-xyc7" }, { "vulnerability": "VCID-28bf-jvah-zkhw" }, { "vulnerability": "VCID-2fs8-bscc-3ye2" }, { "vulnerability": "VCID-2meq-x4kd-bbdn" }, { "vulnerability": "VCID-3gg5-1921-rbfs" }, { "vulnerability": "VCID-3n2r-awja-dug9" }, { "vulnerability": "VCID-3v4n-fzxa-bfaw" }, { "vulnerability": "VCID-4ack-haf2-cfbe" }, { "vulnerability": "VCID-4btk-jt5n-2ugf" }, { "vulnerability": "VCID-551q-gpyd-ffe8" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-5qfv-y43v-akdm" }, { "vulnerability": "VCID-5yg8-2cbr-d3as" }, { "vulnerability": "VCID-6487-15z5-pkd4" }, { "vulnerability": "VCID-6b5q-vzs3-pkcc" }, { "vulnerability": "VCID-9g62-zd1x-3bdg" }, { "vulnerability": "VCID-9gpp-ez8w-rqav" }, { "vulnerability": "VCID-axaf-45kr-kbfe" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-bnne-7p2q-eqd2" }, { "vulnerability": "VCID-bxjw-7426-gyb8" }, { "vulnerability": "VCID-c2tm-eqmm-1ugt" }, { "vulnerability": "VCID-cm14-t8uv-k3es" }, { "vulnerability": "VCID-cmka-8484-27bu" }, { "vulnerability": "VCID-dbrh-t8zx-nkd9" }, { "vulnerability": "VCID-dj88-f3p8-cfbn" }, { "vulnerability": "VCID-dm97-51uu-r7gw" }, { "vulnerability": "VCID-dquc-7amf-e7cs" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-e72u-tpc3-23g3" }, { "vulnerability": "VCID-e7sv-4xc2-m3d5" }, { "vulnerability": "VCID-eajg-ctpd-2bby" }, { "vulnerability": "VCID-ehzg-bzrd-kbcc" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-ep6t-zwd1-4bb3" }, { "vulnerability": "VCID-euk5-hagy-xqfz" }, { "vulnerability": "VCID-fy3g-uegw-2bew" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-h63t-9enx-qfdn" }, { "vulnerability": "VCID-he5m-6wj4-rbhc" }, { "vulnerability": "VCID-hpgq-deze-p7dp" }, { "vulnerability": "VCID-hv3n-j8ck-1ufx" }, { "vulnerability": "VCID-j77k-hjgx-5kc5" }, { "vulnerability": "VCID-jppe-cbgm-k3cz" }, { "vulnerability": "VCID-jqth-wfgx-87cx" }, { "vulnerability": "VCID-k4h1-mvnf-1ybx" }, { "vulnerability": "VCID-k8af-cg9k-87a9" }, { "vulnerability": "VCID-m7w6-b2xu-6uee" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-mqbh-k9n3-nbed" }, { "vulnerability": "VCID-mub5-s7h1-57cy" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n78p-x7hh-gqcf" }, { "vulnerability": "VCID-nt6a-5zkv-pbcm" }, { "vulnerability": "VCID-nwxj-3ajk-rkh5" }, { "vulnerability": "VCID-pk8d-8u15-5bfq" }, { "vulnerability": "VCID-pnfa-cksc-43de" }, { "vulnerability": "VCID-px44-19tj-h7aa" }, { "vulnerability": "VCID-q8hy-wjd9-nbgp" }, { "vulnerability": "VCID-q9ak-qcq6-qfhy" }, { "vulnerability": "VCID-qb4j-9tz7-m7a2" }, { "vulnerability": "VCID-rdrs-mhaw-b3ge" }, { "vulnerability": "VCID-rzw5-8d1u-sfam" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-shqd-udhm-pff8" }, { "vulnerability": "VCID-sr3p-pdxy-4yhu" }, { "vulnerability": "VCID-stzu-sxe6-5yf5" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-tgma-cyvk-97ay" }, { "vulnerability": "VCID-tmrt-6fxw-5ugh" }, { "vulnerability": "VCID-tqf5-2fsm-8fch" }, { "vulnerability": "VCID-tw1y-t4qj-j3d1" }, { "vulnerability": "VCID-uw2r-3gvq-bbcq" }, { "vulnerability": "VCID-vndb-w8e1-4ugv" }, { "vulnerability": "VCID-vrt1-aj9v-2kb6" }, { "vulnerability": "VCID-vxj6-wvyz-zbaq" }, { "vulnerability": "VCID-vxry-uvph-kbfd" }, { "vulnerability": "VCID-vybh-pxr3-17hn" }, { "vulnerability": "VCID-wea9-egep-h7g5" }, { "vulnerability": "VCID-wge3-kxdq-f3bz" }, { "vulnerability": "VCID-wr5t-xqnn-gkcj" }, { "vulnerability": "VCID-wxps-mnue-6bbh" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xh7y-56vy-5ud8" }, { "vulnerability": "VCID-xqew-bx7v-1qfk" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zkea-ge1t-z7gn" }, { "vulnerability": "VCID-zspb-bd6j-wyd2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.4.1" } ], "aliases": [ "TYPO3-CORE-SA-2016-024" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-nnh9-udcj-m7fv" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7552?format=api", "vulnerability_id": "VCID-prbd-r82t-87dm", "summary": "Insecure Unserialize in TYPO3 Backend\nFailing to properly validate incoming data, the suggest wizard is susceptible to insecure unserialize. To exploit this vulnerability a valid backend user account is needed.", "references": [ { "reference_url": "https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2016-023", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2016-023" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/23261?format=api", "purl": "pkg:composer/typo3/cms@6.2.29", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-hv3n-j8ck-1ufx" }, { "vulnerability": "VCID-nwxj-3ajk-rkh5" }, { "vulnerability": "VCID-q9ak-qcq6-qfhy" }, { "vulnerability": "VCID-re9h-ze98-rbhu" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@6.2.29" }, { "url": "http://public2.vulnerablecode.io/api/packages/20921?format=api", "purl": "pkg:composer/typo3/cms@7.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ng4-5tkh-g7h5" }, { "vulnerability": "VCID-28bf-jvah-zkhw" }, { "vulnerability": "VCID-2rhx-afay-97da" }, { "vulnerability": "VCID-37wu-bjfj-k7eg" }, { "vulnerability": "VCID-4etp-u4pt-v7hm" }, { "vulnerability": "VCID-51ba-3ag9-rucn" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-6b5q-vzs3-pkcc" }, { "vulnerability": "VCID-6gms-w48j-4ffh" }, { "vulnerability": "VCID-6pvx-1qan-ukef" }, { "vulnerability": "VCID-6spw-66jg-syb1" }, { "vulnerability": "VCID-7zx9-8afq-y3hc" }, { "vulnerability": "VCID-99uu-rfrf-bqa7" }, { "vulnerability": "VCID-asym-tgh2-1kg8" }, { "vulnerability": "VCID-b45y-dr1a-7qd7" }, { "vulnerability": "VCID-b5ht-z6zp-pbht" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-bnne-7p2q-eqd2" }, { "vulnerability": "VCID-buax-rz7x-r7c2" }, { "vulnerability": "VCID-bxjw-7426-gyb8" }, { "vulnerability": "VCID-cczn-x8q7-k7ba" }, { "vulnerability": "VCID-cjgc-q6p5-2ydc" }, { "vulnerability": "VCID-ck23-cxn6-bbf3" }, { "vulnerability": "VCID-dbrh-t8zx-nkd9" }, { "vulnerability": "VCID-dm97-51uu-r7gw" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-ehzg-bzrd-kbcc" }, { "vulnerability": "VCID-f4pm-9tq5-q3ch" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-h958-d3pm-kfcs" }, { "vulnerability": "VCID-kgcq-paqm-9ya6" }, { "vulnerability": "VCID-kpze-14jy-xud9" }, { "vulnerability": "VCID-kqbk-4q4z-nkec" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n78p-x7hh-gqcf" }, { "vulnerability": "VCID-ne8w-dpjw-7qf1" }, { "vulnerability": "VCID-nwxj-3ajk-rkh5" }, { "vulnerability": "VCID-pgzu-kxuj-j3fh" }, { "vulnerability": "VCID-pk8d-8u15-5bfq" }, { "vulnerability": "VCID-q6dx-uskc-y3hs" }, { "vulnerability": "VCID-qemc-8kj8-r3cd" }, { "vulnerability": "VCID-rdrs-mhaw-b3ge" }, { "vulnerability": "VCID-re9h-ze98-rbhu" }, { "vulnerability": "VCID-rwgf-2pfh-ufdz" }, { "vulnerability": "VCID-se8w-fv8x-tqde" }, { "vulnerability": "VCID-sr3p-pdxy-4yhu" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-tmrt-6fxw-5ugh" }, { "vulnerability": "VCID-tw1y-t4qj-j3d1" }, { "vulnerability": "VCID-vbbx-pk8m-jfhd" }, { "vulnerability": "VCID-vndb-w8e1-4ugv" }, { "vulnerability": "VCID-wr5t-xqnn-gkcj" }, { "vulnerability": "VCID-ww44-zmx7-47ft" }, { "vulnerability": "VCID-wxps-mnue-6bbh" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xhq3-ts9t-sbdy" }, { "vulnerability": "VCID-xkpp-psz2-2kag" }, { "vulnerability": "VCID-xp55-jxjr-zqcb" }, { "vulnerability": "VCID-xqew-bx7v-1qfk" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zspb-bd6j-wyd2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/23262?format=api", "purl": "pkg:composer/typo3/cms@7.6.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-28bf-jvah-zkhw" }, { "vulnerability": "VCID-2fs8-bscc-3ye2" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-6b5q-vzs3-pkcc" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-bnne-7p2q-eqd2" }, { "vulnerability": "VCID-bxjw-7426-gyb8" }, { "vulnerability": "VCID-dbrh-t8zx-nkd9" }, { "vulnerability": "VCID-dm97-51uu-r7gw" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-ehzg-bzrd-kbcc" }, { "vulnerability": "VCID-ep6t-zwd1-4bb3" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-fy3g-uegw-2bew" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-h63t-9enx-qfdn" }, { "vulnerability": "VCID-hpgq-deze-p7dp" }, { "vulnerability": "VCID-hv3n-j8ck-1ufx" }, { "vulnerability": "VCID-jqth-wfgx-87cx" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-mqbh-k9n3-nbed" }, { "vulnerability": "VCID-mub5-s7h1-57cy" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n78p-x7hh-gqcf" }, { "vulnerability": "VCID-nt6a-5zkv-pbcm" }, { "vulnerability": "VCID-nwxj-3ajk-rkh5" }, { "vulnerability": "VCID-pk8d-8u15-5bfq" }, { "vulnerability": "VCID-pnfa-cksc-43de" }, { "vulnerability": "VCID-q9ak-qcq6-qfhy" }, { "vulnerability": "VCID-rdrs-mhaw-b3ge" }, { "vulnerability": "VCID-rzw5-8d1u-sfam" }, { "vulnerability": "VCID-sr3p-pdxy-4yhu" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-tmrt-6fxw-5ugh" }, { "vulnerability": "VCID-tw1y-t4qj-j3d1" }, { "vulnerability": "VCID-vndb-w8e1-4ugv" }, { "vulnerability": "VCID-vrt1-aj9v-2kb6" }, { "vulnerability": "VCID-wge3-kxdq-f3bz" }, { "vulnerability": "VCID-wr5t-xqnn-gkcj" }, { "vulnerability": "VCID-wxps-mnue-6bbh" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xqew-bx7v-1qfk" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zspb-bd6j-wyd2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/23263?format=api", "purl": "pkg:composer/typo3/cms@8.4.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-18dg-eevv-3ug9" }, { "vulnerability": "VCID-1kae-ffj3-xyc7" }, { "vulnerability": "VCID-28bf-jvah-zkhw" }, { "vulnerability": "VCID-2fs8-bscc-3ye2" }, { "vulnerability": "VCID-2meq-x4kd-bbdn" }, { "vulnerability": "VCID-3gg5-1921-rbfs" }, { "vulnerability": "VCID-3n2r-awja-dug9" }, { "vulnerability": "VCID-3v4n-fzxa-bfaw" }, { "vulnerability": "VCID-4ack-haf2-cfbe" }, { "vulnerability": "VCID-4btk-jt5n-2ugf" }, { "vulnerability": "VCID-551q-gpyd-ffe8" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-5qfv-y43v-akdm" }, { "vulnerability": "VCID-5yg8-2cbr-d3as" }, { "vulnerability": "VCID-6487-15z5-pkd4" }, { "vulnerability": "VCID-6b5q-vzs3-pkcc" }, { "vulnerability": "VCID-9g62-zd1x-3bdg" }, { "vulnerability": "VCID-9gpp-ez8w-rqav" }, { "vulnerability": "VCID-axaf-45kr-kbfe" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-bnne-7p2q-eqd2" }, { "vulnerability": "VCID-bxjw-7426-gyb8" }, { "vulnerability": "VCID-c2tm-eqmm-1ugt" }, { "vulnerability": "VCID-cm14-t8uv-k3es" }, { "vulnerability": "VCID-cmka-8484-27bu" }, { "vulnerability": "VCID-dbrh-t8zx-nkd9" }, { "vulnerability": "VCID-dj88-f3p8-cfbn" }, { "vulnerability": "VCID-dm97-51uu-r7gw" }, { "vulnerability": "VCID-dquc-7amf-e7cs" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-e72u-tpc3-23g3" }, { "vulnerability": "VCID-e7sv-4xc2-m3d5" }, { "vulnerability": "VCID-eajg-ctpd-2bby" }, { "vulnerability": "VCID-ehzg-bzrd-kbcc" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-ep6t-zwd1-4bb3" }, { "vulnerability": "VCID-euk5-hagy-xqfz" }, { "vulnerability": "VCID-fy3g-uegw-2bew" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-h63t-9enx-qfdn" }, { "vulnerability": "VCID-he5m-6wj4-rbhc" }, { "vulnerability": "VCID-hpgq-deze-p7dp" }, { "vulnerability": "VCID-hv3n-j8ck-1ufx" }, { "vulnerability": "VCID-j77k-hjgx-5kc5" }, { "vulnerability": "VCID-jppe-cbgm-k3cz" }, { "vulnerability": "VCID-jqth-wfgx-87cx" }, { "vulnerability": "VCID-k4h1-mvnf-1ybx" }, { "vulnerability": "VCID-k8af-cg9k-87a9" }, { "vulnerability": "VCID-m7w6-b2xu-6uee" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-mqbh-k9n3-nbed" }, { "vulnerability": "VCID-mub5-s7h1-57cy" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n78p-x7hh-gqcf" }, { "vulnerability": "VCID-nt6a-5zkv-pbcm" }, { "vulnerability": "VCID-nwxj-3ajk-rkh5" }, { "vulnerability": "VCID-pk8d-8u15-5bfq" }, { "vulnerability": "VCID-pnfa-cksc-43de" }, { "vulnerability": "VCID-px44-19tj-h7aa" }, { "vulnerability": "VCID-q8hy-wjd9-nbgp" }, { "vulnerability": "VCID-q9ak-qcq6-qfhy" }, { "vulnerability": "VCID-qb4j-9tz7-m7a2" }, { "vulnerability": "VCID-rdrs-mhaw-b3ge" }, { "vulnerability": "VCID-rzw5-8d1u-sfam" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-shqd-udhm-pff8" }, { "vulnerability": "VCID-sr3p-pdxy-4yhu" }, { "vulnerability": "VCID-stzu-sxe6-5yf5" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-tgma-cyvk-97ay" }, { "vulnerability": "VCID-tmrt-6fxw-5ugh" }, { "vulnerability": "VCID-tqf5-2fsm-8fch" }, { "vulnerability": "VCID-tw1y-t4qj-j3d1" }, { "vulnerability": "VCID-uw2r-3gvq-bbcq" }, { "vulnerability": "VCID-vndb-w8e1-4ugv" }, { "vulnerability": "VCID-vrt1-aj9v-2kb6" }, { "vulnerability": "VCID-vxj6-wvyz-zbaq" }, { "vulnerability": "VCID-vxry-uvph-kbfd" }, { "vulnerability": "VCID-vybh-pxr3-17hn" }, { "vulnerability": "VCID-wea9-egep-h7g5" }, { "vulnerability": "VCID-wge3-kxdq-f3bz" }, { "vulnerability": "VCID-wr5t-xqnn-gkcj" }, { "vulnerability": "VCID-wxps-mnue-6bbh" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xh7y-56vy-5ud8" }, { "vulnerability": "VCID-xqew-bx7v-1qfk" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zkea-ge1t-z7gn" }, { "vulnerability": "VCID-zspb-bd6j-wyd2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.4.1" } ], "aliases": [ "TYPO3-CORE-SA-2016-023" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-prbd-r82t-87dm" } ], "risk_score": "4.0", "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@6.2.29" }