Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/23809?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/23809?format=api", "purl": "pkg:composer/typo3/cms-core@7.0.0", "type": "composer", "namespace": "typo3", "name": "cms-core", "version": "7.0.0", "qualifiers": {}, "subpath": "", "is_vulnerable": true, "next_non_vulnerable_version": "12.4.41", "latest_non_vulnerable_version": "14.0.2", "affected_by_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/19646?format=api", "vulnerability_id": "VCID-12y5-7b81-wkfu", "summary": "TYPO3 CMS Authentication Bypass vulnerability\nIt has been discovered that TYPO3’s Salted Password system extension (which is a mandatory system component) is vulnerable to Authentication Bypass when using hashing methods which are related by PHP class inheritance. In standard TYPO3 core distributions stored passwords using the blowfish hashing algorithm can be overridden when using MD5 as the default hashing algorithm by just knowing a valid username. Per default the Portable PHP hashing algorithm (PHPass) is used which is not vulnerable.", "references": [ { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2018-07-12-1.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2018-07-12-1.yaml" }, { "reference_url": "https://github.com/TYPO3-CMS/core", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3-CMS/core" }, { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2018-001", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://typo3.org/security/advisory/typo3-core-sa-2018-001" }, { "reference_url": "https://github.com/advisories/GHSA-x4rj-f7m6-42c3", "reference_id": "GHSA-x4rj-f7m6-42c3", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-x4rj-f7m6-42c3" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/29313?format=api", "purl": "pkg:composer/typo3/cms-core@7.6.30", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@7.6.30" }, { "url": "http://public2.vulnerablecode.io/api/packages/29298?format=api", "purl": "pkg:composer/typo3/cms-core@8.7.17", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-21e8-x7mp-hugk" }, { "vulnerability": "VCID-2meq-x4kd-bbdn" }, { "vulnerability": "VCID-3gg5-1921-rbfs" }, { "vulnerability": "VCID-3n2r-awja-dug9" }, { "vulnerability": "VCID-3v4n-fzxa-bfaw" }, { "vulnerability": "VCID-4btk-jt5n-2ugf" }, { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-551q-gpyd-ffe8" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5mxm-88r9-hfey" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-5u4q-m66t-wqcj" }, { "vulnerability": "VCID-5z59-dn7p-xbc5" }, { "vulnerability": "VCID-6xmj-wbea-r7ex" }, { "vulnerability": "VCID-9g62-zd1x-3bdg" }, { "vulnerability": "VCID-9gpp-ez8w-rqav" }, { "vulnerability": "VCID-9x6r-56xm-n7h7" }, { "vulnerability": "VCID-9zqs-hjay-fkev" }, { "vulnerability": "VCID-a563-vtwa-hkbr" }, { "vulnerability": "VCID-axaf-45kr-kbfe" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-b81w-n2ne-z3ee" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-bnne-7p2q-eqd2" }, { "vulnerability": "VCID-cm14-t8uv-k3es" }, { "vulnerability": "VCID-d99v-v9cj-zfh2" }, { "vulnerability": "VCID-dj88-f3p8-cfbn" }, { "vulnerability": "VCID-dm97-51uu-r7gw" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-e268-wagv-sbex" }, { "vulnerability": "VCID-eajg-ctpd-2bby" }, { "vulnerability": "VCID-ehzg-bzrd-kbcc" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-f4bv-pzdy-dfcb" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-he5m-6wj4-rbhc" }, { "vulnerability": "VCID-hhmn-yz5p-xkap" }, { "vulnerability": "VCID-j77k-hjgx-5kc5" }, { "vulnerability": "VCID-k8af-cg9k-87a9" }, { "vulnerability": "VCID-mh4f-vtfj-hbb1" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n1cb-8py6-bbhu" }, { "vulnerability": "VCID-n78p-x7hh-gqcf" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-pmzz-9rws-4ud5" }, { "vulnerability": "VCID-pss5-as4b-cyf2" }, { "vulnerability": "VCID-px44-19tj-h7aa" }, { "vulnerability": "VCID-q8hy-wjd9-nbgp" }, { "vulnerability": "VCID-qb4j-9tz7-m7a2" }, { "vulnerability": "VCID-rdrs-mhaw-b3ge" }, { "vulnerability": "VCID-rwqs-3ktq-qqbd" }, { "vulnerability": "VCID-s53a-f91p-huf4" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-stzu-sxe6-5yf5" }, { "vulnerability": "VCID-swnc-ke6h-ekew" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-tnjd-pyys-akav" }, { "vulnerability": "VCID-tw1y-t4qj-j3d1" }, { "vulnerability": "VCID-vxry-uvph-kbfd" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-wea9-egep-h7g5" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xh7y-56vy-5ud8" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zkea-ge1t-z7gn" }, { "vulnerability": "VCID-zspb-bd6j-wyd2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.17" }, { "url": "http://public2.vulnerablecode.io/api/packages/29299?format=api", "purl": "pkg:composer/typo3/cms-core@9.3.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-21e8-x7mp-hugk" }, { "vulnerability": "VCID-2meq-x4kd-bbdn" }, { "vulnerability": "VCID-2mn6-mdmz-4yd9" }, { "vulnerability": "VCID-3gg5-1921-rbfs" }, { "vulnerability": "VCID-3n2r-awja-dug9" }, { "vulnerability": "VCID-3v4n-fzxa-bfaw" }, { "vulnerability": "VCID-461j-9hrc-gfbc" }, { "vulnerability": "VCID-4btk-jt5n-2ugf" }, { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-4mkw-tv16-jyca" }, { "vulnerability": "VCID-4t9s-p25a-cfas" }, { "vulnerability": "VCID-543x-cnbz-1kb9" }, { "vulnerability": "VCID-551q-gpyd-ffe8" }, { "vulnerability": "VCID-58js-jzm4-4fc7" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5kzs-ex81-bbaj" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-5u4q-m66t-wqcj" }, { "vulnerability": "VCID-5z59-dn7p-xbc5" }, { "vulnerability": "VCID-65ue-7jd9-23gf" }, { "vulnerability": "VCID-6a9t-8dmn-s3bv" }, { "vulnerability": "VCID-6xmj-wbea-r7ex" }, { "vulnerability": "VCID-8d2m-1ffv-jqe1" }, { "vulnerability": "VCID-9g62-zd1x-3bdg" }, { "vulnerability": "VCID-9gpp-ez8w-rqav" }, { "vulnerability": "VCID-9x6r-56xm-n7h7" }, { "vulnerability": "VCID-9zqs-hjay-fkev" }, { "vulnerability": "VCID-a49c-fqrj-nbb3" }, { "vulnerability": "VCID-a563-vtwa-hkbr" }, { "vulnerability": "VCID-axaf-45kr-kbfe" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-bnne-7p2q-eqd2" }, { "vulnerability": "VCID-cm14-t8uv-k3es" }, { "vulnerability": "VCID-d8d1-sat6-muhe" }, { "vulnerability": "VCID-d99v-v9cj-zfh2" }, { "vulnerability": "VCID-dj88-f3p8-cfbn" }, { "vulnerability": "VCID-dm97-51uu-r7gw" }, { "vulnerability": "VCID-dmzb-gkdn-6bcm" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-e268-wagv-sbex" }, { "vulnerability": "VCID-e32h-8q61-hbgc" }, { "vulnerability": "VCID-eajg-ctpd-2bby" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-f4bv-pzdy-dfcb" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-he5m-6wj4-rbhc" }, { "vulnerability": "VCID-hhmn-yz5p-xkap" }, { "vulnerability": "VCID-k8af-cg9k-87a9" }, { "vulnerability": "VCID-kj9x-psfz-2ug1" }, { "vulnerability": "VCID-mh4f-vtfj-hbb1" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-mud2-s4rc-fuf6" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n1cb-8py6-bbhu" }, { "vulnerability": "VCID-n78p-x7hh-gqcf" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-nubu-f1sc-gbes" }, { "vulnerability": "VCID-nxq4-m52q-yuh4" }, { "vulnerability": "VCID-p715-yexd-jfgc" }, { "vulnerability": "VCID-phgh-sd4m-zbdx" }, { "vulnerability": "VCID-pmzz-9rws-4ud5" }, { "vulnerability": "VCID-pss5-as4b-cyf2" }, { "vulnerability": "VCID-px44-19tj-h7aa" }, { "vulnerability": "VCID-q8hy-wjd9-nbgp" }, { "vulnerability": "VCID-qb4j-9tz7-m7a2" }, { "vulnerability": "VCID-raxk-rm9v-hubn" }, { "vulnerability": "VCID-rdrs-mhaw-b3ge" }, { "vulnerability": "VCID-remd-55jh-r3g5" }, { "vulnerability": "VCID-rwqs-3ktq-qqbd" }, { "vulnerability": "VCID-s53a-f91p-huf4" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-stzu-sxe6-5yf5" }, { "vulnerability": "VCID-sw7v-fbjk-13hy" }, { "vulnerability": "VCID-swnc-ke6h-ekew" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-tnjd-pyys-akav" }, { "vulnerability": "VCID-tw1y-t4qj-j3d1" }, { "vulnerability": "VCID-u9bx-8e86-wbew" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vxry-uvph-kbfd" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-w13x-3rp9-wyej" }, { "vulnerability": "VCID-wea9-egep-h7g5" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xh7y-56vy-5ud8" }, { "vulnerability": "VCID-xtdg-uj46-rkcm" }, { "vulnerability": "VCID-xy6y-312d-rygj" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-yzx1-4psv-7bhr" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zkea-ge1t-z7gn" }, { "vulnerability": "VCID-zspb-bd6j-wyd2" }, { "vulnerability": "VCID-zwgt-rm1f-6bf2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.3.2" } ], "aliases": [ "GHSA-x4rj-f7m6-42c3" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-12y5-7b81-wkfu" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/9607?format=api", "vulnerability_id": "VCID-28bf-jvah-zkhw", "summary": "Improper Authentication\nAuthentication Bypass in TYPO3 CMS.", "references": [ { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2018-001/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2018-001/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/29313?format=api", "purl": "pkg:composer/typo3/cms-core@7.6.30", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@7.6.30" }, { "url": "http://public2.vulnerablecode.io/api/packages/29298?format=api", "purl": "pkg:composer/typo3/cms-core@8.7.17", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-21e8-x7mp-hugk" }, { "vulnerability": "VCID-2meq-x4kd-bbdn" }, { "vulnerability": "VCID-3gg5-1921-rbfs" }, { "vulnerability": "VCID-3n2r-awja-dug9" }, { "vulnerability": "VCID-3v4n-fzxa-bfaw" }, { "vulnerability": "VCID-4btk-jt5n-2ugf" }, { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-551q-gpyd-ffe8" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5mxm-88r9-hfey" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-5u4q-m66t-wqcj" }, { "vulnerability": "VCID-5z59-dn7p-xbc5" }, { "vulnerability": "VCID-6xmj-wbea-r7ex" }, { "vulnerability": "VCID-9g62-zd1x-3bdg" }, { "vulnerability": "VCID-9gpp-ez8w-rqav" }, { "vulnerability": "VCID-9x6r-56xm-n7h7" }, { "vulnerability": "VCID-9zqs-hjay-fkev" }, { "vulnerability": "VCID-a563-vtwa-hkbr" }, { "vulnerability": "VCID-axaf-45kr-kbfe" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-b81w-n2ne-z3ee" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-bnne-7p2q-eqd2" }, { "vulnerability": "VCID-cm14-t8uv-k3es" }, { "vulnerability": "VCID-d99v-v9cj-zfh2" }, { "vulnerability": "VCID-dj88-f3p8-cfbn" }, { "vulnerability": "VCID-dm97-51uu-r7gw" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-e268-wagv-sbex" }, { "vulnerability": "VCID-eajg-ctpd-2bby" }, { "vulnerability": "VCID-ehzg-bzrd-kbcc" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-f4bv-pzdy-dfcb" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-he5m-6wj4-rbhc" }, { "vulnerability": "VCID-hhmn-yz5p-xkap" }, { "vulnerability": "VCID-j77k-hjgx-5kc5" }, { "vulnerability": "VCID-k8af-cg9k-87a9" }, { "vulnerability": "VCID-mh4f-vtfj-hbb1" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n1cb-8py6-bbhu" }, { "vulnerability": "VCID-n78p-x7hh-gqcf" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-pmzz-9rws-4ud5" }, { "vulnerability": "VCID-pss5-as4b-cyf2" }, { "vulnerability": "VCID-px44-19tj-h7aa" }, { "vulnerability": "VCID-q8hy-wjd9-nbgp" }, { "vulnerability": "VCID-qb4j-9tz7-m7a2" }, { "vulnerability": "VCID-rdrs-mhaw-b3ge" }, { "vulnerability": "VCID-rwqs-3ktq-qqbd" }, { "vulnerability": "VCID-s53a-f91p-huf4" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-stzu-sxe6-5yf5" }, { "vulnerability": "VCID-swnc-ke6h-ekew" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-tnjd-pyys-akav" }, { "vulnerability": "VCID-tw1y-t4qj-j3d1" }, { "vulnerability": "VCID-vxry-uvph-kbfd" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-wea9-egep-h7g5" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xh7y-56vy-5ud8" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zkea-ge1t-z7gn" }, { "vulnerability": "VCID-zspb-bd6j-wyd2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.17" }, { "url": "http://public2.vulnerablecode.io/api/packages/29299?format=api", "purl": "pkg:composer/typo3/cms-core@9.3.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-21e8-x7mp-hugk" }, { "vulnerability": "VCID-2meq-x4kd-bbdn" }, { "vulnerability": "VCID-2mn6-mdmz-4yd9" }, { "vulnerability": "VCID-3gg5-1921-rbfs" }, { "vulnerability": "VCID-3n2r-awja-dug9" }, { "vulnerability": "VCID-3v4n-fzxa-bfaw" }, { "vulnerability": "VCID-461j-9hrc-gfbc" }, { "vulnerability": "VCID-4btk-jt5n-2ugf" }, { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-4mkw-tv16-jyca" }, { "vulnerability": "VCID-4t9s-p25a-cfas" }, { "vulnerability": "VCID-543x-cnbz-1kb9" }, { "vulnerability": "VCID-551q-gpyd-ffe8" }, { "vulnerability": "VCID-58js-jzm4-4fc7" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5kzs-ex81-bbaj" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-5u4q-m66t-wqcj" }, { "vulnerability": "VCID-5z59-dn7p-xbc5" }, { "vulnerability": "VCID-65ue-7jd9-23gf" }, { "vulnerability": "VCID-6a9t-8dmn-s3bv" }, { "vulnerability": "VCID-6xmj-wbea-r7ex" }, { "vulnerability": "VCID-8d2m-1ffv-jqe1" }, { "vulnerability": "VCID-9g62-zd1x-3bdg" }, { "vulnerability": "VCID-9gpp-ez8w-rqav" }, { "vulnerability": "VCID-9x6r-56xm-n7h7" }, { "vulnerability": "VCID-9zqs-hjay-fkev" }, { "vulnerability": "VCID-a49c-fqrj-nbb3" }, { "vulnerability": "VCID-a563-vtwa-hkbr" }, { "vulnerability": "VCID-axaf-45kr-kbfe" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-bnne-7p2q-eqd2" }, { "vulnerability": "VCID-cm14-t8uv-k3es" }, { "vulnerability": "VCID-d8d1-sat6-muhe" }, { "vulnerability": "VCID-d99v-v9cj-zfh2" }, { "vulnerability": "VCID-dj88-f3p8-cfbn" }, { "vulnerability": "VCID-dm97-51uu-r7gw" }, { "vulnerability": "VCID-dmzb-gkdn-6bcm" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-e268-wagv-sbex" }, { "vulnerability": "VCID-e32h-8q61-hbgc" }, { "vulnerability": "VCID-eajg-ctpd-2bby" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-f4bv-pzdy-dfcb" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-he5m-6wj4-rbhc" }, { "vulnerability": "VCID-hhmn-yz5p-xkap" }, { "vulnerability": "VCID-k8af-cg9k-87a9" }, { "vulnerability": "VCID-kj9x-psfz-2ug1" }, { "vulnerability": "VCID-mh4f-vtfj-hbb1" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-mud2-s4rc-fuf6" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n1cb-8py6-bbhu" }, { "vulnerability": "VCID-n78p-x7hh-gqcf" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-nubu-f1sc-gbes" }, { "vulnerability": "VCID-nxq4-m52q-yuh4" }, { "vulnerability": "VCID-p715-yexd-jfgc" }, { "vulnerability": "VCID-phgh-sd4m-zbdx" }, { "vulnerability": "VCID-pmzz-9rws-4ud5" }, { "vulnerability": "VCID-pss5-as4b-cyf2" }, { "vulnerability": "VCID-px44-19tj-h7aa" }, { "vulnerability": "VCID-q8hy-wjd9-nbgp" }, { "vulnerability": "VCID-qb4j-9tz7-m7a2" }, { "vulnerability": "VCID-raxk-rm9v-hubn" }, { "vulnerability": "VCID-rdrs-mhaw-b3ge" }, { "vulnerability": "VCID-remd-55jh-r3g5" }, { "vulnerability": "VCID-rwqs-3ktq-qqbd" }, { "vulnerability": "VCID-s53a-f91p-huf4" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-stzu-sxe6-5yf5" }, { "vulnerability": "VCID-sw7v-fbjk-13hy" }, { "vulnerability": "VCID-swnc-ke6h-ekew" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-tnjd-pyys-akav" }, { "vulnerability": "VCID-tw1y-t4qj-j3d1" }, { "vulnerability": "VCID-u9bx-8e86-wbew" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vxry-uvph-kbfd" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-w13x-3rp9-wyej" }, { "vulnerability": "VCID-wea9-egep-h7g5" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xh7y-56vy-5ud8" }, { "vulnerability": "VCID-xtdg-uj46-rkcm" }, { "vulnerability": "VCID-xy6y-312d-rygj" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-yzx1-4psv-7bhr" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zkea-ge1t-z7gn" }, { "vulnerability": "VCID-zspb-bd6j-wyd2" }, { "vulnerability": "VCID-zwgt-rm1f-6bf2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.3.2" } ], "aliases": [ "2018-07-12-1" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-28bf-jvah-zkhw" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/42154?format=api", "vulnerability_id": "VCID-5jgb-dsyx-hyb4", "summary": "Open Redirection in Login Handling\n### Problem\nIt has been discovered that Login Handling is susceptible to open redirection which allows attackers redirecting to arbitrary content, and conducting phishing attacks. No authentication is required in order to exploit this vulnerability.\n\n### Solution\nUpdate to TYPO3 versions 6.2.57, 7.6.51, 8.7.40, 9.5.25, 10.4.14, 11.1.1 that fix the problem described.\n\n### Credits\nThanks to Alexander Kellner who reported this issue and to TYPO3 security team member Torben Hansen who fixed the issue.\n\n### References\n* [TYPO3-CORE-SA-2021-001](https://typo3.org/security/advisory/typo3-core-sa-2021-001)", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-21338", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00253", "scoring_system": "epss", "scoring_elements": "0.48589", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00253", "scoring_system": "epss", "scoring_elements": "0.48583", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.00253", "scoring_system": "epss", "scoring_elements": "0.48529", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.00253", "scoring_system": "epss", "scoring_elements": "0.4861", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00253", "scoring_system": "epss", "scoring_elements": "0.48564", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00253", "scoring_system": "epss", "scoring_elements": "0.48587", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00253", "scoring_system": "epss", "scoring_elements": "0.48539", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00253", "scoring_system": "epss", "scoring_elements": "0.48593", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00253", "scoring_system": "epss", "scoring_elements": "0.48598", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00253", "scoring_system": "epss", "scoring_elements": "0.48641", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00253", "scoring_system": "epss", "scoring_elements": "0.48646", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00253", "scoring_system": "epss", "scoring_elements": "0.48596", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00253", "scoring_system": "epss", "scoring_elements": "0.48584", "published_at": "2026-04-12T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-21338" }, { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21338.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21338.yaml" }, { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21338.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21338.yaml" }, { "reference_url": "https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-4jhw-2p6j-5wmp", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-4jhw-2p6j-5wmp" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-21338", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-21338" }, { "reference_url": "https://packagist.org/packages/typo3/cms-core", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://packagist.org/packages/typo3/cms-core" }, { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2021-001", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://typo3.org/security/advisory/typo3-core-sa-2021-001" }, { "reference_url": "https://github.com/advisories/GHSA-4jhw-2p6j-5wmp", "reference_id": "GHSA-4jhw-2p6j-5wmp", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-4jhw-2p6j-5wmp" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/37644?format=api", "purl": "pkg:composer/typo3/cms-core@7.6.51", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-n15v-ta9h-6ffb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@7.6.51" }, { "url": "http://public2.vulnerablecode.io/api/packages/37635?format=api", "purl": "pkg:composer/typo3/cms-core@8.7.40", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-s64f-x81f-b7ce" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.40" }, { "url": "http://public2.vulnerablecode.io/api/packages/75848?format=api", "purl": "pkg:composer/typo3/cms-core@9.5.25", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-4t9s-p25a-cfas" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-65ue-7jd9-23gf" }, { "vulnerability": "VCID-6a9t-8dmn-s3bv" }, { "vulnerability": "VCID-8d2m-1ffv-jqe1" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-e32h-8q61-hbgc" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-mud2-s4rc-fuf6" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-nubu-f1sc-gbes" }, { "vulnerability": "VCID-remd-55jh-r3g5" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-w13x-3rp9-wyej" }, { "vulnerability": "VCID-xy6y-312d-rygj" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zn99-ywte-33g6" }, { "vulnerability": "VCID-zwgt-rm1f-6bf2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.25" }, { "url": "http://public2.vulnerablecode.io/api/packages/75846?format=api", "purl": "pkg:composer/typo3/cms-core@10.4.14", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1r9g-c5rn-ukgb" }, { "vulnerability": "VCID-1yxw-saf5-wue7" }, { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-4t9s-p25a-cfas" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-65ue-7jd9-23gf" }, { "vulnerability": "VCID-6a9t-8dmn-s3bv" }, { "vulnerability": "VCID-8d2m-1ffv-jqe1" }, { "vulnerability": "VCID-8sdd-b1bn-cuhx" }, { "vulnerability": "VCID-av8u-rvzq-4fc7" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-e32h-8q61-hbgc" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-gyyu-n3b1-zbcj" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-mud2-s4rc-fuf6" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-nubu-f1sc-gbes" }, { "vulnerability": "VCID-remd-55jh-r3g5" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vwb2-a84s-5qak" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-w13x-3rp9-wyej" }, { "vulnerability": "VCID-xy6y-312d-rygj" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zn99-ywte-33g6" }, { "vulnerability": "VCID-zwgt-rm1f-6bf2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@10.4.14" }, { "url": "http://public2.vulnerablecode.io/api/packages/75847?format=api", "purl": "pkg:composer/typo3/cms-core@11.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1r9g-c5rn-ukgb" }, { "vulnerability": "VCID-1yxw-saf5-wue7" }, { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-4t9s-p25a-cfas" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-65ue-7jd9-23gf" }, { "vulnerability": "VCID-6a9t-8dmn-s3bv" }, { "vulnerability": "VCID-8d2m-1ffv-jqe1" }, { "vulnerability": "VCID-8sdd-b1bn-cuhx" }, { "vulnerability": "VCID-av8u-rvzq-4fc7" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-e32h-8q61-hbgc" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-gyyu-n3b1-zbcj" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-mud2-s4rc-fuf6" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-nubu-f1sc-gbes" }, { "vulnerability": "VCID-remd-55jh-r3g5" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-uyeu-a3xr-fkh4" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vwb2-a84s-5qak" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-w13x-3rp9-wyej" }, { "vulnerability": "VCID-xy6y-312d-rygj" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zn99-ywte-33g6" }, { "vulnerability": "VCID-zwgt-rm1f-6bf2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@11.1.1" } ], "aliases": [ "CVE-2021-21338", "GHSA-4jhw-2p6j-5wmp" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-5jgb-dsyx-hyb4" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/52429?format=api", "vulnerability_id": "VCID-5paq-5frf-43ed", "summary": "TYPO3 CMS Stored Cross-Site Scripting via FileDumpController\n> ### Meta\n> * CVSS: `CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N/E:F/RL:O/RC:C` (5.0)\n\n### Problem\nIt has been discovered that the `FileDumpController` (backend and frontend context) is vulnerable to cross-site scripting when malicious files are displayed using this component. A valid backend user account is needed to exploit this vulnerability.\n\n### Solution\nUpdate to TYPO3 version 7.6.58 ELTS, 8.7.48 ELTS, 9.5.37 ELTS, 10.4.32 or 11.5.16 that fix the problem described above.\n\n### Credits\nThanks to Vautia who reported this issue and to TYPO3 core & security team member Oliver Hader who fixed the issue.\n\n### References\n* [TYPO3-CORE-SA-2022-009](https://typo3.org/security/advisory/typo3-core-sa-2022-009)\n* [Vulnerability Report on huntr.dev](https://huntr.dev/bounties/51e9b709-193c-41fd-bd4a-833aaca0bd4e/) (embargoed +30 days)", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-36107", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00687", "scoring_system": "epss", "scoring_elements": "0.71682", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00687", "scoring_system": "epss", "scoring_elements": "0.7173", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00687", "scoring_system": "epss", "scoring_elements": "0.71747", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00687", "scoring_system": "epss", "scoring_elements": "0.71723", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00687", "scoring_system": "epss", "scoring_elements": "0.71712", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00687", "scoring_system": "epss", "scoring_elements": "0.71673", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00687", "scoring_system": "epss", "scoring_elements": "0.717", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00687", "scoring_system": "epss", "scoring_elements": "0.71794", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.00687", "scoring_system": "epss", "scoring_elements": "0.71744", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00687", "scoring_system": "epss", "scoring_elements": "0.71762", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00687", "scoring_system": "epss", "scoring_elements": "0.71756", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00687", "scoring_system": "epss", "scoring_elements": "0.71713", "published_at": "2026-04-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-36107" }, { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2022-36107.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2022-36107.yaml" }, { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2022-36107.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2022-36107.yaml" }, { "reference_url": "https://github.com/TYPO3/typo3", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3/typo3" }, { "reference_url": "https://github.com/TYPO3/typo3/commit/546208428c861a09d62b86cde141eb19a81fae66", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3/typo3/commit/546208428c861a09d62b86cde141eb19a81fae66" }, { "reference_url": "https://github.com/TYPO3/typo3/commit/bd58d2ff2eeef89e63ef754a2389597d22622a39", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3/typo3/commit/bd58d2ff2eeef89e63ef754a2389597d22622a39" }, { "reference_url": "https://github.com/TYPO3/typo3/security/advisories/GHSA-9c6w-55cp-5w25", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3/typo3/security/advisories/GHSA-9c6w-55cp-5w25" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-36107", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-36107" }, { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2022-009", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://typo3.org/security/advisory/typo3-core-sa-2022-009" }, { "reference_url": "https://github.com/advisories/GHSA-9c6w-55cp-5w25", "reference_id": "GHSA-9c6w-55cp-5w25", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-9c6w-55cp-5w25" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/79941?format=api", "purl": "pkg:composer/typo3/cms-core@7.6.58", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@7.6.58" }, { "url": "http://public2.vulnerablecode.io/api/packages/79942?format=api", "purl": "pkg:composer/typo3/cms-core@8.7.48", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.48" }, { "url": "http://public2.vulnerablecode.io/api/packages/79943?format=api", "purl": "pkg:composer/typo3/cms-core@9.5.37", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.37" }, { "url": "http://public2.vulnerablecode.io/api/packages/79944?format=api", "purl": "pkg:composer/typo3/cms-core@10.4.32", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1r9g-c5rn-ukgb" }, { "vulnerability": "VCID-4t9s-p25a-cfas" }, { "vulnerability": "VCID-65ue-7jd9-23gf" }, { "vulnerability": "VCID-8d2m-1ffv-jqe1" }, { "vulnerability": "VCID-8sdd-b1bn-cuhx" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-gyyu-n3b1-zbcj" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-mud2-s4rc-fuf6" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-nubu-f1sc-gbes" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-w13x-3rp9-wyej" }, { "vulnerability": "VCID-xy6y-312d-rygj" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zn99-ywte-33g6" }, { "vulnerability": "VCID-zwgt-rm1f-6bf2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@10.4.32" }, { "url": "http://public2.vulnerablecode.io/api/packages/79945?format=api", "purl": "pkg:composer/typo3/cms-core@11.5.16", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1r9g-c5rn-ukgb" }, { "vulnerability": "VCID-4t9s-p25a-cfas" }, { "vulnerability": "VCID-65ue-7jd9-23gf" }, { "vulnerability": "VCID-8d2m-1ffv-jqe1" }, { "vulnerability": "VCID-8sdd-b1bn-cuhx" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-gyyu-n3b1-zbcj" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-mud2-s4rc-fuf6" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-nubu-f1sc-gbes" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-w13x-3rp9-wyej" }, { "vulnerability": "VCID-xy6y-312d-rygj" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zn99-ywte-33g6" }, { "vulnerability": "VCID-zwgt-rm1f-6bf2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@11.5.16" } ], "aliases": [ "CVE-2022-36107", "GHSA-9c6w-55cp-5w25" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-5paq-5frf-43ed" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/19911?format=api", "vulnerability_id": "VCID-6xmj-wbea-r7ex", "summary": "TYPO3 Denial of Service in Online Media Asset Handling\nOnline Media Asset Handling (*.youtube and *.vimeo files) in the TYPO3 backend is vulnerable to denial of service. Putting large files with according file extensions results in high consumption of system resources. This can lead to exceeding limits of the current PHP process which results in a dysfunctional backend component. A valid backend user account or write access on the server system (e.g. SFTP) is needed in order to exploit this vulnerability.", "references": [ { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2018-12-11-6.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2018-12-11-6.yaml" }, { "reference_url": "https://github.com/TYPO3-CMS/core/commit/9b2ecd2a402a76e17b78f78ed2ac9b7fff36d201", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3-CMS/core/commit/9b2ecd2a402a76e17b78f78ed2ac9b7fff36d201" }, { "reference_url": "https://github.com/TYPO3-CMS/core/commit/aa2dcb340bc7f2b815c8eee02cf54e100f82f3e7", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3-CMS/core/commit/aa2dcb340bc7f2b815c8eee02cf54e100f82f3e7" }, { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2018-011", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://typo3.org/security/advisory/typo3-core-sa-2018-011" }, { "reference_url": "https://github.com/advisories/GHSA-29m4-mx89-3mjg", "reference_id": "GHSA-29m4-mx89-3mjg", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-29m4-mx89-3mjg" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/33598?format=api", "purl": "pkg:composer/typo3/cms-core@7.6.32", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@7.6.32" }, { "url": "http://public2.vulnerablecode.io/api/packages/33468?format=api", "purl": "pkg:composer/typo3/cms-core@8.7.21", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-21e8-x7mp-hugk" }, { "vulnerability": "VCID-2meq-x4kd-bbdn" }, { "vulnerability": "VCID-3n2r-awja-dug9" }, { "vulnerability": "VCID-3v4n-fzxa-bfaw" }, { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-551q-gpyd-ffe8" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5mxm-88r9-hfey" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-5u4q-m66t-wqcj" }, { "vulnerability": "VCID-9g62-zd1x-3bdg" }, { "vulnerability": "VCID-9gpp-ez8w-rqav" }, { "vulnerability": "VCID-9x6r-56xm-n7h7" }, { "vulnerability": "VCID-9zqs-hjay-fkev" }, { "vulnerability": "VCID-axaf-45kr-kbfe" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-cm14-t8uv-k3es" }, { "vulnerability": "VCID-d99v-v9cj-zfh2" }, { "vulnerability": "VCID-dj88-f3p8-cfbn" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-eajg-ctpd-2bby" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-f4bv-pzdy-dfcb" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-he5m-6wj4-rbhc" }, { "vulnerability": "VCID-hhmn-yz5p-xkap" }, { "vulnerability": "VCID-j77k-hjgx-5kc5" }, { "vulnerability": "VCID-k8af-cg9k-87a9" }, { "vulnerability": "VCID-mh4f-vtfj-hbb1" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-pmzz-9rws-4ud5" }, { "vulnerability": "VCID-pss5-as4b-cyf2" }, { "vulnerability": "VCID-px44-19tj-h7aa" }, { "vulnerability": "VCID-q8hy-wjd9-nbgp" }, { "vulnerability": "VCID-s53a-f91p-huf4" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-stzu-sxe6-5yf5" }, { "vulnerability": "VCID-swnc-ke6h-ekew" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-tnjd-pyys-akav" }, { "vulnerability": "VCID-vxry-uvph-kbfd" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-wea9-egep-h7g5" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xh7y-56vy-5ud8" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zkea-ge1t-z7gn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.21" }, { "url": "http://public2.vulnerablecode.io/api/packages/33470?format=api", "purl": "pkg:composer/typo3/cms-core@9.5.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-21e8-x7mp-hugk" }, { "vulnerability": "VCID-2meq-x4kd-bbdn" }, { "vulnerability": "VCID-2mn6-mdmz-4yd9" }, { "vulnerability": "VCID-3n2r-awja-dug9" }, { "vulnerability": "VCID-3v4n-fzxa-bfaw" }, { "vulnerability": "VCID-461j-9hrc-gfbc" }, { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-4mkw-tv16-jyca" }, { "vulnerability": "VCID-4t9s-p25a-cfas" }, { "vulnerability": "VCID-543x-cnbz-1kb9" }, { "vulnerability": "VCID-551q-gpyd-ffe8" }, { "vulnerability": "VCID-58js-jzm4-4fc7" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5kzs-ex81-bbaj" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-5u4q-m66t-wqcj" }, { "vulnerability": "VCID-65ue-7jd9-23gf" }, { "vulnerability": "VCID-6a9t-8dmn-s3bv" }, { "vulnerability": "VCID-8d2m-1ffv-jqe1" }, { "vulnerability": "VCID-9g62-zd1x-3bdg" }, { "vulnerability": "VCID-9gpp-ez8w-rqav" }, { "vulnerability": "VCID-9x6r-56xm-n7h7" }, { "vulnerability": "VCID-9zqs-hjay-fkev" }, { "vulnerability": "VCID-a49c-fqrj-nbb3" }, { "vulnerability": "VCID-axaf-45kr-kbfe" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-cm14-t8uv-k3es" }, { "vulnerability": "VCID-d8d1-sat6-muhe" }, { "vulnerability": "VCID-d99v-v9cj-zfh2" }, { "vulnerability": "VCID-dj88-f3p8-cfbn" }, { "vulnerability": "VCID-dmzb-gkdn-6bcm" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-e32h-8q61-hbgc" }, { "vulnerability": "VCID-eajg-ctpd-2bby" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-f4bv-pzdy-dfcb" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-he5m-6wj4-rbhc" }, { "vulnerability": "VCID-hhmn-yz5p-xkap" }, { "vulnerability": "VCID-k8af-cg9k-87a9" }, { "vulnerability": "VCID-kj9x-psfz-2ug1" }, { "vulnerability": "VCID-mh4f-vtfj-hbb1" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-mud2-s4rc-fuf6" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-nubu-f1sc-gbes" }, { "vulnerability": "VCID-nxq4-m52q-yuh4" }, { "vulnerability": "VCID-p715-yexd-jfgc" }, { "vulnerability": "VCID-phgh-sd4m-zbdx" }, { "vulnerability": "VCID-pmzz-9rws-4ud5" }, { "vulnerability": "VCID-pss5-as4b-cyf2" }, { "vulnerability": "VCID-px44-19tj-h7aa" }, { "vulnerability": "VCID-q8hy-wjd9-nbgp" }, { "vulnerability": "VCID-raxk-rm9v-hubn" }, { "vulnerability": "VCID-remd-55jh-r3g5" }, { "vulnerability": "VCID-s53a-f91p-huf4" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-stzu-sxe6-5yf5" }, { "vulnerability": "VCID-sw7v-fbjk-13hy" }, { "vulnerability": "VCID-swnc-ke6h-ekew" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-tnjd-pyys-akav" }, { "vulnerability": "VCID-u9bx-8e86-wbew" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vxry-uvph-kbfd" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-w13x-3rp9-wyej" }, { "vulnerability": "VCID-wea9-egep-h7g5" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xh7y-56vy-5ud8" }, { "vulnerability": "VCID-xtdg-uj46-rkcm" }, { "vulnerability": "VCID-xy6y-312d-rygj" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-yzx1-4psv-7bhr" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zkea-ge1t-z7gn" }, { "vulnerability": "VCID-zn99-ywte-33g6" }, { "vulnerability": "VCID-zwgt-rm1f-6bf2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.2" } ], "aliases": [ "GHSA-29m4-mx89-3mjg" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-6xmj-wbea-r7ex" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/19378?format=api", "vulnerability_id": "VCID-a563-vtwa-hkbr", "summary": "TYPO3 Information Disclosure in Install Tool\nThe Install Tool exposes the current TYPO3 version number to non-authenticated users.", "references": [ { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2018-12-11-5.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2018-12-11-5.yaml" }, { "reference_url": "https://github.com/TYPO3-CMS/core", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3-CMS/core" }, { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2018-010", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://typo3.org/security/advisory/typo3-core-sa-2018-010" }, { "reference_url": "https://github.com/advisories/GHSA-66c2-7g4p-wx4p", "reference_id": "GHSA-66c2-7g4p-wx4p", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-66c2-7g4p-wx4p" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/33598?format=api", "purl": "pkg:composer/typo3/cms-core@7.6.32", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@7.6.32" }, { "url": "http://public2.vulnerablecode.io/api/packages/33468?format=api", "purl": "pkg:composer/typo3/cms-core@8.7.21", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-21e8-x7mp-hugk" }, { "vulnerability": "VCID-2meq-x4kd-bbdn" }, { "vulnerability": "VCID-3n2r-awja-dug9" }, { "vulnerability": "VCID-3v4n-fzxa-bfaw" }, { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-551q-gpyd-ffe8" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5mxm-88r9-hfey" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-5u4q-m66t-wqcj" }, { "vulnerability": "VCID-9g62-zd1x-3bdg" }, { "vulnerability": "VCID-9gpp-ez8w-rqav" }, { "vulnerability": "VCID-9x6r-56xm-n7h7" }, { "vulnerability": "VCID-9zqs-hjay-fkev" }, { "vulnerability": "VCID-axaf-45kr-kbfe" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-cm14-t8uv-k3es" }, { "vulnerability": "VCID-d99v-v9cj-zfh2" }, { "vulnerability": "VCID-dj88-f3p8-cfbn" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-eajg-ctpd-2bby" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-f4bv-pzdy-dfcb" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-he5m-6wj4-rbhc" }, { "vulnerability": "VCID-hhmn-yz5p-xkap" }, { "vulnerability": "VCID-j77k-hjgx-5kc5" }, { "vulnerability": "VCID-k8af-cg9k-87a9" }, { "vulnerability": "VCID-mh4f-vtfj-hbb1" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-pmzz-9rws-4ud5" }, { "vulnerability": "VCID-pss5-as4b-cyf2" }, { "vulnerability": "VCID-px44-19tj-h7aa" }, { "vulnerability": "VCID-q8hy-wjd9-nbgp" }, { "vulnerability": "VCID-s53a-f91p-huf4" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-stzu-sxe6-5yf5" }, { "vulnerability": "VCID-swnc-ke6h-ekew" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-tnjd-pyys-akav" }, { "vulnerability": "VCID-vxry-uvph-kbfd" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-wea9-egep-h7g5" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xh7y-56vy-5ud8" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zkea-ge1t-z7gn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.21" }, { "url": "http://public2.vulnerablecode.io/api/packages/33470?format=api", "purl": "pkg:composer/typo3/cms-core@9.5.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-21e8-x7mp-hugk" }, { "vulnerability": "VCID-2meq-x4kd-bbdn" }, { "vulnerability": "VCID-2mn6-mdmz-4yd9" }, { "vulnerability": "VCID-3n2r-awja-dug9" }, { "vulnerability": "VCID-3v4n-fzxa-bfaw" }, { "vulnerability": "VCID-461j-9hrc-gfbc" }, { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-4mkw-tv16-jyca" }, { "vulnerability": "VCID-4t9s-p25a-cfas" }, { "vulnerability": "VCID-543x-cnbz-1kb9" }, { "vulnerability": "VCID-551q-gpyd-ffe8" }, { "vulnerability": "VCID-58js-jzm4-4fc7" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5kzs-ex81-bbaj" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-5u4q-m66t-wqcj" }, { "vulnerability": "VCID-65ue-7jd9-23gf" }, { "vulnerability": "VCID-6a9t-8dmn-s3bv" }, { "vulnerability": "VCID-8d2m-1ffv-jqe1" }, { "vulnerability": "VCID-9g62-zd1x-3bdg" }, { "vulnerability": "VCID-9gpp-ez8w-rqav" }, { "vulnerability": "VCID-9x6r-56xm-n7h7" }, { "vulnerability": "VCID-9zqs-hjay-fkev" }, { "vulnerability": "VCID-a49c-fqrj-nbb3" }, { "vulnerability": "VCID-axaf-45kr-kbfe" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-cm14-t8uv-k3es" }, { "vulnerability": "VCID-d8d1-sat6-muhe" }, { "vulnerability": "VCID-d99v-v9cj-zfh2" }, { "vulnerability": "VCID-dj88-f3p8-cfbn" }, { "vulnerability": "VCID-dmzb-gkdn-6bcm" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-e32h-8q61-hbgc" }, { "vulnerability": "VCID-eajg-ctpd-2bby" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-f4bv-pzdy-dfcb" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-he5m-6wj4-rbhc" }, { "vulnerability": "VCID-hhmn-yz5p-xkap" }, { "vulnerability": "VCID-k8af-cg9k-87a9" }, { "vulnerability": "VCID-kj9x-psfz-2ug1" }, { "vulnerability": "VCID-mh4f-vtfj-hbb1" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-mud2-s4rc-fuf6" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-nubu-f1sc-gbes" }, { "vulnerability": "VCID-nxq4-m52q-yuh4" }, { "vulnerability": "VCID-p715-yexd-jfgc" }, { "vulnerability": "VCID-phgh-sd4m-zbdx" }, { "vulnerability": "VCID-pmzz-9rws-4ud5" }, { "vulnerability": "VCID-pss5-as4b-cyf2" }, { "vulnerability": "VCID-px44-19tj-h7aa" }, { "vulnerability": "VCID-q8hy-wjd9-nbgp" }, { "vulnerability": "VCID-raxk-rm9v-hubn" }, { "vulnerability": "VCID-remd-55jh-r3g5" }, { "vulnerability": "VCID-s53a-f91p-huf4" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-stzu-sxe6-5yf5" }, { "vulnerability": "VCID-sw7v-fbjk-13hy" }, { "vulnerability": "VCID-swnc-ke6h-ekew" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-tnjd-pyys-akav" }, { "vulnerability": "VCID-u9bx-8e86-wbew" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vxry-uvph-kbfd" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-w13x-3rp9-wyej" }, { "vulnerability": "VCID-wea9-egep-h7g5" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xh7y-56vy-5ud8" }, { "vulnerability": "VCID-xtdg-uj46-rkcm" }, { "vulnerability": "VCID-xy6y-312d-rygj" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-yzx1-4psv-7bhr" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zkea-ge1t-z7gn" }, { "vulnerability": "VCID-zn99-ywte-33g6" }, { "vulnerability": "VCID-zwgt-rm1f-6bf2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.2" } ], "aliases": [ "GHSA-66c2-7g4p-wx4p" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-a563-vtwa-hkbr" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7789?format=api", "vulnerability_id": "VCID-ampc-h88c-afh2", "summary": "Information Exposure\nExtbase in TYPO3 allows remote attackers to obtain sensitive information or possibly execute arbitrary code via a crafted Extbase action.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-5091", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.02369", "scoring_system": "epss", "scoring_elements": "0.84998", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.02369", "scoring_system": "epss", "scoring_elements": "0.84913", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.02369", "scoring_system": "epss", "scoring_elements": "0.84936", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.02369", "scoring_system": "epss", "scoring_elements": "0.84943", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.02369", "scoring_system": "epss", "scoring_elements": "0.84959", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.02369", "scoring_system": "epss", "scoring_elements": "0.84957", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.02369", "scoring_system": "epss", "scoring_elements": "0.84952", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.02369", "scoring_system": "epss", "scoring_elements": "0.84974", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.02369", "scoring_system": "epss", "scoring_elements": "0.84975", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.02369", "scoring_system": "epss", "scoring_elements": "0.84972", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.02369", "scoring_system": "epss", "scoring_elements": "0.84876", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.02369", "scoring_system": "epss", "scoring_elements": "0.84891", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.02369", "scoring_system": "epss", "scoring_elements": "0.84909", "published_at": "2026-04-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-5091" }, { "reference_url": "https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2016-013", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2016-013" }, { "reference_url": "https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2016-013/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2016-013/" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2016/05/25/4", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2016/05/25/4" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2016/05/26/2", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2016/05/26/2" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2016-5091", "reference_id": "CVE-2016-5091", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-5091" }, { "reference_url": "https://github.com/advisories/GHSA-jxg5-35fj-ccwf", "reference_id": "GHSA-jxg5-35fj-ccwf", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-jxg5-35fj-ccwf" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/23817?format=api", "purl": "pkg:composer/typo3/cms-core@7.0.1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@7.0.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/23818?format=api", "purl": "pkg:composer/typo3/cms-core@7.6.9", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@7.6.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/23819?format=api", "purl": "pkg:composer/typo3/cms-core@8.1.2", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.1.2" } ], "aliases": [ "CVE-2016-5091", "GHSA-jxg5-35fj-ccwf" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ampc-h88c-afh2" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/52089?format=api", "vulnerability_id": "VCID-b6er-h7dm-3bev", "summary": "TYPO3 HTML Sanitizer Bypasses Cross-Site Scripting Protection\n> ### Meta\n> * CVSS: `CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:F/RL:O/RC:C` (5.7)\n\n### Problem\nDue to a parsing issue in upstream package [`masterminds/html5`](https://packagist.org/packages/masterminds/html5), malicious markup used in a sequence with special HTML comments cannot be filtered and sanitized. This allows to by-pass the cross-site scripting mechanism of [`typo3/html-sanitizer`](https://github.com/TYPO3/html-sanitizer).\n\n### Solution\nUpdate to TYPO3 version 7.6.58 ELTS, 8.7.48 ELTS, 9.5.37 ELTS, 10.4.32 or 11.5.16 that fix the problem described above.\n\n### Credits\nThanks to David Klein who reported this issue, and to TYPO3 security team member Oliver Hader who fixed the issue.\n\n### References\n* [TYPO3-CORE-SA-2022-011](https://typo3.org/security/advisory/typo3-core-sa-2022-011)\n* [GHSA-47m6-46mj-p235](https://github.com/TYPO3/html-sanitizer/security/advisories/GHSA-47m6-46mj-p235)", "references": [ { "reference_url": "https://github.com/TYPO3/typo3", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3/typo3" }, { "reference_url": "https://github.com/TYPO3/typo3/commit/d4f260570abd934fcf3819370a135bef33d729b7", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3/typo3/commit/d4f260570abd934fcf3819370a135bef33d729b7" }, { "reference_url": "https://github.com/TYPO3/typo3/security/advisories/GHSA-gqqf-g5r7-84vf", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3/typo3/security/advisories/GHSA-gqqf-g5r7-84vf" }, { "reference_url": "https://github.com/advisories/GHSA-gqqf-g5r7-84vf", "reference_id": "GHSA-gqqf-g5r7-84vf", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-gqqf-g5r7-84vf" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/79941?format=api", "purl": "pkg:composer/typo3/cms-core@7.6.58", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@7.6.58" }, { "url": "http://public2.vulnerablecode.io/api/packages/79942?format=api", "purl": "pkg:composer/typo3/cms-core@8.7.48", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.48" }, { "url": "http://public2.vulnerablecode.io/api/packages/79943?format=api", "purl": "pkg:composer/typo3/cms-core@9.5.37", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.37" }, { "url": "http://public2.vulnerablecode.io/api/packages/79944?format=api", "purl": "pkg:composer/typo3/cms-core@10.4.32", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1r9g-c5rn-ukgb" }, { "vulnerability": "VCID-4t9s-p25a-cfas" }, { "vulnerability": "VCID-65ue-7jd9-23gf" }, { "vulnerability": "VCID-8d2m-1ffv-jqe1" }, { "vulnerability": "VCID-8sdd-b1bn-cuhx" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-gyyu-n3b1-zbcj" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-mud2-s4rc-fuf6" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-nubu-f1sc-gbes" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-w13x-3rp9-wyej" }, { "vulnerability": "VCID-xy6y-312d-rygj" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zn99-ywte-33g6" }, { "vulnerability": "VCID-zwgt-rm1f-6bf2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@10.4.32" }, { "url": "http://public2.vulnerablecode.io/api/packages/79945?format=api", "purl": "pkg:composer/typo3/cms-core@11.5.16", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1r9g-c5rn-ukgb" }, { "vulnerability": "VCID-4t9s-p25a-cfas" }, { "vulnerability": "VCID-65ue-7jd9-23gf" }, { "vulnerability": "VCID-8d2m-1ffv-jqe1" }, { "vulnerability": "VCID-8sdd-b1bn-cuhx" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-gyyu-n3b1-zbcj" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-mud2-s4rc-fuf6" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-nubu-f1sc-gbes" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-w13x-3rp9-wyej" }, { "vulnerability": "VCID-xy6y-312d-rygj" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zn99-ywte-33g6" }, { "vulnerability": "VCID-zwgt-rm1f-6bf2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@11.5.16" } ], "aliases": [ "GHSA-gqqf-g5r7-84vf", "GMS-2022-4096" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-b6er-h7dm-3bev" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/19871?format=api", "vulnerability_id": "VCID-b81w-n2ne-z3ee", "summary": "TYPO3 Denial of Service in Frontend Record Registration\nTYPO3’s built-in record registration functionality (aka “basic shopping cart”) using recs URL parameters is vulnerable to denial of service. Failing to properly ensure that anonymous user sessions are valid, attackers can use this vulnerability in order to create an arbitrary amount of individual session-data records in the database.", "references": [ { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2018-12-11-7.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2018-12-11-7.yaml" }, { "reference_url": "https://github.com/TYPO3-CMS/core", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3-CMS/core" }, { "reference_url": "https://github.com/TYPO3-CMS/core/commit/5a44f93e9233e8f72159f9a67db26ed4bd5a10e0", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3-CMS/core/commit/5a44f93e9233e8f72159f9a67db26ed4bd5a10e0" }, { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2018-012", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://typo3.org/security/advisory/typo3-core-sa-2018-012" }, { "reference_url": "https://github.com/advisories/GHSA-hjx5-v9xg-7h25", "reference_id": "GHSA-hjx5-v9xg-7h25", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-hjx5-v9xg-7h25" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/33598?format=api", "purl": "pkg:composer/typo3/cms-core@7.6.32", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@7.6.32" }, { "url": "http://public2.vulnerablecode.io/api/packages/33468?format=api", "purl": "pkg:composer/typo3/cms-core@8.7.21", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-21e8-x7mp-hugk" }, { "vulnerability": "VCID-2meq-x4kd-bbdn" }, { "vulnerability": "VCID-3n2r-awja-dug9" }, { "vulnerability": "VCID-3v4n-fzxa-bfaw" }, { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-551q-gpyd-ffe8" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5mxm-88r9-hfey" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-5u4q-m66t-wqcj" }, { "vulnerability": "VCID-9g62-zd1x-3bdg" }, { "vulnerability": "VCID-9gpp-ez8w-rqav" }, { "vulnerability": "VCID-9x6r-56xm-n7h7" }, { "vulnerability": "VCID-9zqs-hjay-fkev" }, { "vulnerability": "VCID-axaf-45kr-kbfe" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-cm14-t8uv-k3es" }, { "vulnerability": "VCID-d99v-v9cj-zfh2" }, { "vulnerability": "VCID-dj88-f3p8-cfbn" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-eajg-ctpd-2bby" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-f4bv-pzdy-dfcb" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-he5m-6wj4-rbhc" }, { "vulnerability": "VCID-hhmn-yz5p-xkap" }, { "vulnerability": "VCID-j77k-hjgx-5kc5" }, { "vulnerability": "VCID-k8af-cg9k-87a9" }, { "vulnerability": "VCID-mh4f-vtfj-hbb1" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-pmzz-9rws-4ud5" }, { "vulnerability": "VCID-pss5-as4b-cyf2" }, { "vulnerability": "VCID-px44-19tj-h7aa" }, { "vulnerability": "VCID-q8hy-wjd9-nbgp" }, { "vulnerability": "VCID-s53a-f91p-huf4" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-stzu-sxe6-5yf5" }, { "vulnerability": "VCID-swnc-ke6h-ekew" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-tnjd-pyys-akav" }, { "vulnerability": "VCID-vxry-uvph-kbfd" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-wea9-egep-h7g5" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xh7y-56vy-5ud8" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zkea-ge1t-z7gn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.21" } ], "aliases": [ "GHSA-hjx5-v9xg-7h25" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-b81w-n2ne-z3ee" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/54252?format=api", "vulnerability_id": "VCID-bajy-qbwq-fufn", "summary": "Insertion of Sensitive Information into Log File in typo3/cms-core\n> ### Meta\n> * CVSS: `CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C` (4.9)\n\n### Problem\nIt has been discovered that system internal credentials or keys (e.g. database credentials) have been logged as plaintext in exception handlers, when logging the complete exception stack trace.\n\n### Solution\nUpdate to TYPO3 versions 7.6.57 ELTS, 8.7.47 ELTS, 9.5.35 ELTS, 10.4.29, 11.5.11 that fix the problem described above.\n\n### Credits\nThanks to Marco Huber who reported this issue and to TYPO3 security member Torben Hansen who fixed the issue.\n\n### References\n* [TYPO3-CORE-SA-2022-002](https://typo3.org/security/advisory/typo3-core-sa-2022-002)", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-31047", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00391", "scoring_system": "epss", "scoring_elements": "0.60159", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.00391", "scoring_system": "epss", "scoring_elements": "0.60107", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00391", "scoring_system": "epss", "scoring_elements": "0.60132", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00391", "scoring_system": "epss", "scoring_elements": "0.60101", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00391", "scoring_system": "epss", "scoring_elements": "0.60151", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00391", "scoring_system": "epss", "scoring_elements": "0.60165", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00391", "scoring_system": "epss", "scoring_elements": "0.60187", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00391", "scoring_system": "epss", "scoring_elements": "0.60173", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00391", "scoring_system": "epss", "scoring_elements": "0.60155", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00391", "scoring_system": "epss", "scoring_elements": "0.60194", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00391", "scoring_system": "epss", "scoring_elements": "0.60201", "published_at": "2026-04-18T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-31047" }, { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2022-31047.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2022-31047.yaml" }, { "reference_url": "https://github.com/TYPO3-CMS/core", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3-CMS/core" }, { "reference_url": "https://github.com/TYPO3/typo3/commit/c93ea692e7dfef03b7c50fe5437487545bee4d6a", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T14:05:23Z/" } ], "url": "https://github.com/TYPO3/typo3/commit/c93ea692e7dfef03b7c50fe5437487545bee4d6a" }, { "reference_url": "https://github.com/TYPO3/typo3/security/advisories/GHSA-fh99-4pgr-8j99", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T14:05:23Z/" } ], "url": "https://github.com/TYPO3/typo3/security/advisories/GHSA-fh99-4pgr-8j99" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-31047", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-31047" }, { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2022-002", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T14:05:23Z/" } ], "url": "https://typo3.org/security/advisory/typo3-core-sa-2022-002" }, { "reference_url": "https://github.com/advisories/GHSA-fh99-4pgr-8j99", "reference_id": "GHSA-fh99-4pgr-8j99", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-fh99-4pgr-8j99" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/81523?format=api", "purl": "pkg:composer/typo3/cms-core@7.6.57", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-mnz3-rj21-67ad" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@7.6.57" }, { "url": "http://public2.vulnerablecode.io/api/packages/81510?format=api", "purl": "pkg:composer/typo3/cms-core@8.7.47", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-mnz3-rj21-67ad" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.47" }, { "url": "http://public2.vulnerablecode.io/api/packages/81495?format=api", "purl": "pkg:composer/typo3/cms-core@9.5.35", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.35" }, { "url": "http://public2.vulnerablecode.io/api/packages/81496?format=api", "purl": "pkg:composer/typo3/cms-core@10.4.29", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1r9g-c5rn-ukgb" }, { "vulnerability": "VCID-1yxw-saf5-wue7" }, { "vulnerability": "VCID-4t9s-p25a-cfas" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-65ue-7jd9-23gf" }, { "vulnerability": "VCID-8d2m-1ffv-jqe1" }, { "vulnerability": "VCID-8sdd-b1bn-cuhx" }, { "vulnerability": "VCID-av8u-rvzq-4fc7" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-gyyu-n3b1-zbcj" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-mud2-s4rc-fuf6" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-nubu-f1sc-gbes" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vwb2-a84s-5qak" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-w13x-3rp9-wyej" }, { "vulnerability": "VCID-xy6y-312d-rygj" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zn99-ywte-33g6" }, { "vulnerability": "VCID-zwgt-rm1f-6bf2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@10.4.29" }, { "url": "http://public2.vulnerablecode.io/api/packages/81497?format=api", "purl": "pkg:composer/typo3/cms-core@11.5.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1r9g-c5rn-ukgb" }, { "vulnerability": "VCID-1yxw-saf5-wue7" }, { "vulnerability": "VCID-4t9s-p25a-cfas" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-65ue-7jd9-23gf" }, { "vulnerability": "VCID-8d2m-1ffv-jqe1" }, { "vulnerability": "VCID-8sdd-b1bn-cuhx" }, { "vulnerability": "VCID-av8u-rvzq-4fc7" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-gyyu-n3b1-zbcj" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-mud2-s4rc-fuf6" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-nubu-f1sc-gbes" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-tnxn-p13f-yuah" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vwb2-a84s-5qak" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-w13x-3rp9-wyej" }, { "vulnerability": "VCID-xy6y-312d-rygj" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zn99-ywte-33g6" }, { "vulnerability": "VCID-zwgt-rm1f-6bf2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@11.5.11" } ], "aliases": [ "CVE-2022-31047", "GHSA-fh99-4pgr-8j99" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-bajy-qbwq-fufn" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/10105?format=api", "vulnerability_id": "VCID-bnne-7p2q-eqd2", "summary": "Uncontrolled Resource Consumption\nDenial of Service in Online Media Asset Handling.", "references": [ { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2018-011/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2018-011/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/33598?format=api", "purl": "pkg:composer/typo3/cms-core@7.6.32", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@7.6.32" }, { "url": "http://public2.vulnerablecode.io/api/packages/33468?format=api", "purl": "pkg:composer/typo3/cms-core@8.7.21", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-21e8-x7mp-hugk" }, { "vulnerability": "VCID-2meq-x4kd-bbdn" }, { "vulnerability": "VCID-3n2r-awja-dug9" }, { "vulnerability": "VCID-3v4n-fzxa-bfaw" }, { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-551q-gpyd-ffe8" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5mxm-88r9-hfey" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-5u4q-m66t-wqcj" }, { "vulnerability": "VCID-9g62-zd1x-3bdg" }, { "vulnerability": "VCID-9gpp-ez8w-rqav" }, { "vulnerability": "VCID-9x6r-56xm-n7h7" }, { "vulnerability": "VCID-9zqs-hjay-fkev" }, { "vulnerability": "VCID-axaf-45kr-kbfe" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-cm14-t8uv-k3es" }, { "vulnerability": "VCID-d99v-v9cj-zfh2" }, { "vulnerability": "VCID-dj88-f3p8-cfbn" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-eajg-ctpd-2bby" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-f4bv-pzdy-dfcb" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-he5m-6wj4-rbhc" }, { "vulnerability": "VCID-hhmn-yz5p-xkap" }, { "vulnerability": "VCID-j77k-hjgx-5kc5" }, { "vulnerability": "VCID-k8af-cg9k-87a9" }, { "vulnerability": "VCID-mh4f-vtfj-hbb1" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-pmzz-9rws-4ud5" }, { "vulnerability": "VCID-pss5-as4b-cyf2" }, { "vulnerability": "VCID-px44-19tj-h7aa" }, { "vulnerability": "VCID-q8hy-wjd9-nbgp" }, { "vulnerability": "VCID-s53a-f91p-huf4" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-stzu-sxe6-5yf5" }, { "vulnerability": "VCID-swnc-ke6h-ekew" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-tnjd-pyys-akav" }, { "vulnerability": "VCID-vxry-uvph-kbfd" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-wea9-egep-h7g5" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xh7y-56vy-5ud8" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zkea-ge1t-z7gn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.21" }, { "url": "http://public2.vulnerablecode.io/api/packages/33470?format=api", "purl": "pkg:composer/typo3/cms-core@9.5.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-21e8-x7mp-hugk" }, { "vulnerability": "VCID-2meq-x4kd-bbdn" }, { "vulnerability": "VCID-2mn6-mdmz-4yd9" }, { "vulnerability": "VCID-3n2r-awja-dug9" }, { "vulnerability": "VCID-3v4n-fzxa-bfaw" }, { "vulnerability": "VCID-461j-9hrc-gfbc" }, { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-4mkw-tv16-jyca" }, { "vulnerability": "VCID-4t9s-p25a-cfas" }, { "vulnerability": "VCID-543x-cnbz-1kb9" }, { "vulnerability": "VCID-551q-gpyd-ffe8" }, { "vulnerability": "VCID-58js-jzm4-4fc7" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5kzs-ex81-bbaj" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-5u4q-m66t-wqcj" }, { "vulnerability": "VCID-65ue-7jd9-23gf" }, { "vulnerability": "VCID-6a9t-8dmn-s3bv" }, { "vulnerability": "VCID-8d2m-1ffv-jqe1" }, { "vulnerability": "VCID-9g62-zd1x-3bdg" }, { "vulnerability": "VCID-9gpp-ez8w-rqav" }, { "vulnerability": "VCID-9x6r-56xm-n7h7" }, { "vulnerability": "VCID-9zqs-hjay-fkev" }, { "vulnerability": "VCID-a49c-fqrj-nbb3" }, { "vulnerability": "VCID-axaf-45kr-kbfe" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-cm14-t8uv-k3es" }, { "vulnerability": "VCID-d8d1-sat6-muhe" }, { "vulnerability": "VCID-d99v-v9cj-zfh2" }, { "vulnerability": "VCID-dj88-f3p8-cfbn" }, { "vulnerability": "VCID-dmzb-gkdn-6bcm" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-e32h-8q61-hbgc" }, { "vulnerability": "VCID-eajg-ctpd-2bby" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-f4bv-pzdy-dfcb" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-he5m-6wj4-rbhc" }, { "vulnerability": "VCID-hhmn-yz5p-xkap" }, { "vulnerability": "VCID-k8af-cg9k-87a9" }, { "vulnerability": "VCID-kj9x-psfz-2ug1" }, { "vulnerability": "VCID-mh4f-vtfj-hbb1" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-mud2-s4rc-fuf6" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-nubu-f1sc-gbes" }, { "vulnerability": "VCID-nxq4-m52q-yuh4" }, { "vulnerability": "VCID-p715-yexd-jfgc" }, { "vulnerability": "VCID-phgh-sd4m-zbdx" }, { "vulnerability": "VCID-pmzz-9rws-4ud5" }, { "vulnerability": "VCID-pss5-as4b-cyf2" }, { "vulnerability": "VCID-px44-19tj-h7aa" }, { "vulnerability": "VCID-q8hy-wjd9-nbgp" }, { "vulnerability": "VCID-raxk-rm9v-hubn" }, { "vulnerability": "VCID-remd-55jh-r3g5" }, { "vulnerability": "VCID-s53a-f91p-huf4" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-stzu-sxe6-5yf5" }, { "vulnerability": "VCID-sw7v-fbjk-13hy" }, { "vulnerability": "VCID-swnc-ke6h-ekew" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-tnjd-pyys-akav" }, { "vulnerability": "VCID-u9bx-8e86-wbew" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vxry-uvph-kbfd" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-w13x-3rp9-wyej" }, { "vulnerability": "VCID-wea9-egep-h7g5" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xh7y-56vy-5ud8" }, { "vulnerability": "VCID-xtdg-uj46-rkcm" }, { "vulnerability": "VCID-xy6y-312d-rygj" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-yzx1-4psv-7bhr" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zkea-ge1t-z7gn" }, { "vulnerability": "VCID-zn99-ywte-33g6" }, { "vulnerability": "VCID-zwgt-rm1f-6bf2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.2" } ], "aliases": [ "2018-12-11-6" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-bnne-7p2q-eqd2" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/10115?format=api", "vulnerability_id": "VCID-dm97-51uu-r7gw", "summary": "Cross-site Scripting\nCross-Site Scripting in Online Media Asset Rendering.", "references": [ { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2018-006/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2018-006/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/33598?format=api", "purl": "pkg:composer/typo3/cms-core@7.6.32", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@7.6.32" }, { "url": "http://public2.vulnerablecode.io/api/packages/33468?format=api", "purl": "pkg:composer/typo3/cms-core@8.7.21", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-21e8-x7mp-hugk" }, { "vulnerability": "VCID-2meq-x4kd-bbdn" }, { "vulnerability": "VCID-3n2r-awja-dug9" }, { "vulnerability": "VCID-3v4n-fzxa-bfaw" }, { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-551q-gpyd-ffe8" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5mxm-88r9-hfey" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-5u4q-m66t-wqcj" }, { "vulnerability": "VCID-9g62-zd1x-3bdg" }, { "vulnerability": "VCID-9gpp-ez8w-rqav" }, { "vulnerability": "VCID-9x6r-56xm-n7h7" }, { "vulnerability": "VCID-9zqs-hjay-fkev" }, { "vulnerability": "VCID-axaf-45kr-kbfe" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-cm14-t8uv-k3es" }, { "vulnerability": "VCID-d99v-v9cj-zfh2" }, { "vulnerability": "VCID-dj88-f3p8-cfbn" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-eajg-ctpd-2bby" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-f4bv-pzdy-dfcb" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-he5m-6wj4-rbhc" }, { "vulnerability": "VCID-hhmn-yz5p-xkap" }, { "vulnerability": "VCID-j77k-hjgx-5kc5" }, { "vulnerability": "VCID-k8af-cg9k-87a9" }, { "vulnerability": "VCID-mh4f-vtfj-hbb1" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-pmzz-9rws-4ud5" }, { "vulnerability": "VCID-pss5-as4b-cyf2" }, { "vulnerability": "VCID-px44-19tj-h7aa" }, { "vulnerability": "VCID-q8hy-wjd9-nbgp" }, { "vulnerability": "VCID-s53a-f91p-huf4" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-stzu-sxe6-5yf5" }, { "vulnerability": "VCID-swnc-ke6h-ekew" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-tnjd-pyys-akav" }, { "vulnerability": "VCID-vxry-uvph-kbfd" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-wea9-egep-h7g5" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xh7y-56vy-5ud8" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zkea-ge1t-z7gn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.21" }, { "url": "http://public2.vulnerablecode.io/api/packages/33470?format=api", "purl": "pkg:composer/typo3/cms-core@9.5.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-21e8-x7mp-hugk" }, { "vulnerability": "VCID-2meq-x4kd-bbdn" }, { "vulnerability": "VCID-2mn6-mdmz-4yd9" }, { "vulnerability": "VCID-3n2r-awja-dug9" }, { "vulnerability": "VCID-3v4n-fzxa-bfaw" }, { "vulnerability": "VCID-461j-9hrc-gfbc" }, { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-4mkw-tv16-jyca" }, { "vulnerability": "VCID-4t9s-p25a-cfas" }, { "vulnerability": "VCID-543x-cnbz-1kb9" }, { "vulnerability": "VCID-551q-gpyd-ffe8" }, { "vulnerability": "VCID-58js-jzm4-4fc7" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5kzs-ex81-bbaj" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-5u4q-m66t-wqcj" }, { "vulnerability": "VCID-65ue-7jd9-23gf" }, { "vulnerability": "VCID-6a9t-8dmn-s3bv" }, { "vulnerability": "VCID-8d2m-1ffv-jqe1" }, { "vulnerability": "VCID-9g62-zd1x-3bdg" }, { "vulnerability": "VCID-9gpp-ez8w-rqav" }, { "vulnerability": "VCID-9x6r-56xm-n7h7" }, { "vulnerability": "VCID-9zqs-hjay-fkev" }, { "vulnerability": "VCID-a49c-fqrj-nbb3" }, { "vulnerability": "VCID-axaf-45kr-kbfe" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-cm14-t8uv-k3es" }, { "vulnerability": "VCID-d8d1-sat6-muhe" }, { "vulnerability": "VCID-d99v-v9cj-zfh2" }, { "vulnerability": "VCID-dj88-f3p8-cfbn" }, { "vulnerability": "VCID-dmzb-gkdn-6bcm" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-e32h-8q61-hbgc" }, { "vulnerability": "VCID-eajg-ctpd-2bby" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-f4bv-pzdy-dfcb" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-he5m-6wj4-rbhc" }, { "vulnerability": "VCID-hhmn-yz5p-xkap" }, { "vulnerability": "VCID-k8af-cg9k-87a9" }, { "vulnerability": "VCID-kj9x-psfz-2ug1" }, { "vulnerability": "VCID-mh4f-vtfj-hbb1" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-mud2-s4rc-fuf6" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-nubu-f1sc-gbes" }, { "vulnerability": "VCID-nxq4-m52q-yuh4" }, { "vulnerability": "VCID-p715-yexd-jfgc" }, { "vulnerability": "VCID-phgh-sd4m-zbdx" }, { "vulnerability": "VCID-pmzz-9rws-4ud5" }, { "vulnerability": "VCID-pss5-as4b-cyf2" }, { "vulnerability": "VCID-px44-19tj-h7aa" }, { "vulnerability": "VCID-q8hy-wjd9-nbgp" }, { "vulnerability": "VCID-raxk-rm9v-hubn" }, { "vulnerability": "VCID-remd-55jh-r3g5" }, { "vulnerability": "VCID-s53a-f91p-huf4" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-stzu-sxe6-5yf5" }, { "vulnerability": "VCID-sw7v-fbjk-13hy" }, { "vulnerability": "VCID-swnc-ke6h-ekew" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-tnjd-pyys-akav" }, { "vulnerability": "VCID-u9bx-8e86-wbew" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vxry-uvph-kbfd" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-w13x-3rp9-wyej" }, { "vulnerability": "VCID-wea9-egep-h7g5" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xh7y-56vy-5ud8" }, { "vulnerability": "VCID-xtdg-uj46-rkcm" }, { "vulnerability": "VCID-xy6y-312d-rygj" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-yzx1-4psv-7bhr" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zkea-ge1t-z7gn" }, { "vulnerability": "VCID-zn99-ywte-33g6" }, { "vulnerability": "VCID-zwgt-rm1f-6bf2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.2" } ], "aliases": [ "2018-12-11-1" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-dm97-51uu-r7gw" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/42097?format=api", "vulnerability_id": "VCID-dsu7-jjjq-f3e1", "summary": "Cleartext storage of session identifier\n### Problem\nUser session identifiers were stored in cleartext - without processing of additional cryptographic hashing algorithms. This vulnerability cannot be exploited directly and occurs in combination with a chained attack - like for instance SQL injection in any other component of the system.\n\n### Solution\nUpdate to TYPO3 versions 6.2.57, 7.6.51, 8.7.40, 9.5.25, 10.4.14, 11.1.1 that fix the problem described.\n\n### Credits\nThanks to TYPO3 security team member Oliver Hader who reported this issue and to TYPO3 core & security team members Benni Mack & Oliver Hader who fixed the issue.\n\n### References\n* [TYPO3-CORE-SA-2021-006](https://typo3.org/security/advisory/typo3-core-sa-2021-006)", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-21339", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00132", "scoring_system": "epss", "scoring_elements": "0.32709", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00132", "scoring_system": "epss", "scoring_elements": "0.32671", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.00132", "scoring_system": "epss", "scoring_elements": "0.32736", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00132", "scoring_system": "epss", "scoring_elements": "0.32804", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00132", "scoring_system": "epss", "scoring_elements": "0.3284", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00132", "scoring_system": "epss", "scoring_elements": "0.32661", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00132", "scoring_system": "epss", "scoring_elements": "0.32735", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00132", "scoring_system": "epss", "scoring_elements": "0.32504", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.00132", "scoring_system": "epss", "scoring_elements": "0.32659", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00132", "scoring_system": "epss", "scoring_elements": "0.32688", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00132", "scoring_system": "epss", "scoring_elements": "0.32711", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00132", "scoring_system": "epss", "scoring_elements": "0.32672", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00132", "scoring_system": "epss", "scoring_elements": "0.327", "published_at": "2026-04-12T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-21339" }, { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21339.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21339.yaml" }, { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21339.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21339.yaml" }, { "reference_url": "https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-qx3w-4864-94ch", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-qx3w-4864-94ch" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-21339", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-21339" }, { "reference_url": "https://packagist.org/packages/typo3/cms-core", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://packagist.org/packages/typo3/cms-core" }, { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2021-006", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://typo3.org/security/advisory/typo3-core-sa-2021-006" }, { "reference_url": "https://github.com/advisories/GHSA-qx3w-4864-94ch", "reference_id": "GHSA-qx3w-4864-94ch", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-qx3w-4864-94ch" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/37644?format=api", "purl": "pkg:composer/typo3/cms-core@7.6.51", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-n15v-ta9h-6ffb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@7.6.51" }, { "url": "http://public2.vulnerablecode.io/api/packages/37635?format=api", "purl": "pkg:composer/typo3/cms-core@8.7.40", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-s64f-x81f-b7ce" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.40" }, { "url": "http://public2.vulnerablecode.io/api/packages/75848?format=api", "purl": "pkg:composer/typo3/cms-core@9.5.25", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-4t9s-p25a-cfas" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-65ue-7jd9-23gf" }, { "vulnerability": "VCID-6a9t-8dmn-s3bv" }, { "vulnerability": "VCID-8d2m-1ffv-jqe1" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-e32h-8q61-hbgc" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-mud2-s4rc-fuf6" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-nubu-f1sc-gbes" }, { "vulnerability": "VCID-remd-55jh-r3g5" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-w13x-3rp9-wyej" }, { "vulnerability": "VCID-xy6y-312d-rygj" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zn99-ywte-33g6" }, { "vulnerability": "VCID-zwgt-rm1f-6bf2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.25" }, { "url": "http://public2.vulnerablecode.io/api/packages/75846?format=api", "purl": "pkg:composer/typo3/cms-core@10.4.14", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1r9g-c5rn-ukgb" }, { "vulnerability": "VCID-1yxw-saf5-wue7" }, { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-4t9s-p25a-cfas" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-65ue-7jd9-23gf" }, { "vulnerability": "VCID-6a9t-8dmn-s3bv" }, { "vulnerability": "VCID-8d2m-1ffv-jqe1" }, { "vulnerability": "VCID-8sdd-b1bn-cuhx" }, { "vulnerability": "VCID-av8u-rvzq-4fc7" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-e32h-8q61-hbgc" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-gyyu-n3b1-zbcj" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-mud2-s4rc-fuf6" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-nubu-f1sc-gbes" }, { "vulnerability": "VCID-remd-55jh-r3g5" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vwb2-a84s-5qak" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-w13x-3rp9-wyej" }, { "vulnerability": "VCID-xy6y-312d-rygj" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zn99-ywte-33g6" }, { "vulnerability": "VCID-zwgt-rm1f-6bf2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@10.4.14" }, { "url": "http://public2.vulnerablecode.io/api/packages/75847?format=api", "purl": "pkg:composer/typo3/cms-core@11.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1r9g-c5rn-ukgb" }, { "vulnerability": "VCID-1yxw-saf5-wue7" }, { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-4t9s-p25a-cfas" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-65ue-7jd9-23gf" }, { "vulnerability": "VCID-6a9t-8dmn-s3bv" }, { "vulnerability": "VCID-8d2m-1ffv-jqe1" }, { "vulnerability": "VCID-8sdd-b1bn-cuhx" }, { "vulnerability": "VCID-av8u-rvzq-4fc7" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-e32h-8q61-hbgc" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-gyyu-n3b1-zbcj" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-mud2-s4rc-fuf6" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-nubu-f1sc-gbes" }, { "vulnerability": "VCID-remd-55jh-r3g5" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-uyeu-a3xr-fkh4" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vwb2-a84s-5qak" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-w13x-3rp9-wyej" }, { "vulnerability": "VCID-xy6y-312d-rygj" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zn99-ywte-33g6" }, { "vulnerability": "VCID-zwgt-rm1f-6bf2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@11.1.1" } ], "aliases": [ "CVE-2021-21339", "GHSA-qx3w-4864-94ch" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-dsu7-jjjq-f3e1" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/19128?format=api", "vulnerability_id": "VCID-ebpa-58em-wqam", "summary": "TYPO3 CMS Insecure Deserialization & Arbitrary Code Execution\nPhar files (formerly known as \"PHP archives\") can act als self extracting archives which leads to the fact that source code is executed when Phar files are invoked. The Phar file format is not limited to be stored with a dedicated file extension - \"bundle.phar\" would be valid as well as \"bundle.txt\" would be. This way, Phar files can be obfuscated as image or text file which would not be denied from being uploaded and persisted to a TYPO3 installation. Due to a missing sanitization of user input, those Phar files can be invoked by manipulated URLs in TYPO3 backend forms. A valid backend user account is needed to exploit this vulnerability. In theory the attack vector would be possible in the TYPO3 frontend as well, however no functional exploit has been identified so far.", "references": [ { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2018-07-12-2.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2018-07-12-2.yaml" }, { "reference_url": "https://github.com/TYPO3-CMS/core", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3-CMS/core" }, { "reference_url": "https://github.com/TYPO3-CMS/core/commit/81c6e9e6e49ee4f924bd340fb007d271fa44aa16", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3-CMS/core/commit/81c6e9e6e49ee4f924bd340fb007d271fa44aa16" }, { "reference_url": "https://github.com/TYPO3-CMS/core/commit/854d03841b42123ab744c2591199b76ce65a8e45", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3-CMS/core/commit/854d03841b42123ab744c2591199b76ce65a8e45" }, { "reference_url": "https://github.com/TYPO3-CMS/core/commit/aa4e270d04313fe7d8ea508a9c694db83875e981", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3-CMS/core/commit/aa4e270d04313fe7d8ea508a9c694db83875e981" }, { "reference_url": "https://github.com/TYPO3-CMS/core/commit/dd0487bd8b4ec7204dbfff2b5812d797102a1778", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3-CMS/core/commit/dd0487bd8b4ec7204dbfff2b5812d797102a1778" }, { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2018-002", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://typo3.org/security/advisory/typo3-core-sa-2018-002" }, { "reference_url": "https://github.com/advisories/GHSA-cc97-g92w-jm65", "reference_id": "GHSA-cc97-g92w-jm65", "reference_type": "", "scores": [ { "value": "CRITICAL", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-cc97-g92w-jm65" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/29313?format=api", "purl": "pkg:composer/typo3/cms-core@7.6.30", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@7.6.30" }, { "url": "http://public2.vulnerablecode.io/api/packages/29298?format=api", "purl": "pkg:composer/typo3/cms-core@8.7.17", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-21e8-x7mp-hugk" }, { "vulnerability": "VCID-2meq-x4kd-bbdn" }, { "vulnerability": "VCID-3gg5-1921-rbfs" }, { "vulnerability": "VCID-3n2r-awja-dug9" }, { "vulnerability": "VCID-3v4n-fzxa-bfaw" }, { "vulnerability": "VCID-4btk-jt5n-2ugf" }, { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-551q-gpyd-ffe8" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5mxm-88r9-hfey" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-5u4q-m66t-wqcj" }, { "vulnerability": "VCID-5z59-dn7p-xbc5" }, { "vulnerability": "VCID-6xmj-wbea-r7ex" }, { "vulnerability": "VCID-9g62-zd1x-3bdg" }, { "vulnerability": "VCID-9gpp-ez8w-rqav" }, { "vulnerability": "VCID-9x6r-56xm-n7h7" }, { "vulnerability": "VCID-9zqs-hjay-fkev" }, { "vulnerability": "VCID-a563-vtwa-hkbr" }, { "vulnerability": "VCID-axaf-45kr-kbfe" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-b81w-n2ne-z3ee" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-bnne-7p2q-eqd2" }, { "vulnerability": "VCID-cm14-t8uv-k3es" }, { "vulnerability": "VCID-d99v-v9cj-zfh2" }, { "vulnerability": "VCID-dj88-f3p8-cfbn" }, { "vulnerability": "VCID-dm97-51uu-r7gw" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-e268-wagv-sbex" }, { "vulnerability": "VCID-eajg-ctpd-2bby" }, { "vulnerability": "VCID-ehzg-bzrd-kbcc" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-f4bv-pzdy-dfcb" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-he5m-6wj4-rbhc" }, { "vulnerability": "VCID-hhmn-yz5p-xkap" }, { "vulnerability": "VCID-j77k-hjgx-5kc5" }, { "vulnerability": "VCID-k8af-cg9k-87a9" }, { "vulnerability": "VCID-mh4f-vtfj-hbb1" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n1cb-8py6-bbhu" }, { "vulnerability": "VCID-n78p-x7hh-gqcf" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-pmzz-9rws-4ud5" }, { "vulnerability": "VCID-pss5-as4b-cyf2" }, { "vulnerability": "VCID-px44-19tj-h7aa" }, { "vulnerability": "VCID-q8hy-wjd9-nbgp" }, { "vulnerability": "VCID-qb4j-9tz7-m7a2" }, { "vulnerability": "VCID-rdrs-mhaw-b3ge" }, { "vulnerability": "VCID-rwqs-3ktq-qqbd" }, { "vulnerability": "VCID-s53a-f91p-huf4" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-stzu-sxe6-5yf5" }, { "vulnerability": "VCID-swnc-ke6h-ekew" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-tnjd-pyys-akav" }, { "vulnerability": "VCID-tw1y-t4qj-j3d1" }, { "vulnerability": "VCID-vxry-uvph-kbfd" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-wea9-egep-h7g5" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xh7y-56vy-5ud8" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zkea-ge1t-z7gn" }, { "vulnerability": "VCID-zspb-bd6j-wyd2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.17" }, { "url": "http://public2.vulnerablecode.io/api/packages/29299?format=api", "purl": "pkg:composer/typo3/cms-core@9.3.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-21e8-x7mp-hugk" }, { "vulnerability": "VCID-2meq-x4kd-bbdn" }, { "vulnerability": "VCID-2mn6-mdmz-4yd9" }, { "vulnerability": "VCID-3gg5-1921-rbfs" }, { "vulnerability": "VCID-3n2r-awja-dug9" }, { "vulnerability": "VCID-3v4n-fzxa-bfaw" }, { "vulnerability": "VCID-461j-9hrc-gfbc" }, { "vulnerability": "VCID-4btk-jt5n-2ugf" }, { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-4mkw-tv16-jyca" }, { "vulnerability": "VCID-4t9s-p25a-cfas" }, { "vulnerability": "VCID-543x-cnbz-1kb9" }, { "vulnerability": "VCID-551q-gpyd-ffe8" }, { "vulnerability": "VCID-58js-jzm4-4fc7" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5kzs-ex81-bbaj" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-5u4q-m66t-wqcj" }, { "vulnerability": "VCID-5z59-dn7p-xbc5" }, { "vulnerability": "VCID-65ue-7jd9-23gf" }, { "vulnerability": "VCID-6a9t-8dmn-s3bv" }, { "vulnerability": "VCID-6xmj-wbea-r7ex" }, { "vulnerability": "VCID-8d2m-1ffv-jqe1" }, { "vulnerability": "VCID-9g62-zd1x-3bdg" }, { "vulnerability": "VCID-9gpp-ez8w-rqav" }, { "vulnerability": "VCID-9x6r-56xm-n7h7" }, { "vulnerability": "VCID-9zqs-hjay-fkev" }, { "vulnerability": "VCID-a49c-fqrj-nbb3" }, { "vulnerability": "VCID-a563-vtwa-hkbr" }, { "vulnerability": "VCID-axaf-45kr-kbfe" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-bnne-7p2q-eqd2" }, { "vulnerability": "VCID-cm14-t8uv-k3es" }, { "vulnerability": "VCID-d8d1-sat6-muhe" }, { "vulnerability": "VCID-d99v-v9cj-zfh2" }, { "vulnerability": "VCID-dj88-f3p8-cfbn" }, { "vulnerability": "VCID-dm97-51uu-r7gw" }, { "vulnerability": "VCID-dmzb-gkdn-6bcm" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-e268-wagv-sbex" }, { "vulnerability": "VCID-e32h-8q61-hbgc" }, { "vulnerability": "VCID-eajg-ctpd-2bby" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-f4bv-pzdy-dfcb" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-he5m-6wj4-rbhc" }, { "vulnerability": "VCID-hhmn-yz5p-xkap" }, { "vulnerability": "VCID-k8af-cg9k-87a9" }, { "vulnerability": "VCID-kj9x-psfz-2ug1" }, { "vulnerability": "VCID-mh4f-vtfj-hbb1" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-mud2-s4rc-fuf6" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n1cb-8py6-bbhu" }, { "vulnerability": "VCID-n78p-x7hh-gqcf" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-nubu-f1sc-gbes" }, { "vulnerability": "VCID-nxq4-m52q-yuh4" }, { "vulnerability": "VCID-p715-yexd-jfgc" }, { "vulnerability": "VCID-phgh-sd4m-zbdx" }, { "vulnerability": "VCID-pmzz-9rws-4ud5" }, { "vulnerability": "VCID-pss5-as4b-cyf2" }, { "vulnerability": "VCID-px44-19tj-h7aa" }, { "vulnerability": "VCID-q8hy-wjd9-nbgp" }, { "vulnerability": "VCID-qb4j-9tz7-m7a2" }, { "vulnerability": "VCID-raxk-rm9v-hubn" }, { "vulnerability": "VCID-rdrs-mhaw-b3ge" }, { "vulnerability": "VCID-remd-55jh-r3g5" }, { "vulnerability": "VCID-rwqs-3ktq-qqbd" }, { "vulnerability": "VCID-s53a-f91p-huf4" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-stzu-sxe6-5yf5" }, { "vulnerability": "VCID-sw7v-fbjk-13hy" }, { "vulnerability": "VCID-swnc-ke6h-ekew" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-tnjd-pyys-akav" }, { "vulnerability": "VCID-tw1y-t4qj-j3d1" }, { "vulnerability": "VCID-u9bx-8e86-wbew" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vxry-uvph-kbfd" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-w13x-3rp9-wyej" }, { "vulnerability": "VCID-wea9-egep-h7g5" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xh7y-56vy-5ud8" }, { "vulnerability": "VCID-xtdg-uj46-rkcm" }, { "vulnerability": "VCID-xy6y-312d-rygj" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-yzx1-4psv-7bhr" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zkea-ge1t-z7gn" }, { "vulnerability": "VCID-zspb-bd6j-wyd2" }, { "vulnerability": "VCID-zwgt-rm1f-6bf2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.3.2" } ], "aliases": [ "GHSA-cc97-g92w-jm65" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ebpa-58em-wqam" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/10118?format=api", "vulnerability_id": "VCID-ehzg-bzrd-kbcc", "summary": "Uncontrolled Resource Consumption\nDenial of Service in Frontend Record Registration.", "references": [ { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2018-012/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2018-012/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/33598?format=api", "purl": "pkg:composer/typo3/cms-core@7.6.32", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@7.6.32" }, { "url": "http://public2.vulnerablecode.io/api/packages/33468?format=api", "purl": "pkg:composer/typo3/cms-core@8.7.21", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-21e8-x7mp-hugk" }, { "vulnerability": "VCID-2meq-x4kd-bbdn" }, { "vulnerability": "VCID-3n2r-awja-dug9" }, { "vulnerability": "VCID-3v4n-fzxa-bfaw" }, { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-551q-gpyd-ffe8" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5mxm-88r9-hfey" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-5u4q-m66t-wqcj" }, { "vulnerability": "VCID-9g62-zd1x-3bdg" }, { "vulnerability": "VCID-9gpp-ez8w-rqav" }, { "vulnerability": "VCID-9x6r-56xm-n7h7" }, { "vulnerability": "VCID-9zqs-hjay-fkev" }, { "vulnerability": "VCID-axaf-45kr-kbfe" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-cm14-t8uv-k3es" }, { "vulnerability": "VCID-d99v-v9cj-zfh2" }, { "vulnerability": "VCID-dj88-f3p8-cfbn" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-eajg-ctpd-2bby" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-f4bv-pzdy-dfcb" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-he5m-6wj4-rbhc" }, { "vulnerability": "VCID-hhmn-yz5p-xkap" }, { "vulnerability": "VCID-j77k-hjgx-5kc5" }, { "vulnerability": "VCID-k8af-cg9k-87a9" }, { "vulnerability": "VCID-mh4f-vtfj-hbb1" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-pmzz-9rws-4ud5" }, { "vulnerability": "VCID-pss5-as4b-cyf2" }, { "vulnerability": "VCID-px44-19tj-h7aa" }, { "vulnerability": "VCID-q8hy-wjd9-nbgp" }, { "vulnerability": "VCID-s53a-f91p-huf4" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-stzu-sxe6-5yf5" }, { "vulnerability": "VCID-swnc-ke6h-ekew" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-tnjd-pyys-akav" }, { "vulnerability": "VCID-vxry-uvph-kbfd" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-wea9-egep-h7g5" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xh7y-56vy-5ud8" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zkea-ge1t-z7gn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.21" }, { "url": "http://public2.vulnerablecode.io/api/packages/29297?format=api", "purl": "pkg:composer/typo3/cms-core@9.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-12y5-7b81-wkfu" }, { "vulnerability": "VCID-21e8-x7mp-hugk" }, { "vulnerability": "VCID-28bf-jvah-zkhw" }, { "vulnerability": "VCID-2meq-x4kd-bbdn" }, { "vulnerability": "VCID-2mn6-mdmz-4yd9" }, { "vulnerability": "VCID-3gg5-1921-rbfs" }, { "vulnerability": "VCID-3n2r-awja-dug9" }, { "vulnerability": "VCID-3v4n-fzxa-bfaw" }, { "vulnerability": "VCID-461j-9hrc-gfbc" }, { "vulnerability": "VCID-4btk-jt5n-2ugf" }, { "vulnerability": "VCID-4hsv-y3rz-e3a2" }, { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-4mkw-tv16-jyca" }, { "vulnerability": "VCID-4t9s-p25a-cfas" }, { "vulnerability": "VCID-543x-cnbz-1kb9" }, { "vulnerability": "VCID-551q-gpyd-ffe8" }, { "vulnerability": "VCID-58js-jzm4-4fc7" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5kzs-ex81-bbaj" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-5u4q-m66t-wqcj" }, { "vulnerability": "VCID-5z59-dn7p-xbc5" }, { "vulnerability": "VCID-65ue-7jd9-23gf" }, { "vulnerability": "VCID-6a9t-8dmn-s3bv" }, { "vulnerability": "VCID-6xmj-wbea-r7ex" }, { "vulnerability": "VCID-7kjw-j8st-mqfr" }, { "vulnerability": "VCID-8d2m-1ffv-jqe1" }, { "vulnerability": "VCID-9g62-zd1x-3bdg" }, { "vulnerability": "VCID-9gpp-ez8w-rqav" }, { "vulnerability": "VCID-9jj4-ec9n-qbhs" }, { "vulnerability": "VCID-9x6r-56xm-n7h7" }, { "vulnerability": "VCID-9zqs-hjay-fkev" }, { "vulnerability": "VCID-a49c-fqrj-nbb3" }, { "vulnerability": "VCID-a563-vtwa-hkbr" }, { "vulnerability": "VCID-axaf-45kr-kbfe" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-ayw6-8pn4-17eb" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-bnne-7p2q-eqd2" }, { "vulnerability": "VCID-cm14-t8uv-k3es" }, { "vulnerability": "VCID-d8d1-sat6-muhe" }, { "vulnerability": "VCID-d99v-v9cj-zfh2" }, { "vulnerability": "VCID-dj88-f3p8-cfbn" }, { "vulnerability": "VCID-dm97-51uu-r7gw" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-e268-wagv-sbex" }, { "vulnerability": "VCID-e32h-8q61-hbgc" }, { "vulnerability": "VCID-eajg-ctpd-2bby" }, { "vulnerability": "VCID-ebpa-58em-wqam" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-f1rq-qudk-zkf2" }, { "vulnerability": "VCID-f4bv-pzdy-dfcb" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-he5m-6wj4-rbhc" }, { "vulnerability": "VCID-hhmn-yz5p-xkap" }, { "vulnerability": "VCID-k8af-cg9k-87a9" }, { "vulnerability": "VCID-kj9x-psfz-2ug1" }, { "vulnerability": "VCID-m7w6-b2xu-6uee" }, { "vulnerability": "VCID-mh4f-vtfj-hbb1" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-mud2-s4rc-fuf6" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n1cb-8py6-bbhu" }, { "vulnerability": "VCID-n78p-x7hh-gqcf" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-nubu-f1sc-gbes" }, { "vulnerability": "VCID-nxq4-m52q-yuh4" }, { "vulnerability": "VCID-p715-yexd-jfgc" }, { "vulnerability": "VCID-phgh-sd4m-zbdx" }, { "vulnerability": "VCID-pmzz-9rws-4ud5" }, { "vulnerability": "VCID-pss5-as4b-cyf2" }, { "vulnerability": "VCID-px44-19tj-h7aa" }, { "vulnerability": "VCID-q8hy-wjd9-nbgp" }, { "vulnerability": "VCID-qb4j-9tz7-m7a2" }, { "vulnerability": "VCID-qeus-f4wj-rubr" }, { "vulnerability": "VCID-qzyk-7877-27a3" }, { "vulnerability": "VCID-raxk-rm9v-hubn" }, { "vulnerability": "VCID-rdrs-mhaw-b3ge" }, { "vulnerability": "VCID-remd-55jh-r3g5" }, { "vulnerability": "VCID-rwqs-3ktq-qqbd" }, { "vulnerability": "VCID-s53a-f91p-huf4" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-sr3p-pdxy-4yhu" }, { "vulnerability": "VCID-stzu-sxe6-5yf5" }, { "vulnerability": "VCID-sw7v-fbjk-13hy" }, { "vulnerability": "VCID-swnc-ke6h-ekew" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-tnjd-pyys-akav" }, { "vulnerability": "VCID-tw1y-t4qj-j3d1" }, { "vulnerability": "VCID-u9bx-8e86-wbew" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vxry-uvph-kbfd" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-w13x-3rp9-wyej" }, { "vulnerability": "VCID-wea9-egep-h7g5" }, { "vulnerability": "VCID-wkm6-cgc8-bfa8" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xh7y-56vy-5ud8" }, { "vulnerability": "VCID-xtdg-uj46-rkcm" }, { "vulnerability": "VCID-xy6y-312d-rygj" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zkea-ge1t-z7gn" }, { "vulnerability": "VCID-zspb-bd6j-wyd2" }, { "vulnerability": "VCID-zw9b-6vkf-3fc6" }, { "vulnerability": "VCID-zwgt-rm1f-6bf2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.0.0" } ], "aliases": [ "2018-12-11-7" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ehzg-bzrd-kbcc" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/52320?format=api", "vulnerability_id": "VCID-mnz3-rj21-67ad", "summary": "TYPO3 CMS vulnerable to User Enumeration via Response Timing\n> ### Meta\n> * CVSS: `CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:F/RL:O/RC:C` (4.9)\n\n### Problem\nIt has been discovered that observing response time during user authentication (backend and frontend) can be used to distinguish between existing and non-existing user accounts.\n\nExtension authors of 3rd party TYPO3 extensions providing a custom authentication service should check if the extension is affected by the described problem. Affected extensions must implement new `MimicServiceInterface::mimicAuthUser`, which simulates corresponding times regular processing would usually take.\n\n### Solution\nUpdate to TYPO3 version 7.6.58 ELTS, 8.7.48 ELTS, 9.5.37 ELTS, 10.4.32 or 11.5.16 that fix the problem described above.\n\n### Credits\nThanks to Vautia who reported this issue and to TYPO3 core & security team members Oliver Hader who fixed the issue.\n\n### References\n* [TYPO3-CORE-SA-2022-007](https://typo3.org/security/advisory/typo3-core-sa-2022-007)\n* [Vulnerability Report on huntr.dev](https://huntr.dev/bounties/7d519735-2877-4fad-bd77-accde3e290a7/) (embargoed +30 days)", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-36105", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00283", "scoring_system": "epss", "scoring_elements": "0.51649", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00283", "scoring_system": "epss", "scoring_elements": "0.51712", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00283", "scoring_system": "epss", "scoring_elements": "0.51734", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00283", "scoring_system": "epss", "scoring_elements": "0.51685", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00283", "scoring_system": "epss", "scoring_elements": "0.51689", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00283", "scoring_system": "epss", "scoring_elements": "0.51634", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00283", "scoring_system": "epss", "scoring_elements": "0.51674", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00283", "scoring_system": "epss", "scoring_elements": "0.51675", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.00283", "scoring_system": "epss", "scoring_elements": "0.51723", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00283", "scoring_system": "epss", "scoring_elements": "0.51744", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00283", "scoring_system": "epss", "scoring_elements": "0.51737", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00283", "scoring_system": "epss", "scoring_elements": "0.51696", "published_at": "2026-04-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-36105" }, { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2022-36105.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2022-36105.yaml" }, { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2022-36105.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2022-36105.yaml" }, { "reference_url": "https://github.com/TYPO3/typo3", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3/typo3" }, { "reference_url": "https://github.com/TYPO3/typo3/commit/f0fc9c4cd7c38207c30dd158de53ee5d9d6f41a2", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3/typo3/commit/f0fc9c4cd7c38207c30dd158de53ee5d9d6f41a2" }, { "reference_url": "https://github.com/TYPO3/typo3/commit/f8b83ce15d4ea275a5a5e564e5d324242f7937b6", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T15:51:34Z/" } ], "url": "https://github.com/TYPO3/typo3/commit/f8b83ce15d4ea275a5a5e564e5d324242f7937b6" }, { "reference_url": "https://github.com/TYPO3/typo3/security/advisories/GHSA-m392-235j-9r7r", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T15:51:34Z/" } ], "url": "https://github.com/TYPO3/typo3/security/advisories/GHSA-m392-235j-9r7r" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-36105", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-36105" }, { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2022-007", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T15:51:34Z/" } ], "url": "https://typo3.org/security/advisory/typo3-core-sa-2022-007" }, { "reference_url": "https://github.com/advisories/GHSA-m392-235j-9r7r", "reference_id": "GHSA-m392-235j-9r7r", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-m392-235j-9r7r" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/79941?format=api", "purl": "pkg:composer/typo3/cms-core@7.6.58", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@7.6.58" }, { "url": "http://public2.vulnerablecode.io/api/packages/79942?format=api", "purl": "pkg:composer/typo3/cms-core@8.7.48", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.48" }, { "url": "http://public2.vulnerablecode.io/api/packages/79943?format=api", "purl": "pkg:composer/typo3/cms-core@9.5.37", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.37" }, { "url": "http://public2.vulnerablecode.io/api/packages/79944?format=api", "purl": "pkg:composer/typo3/cms-core@10.4.32", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1r9g-c5rn-ukgb" }, { "vulnerability": "VCID-4t9s-p25a-cfas" }, { "vulnerability": "VCID-65ue-7jd9-23gf" }, { "vulnerability": "VCID-8d2m-1ffv-jqe1" }, { "vulnerability": "VCID-8sdd-b1bn-cuhx" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-gyyu-n3b1-zbcj" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-mud2-s4rc-fuf6" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-nubu-f1sc-gbes" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-w13x-3rp9-wyej" }, { "vulnerability": "VCID-xy6y-312d-rygj" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zn99-ywte-33g6" }, { "vulnerability": "VCID-zwgt-rm1f-6bf2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@10.4.32" }, { "url": "http://public2.vulnerablecode.io/api/packages/79945?format=api", "purl": "pkg:composer/typo3/cms-core@11.5.16", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1r9g-c5rn-ukgb" }, { "vulnerability": "VCID-4t9s-p25a-cfas" }, { "vulnerability": "VCID-65ue-7jd9-23gf" }, { "vulnerability": "VCID-8d2m-1ffv-jqe1" }, { "vulnerability": "VCID-8sdd-b1bn-cuhx" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-gyyu-n3b1-zbcj" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-mud2-s4rc-fuf6" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-nubu-f1sc-gbes" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-w13x-3rp9-wyej" }, { "vulnerability": "VCID-xy6y-312d-rygj" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zn99-ywte-33g6" }, { "vulnerability": "VCID-zwgt-rm1f-6bf2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@11.5.16" } ], "aliases": [ "CVE-2022-36105", "GHSA-m392-235j-9r7r" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-mnz3-rj21-67ad" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/10932?format=api", "vulnerability_id": "VCID-n15v-ta9h-6ffb", "summary": "Inclusion of Sensitive Information in Log Files\nTYPO3 is an open source PHP based web content management system. User credentials may been logged as plain-text. This occurs when explicitly using log level debug, which is not the default configuration. TYPO3 contain a patch for this vulnerability.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-32767", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00327", "scoring_system": "epss", "scoring_elements": "0.55519", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.00327", "scoring_system": "epss", "scoring_elements": "0.55606", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.00327", "scoring_system": "epss", "scoring_elements": "0.5568", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00327", "scoring_system": "epss", "scoring_elements": "0.55701", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00327", "scoring_system": "epss", "scoring_elements": "0.55697", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00327", "scoring_system": "epss", "scoring_elements": "0.55658", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00327", "scoring_system": "epss", "scoring_elements": "0.55676", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00327", "scoring_system": "epss", "scoring_elements": "0.55696", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00327", "scoring_system": "epss", "scoring_elements": "0.55687", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00327", "scoring_system": "epss", "scoring_elements": "0.55684", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00327", "scoring_system": "epss", "scoring_elements": "0.55632", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00327", "scoring_system": "epss", "scoring_elements": "0.55654", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00327", "scoring_system": "epss", "scoring_elements": "0.5563", "published_at": "2026-04-02T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-32767" }, { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-32767.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-32767.yaml" }, { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-32767.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-32767.yaml" }, { "reference_url": "https://github.com/TYPO3/typo3", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3/typo3" }, { "reference_url": "https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-34fr-fhqr-7235", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-34fr-fhqr-7235" }, { "reference_url": "https://github.com/TYPO3/typo3/commit/0b4950163b8919451964133febc65bcdfcec721c", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3/typo3/commit/0b4950163b8919451964133febc65bcdfcec721c" }, { "reference_url": "https://github.com/TYPO3/typo3/security/advisories/GHSA-34fr-fhqr-7235", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3/typo3/security/advisories/GHSA-34fr-fhqr-7235" }, { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2021-012", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://typo3.org/security/advisory/typo3-core-sa-2021-012" }, { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2021-013", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://typo3.org/security/advisory/typo3-core-sa-2021-013" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-32767", "reference_id": "CVE-2021-32767", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-32767" }, { "reference_url": "https://github.com/advisories/GHSA-34fr-fhqr-7235", "reference_id": "GHSA-34fr-fhqr-7235", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-34fr-fhqr-7235" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/38028?format=api", "purl": "pkg:composer/typo3/cms-core@7.6.52", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-y32z-2d3f-gkgw" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@7.6.52" }, { "url": "http://public2.vulnerablecode.io/api/packages/38029?format=api", "purl": "pkg:composer/typo3/cms-core@8.7.41", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-y32z-2d3f-gkgw" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.41" }, { "url": "http://public2.vulnerablecode.io/api/packages/37636?format=api", "purl": "pkg:composer/typo3/cms-core@9.5.28", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-4t9s-p25a-cfas" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-65ue-7jd9-23gf" }, { "vulnerability": "VCID-8d2m-1ffv-jqe1" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-e32h-8q61-hbgc" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-mud2-s4rc-fuf6" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-nubu-f1sc-gbes" }, { "vulnerability": "VCID-remd-55jh-r3g5" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-w13x-3rp9-wyej" }, { "vulnerability": "VCID-xy6y-312d-rygj" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zn99-ywte-33g6" }, { "vulnerability": "VCID-zwgt-rm1f-6bf2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.28" }, { "url": "http://public2.vulnerablecode.io/api/packages/37630?format=api", "purl": "pkg:composer/typo3/cms-core@10.4.18", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1r9g-c5rn-ukgb" }, { "vulnerability": "VCID-1yxw-saf5-wue7" }, { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-4t9s-p25a-cfas" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-65ue-7jd9-23gf" }, { "vulnerability": "VCID-8d2m-1ffv-jqe1" }, { "vulnerability": "VCID-8sdd-b1bn-cuhx" }, { "vulnerability": "VCID-av8u-rvzq-4fc7" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-e32h-8q61-hbgc" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-gyyu-n3b1-zbcj" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-mud2-s4rc-fuf6" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-nubu-f1sc-gbes" }, { "vulnerability": "VCID-remd-55jh-r3g5" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vwb2-a84s-5qak" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-w13x-3rp9-wyej" }, { "vulnerability": "VCID-xy6y-312d-rygj" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zn99-ywte-33g6" }, { "vulnerability": "VCID-zwgt-rm1f-6bf2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@10.4.18" }, { "url": "http://public2.vulnerablecode.io/api/packages/37631?format=api", "purl": "pkg:composer/typo3/cms-core@11.3.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1r9g-c5rn-ukgb" }, { "vulnerability": "VCID-1yxw-saf5-wue7" }, { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-4t9s-p25a-cfas" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-65ue-7jd9-23gf" }, { "vulnerability": "VCID-8d2m-1ffv-jqe1" }, { "vulnerability": "VCID-8sdd-b1bn-cuhx" }, { "vulnerability": "VCID-av8u-rvzq-4fc7" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-e32h-8q61-hbgc" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-gyyu-n3b1-zbcj" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-jjbn-6efk-nud2" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-mud2-s4rc-fuf6" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-nubu-f1sc-gbes" }, { "vulnerability": "VCID-remd-55jh-r3g5" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-uyeu-a3xr-fkh4" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vwb2-a84s-5qak" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-w13x-3rp9-wyej" }, { "vulnerability": "VCID-xy6y-312d-rygj" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zn99-ywte-33g6" }, { "vulnerability": "VCID-zwgt-rm1f-6bf2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@11.3.1" } ], "aliases": [ "CVE-2021-32767", "GHSA-34fr-fhqr-7235" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-n15v-ta9h-6ffb" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/19195?format=api", "vulnerability_id": "VCID-n1cb-8py6-bbhu", "summary": "TYPO3 Security Misconfiguration in Install Tool Cookie\nIt has been discovered that cookies created in the Install Tool are not hardened to be submitted only via HTTP. In combination with other vulnerabilities such as cross-site scripting it can lead to hijacking an active and valid session in the Install Tool.", "references": [ { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2018-12-11-4.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2018-12-11-4.yaml" }, { "reference_url": "https://github.com/TYPO3-CMS/core", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3-CMS/core" }, { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2018-009", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://typo3.org/security/advisory/typo3-core-sa-2018-009" }, { "reference_url": "https://github.com/advisories/GHSA-ppvg-hw62-6ph9", "reference_id": "GHSA-ppvg-hw62-6ph9", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-ppvg-hw62-6ph9" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/33598?format=api", "purl": "pkg:composer/typo3/cms-core@7.6.32", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@7.6.32" }, { "url": "http://public2.vulnerablecode.io/api/packages/33468?format=api", "purl": "pkg:composer/typo3/cms-core@8.7.21", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-21e8-x7mp-hugk" }, { "vulnerability": "VCID-2meq-x4kd-bbdn" }, { "vulnerability": "VCID-3n2r-awja-dug9" }, { "vulnerability": "VCID-3v4n-fzxa-bfaw" }, { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-551q-gpyd-ffe8" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5mxm-88r9-hfey" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-5u4q-m66t-wqcj" }, { "vulnerability": "VCID-9g62-zd1x-3bdg" }, { "vulnerability": "VCID-9gpp-ez8w-rqav" }, { "vulnerability": "VCID-9x6r-56xm-n7h7" }, { "vulnerability": "VCID-9zqs-hjay-fkev" }, { "vulnerability": "VCID-axaf-45kr-kbfe" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-cm14-t8uv-k3es" }, { "vulnerability": "VCID-d99v-v9cj-zfh2" }, { "vulnerability": "VCID-dj88-f3p8-cfbn" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-eajg-ctpd-2bby" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-f4bv-pzdy-dfcb" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-he5m-6wj4-rbhc" }, { "vulnerability": "VCID-hhmn-yz5p-xkap" }, { "vulnerability": "VCID-j77k-hjgx-5kc5" }, { "vulnerability": "VCID-k8af-cg9k-87a9" }, { "vulnerability": "VCID-mh4f-vtfj-hbb1" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-pmzz-9rws-4ud5" }, { "vulnerability": "VCID-pss5-as4b-cyf2" }, { "vulnerability": "VCID-px44-19tj-h7aa" }, { "vulnerability": "VCID-q8hy-wjd9-nbgp" }, { "vulnerability": "VCID-s53a-f91p-huf4" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-stzu-sxe6-5yf5" }, { "vulnerability": "VCID-swnc-ke6h-ekew" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-tnjd-pyys-akav" }, { "vulnerability": "VCID-vxry-uvph-kbfd" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-wea9-egep-h7g5" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xh7y-56vy-5ud8" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zkea-ge1t-z7gn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.21" }, { "url": "http://public2.vulnerablecode.io/api/packages/33470?format=api", "purl": "pkg:composer/typo3/cms-core@9.5.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-21e8-x7mp-hugk" }, { "vulnerability": "VCID-2meq-x4kd-bbdn" }, { "vulnerability": "VCID-2mn6-mdmz-4yd9" }, { "vulnerability": "VCID-3n2r-awja-dug9" }, { "vulnerability": "VCID-3v4n-fzxa-bfaw" }, { "vulnerability": "VCID-461j-9hrc-gfbc" }, { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-4mkw-tv16-jyca" }, { "vulnerability": "VCID-4t9s-p25a-cfas" }, { "vulnerability": "VCID-543x-cnbz-1kb9" }, { "vulnerability": "VCID-551q-gpyd-ffe8" }, { "vulnerability": "VCID-58js-jzm4-4fc7" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5kzs-ex81-bbaj" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-5u4q-m66t-wqcj" }, { "vulnerability": "VCID-65ue-7jd9-23gf" }, { "vulnerability": "VCID-6a9t-8dmn-s3bv" }, { "vulnerability": "VCID-8d2m-1ffv-jqe1" }, { "vulnerability": "VCID-9g62-zd1x-3bdg" }, { "vulnerability": "VCID-9gpp-ez8w-rqav" }, { "vulnerability": "VCID-9x6r-56xm-n7h7" }, { "vulnerability": "VCID-9zqs-hjay-fkev" }, { "vulnerability": "VCID-a49c-fqrj-nbb3" }, { "vulnerability": "VCID-axaf-45kr-kbfe" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-cm14-t8uv-k3es" }, { "vulnerability": "VCID-d8d1-sat6-muhe" }, { "vulnerability": "VCID-d99v-v9cj-zfh2" }, { "vulnerability": "VCID-dj88-f3p8-cfbn" }, { "vulnerability": "VCID-dmzb-gkdn-6bcm" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-e32h-8q61-hbgc" }, { "vulnerability": "VCID-eajg-ctpd-2bby" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-f4bv-pzdy-dfcb" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-he5m-6wj4-rbhc" }, { "vulnerability": "VCID-hhmn-yz5p-xkap" }, { "vulnerability": "VCID-k8af-cg9k-87a9" }, { "vulnerability": "VCID-kj9x-psfz-2ug1" }, { "vulnerability": "VCID-mh4f-vtfj-hbb1" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-mud2-s4rc-fuf6" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-nubu-f1sc-gbes" }, { "vulnerability": "VCID-nxq4-m52q-yuh4" }, { "vulnerability": "VCID-p715-yexd-jfgc" }, { "vulnerability": "VCID-phgh-sd4m-zbdx" }, { "vulnerability": "VCID-pmzz-9rws-4ud5" }, { "vulnerability": "VCID-pss5-as4b-cyf2" }, { "vulnerability": "VCID-px44-19tj-h7aa" }, { "vulnerability": "VCID-q8hy-wjd9-nbgp" }, { "vulnerability": "VCID-raxk-rm9v-hubn" }, { "vulnerability": "VCID-remd-55jh-r3g5" }, { "vulnerability": "VCID-s53a-f91p-huf4" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-stzu-sxe6-5yf5" }, { "vulnerability": "VCID-sw7v-fbjk-13hy" }, { "vulnerability": "VCID-swnc-ke6h-ekew" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-tnjd-pyys-akav" }, { "vulnerability": "VCID-u9bx-8e86-wbew" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vxry-uvph-kbfd" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-w13x-3rp9-wyej" }, { "vulnerability": "VCID-wea9-egep-h7g5" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xh7y-56vy-5ud8" }, { "vulnerability": "VCID-xtdg-uj46-rkcm" }, { "vulnerability": "VCID-xy6y-312d-rygj" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-yzx1-4psv-7bhr" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zkea-ge1t-z7gn" }, { "vulnerability": "VCID-zn99-ywte-33g6" }, { "vulnerability": "VCID-zwgt-rm1f-6bf2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.2" } ], "aliases": [ "GHSA-ppvg-hw62-6ph9" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-n1cb-8py6-bbhu" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/10114?format=api", "vulnerability_id": "VCID-n78p-x7hh-gqcf", "summary": "Information Disclosure in Install Tool.", "references": [ { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2018-010/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2018-010/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/33598?format=api", "purl": "pkg:composer/typo3/cms-core@7.6.32", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@7.6.32" }, { "url": "http://public2.vulnerablecode.io/api/packages/33468?format=api", "purl": "pkg:composer/typo3/cms-core@8.7.21", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-21e8-x7mp-hugk" }, { "vulnerability": "VCID-2meq-x4kd-bbdn" }, { "vulnerability": "VCID-3n2r-awja-dug9" }, { "vulnerability": "VCID-3v4n-fzxa-bfaw" }, { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-551q-gpyd-ffe8" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5mxm-88r9-hfey" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-5u4q-m66t-wqcj" }, { "vulnerability": "VCID-9g62-zd1x-3bdg" }, { "vulnerability": "VCID-9gpp-ez8w-rqav" }, { "vulnerability": "VCID-9x6r-56xm-n7h7" }, { "vulnerability": "VCID-9zqs-hjay-fkev" }, { "vulnerability": "VCID-axaf-45kr-kbfe" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-cm14-t8uv-k3es" }, { "vulnerability": "VCID-d99v-v9cj-zfh2" }, { "vulnerability": "VCID-dj88-f3p8-cfbn" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-eajg-ctpd-2bby" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-f4bv-pzdy-dfcb" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-he5m-6wj4-rbhc" }, { "vulnerability": "VCID-hhmn-yz5p-xkap" }, { "vulnerability": "VCID-j77k-hjgx-5kc5" }, { "vulnerability": "VCID-k8af-cg9k-87a9" }, { "vulnerability": "VCID-mh4f-vtfj-hbb1" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-pmzz-9rws-4ud5" }, { "vulnerability": "VCID-pss5-as4b-cyf2" }, { "vulnerability": "VCID-px44-19tj-h7aa" }, { "vulnerability": "VCID-q8hy-wjd9-nbgp" }, { "vulnerability": "VCID-s53a-f91p-huf4" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-stzu-sxe6-5yf5" }, { "vulnerability": "VCID-swnc-ke6h-ekew" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-tnjd-pyys-akav" }, { "vulnerability": "VCID-vxry-uvph-kbfd" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-wea9-egep-h7g5" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xh7y-56vy-5ud8" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zkea-ge1t-z7gn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.21" }, { "url": "http://public2.vulnerablecode.io/api/packages/33470?format=api", "purl": "pkg:composer/typo3/cms-core@9.5.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-21e8-x7mp-hugk" }, { "vulnerability": "VCID-2meq-x4kd-bbdn" }, { "vulnerability": "VCID-2mn6-mdmz-4yd9" }, { "vulnerability": "VCID-3n2r-awja-dug9" }, { "vulnerability": "VCID-3v4n-fzxa-bfaw" }, { "vulnerability": "VCID-461j-9hrc-gfbc" }, { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-4mkw-tv16-jyca" }, { "vulnerability": "VCID-4t9s-p25a-cfas" }, { "vulnerability": "VCID-543x-cnbz-1kb9" }, { "vulnerability": "VCID-551q-gpyd-ffe8" }, { "vulnerability": "VCID-58js-jzm4-4fc7" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5kzs-ex81-bbaj" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-5u4q-m66t-wqcj" }, { "vulnerability": "VCID-65ue-7jd9-23gf" }, { "vulnerability": "VCID-6a9t-8dmn-s3bv" }, { "vulnerability": "VCID-8d2m-1ffv-jqe1" }, { "vulnerability": "VCID-9g62-zd1x-3bdg" }, { "vulnerability": "VCID-9gpp-ez8w-rqav" }, { "vulnerability": "VCID-9x6r-56xm-n7h7" }, { "vulnerability": "VCID-9zqs-hjay-fkev" }, { "vulnerability": "VCID-a49c-fqrj-nbb3" }, { "vulnerability": "VCID-axaf-45kr-kbfe" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-cm14-t8uv-k3es" }, { "vulnerability": "VCID-d8d1-sat6-muhe" }, { "vulnerability": "VCID-d99v-v9cj-zfh2" }, { "vulnerability": "VCID-dj88-f3p8-cfbn" }, { "vulnerability": "VCID-dmzb-gkdn-6bcm" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-e32h-8q61-hbgc" }, { "vulnerability": "VCID-eajg-ctpd-2bby" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-f4bv-pzdy-dfcb" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-he5m-6wj4-rbhc" }, { "vulnerability": "VCID-hhmn-yz5p-xkap" }, { "vulnerability": "VCID-k8af-cg9k-87a9" }, { "vulnerability": "VCID-kj9x-psfz-2ug1" }, { "vulnerability": "VCID-mh4f-vtfj-hbb1" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-mud2-s4rc-fuf6" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-nubu-f1sc-gbes" }, { "vulnerability": "VCID-nxq4-m52q-yuh4" }, { "vulnerability": "VCID-p715-yexd-jfgc" }, { "vulnerability": "VCID-phgh-sd4m-zbdx" }, { "vulnerability": "VCID-pmzz-9rws-4ud5" }, { "vulnerability": "VCID-pss5-as4b-cyf2" }, { "vulnerability": "VCID-px44-19tj-h7aa" }, { "vulnerability": "VCID-q8hy-wjd9-nbgp" }, { "vulnerability": "VCID-raxk-rm9v-hubn" }, { "vulnerability": "VCID-remd-55jh-r3g5" }, { "vulnerability": "VCID-s53a-f91p-huf4" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-stzu-sxe6-5yf5" }, { "vulnerability": "VCID-sw7v-fbjk-13hy" }, { "vulnerability": "VCID-swnc-ke6h-ekew" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-tnjd-pyys-akav" }, { "vulnerability": "VCID-u9bx-8e86-wbew" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vxry-uvph-kbfd" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-w13x-3rp9-wyej" }, { "vulnerability": "VCID-wea9-egep-h7g5" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xh7y-56vy-5ud8" }, { "vulnerability": "VCID-xtdg-uj46-rkcm" }, { "vulnerability": "VCID-xy6y-312d-rygj" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-yzx1-4psv-7bhr" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zkea-ge1t-z7gn" }, { "vulnerability": "VCID-zn99-ywte-33g6" }, { "vulnerability": "VCID-zwgt-rm1f-6bf2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.2" } ], "aliases": [ "2018-12-11-5" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-n78p-x7hh-gqcf" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/10109?format=api", "vulnerability_id": "VCID-rdrs-mhaw-b3ge", "summary": "Cross-site Scripting\nCross-Site Scripting in Frontend User Login.", "references": [ { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2018-008/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2018-008/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/33598?format=api", "purl": "pkg:composer/typo3/cms-core@7.6.32", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@7.6.32" }, { "url": "http://public2.vulnerablecode.io/api/packages/33468?format=api", "purl": "pkg:composer/typo3/cms-core@8.7.21", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-21e8-x7mp-hugk" }, { "vulnerability": "VCID-2meq-x4kd-bbdn" }, { "vulnerability": "VCID-3n2r-awja-dug9" }, { "vulnerability": "VCID-3v4n-fzxa-bfaw" }, { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-551q-gpyd-ffe8" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5mxm-88r9-hfey" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-5u4q-m66t-wqcj" }, { "vulnerability": "VCID-9g62-zd1x-3bdg" }, { "vulnerability": "VCID-9gpp-ez8w-rqav" }, { "vulnerability": "VCID-9x6r-56xm-n7h7" }, { "vulnerability": "VCID-9zqs-hjay-fkev" }, { "vulnerability": "VCID-axaf-45kr-kbfe" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-cm14-t8uv-k3es" }, { "vulnerability": "VCID-d99v-v9cj-zfh2" }, { "vulnerability": "VCID-dj88-f3p8-cfbn" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-eajg-ctpd-2bby" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-f4bv-pzdy-dfcb" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-he5m-6wj4-rbhc" }, { "vulnerability": "VCID-hhmn-yz5p-xkap" }, { "vulnerability": "VCID-j77k-hjgx-5kc5" }, { "vulnerability": "VCID-k8af-cg9k-87a9" }, { "vulnerability": "VCID-mh4f-vtfj-hbb1" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-pmzz-9rws-4ud5" }, { "vulnerability": "VCID-pss5-as4b-cyf2" }, { "vulnerability": "VCID-px44-19tj-h7aa" }, { "vulnerability": "VCID-q8hy-wjd9-nbgp" }, { "vulnerability": "VCID-s53a-f91p-huf4" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-stzu-sxe6-5yf5" }, { "vulnerability": "VCID-swnc-ke6h-ekew" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-tnjd-pyys-akav" }, { "vulnerability": "VCID-vxry-uvph-kbfd" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-wea9-egep-h7g5" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xh7y-56vy-5ud8" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zkea-ge1t-z7gn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.21" }, { "url": "http://public2.vulnerablecode.io/api/packages/33470?format=api", "purl": "pkg:composer/typo3/cms-core@9.5.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-21e8-x7mp-hugk" }, { "vulnerability": "VCID-2meq-x4kd-bbdn" }, { "vulnerability": "VCID-2mn6-mdmz-4yd9" }, { "vulnerability": "VCID-3n2r-awja-dug9" }, { "vulnerability": "VCID-3v4n-fzxa-bfaw" }, { "vulnerability": "VCID-461j-9hrc-gfbc" }, { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-4mkw-tv16-jyca" }, { "vulnerability": "VCID-4t9s-p25a-cfas" }, { "vulnerability": "VCID-543x-cnbz-1kb9" }, { "vulnerability": "VCID-551q-gpyd-ffe8" }, { "vulnerability": "VCID-58js-jzm4-4fc7" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5kzs-ex81-bbaj" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-5u4q-m66t-wqcj" }, { "vulnerability": "VCID-65ue-7jd9-23gf" }, { "vulnerability": "VCID-6a9t-8dmn-s3bv" }, { "vulnerability": "VCID-8d2m-1ffv-jqe1" }, { "vulnerability": "VCID-9g62-zd1x-3bdg" }, { "vulnerability": "VCID-9gpp-ez8w-rqav" }, { "vulnerability": "VCID-9x6r-56xm-n7h7" }, { "vulnerability": "VCID-9zqs-hjay-fkev" }, { "vulnerability": "VCID-a49c-fqrj-nbb3" }, { "vulnerability": "VCID-axaf-45kr-kbfe" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-cm14-t8uv-k3es" }, { "vulnerability": "VCID-d8d1-sat6-muhe" }, { "vulnerability": "VCID-d99v-v9cj-zfh2" }, { "vulnerability": "VCID-dj88-f3p8-cfbn" }, { "vulnerability": "VCID-dmzb-gkdn-6bcm" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-e32h-8q61-hbgc" }, { "vulnerability": "VCID-eajg-ctpd-2bby" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-f4bv-pzdy-dfcb" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-he5m-6wj4-rbhc" }, { "vulnerability": "VCID-hhmn-yz5p-xkap" }, { "vulnerability": "VCID-k8af-cg9k-87a9" }, { "vulnerability": "VCID-kj9x-psfz-2ug1" }, { "vulnerability": "VCID-mh4f-vtfj-hbb1" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-mud2-s4rc-fuf6" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-nubu-f1sc-gbes" }, { "vulnerability": "VCID-nxq4-m52q-yuh4" }, { "vulnerability": "VCID-p715-yexd-jfgc" }, { "vulnerability": "VCID-phgh-sd4m-zbdx" }, { "vulnerability": "VCID-pmzz-9rws-4ud5" }, { "vulnerability": "VCID-pss5-as4b-cyf2" }, { "vulnerability": "VCID-px44-19tj-h7aa" }, { "vulnerability": "VCID-q8hy-wjd9-nbgp" }, { "vulnerability": "VCID-raxk-rm9v-hubn" }, { "vulnerability": "VCID-remd-55jh-r3g5" }, { "vulnerability": "VCID-s53a-f91p-huf4" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-stzu-sxe6-5yf5" }, { "vulnerability": "VCID-sw7v-fbjk-13hy" }, { "vulnerability": "VCID-swnc-ke6h-ekew" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-tnjd-pyys-akav" }, { "vulnerability": "VCID-u9bx-8e86-wbew" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vxry-uvph-kbfd" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-w13x-3rp9-wyej" }, { "vulnerability": "VCID-wea9-egep-h7g5" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xh7y-56vy-5ud8" }, { "vulnerability": "VCID-xtdg-uj46-rkcm" }, { "vulnerability": "VCID-xy6y-312d-rygj" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-yzx1-4psv-7bhr" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zkea-ge1t-z7gn" }, { "vulnerability": "VCID-zn99-ywte-33g6" }, { "vulnerability": "VCID-zwgt-rm1f-6bf2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.2" } ], "aliases": [ "2018-12-11-3" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-rdrs-mhaw-b3ge" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/57345?format=api", "vulnerability_id": "VCID-re9h-ze98-rbhu", "summary": "Typo3 Cross-Site Scripting in Flash component (ELTS)\nTYPO3 6.2.0 to 6.2.38 ELTS and 7.0.0 to 7.1.0 included a vulnerable external component, which could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack on a targeted system.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-8091", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.20517", "scoring_system": "epss", "scoring_elements": "0.95574", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.20517", "scoring_system": "epss", "scoring_elements": "0.95524", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.20517", "scoring_system": "epss", "scoring_elements": "0.95532", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.20517", "scoring_system": "epss", "scoring_elements": "0.95538", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.20517", "scoring_system": "epss", "scoring_elements": "0.95542", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.20517", "scoring_system": "epss", "scoring_elements": "0.95549", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.20517", "scoring_system": "epss", "scoring_elements": "0.95552", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.20517", "scoring_system": "epss", "scoring_elements": "0.95556", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.20517", "scoring_system": "epss", "scoring_elements": "0.95557", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.20517", "scoring_system": "epss", "scoring_elements": "0.95559", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.20517", "scoring_system": "epss", "scoring_elements": "0.95567", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.20517", "scoring_system": "epss", "scoring_elements": "0.95573", "published_at": "2026-04-21T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-8091" }, { "reference_url": "https://github.com/TYPO3/typo3", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3/typo3" }, { "reference_url": "https://github.com/TYPO3/typo3/blob/4cb53e828bd5138d180cdf9cac1ccf7fd31086d2/typo3/sysext/core/Documentation/Changelog/7.2/Breaking-65962-WebSVGLibraryAndAPIRemoved.rst", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3/typo3/blob/4cb53e828bd5138d180cdf9cac1ccf7fd31086d2/typo3/sysext/core/Documentation/Changelog/7.2/Breaking-65962-WebSVGLibraryAndAPIRemoved.rst" }, { "reference_url": "https://github.com/TYPO3/typo3/commit/482e2e992f80f5e38cb48fcaea40fd9812a5252c", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3/typo3/commit/482e2e992f80f5e38cb48fcaea40fd9812a5252c" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8091", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8091" }, { "reference_url": "https://typo3.org/security/advisory/typo3-psa-2019-003", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://typo3.org/security/advisory/typo3-psa-2019-003" }, { "reference_url": "https://typo3.org/security/advisory/typo3-psa-2019-003/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-psa-2019-003/" }, { "reference_url": "https://www.purplemet.com/blog/typo3-xss-vulnerability", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.purplemet.com/blog/typo3-xss-vulnerability" }, { "reference_url": "https://github.com/advisories/GHSA-qvhv-pwww-53jj", "reference_id": "GHSA-qvhv-pwww-53jj", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-qvhv-pwww-53jj" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/174689?format=api", "purl": "pkg:composer/typo3/cms-core@8.7.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-12y5-7b81-wkfu" }, { "vulnerability": "VCID-21e8-x7mp-hugk" }, { "vulnerability": "VCID-28bf-jvah-zkhw" }, { "vulnerability": "VCID-2meq-x4kd-bbdn" }, { "vulnerability": "VCID-3gg5-1921-rbfs" }, { "vulnerability": "VCID-3n2r-awja-dug9" }, { "vulnerability": "VCID-3v4n-fzxa-bfaw" }, { "vulnerability": "VCID-4btk-jt5n-2ugf" }, { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-551q-gpyd-ffe8" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5mxm-88r9-hfey" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-5u4q-m66t-wqcj" }, { "vulnerability": "VCID-5z59-dn7p-xbc5" }, { "vulnerability": "VCID-6xmj-wbea-r7ex" }, { "vulnerability": "VCID-9g62-zd1x-3bdg" }, { "vulnerability": "VCID-9gpp-ez8w-rqav" }, { "vulnerability": "VCID-9jj4-ec9n-qbhs" }, { "vulnerability": "VCID-9x6r-56xm-n7h7" }, { "vulnerability": "VCID-9zqs-hjay-fkev" }, { "vulnerability": "VCID-a563-vtwa-hkbr" }, { "vulnerability": "VCID-axaf-45kr-kbfe" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-ayw6-8pn4-17eb" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-b81w-n2ne-z3ee" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-bnne-7p2q-eqd2" }, { "vulnerability": "VCID-cm14-t8uv-k3es" }, { "vulnerability": "VCID-d99v-v9cj-zfh2" }, { "vulnerability": "VCID-dj88-f3p8-cfbn" }, { "vulnerability": "VCID-dm97-51uu-r7gw" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-e268-wagv-sbex" }, { "vulnerability": "VCID-eajg-ctpd-2bby" }, { "vulnerability": "VCID-ebpa-58em-wqam" }, { "vulnerability": "VCID-ehzg-bzrd-kbcc" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-f4bv-pzdy-dfcb" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-he5m-6wj4-rbhc" }, { "vulnerability": "VCID-hhmn-yz5p-xkap" }, { "vulnerability": "VCID-j77k-hjgx-5kc5" }, { "vulnerability": "VCID-k8af-cg9k-87a9" }, { "vulnerability": "VCID-mh4f-vtfj-hbb1" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n1cb-8py6-bbhu" }, { "vulnerability": "VCID-n78p-x7hh-gqcf" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-pmzz-9rws-4ud5" }, { "vulnerability": "VCID-pss5-as4b-cyf2" }, { "vulnerability": "VCID-px44-19tj-h7aa" }, { "vulnerability": "VCID-q8hy-wjd9-nbgp" }, { "vulnerability": "VCID-qb4j-9tz7-m7a2" }, { "vulnerability": "VCID-rdrs-mhaw-b3ge" }, { "vulnerability": "VCID-rwqs-3ktq-qqbd" }, { "vulnerability": "VCID-s53a-f91p-huf4" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-sr3p-pdxy-4yhu" }, { "vulnerability": "VCID-stzu-sxe6-5yf5" }, { "vulnerability": "VCID-swnc-ke6h-ekew" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-tnjd-pyys-akav" }, { "vulnerability": "VCID-tw1y-t4qj-j3d1" }, { "vulnerability": "VCID-vxry-uvph-kbfd" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-wea9-egep-h7g5" }, { "vulnerability": "VCID-wkm6-cgc8-bfa8" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xh7y-56vy-5ud8" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zkea-ge1t-z7gn" }, { "vulnerability": "VCID-zspb-bd6j-wyd2" }, { "vulnerability": "VCID-zw9b-6vkf-3fc6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.7" } ], "aliases": [ "CVE-2020-8091", "GHSA-qvhv-pwww-53jj" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-re9h-ze98-rbhu" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/54079?format=api", "vulnerability_id": "VCID-s55j-8hbt-akhn", "summary": "Information Disclosure via Export Module\n> ### Meta\n> * CVSS: `CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:F/RL:O/RC:C` (4.0)\n\n### Problem\nThe export functionality fails to limit the result set to allowed columns of a particular database table. This allows authenticated users to export internal details of database tables to which they already have access.\n\n### Solution\nUpdate to TYPO3 versions 7.6.57 ELTS, 8.7.47 ELTS, 9.5.35 ELTS, 10.4.29, 11.5.11 that fix the problem described above.\n\nIn order to address this issue, access to mentioned export functionality is completely denied for regular backend users.\n\nℹ️ **Strong security defaults - Manual actions required**\nFollowing User TSconfig setting would allow using the export functionality for particular users:\n```\noptions.impexp.enableExportForNonAdminUser = 1\n```\n\n### Credits\nThanks to TYPO3 core merger Lina Wolf who reported this issue and to TYPO3 security member Torben Hansen who fixed the issue.\n\n### References\n* [TYPO3-CORE-SA-2022-001](https://typo3.org/security/advisory/typo3-core-sa-2022-001)", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-31046", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00148", "scoring_system": "epss", "scoring_elements": "0.35437", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00148", "scoring_system": "epss", "scoring_elements": "0.35099", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.00148", "scoring_system": "epss", "scoring_elements": "0.35335", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00148", "scoring_system": "epss", "scoring_elements": "0.35387", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00148", "scoring_system": "epss", "scoring_elements": "0.35398", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00148", "scoring_system": "epss", "scoring_elements": "0.35359", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00148", "scoring_system": "epss", "scoring_elements": "0.35381", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00148", "scoring_system": "epss", "scoring_elements": "0.35417", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00148", "scoring_system": "epss", "scoring_elements": "0.35416", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00148", "scoring_system": "epss", "scoring_elements": "0.35391", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00148", "scoring_system": "epss", "scoring_elements": "0.35345", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00148", "scoring_system": "epss", "scoring_elements": "0.35461", "published_at": "2026-04-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-31046" }, { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2022-31046.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2022-31046.yaml" }, { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2022-31046.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2022-31046.yaml" }, { "reference_url": "https://github.com/TYPO3-CMS/core", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3-CMS/core" }, { "reference_url": "https://github.com/TYPO3/typo3/commit/7447a3d1283017d2ee08737a7972c720001a93e9", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T14:05:21Z/" } ], "url": "https://github.com/TYPO3/typo3/commit/7447a3d1283017d2ee08737a7972c720001a93e9" }, { "reference_url": "https://github.com/TYPO3/typo3/security/advisories/GHSA-8gmv-9hwg-w89g", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T14:05:21Z/" } ], "url": "https://github.com/TYPO3/typo3/security/advisories/GHSA-8gmv-9hwg-w89g" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-31046", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-31046" }, { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2022-001", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T14:05:21Z/" } ], "url": "https://typo3.org/security/advisory/typo3-core-sa-2022-001" }, { "reference_url": "https://github.com/advisories/GHSA-8gmv-9hwg-w89g", "reference_id": "GHSA-8gmv-9hwg-w89g", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-8gmv-9hwg-w89g" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/81523?format=api", "purl": "pkg:composer/typo3/cms-core@7.6.57", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-mnz3-rj21-67ad" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@7.6.57" }, { "url": "http://public2.vulnerablecode.io/api/packages/81510?format=api", "purl": "pkg:composer/typo3/cms-core@8.7.47", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-mnz3-rj21-67ad" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.47" }, { "url": "http://public2.vulnerablecode.io/api/packages/81495?format=api", "purl": "pkg:composer/typo3/cms-core@9.5.35", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.35" }, { "url": "http://public2.vulnerablecode.io/api/packages/81496?format=api", "purl": "pkg:composer/typo3/cms-core@10.4.29", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1r9g-c5rn-ukgb" }, { "vulnerability": "VCID-1yxw-saf5-wue7" }, { "vulnerability": "VCID-4t9s-p25a-cfas" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-65ue-7jd9-23gf" }, { "vulnerability": "VCID-8d2m-1ffv-jqe1" }, { "vulnerability": "VCID-8sdd-b1bn-cuhx" }, { "vulnerability": "VCID-av8u-rvzq-4fc7" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-gyyu-n3b1-zbcj" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-mud2-s4rc-fuf6" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-nubu-f1sc-gbes" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vwb2-a84s-5qak" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-w13x-3rp9-wyej" }, { "vulnerability": "VCID-xy6y-312d-rygj" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zn99-ywte-33g6" }, { "vulnerability": "VCID-zwgt-rm1f-6bf2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@10.4.29" }, { "url": "http://public2.vulnerablecode.io/api/packages/81497?format=api", "purl": "pkg:composer/typo3/cms-core@11.5.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1r9g-c5rn-ukgb" }, { "vulnerability": "VCID-1yxw-saf5-wue7" }, { "vulnerability": "VCID-4t9s-p25a-cfas" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-65ue-7jd9-23gf" }, { "vulnerability": "VCID-8d2m-1ffv-jqe1" }, { "vulnerability": "VCID-8sdd-b1bn-cuhx" }, { "vulnerability": "VCID-av8u-rvzq-4fc7" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-gyyu-n3b1-zbcj" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-mud2-s4rc-fuf6" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-nubu-f1sc-gbes" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-tnxn-p13f-yuah" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vwb2-a84s-5qak" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-w13x-3rp9-wyej" }, { "vulnerability": "VCID-xy6y-312d-rygj" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zn99-ywte-33g6" }, { "vulnerability": "VCID-zwgt-rm1f-6bf2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@11.5.11" } ], "aliases": [ "CVE-2022-31046", "GHSA-8gmv-9hwg-w89g" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-s55j-8hbt-akhn" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/9601?format=api", "vulnerability_id": "VCID-sr3p-pdxy-4yhu", "summary": "Insecure Deserialization & Arbitrary Code Execution in TYPO3 CMS.", "references": [ { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2018-002/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2018-002/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/29313?format=api", "purl": "pkg:composer/typo3/cms-core@7.6.30", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@7.6.30" }, { "url": "http://public2.vulnerablecode.io/api/packages/29298?format=api", "purl": "pkg:composer/typo3/cms-core@8.7.17", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-21e8-x7mp-hugk" }, { "vulnerability": "VCID-2meq-x4kd-bbdn" }, { "vulnerability": "VCID-3gg5-1921-rbfs" }, { "vulnerability": "VCID-3n2r-awja-dug9" }, { "vulnerability": "VCID-3v4n-fzxa-bfaw" }, { "vulnerability": "VCID-4btk-jt5n-2ugf" }, { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-551q-gpyd-ffe8" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5mxm-88r9-hfey" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-5u4q-m66t-wqcj" }, { "vulnerability": "VCID-5z59-dn7p-xbc5" }, { "vulnerability": "VCID-6xmj-wbea-r7ex" }, { "vulnerability": "VCID-9g62-zd1x-3bdg" }, { "vulnerability": "VCID-9gpp-ez8w-rqav" }, { "vulnerability": "VCID-9x6r-56xm-n7h7" }, { "vulnerability": "VCID-9zqs-hjay-fkev" }, { "vulnerability": "VCID-a563-vtwa-hkbr" }, { "vulnerability": "VCID-axaf-45kr-kbfe" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-b81w-n2ne-z3ee" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-bnne-7p2q-eqd2" }, { "vulnerability": "VCID-cm14-t8uv-k3es" }, { "vulnerability": "VCID-d99v-v9cj-zfh2" }, { "vulnerability": "VCID-dj88-f3p8-cfbn" }, { "vulnerability": "VCID-dm97-51uu-r7gw" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-e268-wagv-sbex" }, { "vulnerability": "VCID-eajg-ctpd-2bby" }, { "vulnerability": "VCID-ehzg-bzrd-kbcc" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-f4bv-pzdy-dfcb" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-he5m-6wj4-rbhc" }, { "vulnerability": "VCID-hhmn-yz5p-xkap" }, { "vulnerability": "VCID-j77k-hjgx-5kc5" }, { "vulnerability": "VCID-k8af-cg9k-87a9" }, { "vulnerability": "VCID-mh4f-vtfj-hbb1" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n1cb-8py6-bbhu" }, { "vulnerability": "VCID-n78p-x7hh-gqcf" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-pmzz-9rws-4ud5" }, { "vulnerability": "VCID-pss5-as4b-cyf2" }, { "vulnerability": "VCID-px44-19tj-h7aa" }, { "vulnerability": "VCID-q8hy-wjd9-nbgp" }, { "vulnerability": "VCID-qb4j-9tz7-m7a2" }, { "vulnerability": "VCID-rdrs-mhaw-b3ge" }, { "vulnerability": "VCID-rwqs-3ktq-qqbd" }, { "vulnerability": "VCID-s53a-f91p-huf4" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-stzu-sxe6-5yf5" }, { "vulnerability": "VCID-swnc-ke6h-ekew" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-tnjd-pyys-akav" }, { "vulnerability": "VCID-tw1y-t4qj-j3d1" }, { "vulnerability": "VCID-vxry-uvph-kbfd" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-wea9-egep-h7g5" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xh7y-56vy-5ud8" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zkea-ge1t-z7gn" }, { "vulnerability": "VCID-zspb-bd6j-wyd2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.17" }, { "url": "http://public2.vulnerablecode.io/api/packages/29299?format=api", "purl": "pkg:composer/typo3/cms-core@9.3.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-21e8-x7mp-hugk" }, { "vulnerability": "VCID-2meq-x4kd-bbdn" }, { "vulnerability": "VCID-2mn6-mdmz-4yd9" }, { "vulnerability": "VCID-3gg5-1921-rbfs" }, { "vulnerability": "VCID-3n2r-awja-dug9" }, { "vulnerability": "VCID-3v4n-fzxa-bfaw" }, { "vulnerability": "VCID-461j-9hrc-gfbc" }, { "vulnerability": "VCID-4btk-jt5n-2ugf" }, { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-4mkw-tv16-jyca" }, { "vulnerability": "VCID-4t9s-p25a-cfas" }, { "vulnerability": "VCID-543x-cnbz-1kb9" }, { "vulnerability": "VCID-551q-gpyd-ffe8" }, { "vulnerability": "VCID-58js-jzm4-4fc7" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5kzs-ex81-bbaj" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-5u4q-m66t-wqcj" }, { "vulnerability": "VCID-5z59-dn7p-xbc5" }, { "vulnerability": "VCID-65ue-7jd9-23gf" }, { "vulnerability": "VCID-6a9t-8dmn-s3bv" }, { "vulnerability": "VCID-6xmj-wbea-r7ex" }, { "vulnerability": "VCID-8d2m-1ffv-jqe1" }, { "vulnerability": "VCID-9g62-zd1x-3bdg" }, { "vulnerability": "VCID-9gpp-ez8w-rqav" }, { "vulnerability": "VCID-9x6r-56xm-n7h7" }, { "vulnerability": "VCID-9zqs-hjay-fkev" }, { "vulnerability": "VCID-a49c-fqrj-nbb3" }, { "vulnerability": "VCID-a563-vtwa-hkbr" }, { "vulnerability": "VCID-axaf-45kr-kbfe" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-bnne-7p2q-eqd2" }, { "vulnerability": "VCID-cm14-t8uv-k3es" }, { "vulnerability": "VCID-d8d1-sat6-muhe" }, { "vulnerability": "VCID-d99v-v9cj-zfh2" }, { "vulnerability": "VCID-dj88-f3p8-cfbn" }, { "vulnerability": "VCID-dm97-51uu-r7gw" }, { "vulnerability": "VCID-dmzb-gkdn-6bcm" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-e268-wagv-sbex" }, { "vulnerability": "VCID-e32h-8q61-hbgc" }, { "vulnerability": "VCID-eajg-ctpd-2bby" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-f4bv-pzdy-dfcb" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-he5m-6wj4-rbhc" }, { "vulnerability": "VCID-hhmn-yz5p-xkap" }, { "vulnerability": "VCID-k8af-cg9k-87a9" }, { "vulnerability": "VCID-kj9x-psfz-2ug1" }, { "vulnerability": "VCID-mh4f-vtfj-hbb1" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-mud2-s4rc-fuf6" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n1cb-8py6-bbhu" }, { "vulnerability": "VCID-n78p-x7hh-gqcf" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-nubu-f1sc-gbes" }, { "vulnerability": "VCID-nxq4-m52q-yuh4" }, { "vulnerability": "VCID-p715-yexd-jfgc" }, { "vulnerability": "VCID-phgh-sd4m-zbdx" }, { "vulnerability": "VCID-pmzz-9rws-4ud5" }, { "vulnerability": "VCID-pss5-as4b-cyf2" }, { "vulnerability": "VCID-px44-19tj-h7aa" }, { "vulnerability": "VCID-q8hy-wjd9-nbgp" }, { "vulnerability": "VCID-qb4j-9tz7-m7a2" }, { "vulnerability": "VCID-raxk-rm9v-hubn" }, { "vulnerability": "VCID-rdrs-mhaw-b3ge" }, { "vulnerability": "VCID-remd-55jh-r3g5" }, { "vulnerability": "VCID-rwqs-3ktq-qqbd" }, { "vulnerability": "VCID-s53a-f91p-huf4" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-stzu-sxe6-5yf5" }, { "vulnerability": "VCID-sw7v-fbjk-13hy" }, { "vulnerability": "VCID-swnc-ke6h-ekew" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-tnjd-pyys-akav" }, { "vulnerability": "VCID-tw1y-t4qj-j3d1" }, { "vulnerability": "VCID-u9bx-8e86-wbew" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vxry-uvph-kbfd" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-w13x-3rp9-wyej" }, { "vulnerability": "VCID-wea9-egep-h7g5" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xh7y-56vy-5ud8" }, { "vulnerability": "VCID-xtdg-uj46-rkcm" }, { "vulnerability": "VCID-xy6y-312d-rygj" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-yzx1-4psv-7bhr" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zkea-ge1t-z7gn" }, { "vulnerability": "VCID-zspb-bd6j-wyd2" }, { "vulnerability": "VCID-zwgt-rm1f-6bf2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.3.2" } ], "aliases": [ "2018-07-12-2" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-sr3p-pdxy-4yhu" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/42359?format=api", "vulnerability_id": "VCID-t3jn-vwbx-u7cr", "summary": "Cross-Site Scripting in Content Preview (CType menu)\n### Problem\nIt has been discovered that content elements of type _menu_ are vulnerable to cross-site scripting when their referenced items get previewed in the page module. A valid backend user account is needed to exploit this vulnerability.\n\n### Solution\nUpdate to TYPO3 versions 7.6.51, 8.7.40, 9.5.25, 10.4.14, 11.1.1 that fix the problem described.\n\n### Credits\nThanks to TYPO3 contributor Oliver Bartsch who reported and fixed the issue.\n\n### References\n* [TYPO3-CORE-SA-2021-008](https://typo3.org/security/advisory/typo3-core-sa-2021-008)", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-21370", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00342", "scoring_system": "epss", "scoring_elements": "0.56922", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00342", "scoring_system": "epss", "scoring_elements": "0.56835", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.00342", "scoring_system": "epss", "scoring_elements": "0.56935", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00342", "scoring_system": "epss", "scoring_elements": "0.56779", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.00342", "scoring_system": "epss", "scoring_elements": "0.56926", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00342", "scoring_system": "epss", "scoring_elements": "0.56873", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00342", "scoring_system": "epss", "scoring_elements": "0.56895", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00342", "scoring_system": "epss", "scoring_elements": "0.56871", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00342", "scoring_system": "epss", "scoring_elements": "0.56917", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00342", "scoring_system": "epss", "scoring_elements": "0.56921", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00342", "scoring_system": "epss", "scoring_elements": "0.56891", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00342", "scoring_system": "epss", "scoring_elements": "0.56914", "published_at": "2026-04-12T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-21370" }, { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21370.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21370.yaml" }, { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21370.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21370.yaml" }, { "reference_url": "https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-x7hc-x7fm-f7qh", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-x7hc-x7fm-f7qh" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-21370", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-21370" }, { "reference_url": "https://packagist.org/packages/typo3/cms-backend", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://packagist.org/packages/typo3/cms-backend" }, { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2021-008", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://typo3.org/security/advisory/typo3-core-sa-2021-008" }, { "reference_url": "https://github.com/advisories/GHSA-x7hc-x7fm-f7qh", "reference_id": "GHSA-x7hc-x7fm-f7qh", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-x7hc-x7fm-f7qh" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/37644?format=api", "purl": "pkg:composer/typo3/cms-core@7.6.51", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-n15v-ta9h-6ffb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@7.6.51" }, { "url": "http://public2.vulnerablecode.io/api/packages/37635?format=api", "purl": "pkg:composer/typo3/cms-core@8.7.40", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-s64f-x81f-b7ce" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.40" }, { "url": "http://public2.vulnerablecode.io/api/packages/75848?format=api", "purl": "pkg:composer/typo3/cms-core@9.5.25", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-4t9s-p25a-cfas" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-65ue-7jd9-23gf" }, { "vulnerability": "VCID-6a9t-8dmn-s3bv" }, { "vulnerability": "VCID-8d2m-1ffv-jqe1" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-e32h-8q61-hbgc" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-mud2-s4rc-fuf6" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-nubu-f1sc-gbes" }, { "vulnerability": "VCID-remd-55jh-r3g5" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-w13x-3rp9-wyej" }, { "vulnerability": "VCID-xy6y-312d-rygj" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zn99-ywte-33g6" }, { "vulnerability": "VCID-zwgt-rm1f-6bf2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.25" }, { "url": "http://public2.vulnerablecode.io/api/packages/75846?format=api", "purl": "pkg:composer/typo3/cms-core@10.4.14", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1r9g-c5rn-ukgb" }, { "vulnerability": "VCID-1yxw-saf5-wue7" }, { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-4t9s-p25a-cfas" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-65ue-7jd9-23gf" }, { "vulnerability": "VCID-6a9t-8dmn-s3bv" }, { "vulnerability": "VCID-8d2m-1ffv-jqe1" }, { "vulnerability": "VCID-8sdd-b1bn-cuhx" }, { "vulnerability": "VCID-av8u-rvzq-4fc7" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-e32h-8q61-hbgc" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-gyyu-n3b1-zbcj" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-mud2-s4rc-fuf6" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-nubu-f1sc-gbes" }, { "vulnerability": "VCID-remd-55jh-r3g5" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vwb2-a84s-5qak" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-w13x-3rp9-wyej" }, { "vulnerability": "VCID-xy6y-312d-rygj" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zn99-ywte-33g6" }, { "vulnerability": "VCID-zwgt-rm1f-6bf2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@10.4.14" }, { "url": "http://public2.vulnerablecode.io/api/packages/75847?format=api", "purl": "pkg:composer/typo3/cms-core@11.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1r9g-c5rn-ukgb" }, { "vulnerability": "VCID-1yxw-saf5-wue7" }, { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-4t9s-p25a-cfas" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-65ue-7jd9-23gf" }, { "vulnerability": "VCID-6a9t-8dmn-s3bv" }, { "vulnerability": "VCID-8d2m-1ffv-jqe1" }, { "vulnerability": "VCID-8sdd-b1bn-cuhx" }, { "vulnerability": "VCID-av8u-rvzq-4fc7" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-e32h-8q61-hbgc" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-gyyu-n3b1-zbcj" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-mud2-s4rc-fuf6" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-nubu-f1sc-gbes" }, { "vulnerability": "VCID-remd-55jh-r3g5" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-uyeu-a3xr-fkh4" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vwb2-a84s-5qak" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-w13x-3rp9-wyej" }, { "vulnerability": "VCID-xy6y-312d-rygj" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zn99-ywte-33g6" }, { "vulnerability": "VCID-zwgt-rm1f-6bf2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@11.1.1" } ], "aliases": [ "CVE-2021-21370", "GHSA-x7hc-x7fm-f7qh" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-t3jn-vwbx-u7cr" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/10117?format=api", "vulnerability_id": "VCID-tw1y-t4qj-j3d1", "summary": "Cross-site Scripting\nCross-Site Scripting in Backend Modal Component.", "references": [ { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2018-007/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2018-007/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/33598?format=api", "purl": "pkg:composer/typo3/cms-core@7.6.32", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@7.6.32" }, { "url": "http://public2.vulnerablecode.io/api/packages/33468?format=api", "purl": "pkg:composer/typo3/cms-core@8.7.21", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-21e8-x7mp-hugk" }, { "vulnerability": "VCID-2meq-x4kd-bbdn" }, { "vulnerability": "VCID-3n2r-awja-dug9" }, { "vulnerability": "VCID-3v4n-fzxa-bfaw" }, { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-551q-gpyd-ffe8" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5mxm-88r9-hfey" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-5u4q-m66t-wqcj" }, { "vulnerability": "VCID-9g62-zd1x-3bdg" }, { "vulnerability": "VCID-9gpp-ez8w-rqav" }, { "vulnerability": "VCID-9x6r-56xm-n7h7" }, { "vulnerability": "VCID-9zqs-hjay-fkev" }, { "vulnerability": "VCID-axaf-45kr-kbfe" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-cm14-t8uv-k3es" }, { "vulnerability": "VCID-d99v-v9cj-zfh2" }, { "vulnerability": "VCID-dj88-f3p8-cfbn" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-eajg-ctpd-2bby" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-f4bv-pzdy-dfcb" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-he5m-6wj4-rbhc" }, { "vulnerability": "VCID-hhmn-yz5p-xkap" }, { "vulnerability": "VCID-j77k-hjgx-5kc5" }, { "vulnerability": "VCID-k8af-cg9k-87a9" }, { "vulnerability": "VCID-mh4f-vtfj-hbb1" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-pmzz-9rws-4ud5" }, { "vulnerability": "VCID-pss5-as4b-cyf2" }, { "vulnerability": "VCID-px44-19tj-h7aa" }, { "vulnerability": "VCID-q8hy-wjd9-nbgp" }, { "vulnerability": "VCID-s53a-f91p-huf4" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-stzu-sxe6-5yf5" }, { "vulnerability": "VCID-swnc-ke6h-ekew" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-tnjd-pyys-akav" }, { "vulnerability": "VCID-vxry-uvph-kbfd" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-wea9-egep-h7g5" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xh7y-56vy-5ud8" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zkea-ge1t-z7gn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.21" }, { "url": "http://public2.vulnerablecode.io/api/packages/33470?format=api", "purl": "pkg:composer/typo3/cms-core@9.5.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-21e8-x7mp-hugk" }, { "vulnerability": "VCID-2meq-x4kd-bbdn" }, { "vulnerability": "VCID-2mn6-mdmz-4yd9" }, { "vulnerability": "VCID-3n2r-awja-dug9" }, { "vulnerability": "VCID-3v4n-fzxa-bfaw" }, { "vulnerability": "VCID-461j-9hrc-gfbc" }, { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-4mkw-tv16-jyca" }, { "vulnerability": "VCID-4t9s-p25a-cfas" }, { "vulnerability": "VCID-543x-cnbz-1kb9" }, { "vulnerability": "VCID-551q-gpyd-ffe8" }, { "vulnerability": "VCID-58js-jzm4-4fc7" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5kzs-ex81-bbaj" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-5u4q-m66t-wqcj" }, { "vulnerability": "VCID-65ue-7jd9-23gf" }, { "vulnerability": "VCID-6a9t-8dmn-s3bv" }, { "vulnerability": "VCID-8d2m-1ffv-jqe1" }, { "vulnerability": "VCID-9g62-zd1x-3bdg" }, { "vulnerability": "VCID-9gpp-ez8w-rqav" }, { "vulnerability": "VCID-9x6r-56xm-n7h7" }, { "vulnerability": "VCID-9zqs-hjay-fkev" }, { "vulnerability": "VCID-a49c-fqrj-nbb3" }, { "vulnerability": "VCID-axaf-45kr-kbfe" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-cm14-t8uv-k3es" }, { "vulnerability": "VCID-d8d1-sat6-muhe" }, { "vulnerability": "VCID-d99v-v9cj-zfh2" }, { "vulnerability": "VCID-dj88-f3p8-cfbn" }, { "vulnerability": "VCID-dmzb-gkdn-6bcm" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-e32h-8q61-hbgc" }, { "vulnerability": "VCID-eajg-ctpd-2bby" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-f4bv-pzdy-dfcb" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-he5m-6wj4-rbhc" }, { "vulnerability": "VCID-hhmn-yz5p-xkap" }, { "vulnerability": "VCID-k8af-cg9k-87a9" }, { "vulnerability": "VCID-kj9x-psfz-2ug1" }, { "vulnerability": "VCID-mh4f-vtfj-hbb1" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-mud2-s4rc-fuf6" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-nubu-f1sc-gbes" }, { "vulnerability": "VCID-nxq4-m52q-yuh4" }, { "vulnerability": "VCID-p715-yexd-jfgc" }, { "vulnerability": "VCID-phgh-sd4m-zbdx" }, { "vulnerability": "VCID-pmzz-9rws-4ud5" }, { "vulnerability": "VCID-pss5-as4b-cyf2" }, { "vulnerability": "VCID-px44-19tj-h7aa" }, { "vulnerability": "VCID-q8hy-wjd9-nbgp" }, { "vulnerability": "VCID-raxk-rm9v-hubn" }, { "vulnerability": "VCID-remd-55jh-r3g5" }, { "vulnerability": "VCID-s53a-f91p-huf4" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-stzu-sxe6-5yf5" }, { "vulnerability": "VCID-sw7v-fbjk-13hy" }, { "vulnerability": "VCID-swnc-ke6h-ekew" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-tnjd-pyys-akav" }, { "vulnerability": "VCID-u9bx-8e86-wbew" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vxry-uvph-kbfd" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-w13x-3rp9-wyej" }, { "vulnerability": "VCID-wea9-egep-h7g5" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xh7y-56vy-5ud8" }, { "vulnerability": "VCID-xtdg-uj46-rkcm" }, { "vulnerability": "VCID-xy6y-312d-rygj" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-yzx1-4psv-7bhr" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zkea-ge1t-z7gn" }, { "vulnerability": "VCID-zn99-ywte-33g6" }, { "vulnerability": "VCID-zwgt-rm1f-6bf2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.2" } ], "aliases": [ "2018-12-11-2" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-tw1y-t4qj-j3d1" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/11013?format=api", "vulnerability_id": "VCID-y32z-2d3f-gkgw", "summary": "Cross-site Scripting\nTYPO3 is vulnerable to cross-site scripting. Corresponding rendering instructions via TypoScript functionality HTMLparser does not consider all potentially malicious HTML tag & attribute combinations per default. In default scenarios, a valid backend user account is needed to exploit this vulnerability. In case custom plugins used in the website frontend accept and reflect rich-text content submitted by users, no authentication is required.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-32768", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00284", "scoring_system": "epss", "scoring_elements": "0.51757", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00284", "scoring_system": "epss", "scoring_elements": "0.51805", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.00284", "scoring_system": "epss", "scoring_elements": "0.51855", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00284", "scoring_system": "epss", "scoring_elements": "0.51874", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00284", "scoring_system": "epss", "scoring_elements": "0.51867", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00284", "scoring_system": "epss", "scoring_elements": "0.51825", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00284", "scoring_system": "epss", "scoring_elements": "0.51722", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.00284", "scoring_system": "epss", "scoring_elements": "0.51809", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00284", "scoring_system": "epss", "scoring_elements": "0.51812", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00284", "scoring_system": "epss", "scoring_elements": "0.51771", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00284", "scoring_system": "epss", "scoring_elements": "0.51797", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00284", "scoring_system": "epss", "scoring_elements": "0.5184", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00284", "scoring_system": "epss", "scoring_elements": "0.5186", "published_at": "2026-04-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-32768" }, { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-32768.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-32768.yaml" }, { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-32768.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-32768.yaml" }, { "reference_url": "https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-c5c9-8c6m-727v", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-c5c9-8c6m-727v" }, { "reference_url": "https://github.com/TYPO3/typo3/security/advisories/GHSA-c5c9-8c6m-727v", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3/typo3/security/advisories/GHSA-c5c9-8c6m-727v" }, { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2021-013", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://typo3.org/security/advisory/typo3-core-sa-2021-013" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-32768", "reference_id": "CVE-2021-32768", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-32768" }, { "reference_url": "https://github.com/advisories/GHSA-c5c9-8c6m-727v", "reference_id": "GHSA-c5c9-8c6m-727v", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-c5c9-8c6m-727v" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/75620?format=api", "purl": "pkg:composer/typo3/cms-core@7.6.53", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@7.6.53" }, { "url": "http://public2.vulnerablecode.io/api/packages/75621?format=api", "purl": "pkg:composer/typo3/cms-core@8.7.42", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.42" }, { "url": "http://public2.vulnerablecode.io/api/packages/38030?format=api", "purl": "pkg:composer/typo3/cms-core@9.5.29", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-4t9s-p25a-cfas" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-65ue-7jd9-23gf" }, { "vulnerability": "VCID-8d2m-1ffv-jqe1" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-e32h-8q61-hbgc" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-mud2-s4rc-fuf6" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-nubu-f1sc-gbes" }, { "vulnerability": "VCID-remd-55jh-r3g5" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-w13x-3rp9-wyej" }, { "vulnerability": "VCID-xy6y-312d-rygj" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zn99-ywte-33g6" }, { "vulnerability": "VCID-zwgt-rm1f-6bf2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.29" }, { "url": "http://public2.vulnerablecode.io/api/packages/38031?format=api", "purl": "pkg:composer/typo3/cms-core@10.4.19", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1r9g-c5rn-ukgb" }, { "vulnerability": "VCID-1yxw-saf5-wue7" }, { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-4t9s-p25a-cfas" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-65ue-7jd9-23gf" }, { "vulnerability": "VCID-8d2m-1ffv-jqe1" }, { "vulnerability": "VCID-8sdd-b1bn-cuhx" }, { "vulnerability": "VCID-av8u-rvzq-4fc7" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-e32h-8q61-hbgc" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-gyyu-n3b1-zbcj" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-mud2-s4rc-fuf6" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-nubu-f1sc-gbes" }, { "vulnerability": "VCID-remd-55jh-r3g5" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vwb2-a84s-5qak" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-w13x-3rp9-wyej" }, { "vulnerability": "VCID-xy6y-312d-rygj" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zn99-ywte-33g6" }, { "vulnerability": "VCID-zwgt-rm1f-6bf2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@10.4.19" }, { "url": "http://public2.vulnerablecode.io/api/packages/38032?format=api", "purl": "pkg:composer/typo3/cms-core@11.3.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1r9g-c5rn-ukgb" }, { "vulnerability": "VCID-1yxw-saf5-wue7" }, { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-4t9s-p25a-cfas" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-65ue-7jd9-23gf" }, { "vulnerability": "VCID-8d2m-1ffv-jqe1" }, { "vulnerability": "VCID-8sdd-b1bn-cuhx" }, { "vulnerability": "VCID-av8u-rvzq-4fc7" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-e32h-8q61-hbgc" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-gyyu-n3b1-zbcj" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-jjbn-6efk-nud2" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-mud2-s4rc-fuf6" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-nubu-f1sc-gbes" }, { "vulnerability": "VCID-remd-55jh-r3g5" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-uyeu-a3xr-fkh4" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vwb2-a84s-5qak" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-w13x-3rp9-wyej" }, { "vulnerability": "VCID-xy6y-312d-rygj" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zn99-ywte-33g6" }, { "vulnerability": "VCID-zwgt-rm1f-6bf2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@11.3.2" } ], "aliases": [ "CVE-2021-32768", "GHSA-c5c9-8c6m-727v" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-y32z-2d3f-gkgw" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/10111?format=api", "vulnerability_id": "VCID-zspb-bd6j-wyd2", "summary": "Security Misconfiguration in Install Tool Cookie.", "references": [ { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2018-009/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2018-009/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/33598?format=api", "purl": "pkg:composer/typo3/cms-core@7.6.32", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@7.6.32" }, { "url": "http://public2.vulnerablecode.io/api/packages/33468?format=api", "purl": "pkg:composer/typo3/cms-core@8.7.21", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-21e8-x7mp-hugk" }, { "vulnerability": "VCID-2meq-x4kd-bbdn" }, { "vulnerability": "VCID-3n2r-awja-dug9" }, { "vulnerability": "VCID-3v4n-fzxa-bfaw" }, { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-551q-gpyd-ffe8" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5mxm-88r9-hfey" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-5u4q-m66t-wqcj" }, { "vulnerability": "VCID-9g62-zd1x-3bdg" }, { "vulnerability": "VCID-9gpp-ez8w-rqav" }, { "vulnerability": "VCID-9x6r-56xm-n7h7" }, { "vulnerability": "VCID-9zqs-hjay-fkev" }, { "vulnerability": "VCID-axaf-45kr-kbfe" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-cm14-t8uv-k3es" }, { "vulnerability": "VCID-d99v-v9cj-zfh2" }, { "vulnerability": "VCID-dj88-f3p8-cfbn" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-eajg-ctpd-2bby" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-f4bv-pzdy-dfcb" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-he5m-6wj4-rbhc" }, { "vulnerability": "VCID-hhmn-yz5p-xkap" }, { "vulnerability": "VCID-j77k-hjgx-5kc5" }, { "vulnerability": "VCID-k8af-cg9k-87a9" }, { "vulnerability": "VCID-mh4f-vtfj-hbb1" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-pmzz-9rws-4ud5" }, { "vulnerability": "VCID-pss5-as4b-cyf2" }, { "vulnerability": "VCID-px44-19tj-h7aa" }, { "vulnerability": "VCID-q8hy-wjd9-nbgp" }, { "vulnerability": "VCID-s53a-f91p-huf4" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-stzu-sxe6-5yf5" }, { "vulnerability": "VCID-swnc-ke6h-ekew" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-tnjd-pyys-akav" }, { "vulnerability": "VCID-vxry-uvph-kbfd" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-wea9-egep-h7g5" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xh7y-56vy-5ud8" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zkea-ge1t-z7gn" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.21" }, { "url": "http://public2.vulnerablecode.io/api/packages/33470?format=api", "purl": "pkg:composer/typo3/cms-core@9.5.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-21e8-x7mp-hugk" }, { "vulnerability": "VCID-2meq-x4kd-bbdn" }, { "vulnerability": "VCID-2mn6-mdmz-4yd9" }, { "vulnerability": "VCID-3n2r-awja-dug9" }, { "vulnerability": "VCID-3v4n-fzxa-bfaw" }, { "vulnerability": "VCID-461j-9hrc-gfbc" }, { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-4mkw-tv16-jyca" }, { "vulnerability": "VCID-4t9s-p25a-cfas" }, { "vulnerability": "VCID-543x-cnbz-1kb9" }, { "vulnerability": "VCID-551q-gpyd-ffe8" }, { "vulnerability": "VCID-58js-jzm4-4fc7" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5kzs-ex81-bbaj" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-5u4q-m66t-wqcj" }, { "vulnerability": "VCID-65ue-7jd9-23gf" }, { "vulnerability": "VCID-6a9t-8dmn-s3bv" }, { "vulnerability": "VCID-8d2m-1ffv-jqe1" }, { "vulnerability": "VCID-9g62-zd1x-3bdg" }, { "vulnerability": "VCID-9gpp-ez8w-rqav" }, { "vulnerability": "VCID-9x6r-56xm-n7h7" }, { "vulnerability": "VCID-9zqs-hjay-fkev" }, { "vulnerability": "VCID-a49c-fqrj-nbb3" }, { "vulnerability": "VCID-axaf-45kr-kbfe" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-cm14-t8uv-k3es" }, { "vulnerability": "VCID-d8d1-sat6-muhe" }, { "vulnerability": "VCID-d99v-v9cj-zfh2" }, { "vulnerability": "VCID-dj88-f3p8-cfbn" }, { "vulnerability": "VCID-dmzb-gkdn-6bcm" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-e32h-8q61-hbgc" }, { "vulnerability": "VCID-eajg-ctpd-2bby" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-f4bv-pzdy-dfcb" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-he5m-6wj4-rbhc" }, { "vulnerability": "VCID-hhmn-yz5p-xkap" }, { "vulnerability": "VCID-k8af-cg9k-87a9" }, { "vulnerability": "VCID-kj9x-psfz-2ug1" }, { "vulnerability": "VCID-mh4f-vtfj-hbb1" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-mud2-s4rc-fuf6" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-nubu-f1sc-gbes" }, { "vulnerability": "VCID-nxq4-m52q-yuh4" }, { "vulnerability": "VCID-p715-yexd-jfgc" }, { "vulnerability": "VCID-phgh-sd4m-zbdx" }, { "vulnerability": "VCID-pmzz-9rws-4ud5" }, { "vulnerability": "VCID-pss5-as4b-cyf2" }, { "vulnerability": "VCID-px44-19tj-h7aa" }, { "vulnerability": "VCID-q8hy-wjd9-nbgp" }, { "vulnerability": "VCID-raxk-rm9v-hubn" }, { "vulnerability": "VCID-remd-55jh-r3g5" }, { "vulnerability": "VCID-s53a-f91p-huf4" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-stzu-sxe6-5yf5" }, { "vulnerability": "VCID-sw7v-fbjk-13hy" }, { "vulnerability": "VCID-swnc-ke6h-ekew" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-tnjd-pyys-akav" }, { "vulnerability": "VCID-u9bx-8e86-wbew" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vxry-uvph-kbfd" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-w13x-3rp9-wyej" }, { "vulnerability": "VCID-wea9-egep-h7g5" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xh7y-56vy-5ud8" }, { "vulnerability": "VCID-xtdg-uj46-rkcm" }, { "vulnerability": "VCID-xy6y-312d-rygj" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-yzx1-4psv-7bhr" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zkea-ge1t-z7gn" }, { "vulnerability": "VCID-zn99-ywte-33g6" }, { "vulnerability": "VCID-zwgt-rm1f-6bf2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.2" } ], "aliases": [ "2018-12-11-4" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-zspb-bd6j-wyd2" } ], "fixing_vulnerabilities": [], "risk_score": "4.5", "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@7.0.0" }