Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:composer/typo3/cms-core@8.7.17
Typecomposer
Namespacetypo3
Namecms-core
Version8.7.17
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version12.4.41
Latest_non_vulnerable_version14.0.2
Affected_by_vulnerabilities
0
url VCID-21e8-x7mp-hugk
vulnerability_id VCID-21e8-x7mp-hugk
summary 
TYPO3 Arbitrary Code Execution via File List Module
Due to missing file extensions in $GLOBALS['TYPO3_CONF_VARS']['BE'][‘fileDenyPattern’], backend users are allowed to upload *.phar, *.shtml, *.pl or *.cgi files which can be executed in certain web server setups. A valid backend user account is needed in order to exploit this vulnerability.

Derivatives of Debian GNU Linux are handling *.phar files as PHP applications since PHP 7.1 (for unofficial packages) and PHP 7.2 (for official packages).

The file extension *.shtml is bound to server side includes which are not enabled per default in most common Linux based distributions. File extension *.pl and *.cgi require additional handlers to be configured which is also not the case in most common distributions (except for /cgi-bin/ location).
references
0
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2019-01-22-7.yaml
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2019-01-22-7.yaml
1
reference_url https://github.com/TYPO3-CMS/core
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core
2
reference_url https://github.com/TYPO3-CMS/core/commit/45c311d120c359d54cc918e962c374e774239899
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core/commit/45c311d120c359d54cc918e962c374e774239899
3
reference_url https://github.com/TYPO3-CMS/core/commit/5095084efae471c5fef7b578f2bc8a5060e1e148
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core/commit/5095084efae471c5fef7b578f2bc8a5060e1e148
4
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-008
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2019-008
5
reference_url https://github.com/advisories/GHSA-f9hr-7cfq-mjg2
reference_id GHSA-f9hr-7cfq-mjg2
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-f9hr-7cfq-mjg2
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.23
purl pkg:composer/typo3/cms-core@8.7.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2meq-x4kd-bbdn
1
vulnerability VCID-3n2r-awja-dug9
2
vulnerability VCID-3v4n-fzxa-bfaw
3
vulnerability VCID-4jpa-6fqh-hbfg
4
vulnerability VCID-5jgb-dsyx-hyb4
5
vulnerability VCID-5paq-5frf-43ed
6
vulnerability VCID-5u4q-m66t-wqcj
7
vulnerability VCID-9g62-zd1x-3bdg
8
vulnerability VCID-9gpp-ez8w-rqav
9
vulnerability VCID-9x6r-56xm-n7h7
10
vulnerability VCID-axvk-13qf-tka7
11
vulnerability VCID-b6er-h7dm-3bev
12
vulnerability VCID-bajy-qbwq-fufn
13
vulnerability VCID-cm14-t8uv-k3es
14
vulnerability VCID-dsu7-jjjq-f3e1
15
vulnerability VCID-eajg-ctpd-2bby
16
vulnerability VCID-ekfd-wp8z-d7e1
17
vulnerability VCID-f963-qur3-2qb7
18
vulnerability VCID-g4uc-qeb6-myed
19
vulnerability VCID-gcnj-6qb6-pbgz
20
vulnerability VCID-gv1b-xtv4-4yg3
21
vulnerability VCID-h6y3-7gsq-skh2
22
vulnerability VCID-he5m-6wj4-rbhc
23
vulnerability VCID-hhmn-yz5p-xkap
24
vulnerability VCID-mnz3-rj21-67ad
25
vulnerability VCID-n15v-ta9h-6ffb
26
vulnerability VCID-n7ng-zkkb-2qaz
27
vulnerability VCID-pmzz-9rws-4ud5
28
vulnerability VCID-pss5-as4b-cyf2
29
vulnerability VCID-q8hy-wjd9-nbgp
30
vulnerability VCID-s53a-f91p-huf4
31
vulnerability VCID-s55j-8hbt-akhn
32
vulnerability VCID-s64f-x81f-b7ce
33
vulnerability VCID-stzu-sxe6-5yf5
34
vulnerability VCID-swnc-ke6h-ekew
35
vulnerability VCID-t1n7-eswt-73gw
36
vulnerability VCID-t3jn-vwbx-u7cr
37
vulnerability VCID-taj6-zj2n-5kg8
38
vulnerability VCID-tnjd-pyys-akav
39
vulnerability VCID-vxry-uvph-kbfd
40
vulnerability VCID-vyvy-y3cw-hbgr
41
vulnerability VCID-xa4m-xpa9-v7h8
42
vulnerability VCID-xh7y-56vy-5ud8
43
vulnerability VCID-y32z-2d3f-gkgw
44
vulnerability VCID-zdq2-dhb2-6kaq
45
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.23
1
url pkg:composer/typo3/cms-core@9.5.4
purl pkg:composer/typo3/cms-core@9.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2meq-x4kd-bbdn
1
vulnerability VCID-2mn6-mdmz-4yd9
2
vulnerability VCID-3n2r-awja-dug9
3
vulnerability VCID-3v4n-fzxa-bfaw
4
vulnerability VCID-461j-9hrc-gfbc
5
vulnerability VCID-4jpa-6fqh-hbfg
6
vulnerability VCID-4mkw-tv16-jyca
7
vulnerability VCID-4t9s-p25a-cfas
8
vulnerability VCID-543x-cnbz-1kb9
9
vulnerability VCID-58js-jzm4-4fc7
10
vulnerability VCID-5jgb-dsyx-hyb4
11
vulnerability VCID-5kzs-ex81-bbaj
12
vulnerability VCID-5paq-5frf-43ed
13
vulnerability VCID-5u4q-m66t-wqcj
14
vulnerability VCID-65ue-7jd9-23gf
15
vulnerability VCID-6a9t-8dmn-s3bv
16
vulnerability VCID-8d2m-1ffv-jqe1
17
vulnerability VCID-9g62-zd1x-3bdg
18
vulnerability VCID-9gpp-ez8w-rqav
19
vulnerability VCID-9x6r-56xm-n7h7
20
vulnerability VCID-a49c-fqrj-nbb3
21
vulnerability VCID-axvk-13qf-tka7
22
vulnerability VCID-b6er-h7dm-3bev
23
vulnerability VCID-bajy-qbwq-fufn
24
vulnerability VCID-cm14-t8uv-k3es
25
vulnerability VCID-d8d1-sat6-muhe
26
vulnerability VCID-dmzb-gkdn-6bcm
27
vulnerability VCID-dsu7-jjjq-f3e1
28
vulnerability VCID-e32h-8q61-hbgc
29
vulnerability VCID-eajg-ctpd-2bby
30
vulnerability VCID-ekfd-wp8z-d7e1
31
vulnerability VCID-f963-qur3-2qb7
32
vulnerability VCID-g4uc-qeb6-myed
33
vulnerability VCID-gcnj-6qb6-pbgz
34
vulnerability VCID-gv1b-xtv4-4yg3
35
vulnerability VCID-h6y3-7gsq-skh2
36
vulnerability VCID-he5m-6wj4-rbhc
37
vulnerability VCID-hhmn-yz5p-xkap
38
vulnerability VCID-kj9x-psfz-2ug1
39
vulnerability VCID-mnz3-rj21-67ad
40
vulnerability VCID-mud2-s4rc-fuf6
41
vulnerability VCID-n15v-ta9h-6ffb
42
vulnerability VCID-n7ng-zkkb-2qaz
43
vulnerability VCID-nubu-f1sc-gbes
44
vulnerability VCID-nxq4-m52q-yuh4
45
vulnerability VCID-phgh-sd4m-zbdx
46
vulnerability VCID-pmzz-9rws-4ud5
47
vulnerability VCID-pss5-as4b-cyf2
48
vulnerability VCID-q8hy-wjd9-nbgp
49
vulnerability VCID-raxk-rm9v-hubn
50
vulnerability VCID-remd-55jh-r3g5
51
vulnerability VCID-s53a-f91p-huf4
52
vulnerability VCID-s55j-8hbt-akhn
53
vulnerability VCID-s64f-x81f-b7ce
54
vulnerability VCID-stzu-sxe6-5yf5
55
vulnerability VCID-sw7v-fbjk-13hy
56
vulnerability VCID-swnc-ke6h-ekew
57
vulnerability VCID-t1n7-eswt-73gw
58
vulnerability VCID-t3jn-vwbx-u7cr
59
vulnerability VCID-taj6-zj2n-5kg8
60
vulnerability VCID-tnjd-pyys-akav
61
vulnerability VCID-u9bx-8e86-wbew
62
vulnerability VCID-ve7g-8st5-wffb
63
vulnerability VCID-vxry-uvph-kbfd
64
vulnerability VCID-vyvy-y3cw-hbgr
65
vulnerability VCID-w13x-3rp9-wyej
66
vulnerability VCID-xa4m-xpa9-v7h8
67
vulnerability VCID-xh7y-56vy-5ud8
68
vulnerability VCID-xtdg-uj46-rkcm
69
vulnerability VCID-xy6y-312d-rygj
70
vulnerability VCID-y32z-2d3f-gkgw
71
vulnerability VCID-zdq2-dhb2-6kaq
72
vulnerability VCID-zkea-ge1t-z7gn
73
vulnerability VCID-zn99-ywte-33g6
74
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.4
aliases GHSA-f9hr-7cfq-mjg2
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-21e8-x7mp-hugk
1
url VCID-2meq-x4kd-bbdn
vulnerability_id VCID-2meq-x4kd-bbdn
summary Insecure Deserialization in TYPO3 CMS.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-020/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-020/
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.27
purl pkg:composer/typo3/cms-core@8.7.27
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3n2r-awja-dug9
1
vulnerability VCID-4jpa-6fqh-hbfg
2
vulnerability VCID-5jgb-dsyx-hyb4
3
vulnerability VCID-5paq-5frf-43ed
4
vulnerability VCID-5u4q-m66t-wqcj
5
vulnerability VCID-axvk-13qf-tka7
6
vulnerability VCID-b6er-h7dm-3bev
7
vulnerability VCID-bajy-qbwq-fufn
8
vulnerability VCID-dsu7-jjjq-f3e1
9
vulnerability VCID-ekfd-wp8z-d7e1
10
vulnerability VCID-f963-qur3-2qb7
11
vulnerability VCID-g4uc-qeb6-myed
12
vulnerability VCID-gcnj-6qb6-pbgz
13
vulnerability VCID-gv1b-xtv4-4yg3
14
vulnerability VCID-h6y3-7gsq-skh2
15
vulnerability VCID-he5m-6wj4-rbhc
16
vulnerability VCID-hhmn-yz5p-xkap
17
vulnerability VCID-mnz3-rj21-67ad
18
vulnerability VCID-n15v-ta9h-6ffb
19
vulnerability VCID-n7ng-zkkb-2qaz
20
vulnerability VCID-s55j-8hbt-akhn
21
vulnerability VCID-s64f-x81f-b7ce
22
vulnerability VCID-swnc-ke6h-ekew
23
vulnerability VCID-t1n7-eswt-73gw
24
vulnerability VCID-t3jn-vwbx-u7cr
25
vulnerability VCID-taj6-zj2n-5kg8
26
vulnerability VCID-tnjd-pyys-akav
27
vulnerability VCID-vyvy-y3cw-hbgr
28
vulnerability VCID-xa4m-xpa9-v7h8
29
vulnerability VCID-xh7y-56vy-5ud8
30
vulnerability VCID-y32z-2d3f-gkgw
31
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.27
1
url pkg:composer/typo3/cms-core@9.5.8
purl pkg:composer/typo3/cms-core@9.5.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mn6-mdmz-4yd9
1
vulnerability VCID-3n2r-awja-dug9
2
vulnerability VCID-4jpa-6fqh-hbfg
3
vulnerability VCID-4t9s-p25a-cfas
4
vulnerability VCID-543x-cnbz-1kb9
5
vulnerability VCID-58js-jzm4-4fc7
6
vulnerability VCID-5jgb-dsyx-hyb4
7
vulnerability VCID-5kzs-ex81-bbaj
8
vulnerability VCID-5paq-5frf-43ed
9
vulnerability VCID-5u4q-m66t-wqcj
10
vulnerability VCID-65ue-7jd9-23gf
11
vulnerability VCID-6a9t-8dmn-s3bv
12
vulnerability VCID-8d2m-1ffv-jqe1
13
vulnerability VCID-a49c-fqrj-nbb3
14
vulnerability VCID-axvk-13qf-tka7
15
vulnerability VCID-b6er-h7dm-3bev
16
vulnerability VCID-bajy-qbwq-fufn
17
vulnerability VCID-d8d1-sat6-muhe
18
vulnerability VCID-dsu7-jjjq-f3e1
19
vulnerability VCID-e32h-8q61-hbgc
20
vulnerability VCID-ekfd-wp8z-d7e1
21
vulnerability VCID-f963-qur3-2qb7
22
vulnerability VCID-g4uc-qeb6-myed
23
vulnerability VCID-gcnj-6qb6-pbgz
24
vulnerability VCID-gv1b-xtv4-4yg3
25
vulnerability VCID-h6y3-7gsq-skh2
26
vulnerability VCID-he5m-6wj4-rbhc
27
vulnerability VCID-hhmn-yz5p-xkap
28
vulnerability VCID-mnz3-rj21-67ad
29
vulnerability VCID-mud2-s4rc-fuf6
30
vulnerability VCID-n15v-ta9h-6ffb
31
vulnerability VCID-n7ng-zkkb-2qaz
32
vulnerability VCID-nubu-f1sc-gbes
33
vulnerability VCID-phgh-sd4m-zbdx
34
vulnerability VCID-remd-55jh-r3g5
35
vulnerability VCID-s55j-8hbt-akhn
36
vulnerability VCID-s64f-x81f-b7ce
37
vulnerability VCID-sw7v-fbjk-13hy
38
vulnerability VCID-swnc-ke6h-ekew
39
vulnerability VCID-t1n7-eswt-73gw
40
vulnerability VCID-t3jn-vwbx-u7cr
41
vulnerability VCID-taj6-zj2n-5kg8
42
vulnerability VCID-tnjd-pyys-akav
43
vulnerability VCID-ve7g-8st5-wffb
44
vulnerability VCID-vyvy-y3cw-hbgr
45
vulnerability VCID-w13x-3rp9-wyej
46
vulnerability VCID-xa4m-xpa9-v7h8
47
vulnerability VCID-xh7y-56vy-5ud8
48
vulnerability VCID-xy6y-312d-rygj
49
vulnerability VCID-y32z-2d3f-gkgw
50
vulnerability VCID-zdq2-dhb2-6kaq
51
vulnerability VCID-zn99-ywte-33g6
52
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.8
aliases 2019-06-25-5
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2meq-x4kd-bbdn
2
url VCID-3gg5-1921-rbfs
vulnerability_id VCID-3gg5-1921-rbfs
summary 
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
In Bootstrap, XSS is possible in the data-target property of scrollspy.
references
0
reference_url http://packetstormsecurity.com/files/152787/dotCMS-5.1.1-Vulnerable-Dependencies.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://packetstormsecurity.com/files/152787/dotCMS-5.1.1-Vulnerable-Dependencies.html
1
reference_url http://packetstormsecurity.com/files/156743/OctoberCMS-Insecure-Dependencies.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://packetstormsecurity.com/files/156743/OctoberCMS-Insecure-Dependencies.html
2
reference_url https://access.redhat.com/errata/RHSA-2019:1456
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2019:1456
3
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14041.json
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14041.json
4
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-14041
reference_id
reference_type
scores
0
value 0.07723
scoring_system epss
scoring_elements 0.91914
published_at 2026-04-07T12:55:00Z
1
value 0.07723
scoring_system epss
scoring_elements 0.91907
published_at 2026-04-04T12:55:00Z
2
value 0.07723
scoring_system epss
scoring_elements 0.91899
published_at 2026-04-02T12:55:00Z
3
value 0.07723
scoring_system epss
scoring_elements 0.91891
published_at 2026-04-01T12:55:00Z
4
value 0.07723
scoring_system epss
scoring_elements 0.91932
published_at 2026-04-09T12:55:00Z
5
value 0.07723
scoring_system epss
scoring_elements 0.91935
published_at 2026-04-12T12:55:00Z
6
value 0.07723
scoring_system epss
scoring_elements 0.91931
published_at 2026-04-13T12:55:00Z
7
value 0.07723
scoring_system epss
scoring_elements 0.9195
published_at 2026-04-16T12:55:00Z
8
value 0.07723
scoring_system epss
scoring_elements 0.91926
published_at 2026-04-08T12:55:00Z
9
value 0.07723
scoring_system epss
scoring_elements 0.91947
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-14041
5
reference_url https://blog.getbootstrap.com/2018/07/12/bootstrap-4-1-2
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3
scoring_elements
1
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://blog.getbootstrap.com/2018/07/12/bootstrap-4-1-2
6
reference_url https://blog.getbootstrap.com/2018/07/12/bootstrap-4-1-2/
reference_id
reference_type
scores
url https://blog.getbootstrap.com/2018/07/12/bootstrap-4-1-2/
7
reference_url http://seclists.org/fulldisclosure/2019/May/10
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://seclists.org/fulldisclosure/2019/May/10
8
reference_url http://seclists.org/fulldisclosure/2019/May/11
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://seclists.org/fulldisclosure/2019/May/11
9
reference_url http://seclists.org/fulldisclosure/2019/May/13
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://seclists.org/fulldisclosure/2019/May/13
10
reference_url https://github.com/twbs/bootstrap
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/twbs/bootstrap
11
reference_url https://github.com/twbs/bootstrap/issues/26423
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/twbs/bootstrap/issues/26423
12
reference_url https://github.com/twbs/bootstrap/issues/26627
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/twbs/bootstrap/issues/26627
13
reference_url https://github.com/twbs/bootstrap/pull/26630
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/twbs/bootstrap/pull/26630
14
reference_url https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E
15
reference_url https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E
16
reference_url https://lists.apache.org/thread.html/52e0e6b5df827ee7f1e68f7cc3babe61af3b2160f5d74a85469b7b0e@%3Cdev.superset.apache.org%3E
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/52e0e6b5df827ee7f1e68f7cc3babe61af3b2160f5d74a85469b7b0e@%3Cdev.superset.apache.org%3E
17
reference_url https://lists.apache.org/thread.html/52e0e6b5df827ee7f1e68f7cc3babe61af3b2160f5d74a85469b7b0e%40%3Cdev.superset.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/52e0e6b5df827ee7f1e68f7cc3babe61af3b2160f5d74a85469b7b0e%40%3Cdev.superset.apache.org%3E
18
reference_url https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E
19
reference_url https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E
20
reference_url https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E
21
reference_url https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E
22
reference_url https://lists.apache.org/thread.html/r3dc0cac8d856bca02bd6997355d7ff83027dcfc82f8646a29b89b714@%3Cissues.hbase.apache.org%3E
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r3dc0cac8d856bca02bd6997355d7ff83027dcfc82f8646a29b89b714@%3Cissues.hbase.apache.org%3E
23
reference_url https://lists.apache.org/thread.html/r3dc0cac8d856bca02bd6997355d7ff83027dcfc82f8646a29b89b714%40%3Cissues.hbase.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/r3dc0cac8d856bca02bd6997355d7ff83027dcfc82f8646a29b89b714%40%3Cissues.hbase.apache.org%3E
24
reference_url https://seclists.org/bugtraq/2019/May/18
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://seclists.org/bugtraq/2019/May/18
25
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-006
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2019-006
26
reference_url https://www.oracle.com/security-alerts/cpuApr2021.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.oracle.com/security-alerts/cpuApr2021.html
27
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1601616
reference_id 1601616
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1601616
28
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*
29
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:getbootstrap:bootstrap:4.0.0:alpha:*:*:*:*:*:*
reference_id cpe:2.3:a:getbootstrap:bootstrap:4.0.0:alpha:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:getbootstrap:bootstrap:4.0.0:alpha:*:*:*:*:*:*
30
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:getbootstrap:bootstrap:4.0.0:alpha2:*:*:*:*:*:*
reference_id cpe:2.3:a:getbootstrap:bootstrap:4.0.0:alpha2:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:getbootstrap:bootstrap:4.0.0:alpha2:*:*:*:*:*:*
31
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:getbootstrap:bootstrap:4.0.0:alpha3:*:*:*:*:*:*
reference_id cpe:2.3:a:getbootstrap:bootstrap:4.0.0:alpha3:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:getbootstrap:bootstrap:4.0.0:alpha3:*:*:*:*:*:*
32
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:getbootstrap:bootstrap:4.0.0:alpha4:*:*:*:*:*:*
reference_id cpe:2.3:a:getbootstrap:bootstrap:4.0.0:alpha4:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:getbootstrap:bootstrap:4.0.0:alpha4:*:*:*:*:*:*
33
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:getbootstrap:bootstrap:4.0.0:alpha5:*:*:*:*:*:*
reference_id cpe:2.3:a:getbootstrap:bootstrap:4.0.0:alpha5:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:getbootstrap:bootstrap:4.0.0:alpha5:*:*:*:*:*:*
34
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:getbootstrap:bootstrap:4.0.0:alpha6:*:*:*:*:*:*
reference_id cpe:2.3:a:getbootstrap:bootstrap:4.0.0:alpha6:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:getbootstrap:bootstrap:4.0.0:alpha6:*:*:*:*:*:*
35
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:getbootstrap:bootstrap:4.0.0:beta:*:*:*:*:*:*
reference_id cpe:2.3:a:getbootstrap:bootstrap:4.0.0:beta:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:getbootstrap:bootstrap:4.0.0:beta:*:*:*:*:*:*
36
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:getbootstrap:bootstrap:4.0.0:beta2:*:*:*:*:*:*
reference_id cpe:2.3:a:getbootstrap:bootstrap:4.0.0:beta2:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:getbootstrap:bootstrap:4.0.0:beta2:*:*:*:*:*:*
37
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:getbootstrap:bootstrap:4.0.0:beta3:*:*:*:*:*:*
reference_id cpe:2.3:a:getbootstrap:bootstrap:4.0.0:beta3:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:getbootstrap:bootstrap:4.0.0:beta3:*:*:*:*:*:*
38
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-14041
reference_id CVE-2018-14041
reference_type
scores
0
value 4.3
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:N/I:P/A:N
1
value 6.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
2
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
3
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-14041
39
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2018-14041.yaml
reference_id CVE-2018-14041.YAML
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2018-14041.yaml
40
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2018-14041.yaml
reference_id CVE-2018-14041.YAML
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2018-14041.yaml
41
reference_url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/bootstrap/CVE-2018-14041.yml
reference_id CVE-2018-14041.YML
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/bootstrap/CVE-2018-14041.yml
42
reference_url https://github.com/advisories/GHSA-pj7m-g53m-7638
reference_id GHSA-pj7m-g53m-7638
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-pj7m-g53m-7638
43
reference_url https://access.redhat.com/errata/RHSA-2023:0552
reference_id RHSA-2023:0552
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:0552
44
reference_url https://access.redhat.com/errata/RHSA-2023:0553
reference_id RHSA-2023:0553
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:0553
45
reference_url https://access.redhat.com/errata/RHSA-2023:0554
reference_id RHSA-2023:0554
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:0554
46
reference_url https://access.redhat.com/errata/RHSA-2023:0556
reference_id RHSA-2023:0556
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:0556
47
reference_url https://access.redhat.com/errata/RHSA-2023:5693
reference_id RHSA-2023:5693
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:5693
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.23
purl pkg:composer/typo3/cms-core@8.7.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2meq-x4kd-bbdn
1
vulnerability VCID-3n2r-awja-dug9
2
vulnerability VCID-3v4n-fzxa-bfaw
3
vulnerability VCID-4jpa-6fqh-hbfg
4
vulnerability VCID-5jgb-dsyx-hyb4
5
vulnerability VCID-5paq-5frf-43ed
6
vulnerability VCID-5u4q-m66t-wqcj
7
vulnerability VCID-9g62-zd1x-3bdg
8
vulnerability VCID-9gpp-ez8w-rqav
9
vulnerability VCID-9x6r-56xm-n7h7
10
vulnerability VCID-axvk-13qf-tka7
11
vulnerability VCID-b6er-h7dm-3bev
12
vulnerability VCID-bajy-qbwq-fufn
13
vulnerability VCID-cm14-t8uv-k3es
14
vulnerability VCID-dsu7-jjjq-f3e1
15
vulnerability VCID-eajg-ctpd-2bby
16
vulnerability VCID-ekfd-wp8z-d7e1
17
vulnerability VCID-f963-qur3-2qb7
18
vulnerability VCID-g4uc-qeb6-myed
19
vulnerability VCID-gcnj-6qb6-pbgz
20
vulnerability VCID-gv1b-xtv4-4yg3
21
vulnerability VCID-h6y3-7gsq-skh2
22
vulnerability VCID-he5m-6wj4-rbhc
23
vulnerability VCID-hhmn-yz5p-xkap
24
vulnerability VCID-mnz3-rj21-67ad
25
vulnerability VCID-n15v-ta9h-6ffb
26
vulnerability VCID-n7ng-zkkb-2qaz
27
vulnerability VCID-pmzz-9rws-4ud5
28
vulnerability VCID-pss5-as4b-cyf2
29
vulnerability VCID-q8hy-wjd9-nbgp
30
vulnerability VCID-s53a-f91p-huf4
31
vulnerability VCID-s55j-8hbt-akhn
32
vulnerability VCID-s64f-x81f-b7ce
33
vulnerability VCID-stzu-sxe6-5yf5
34
vulnerability VCID-swnc-ke6h-ekew
35
vulnerability VCID-t1n7-eswt-73gw
36
vulnerability VCID-t3jn-vwbx-u7cr
37
vulnerability VCID-taj6-zj2n-5kg8
38
vulnerability VCID-tnjd-pyys-akav
39
vulnerability VCID-vxry-uvph-kbfd
40
vulnerability VCID-vyvy-y3cw-hbgr
41
vulnerability VCID-xa4m-xpa9-v7h8
42
vulnerability VCID-xh7y-56vy-5ud8
43
vulnerability VCID-y32z-2d3f-gkgw
44
vulnerability VCID-zdq2-dhb2-6kaq
45
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.23
1
url pkg:composer/typo3/cms-core@9.5.4
purl pkg:composer/typo3/cms-core@9.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2meq-x4kd-bbdn
1
vulnerability VCID-2mn6-mdmz-4yd9
2
vulnerability VCID-3n2r-awja-dug9
3
vulnerability VCID-3v4n-fzxa-bfaw
4
vulnerability VCID-461j-9hrc-gfbc
5
vulnerability VCID-4jpa-6fqh-hbfg
6
vulnerability VCID-4mkw-tv16-jyca
7
vulnerability VCID-4t9s-p25a-cfas
8
vulnerability VCID-543x-cnbz-1kb9
9
vulnerability VCID-58js-jzm4-4fc7
10
vulnerability VCID-5jgb-dsyx-hyb4
11
vulnerability VCID-5kzs-ex81-bbaj
12
vulnerability VCID-5paq-5frf-43ed
13
vulnerability VCID-5u4q-m66t-wqcj
14
vulnerability VCID-65ue-7jd9-23gf
15
vulnerability VCID-6a9t-8dmn-s3bv
16
vulnerability VCID-8d2m-1ffv-jqe1
17
vulnerability VCID-9g62-zd1x-3bdg
18
vulnerability VCID-9gpp-ez8w-rqav
19
vulnerability VCID-9x6r-56xm-n7h7
20
vulnerability VCID-a49c-fqrj-nbb3
21
vulnerability VCID-axvk-13qf-tka7
22
vulnerability VCID-b6er-h7dm-3bev
23
vulnerability VCID-bajy-qbwq-fufn
24
vulnerability VCID-cm14-t8uv-k3es
25
vulnerability VCID-d8d1-sat6-muhe
26
vulnerability VCID-dmzb-gkdn-6bcm
27
vulnerability VCID-dsu7-jjjq-f3e1
28
vulnerability VCID-e32h-8q61-hbgc
29
vulnerability VCID-eajg-ctpd-2bby
30
vulnerability VCID-ekfd-wp8z-d7e1
31
vulnerability VCID-f963-qur3-2qb7
32
vulnerability VCID-g4uc-qeb6-myed
33
vulnerability VCID-gcnj-6qb6-pbgz
34
vulnerability VCID-gv1b-xtv4-4yg3
35
vulnerability VCID-h6y3-7gsq-skh2
36
vulnerability VCID-he5m-6wj4-rbhc
37
vulnerability VCID-hhmn-yz5p-xkap
38
vulnerability VCID-kj9x-psfz-2ug1
39
vulnerability VCID-mnz3-rj21-67ad
40
vulnerability VCID-mud2-s4rc-fuf6
41
vulnerability VCID-n15v-ta9h-6ffb
42
vulnerability VCID-n7ng-zkkb-2qaz
43
vulnerability VCID-nubu-f1sc-gbes
44
vulnerability VCID-nxq4-m52q-yuh4
45
vulnerability VCID-phgh-sd4m-zbdx
46
vulnerability VCID-pmzz-9rws-4ud5
47
vulnerability VCID-pss5-as4b-cyf2
48
vulnerability VCID-q8hy-wjd9-nbgp
49
vulnerability VCID-raxk-rm9v-hubn
50
vulnerability VCID-remd-55jh-r3g5
51
vulnerability VCID-s53a-f91p-huf4
52
vulnerability VCID-s55j-8hbt-akhn
53
vulnerability VCID-s64f-x81f-b7ce
54
vulnerability VCID-stzu-sxe6-5yf5
55
vulnerability VCID-sw7v-fbjk-13hy
56
vulnerability VCID-swnc-ke6h-ekew
57
vulnerability VCID-t1n7-eswt-73gw
58
vulnerability VCID-t3jn-vwbx-u7cr
59
vulnerability VCID-taj6-zj2n-5kg8
60
vulnerability VCID-tnjd-pyys-akav
61
vulnerability VCID-u9bx-8e86-wbew
62
vulnerability VCID-ve7g-8st5-wffb
63
vulnerability VCID-vxry-uvph-kbfd
64
vulnerability VCID-vyvy-y3cw-hbgr
65
vulnerability VCID-w13x-3rp9-wyej
66
vulnerability VCID-xa4m-xpa9-v7h8
67
vulnerability VCID-xh7y-56vy-5ud8
68
vulnerability VCID-xtdg-uj46-rkcm
69
vulnerability VCID-xy6y-312d-rygj
70
vulnerability VCID-y32z-2d3f-gkgw
71
vulnerability VCID-zdq2-dhb2-6kaq
72
vulnerability VCID-zkea-ge1t-z7gn
73
vulnerability VCID-zn99-ywte-33g6
74
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.4
aliases CVE-2018-14041, GHSA-pj7m-g53m-7638
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3gg5-1921-rbfs
3
url VCID-3n2r-awja-dug9
vulnerability_id VCID-3n2r-awja-dug9
summary 
TYPO3  SQL Injection in low-level Query Generator
An issue was discovered in TYPO3 before 8.7.30, 9.x before 9.5.12, and 10.x before 10.2.2. Because escaping of user-submitted content is mishandled, the class QueryGenerator is vulnerable to SQL injection. Exploitation requires having the system extension ext:lowlevel installed, and a valid backend user who has administrator privileges.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-19850
reference_id
reference_type
scores
0
value 0.00284
scoring_system epss
scoring_elements 0.51898
published_at 2026-04-18T12:55:00Z
1
value 0.00284
scoring_system epss
scoring_elements 0.51892
published_at 2026-04-16T12:55:00Z
2
value 0.00284
scoring_system epss
scoring_elements 0.51849
published_at 2026-04-13T12:55:00Z
3
value 0.00284
scoring_system epss
scoring_elements 0.51865
published_at 2026-04-12T12:55:00Z
4
value 0.00284
scoring_system epss
scoring_elements 0.51885
published_at 2026-04-11T12:55:00Z
5
value 0.00339
scoring_system epss
scoring_elements 0.56699
published_at 2026-04-04T12:55:00Z
6
value 0.00339
scoring_system epss
scoring_elements 0.56677
published_at 2026-04-07T12:55:00Z
7
value 0.00339
scoring_system epss
scoring_elements 0.56733
published_at 2026-04-09T12:55:00Z
8
value 0.00339
scoring_system epss
scoring_elements 0.56729
published_at 2026-04-08T12:55:00Z
9
value 0.00339
scoring_system epss
scoring_elements 0.56581
published_at 2026-04-01T12:55:00Z
10
value 0.00339
scoring_system epss
scoring_elements 0.56678
published_at 2026-04-02T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-19850
1
reference_url https://github.com/TYPO3/typo3
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-19850
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-19850
3
reference_url https://review.typo3.org/q/%2522Resolves:+%252389452%2522+topic:security
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://review.typo3.org/q/%2522Resolves:+%252389452%2522+topic:security
4
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-025
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2019-025
5
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-025/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-025/
6
reference_url https://github.com/advisories/GHSA-59pj-7mjh-4465
reference_id GHSA-59pj-7mjh-4465
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-59pj-7mjh-4465
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.30
purl pkg:composer/typo3/cms-core@8.7.30
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4jpa-6fqh-hbfg
1
vulnerability VCID-5jgb-dsyx-hyb4
2
vulnerability VCID-5paq-5frf-43ed
3
vulnerability VCID-axvk-13qf-tka7
4
vulnerability VCID-b6er-h7dm-3bev
5
vulnerability VCID-bajy-qbwq-fufn
6
vulnerability VCID-dsu7-jjjq-f3e1
7
vulnerability VCID-ekfd-wp8z-d7e1
8
vulnerability VCID-f963-qur3-2qb7
9
vulnerability VCID-g4uc-qeb6-myed
10
vulnerability VCID-gv1b-xtv4-4yg3
11
vulnerability VCID-h6y3-7gsq-skh2
12
vulnerability VCID-he5m-6wj4-rbhc
13
vulnerability VCID-mnz3-rj21-67ad
14
vulnerability VCID-n15v-ta9h-6ffb
15
vulnerability VCID-n7ng-zkkb-2qaz
16
vulnerability VCID-s55j-8hbt-akhn
17
vulnerability VCID-s64f-x81f-b7ce
18
vulnerability VCID-t1n7-eswt-73gw
19
vulnerability VCID-t3jn-vwbx-u7cr
20
vulnerability VCID-taj6-zj2n-5kg8
21
vulnerability VCID-vyvy-y3cw-hbgr
22
vulnerability VCID-xh7y-56vy-5ud8
23
vulnerability VCID-y32z-2d3f-gkgw
24
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.30
1
url pkg:composer/typo3/cms-core@9.5.12
purl pkg:composer/typo3/cms-core@9.5.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mn6-mdmz-4yd9
1
vulnerability VCID-4jpa-6fqh-hbfg
2
vulnerability VCID-4t9s-p25a-cfas
3
vulnerability VCID-543x-cnbz-1kb9
4
vulnerability VCID-58js-jzm4-4fc7
5
vulnerability VCID-5jgb-dsyx-hyb4
6
vulnerability VCID-5kzs-ex81-bbaj
7
vulnerability VCID-5paq-5frf-43ed
8
vulnerability VCID-65ue-7jd9-23gf
9
vulnerability VCID-6a9t-8dmn-s3bv
10
vulnerability VCID-7kjw-j8st-mqfr
11
vulnerability VCID-8d2m-1ffv-jqe1
12
vulnerability VCID-a49c-fqrj-nbb3
13
vulnerability VCID-axvk-13qf-tka7
14
vulnerability VCID-b6er-h7dm-3bev
15
vulnerability VCID-bajy-qbwq-fufn
16
vulnerability VCID-d8d1-sat6-muhe
17
vulnerability VCID-dsu7-jjjq-f3e1
18
vulnerability VCID-e32h-8q61-hbgc
19
vulnerability VCID-ekfd-wp8z-d7e1
20
vulnerability VCID-f963-qur3-2qb7
21
vulnerability VCID-g4uc-qeb6-myed
22
vulnerability VCID-gv1b-xtv4-4yg3
23
vulnerability VCID-h6y3-7gsq-skh2
24
vulnerability VCID-he5m-6wj4-rbhc
25
vulnerability VCID-mnz3-rj21-67ad
26
vulnerability VCID-mud2-s4rc-fuf6
27
vulnerability VCID-n15v-ta9h-6ffb
28
vulnerability VCID-n7ng-zkkb-2qaz
29
vulnerability VCID-nubu-f1sc-gbes
30
vulnerability VCID-phgh-sd4m-zbdx
31
vulnerability VCID-remd-55jh-r3g5
32
vulnerability VCID-s55j-8hbt-akhn
33
vulnerability VCID-s64f-x81f-b7ce
34
vulnerability VCID-sw7v-fbjk-13hy
35
vulnerability VCID-t1n7-eswt-73gw
36
vulnerability VCID-t3jn-vwbx-u7cr
37
vulnerability VCID-taj6-zj2n-5kg8
38
vulnerability VCID-ve7g-8st5-wffb
39
vulnerability VCID-vyvy-y3cw-hbgr
40
vulnerability VCID-w13x-3rp9-wyej
41
vulnerability VCID-xh7y-56vy-5ud8
42
vulnerability VCID-xy6y-312d-rygj
43
vulnerability VCID-y32z-2d3f-gkgw
44
vulnerability VCID-zdq2-dhb2-6kaq
45
vulnerability VCID-zn99-ywte-33g6
46
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.12
2
url pkg:composer/typo3/cms-core@10.2.2
purl pkg:composer/typo3/cms-core@10.2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1yxw-saf5-wue7
1
vulnerability VCID-2mn6-mdmz-4yd9
2
vulnerability VCID-4jpa-6fqh-hbfg
3
vulnerability VCID-4t9s-p25a-cfas
4
vulnerability VCID-543x-cnbz-1kb9
5
vulnerability VCID-58js-jzm4-4fc7
6
vulnerability VCID-5jgb-dsyx-hyb4
7
vulnerability VCID-5kzs-ex81-bbaj
8
vulnerability VCID-5paq-5frf-43ed
9
vulnerability VCID-65ue-7jd9-23gf
10
vulnerability VCID-6a9t-8dmn-s3bv
11
vulnerability VCID-7kjw-j8st-mqfr
12
vulnerability VCID-8d2m-1ffv-jqe1
13
vulnerability VCID-8sdd-b1bn-cuhx
14
vulnerability VCID-a49c-fqrj-nbb3
15
vulnerability VCID-a89c-jvwa-6kh5
16
vulnerability VCID-av8u-rvzq-4fc7
17
vulnerability VCID-axvk-13qf-tka7
18
vulnerability VCID-b6er-h7dm-3bev
19
vulnerability VCID-bajy-qbwq-fufn
20
vulnerability VCID-cdjv-fp71-y3dv
21
vulnerability VCID-d8d1-sat6-muhe
22
vulnerability VCID-dhrm-uxuv-zfaj
23
vulnerability VCID-dsu7-jjjq-f3e1
24
vulnerability VCID-e32h-8q61-hbgc
25
vulnerability VCID-ekfd-wp8z-d7e1
26
vulnerability VCID-f963-qur3-2qb7
27
vulnerability VCID-g4uc-qeb6-myed
28
vulnerability VCID-gv1b-xtv4-4yg3
29
vulnerability VCID-gyyu-n3b1-zbcj
30
vulnerability VCID-h6y3-7gsq-skh2
31
vulnerability VCID-he5m-6wj4-rbhc
32
vulnerability VCID-mnz3-rj21-67ad
33
vulnerability VCID-mud2-s4rc-fuf6
34
vulnerability VCID-n15v-ta9h-6ffb
35
vulnerability VCID-n7ng-zkkb-2qaz
36
vulnerability VCID-nubu-f1sc-gbes
37
vulnerability VCID-phgh-sd4m-zbdx
38
vulnerability VCID-remd-55jh-r3g5
39
vulnerability VCID-s55j-8hbt-akhn
40
vulnerability VCID-s64f-x81f-b7ce
41
vulnerability VCID-sw7v-fbjk-13hy
42
vulnerability VCID-t1n7-eswt-73gw
43
vulnerability VCID-t3jn-vwbx-u7cr
44
vulnerability VCID-taj6-zj2n-5kg8
45
vulnerability VCID-usmv-r64u-m7cb
46
vulnerability VCID-ve7g-8st5-wffb
47
vulnerability VCID-vwb2-a84s-5qak
48
vulnerability VCID-vyvy-y3cw-hbgr
49
vulnerability VCID-w13x-3rp9-wyej
50
vulnerability VCID-xh7y-56vy-5ud8
51
vulnerability VCID-xy6y-312d-rygj
52
vulnerability VCID-y32z-2d3f-gkgw
53
vulnerability VCID-zdq2-dhb2-6kaq
54
vulnerability VCID-zn99-ywte-33g6
55
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@10.2.2
aliases CVE-2019-19850, GHSA-59pj-7mjh-4465
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3n2r-awja-dug9
4
url VCID-3v4n-fzxa-bfaw
vulnerability_id VCID-3v4n-fzxa-bfaw
summary 
Code Injection
Arbitrary Code Execution and Cross-Site Scripting in Backend API.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-019/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-019/
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.27
purl pkg:composer/typo3/cms-core@8.7.27
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3n2r-awja-dug9
1
vulnerability VCID-4jpa-6fqh-hbfg
2
vulnerability VCID-5jgb-dsyx-hyb4
3
vulnerability VCID-5paq-5frf-43ed
4
vulnerability VCID-5u4q-m66t-wqcj
5
vulnerability VCID-axvk-13qf-tka7
6
vulnerability VCID-b6er-h7dm-3bev
7
vulnerability VCID-bajy-qbwq-fufn
8
vulnerability VCID-dsu7-jjjq-f3e1
9
vulnerability VCID-ekfd-wp8z-d7e1
10
vulnerability VCID-f963-qur3-2qb7
11
vulnerability VCID-g4uc-qeb6-myed
12
vulnerability VCID-gcnj-6qb6-pbgz
13
vulnerability VCID-gv1b-xtv4-4yg3
14
vulnerability VCID-h6y3-7gsq-skh2
15
vulnerability VCID-he5m-6wj4-rbhc
16
vulnerability VCID-hhmn-yz5p-xkap
17
vulnerability VCID-mnz3-rj21-67ad
18
vulnerability VCID-n15v-ta9h-6ffb
19
vulnerability VCID-n7ng-zkkb-2qaz
20
vulnerability VCID-s55j-8hbt-akhn
21
vulnerability VCID-s64f-x81f-b7ce
22
vulnerability VCID-swnc-ke6h-ekew
23
vulnerability VCID-t1n7-eswt-73gw
24
vulnerability VCID-t3jn-vwbx-u7cr
25
vulnerability VCID-taj6-zj2n-5kg8
26
vulnerability VCID-tnjd-pyys-akav
27
vulnerability VCID-vyvy-y3cw-hbgr
28
vulnerability VCID-xa4m-xpa9-v7h8
29
vulnerability VCID-xh7y-56vy-5ud8
30
vulnerability VCID-y32z-2d3f-gkgw
31
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.27
1
url pkg:composer/typo3/cms-core@9.5.8
purl pkg:composer/typo3/cms-core@9.5.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mn6-mdmz-4yd9
1
vulnerability VCID-3n2r-awja-dug9
2
vulnerability VCID-4jpa-6fqh-hbfg
3
vulnerability VCID-4t9s-p25a-cfas
4
vulnerability VCID-543x-cnbz-1kb9
5
vulnerability VCID-58js-jzm4-4fc7
6
vulnerability VCID-5jgb-dsyx-hyb4
7
vulnerability VCID-5kzs-ex81-bbaj
8
vulnerability VCID-5paq-5frf-43ed
9
vulnerability VCID-5u4q-m66t-wqcj
10
vulnerability VCID-65ue-7jd9-23gf
11
vulnerability VCID-6a9t-8dmn-s3bv
12
vulnerability VCID-8d2m-1ffv-jqe1
13
vulnerability VCID-a49c-fqrj-nbb3
14
vulnerability VCID-axvk-13qf-tka7
15
vulnerability VCID-b6er-h7dm-3bev
16
vulnerability VCID-bajy-qbwq-fufn
17
vulnerability VCID-d8d1-sat6-muhe
18
vulnerability VCID-dsu7-jjjq-f3e1
19
vulnerability VCID-e32h-8q61-hbgc
20
vulnerability VCID-ekfd-wp8z-d7e1
21
vulnerability VCID-f963-qur3-2qb7
22
vulnerability VCID-g4uc-qeb6-myed
23
vulnerability VCID-gcnj-6qb6-pbgz
24
vulnerability VCID-gv1b-xtv4-4yg3
25
vulnerability VCID-h6y3-7gsq-skh2
26
vulnerability VCID-he5m-6wj4-rbhc
27
vulnerability VCID-hhmn-yz5p-xkap
28
vulnerability VCID-mnz3-rj21-67ad
29
vulnerability VCID-mud2-s4rc-fuf6
30
vulnerability VCID-n15v-ta9h-6ffb
31
vulnerability VCID-n7ng-zkkb-2qaz
32
vulnerability VCID-nubu-f1sc-gbes
33
vulnerability VCID-phgh-sd4m-zbdx
34
vulnerability VCID-remd-55jh-r3g5
35
vulnerability VCID-s55j-8hbt-akhn
36
vulnerability VCID-s64f-x81f-b7ce
37
vulnerability VCID-sw7v-fbjk-13hy
38
vulnerability VCID-swnc-ke6h-ekew
39
vulnerability VCID-t1n7-eswt-73gw
40
vulnerability VCID-t3jn-vwbx-u7cr
41
vulnerability VCID-taj6-zj2n-5kg8
42
vulnerability VCID-tnjd-pyys-akav
43
vulnerability VCID-ve7g-8st5-wffb
44
vulnerability VCID-vyvy-y3cw-hbgr
45
vulnerability VCID-w13x-3rp9-wyej
46
vulnerability VCID-xa4m-xpa9-v7h8
47
vulnerability VCID-xh7y-56vy-5ud8
48
vulnerability VCID-xy6y-312d-rygj
49
vulnerability VCID-y32z-2d3f-gkgw
50
vulnerability VCID-zdq2-dhb2-6kaq
51
vulnerability VCID-zn99-ywte-33g6
52
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.8
aliases 2019-06-25-4
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3v4n-fzxa-bfaw
5
url VCID-4btk-jt5n-2ugf
vulnerability_id VCID-4btk-jt5n-2ugf
summary 
Cross-site Scripting
Cross-Site Scripting in CKEditor.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-005/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2018-005/
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.21
purl pkg:composer/typo3/cms-core@8.7.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21e8-x7mp-hugk
1
vulnerability VCID-2meq-x4kd-bbdn
2
vulnerability VCID-3n2r-awja-dug9
3
vulnerability VCID-3v4n-fzxa-bfaw
4
vulnerability VCID-4jpa-6fqh-hbfg
5
vulnerability VCID-551q-gpyd-ffe8
6
vulnerability VCID-5jgb-dsyx-hyb4
7
vulnerability VCID-5mxm-88r9-hfey
8
vulnerability VCID-5paq-5frf-43ed
9
vulnerability VCID-5u4q-m66t-wqcj
10
vulnerability VCID-9g62-zd1x-3bdg
11
vulnerability VCID-9gpp-ez8w-rqav
12
vulnerability VCID-9x6r-56xm-n7h7
13
vulnerability VCID-9zqs-hjay-fkev
14
vulnerability VCID-axaf-45kr-kbfe
15
vulnerability VCID-axvk-13qf-tka7
16
vulnerability VCID-b6er-h7dm-3bev
17
vulnerability VCID-bajy-qbwq-fufn
18
vulnerability VCID-cm14-t8uv-k3es
19
vulnerability VCID-d99v-v9cj-zfh2
20
vulnerability VCID-dj88-f3p8-cfbn
21
vulnerability VCID-dsu7-jjjq-f3e1
22
vulnerability VCID-eajg-ctpd-2bby
23
vulnerability VCID-ekfd-wp8z-d7e1
24
vulnerability VCID-f4bv-pzdy-dfcb
25
vulnerability VCID-f963-qur3-2qb7
26
vulnerability VCID-g4uc-qeb6-myed
27
vulnerability VCID-gcnj-6qb6-pbgz
28
vulnerability VCID-gv1b-xtv4-4yg3
29
vulnerability VCID-h6y3-7gsq-skh2
30
vulnerability VCID-he5m-6wj4-rbhc
31
vulnerability VCID-hhmn-yz5p-xkap
32
vulnerability VCID-j77k-hjgx-5kc5
33
vulnerability VCID-k8af-cg9k-87a9
34
vulnerability VCID-mh4f-vtfj-hbb1
35
vulnerability VCID-mnz3-rj21-67ad
36
vulnerability VCID-n15v-ta9h-6ffb
37
vulnerability VCID-n7ng-zkkb-2qaz
38
vulnerability VCID-pmzz-9rws-4ud5
39
vulnerability VCID-pss5-as4b-cyf2
40
vulnerability VCID-px44-19tj-h7aa
41
vulnerability VCID-q8hy-wjd9-nbgp
42
vulnerability VCID-s53a-f91p-huf4
43
vulnerability VCID-s55j-8hbt-akhn
44
vulnerability VCID-s64f-x81f-b7ce
45
vulnerability VCID-stzu-sxe6-5yf5
46
vulnerability VCID-swnc-ke6h-ekew
47
vulnerability VCID-t1n7-eswt-73gw
48
vulnerability VCID-t3jn-vwbx-u7cr
49
vulnerability VCID-taj6-zj2n-5kg8
50
vulnerability VCID-tnjd-pyys-akav
51
vulnerability VCID-vxry-uvph-kbfd
52
vulnerability VCID-vyvy-y3cw-hbgr
53
vulnerability VCID-wea9-egep-h7g5
54
vulnerability VCID-xa4m-xpa9-v7h8
55
vulnerability VCID-xh7y-56vy-5ud8
56
vulnerability VCID-y32z-2d3f-gkgw
57
vulnerability VCID-zdq2-dhb2-6kaq
58
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.21
1
url pkg:composer/typo3/cms-core@9.5.2
purl pkg:composer/typo3/cms-core@9.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21e8-x7mp-hugk
1
vulnerability VCID-2meq-x4kd-bbdn
2
vulnerability VCID-2mn6-mdmz-4yd9
3
vulnerability VCID-3n2r-awja-dug9
4
vulnerability VCID-3v4n-fzxa-bfaw
5
vulnerability VCID-461j-9hrc-gfbc
6
vulnerability VCID-4jpa-6fqh-hbfg
7
vulnerability VCID-4mkw-tv16-jyca
8
vulnerability VCID-4t9s-p25a-cfas
9
vulnerability VCID-543x-cnbz-1kb9
10
vulnerability VCID-551q-gpyd-ffe8
11
vulnerability VCID-58js-jzm4-4fc7
12
vulnerability VCID-5jgb-dsyx-hyb4
13
vulnerability VCID-5kzs-ex81-bbaj
14
vulnerability VCID-5paq-5frf-43ed
15
vulnerability VCID-5u4q-m66t-wqcj
16
vulnerability VCID-65ue-7jd9-23gf
17
vulnerability VCID-6a9t-8dmn-s3bv
18
vulnerability VCID-8d2m-1ffv-jqe1
19
vulnerability VCID-9g62-zd1x-3bdg
20
vulnerability VCID-9gpp-ez8w-rqav
21
vulnerability VCID-9x6r-56xm-n7h7
22
vulnerability VCID-9zqs-hjay-fkev
23
vulnerability VCID-a49c-fqrj-nbb3
24
vulnerability VCID-axaf-45kr-kbfe
25
vulnerability VCID-axvk-13qf-tka7
26
vulnerability VCID-b6er-h7dm-3bev
27
vulnerability VCID-bajy-qbwq-fufn
28
vulnerability VCID-cm14-t8uv-k3es
29
vulnerability VCID-d8d1-sat6-muhe
30
vulnerability VCID-d99v-v9cj-zfh2
31
vulnerability VCID-dj88-f3p8-cfbn
32
vulnerability VCID-dmzb-gkdn-6bcm
33
vulnerability VCID-dsu7-jjjq-f3e1
34
vulnerability VCID-e32h-8q61-hbgc
35
vulnerability VCID-eajg-ctpd-2bby
36
vulnerability VCID-ekfd-wp8z-d7e1
37
vulnerability VCID-f4bv-pzdy-dfcb
38
vulnerability VCID-f963-qur3-2qb7
39
vulnerability VCID-g4uc-qeb6-myed
40
vulnerability VCID-gcnj-6qb6-pbgz
41
vulnerability VCID-gv1b-xtv4-4yg3
42
vulnerability VCID-h6y3-7gsq-skh2
43
vulnerability VCID-he5m-6wj4-rbhc
44
vulnerability VCID-hhmn-yz5p-xkap
45
vulnerability VCID-k8af-cg9k-87a9
46
vulnerability VCID-kj9x-psfz-2ug1
47
vulnerability VCID-mh4f-vtfj-hbb1
48
vulnerability VCID-mnz3-rj21-67ad
49
vulnerability VCID-mud2-s4rc-fuf6
50
vulnerability VCID-n15v-ta9h-6ffb
51
vulnerability VCID-n7ng-zkkb-2qaz
52
vulnerability VCID-nubu-f1sc-gbes
53
vulnerability VCID-nxq4-m52q-yuh4
54
vulnerability VCID-p715-yexd-jfgc
55
vulnerability VCID-phgh-sd4m-zbdx
56
vulnerability VCID-pmzz-9rws-4ud5
57
vulnerability VCID-pss5-as4b-cyf2
58
vulnerability VCID-px44-19tj-h7aa
59
vulnerability VCID-q8hy-wjd9-nbgp
60
vulnerability VCID-raxk-rm9v-hubn
61
vulnerability VCID-remd-55jh-r3g5
62
vulnerability VCID-s53a-f91p-huf4
63
vulnerability VCID-s55j-8hbt-akhn
64
vulnerability VCID-s64f-x81f-b7ce
65
vulnerability VCID-stzu-sxe6-5yf5
66
vulnerability VCID-sw7v-fbjk-13hy
67
vulnerability VCID-swnc-ke6h-ekew
68
vulnerability VCID-t1n7-eswt-73gw
69
vulnerability VCID-t3jn-vwbx-u7cr
70
vulnerability VCID-taj6-zj2n-5kg8
71
vulnerability VCID-tnjd-pyys-akav
72
vulnerability VCID-u9bx-8e86-wbew
73
vulnerability VCID-ve7g-8st5-wffb
74
vulnerability VCID-vxry-uvph-kbfd
75
vulnerability VCID-vyvy-y3cw-hbgr
76
vulnerability VCID-w13x-3rp9-wyej
77
vulnerability VCID-wea9-egep-h7g5
78
vulnerability VCID-xa4m-xpa9-v7h8
79
vulnerability VCID-xh7y-56vy-5ud8
80
vulnerability VCID-xtdg-uj46-rkcm
81
vulnerability VCID-xy6y-312d-rygj
82
vulnerability VCID-y32z-2d3f-gkgw
83
vulnerability VCID-yzx1-4psv-7bhr
84
vulnerability VCID-zdq2-dhb2-6kaq
85
vulnerability VCID-zkea-ge1t-z7gn
86
vulnerability VCID-zn99-ywte-33g6
87
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.2
aliases 2018-12-11-8
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-4btk-jt5n-2ugf
6
url VCID-4jpa-6fqh-hbfg
vulnerability_id VCID-4jpa-6fqh-hbfg
summary 
Cross-Site Scripting in TYPO3's Form Framework
> ### Meta
> * CVSS: `CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N/E:F/RL:O/RC:C` (4.9)

### Problem
It has been discovered that the Form Designer backend module of the Form Framework is vulnerable to cross-site scripting. A valid backend user account with access to the form module is needed to exploit this vulnerability.

### Solution
Update to TYPO3 versions 8.7.47 ELTS, 9.5.35 ELTS, 10.4.29, 11.5.11 that fix the problem described above.

### Credits
Thanks to Gabe Troyan who reported and fixed the issue.

### References
* [TYPO3-CORE-SA-2022-003](https://typo3.org/security/advisory/typo3-core-sa-2022-003)
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-31048
reference_id
reference_type
scores
0
value 0.0063
scoring_system epss
scoring_elements 0.70274
published_at 2026-04-08T12:55:00Z
1
value 0.0063
scoring_system epss
scoring_elements 0.70337
published_at 2026-04-18T12:55:00Z
2
value 0.0063
scoring_system epss
scoring_elements 0.70327
published_at 2026-04-16T12:55:00Z
3
value 0.0063
scoring_system epss
scoring_elements 0.70286
published_at 2026-04-13T12:55:00Z
4
value 0.0063
scoring_system epss
scoring_elements 0.70299
published_at 2026-04-12T12:55:00Z
5
value 0.0063
scoring_system epss
scoring_elements 0.70313
published_at 2026-04-11T12:55:00Z
6
value 0.0063
scoring_system epss
scoring_elements 0.70289
published_at 2026-04-09T12:55:00Z
7
value 0.0063
scoring_system epss
scoring_elements 0.70234
published_at 2026-04-02T12:55:00Z
8
value 0.0063
scoring_system epss
scoring_elements 0.70251
published_at 2026-04-04T12:55:00Z
9
value 0.0063
scoring_system epss
scoring_elements 0.70228
published_at 2026-04-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-31048
1
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2022-31048.yaml
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2022-31048.yaml
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2022-31048.yaml
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2022-31048.yaml
3
reference_url https://github.com/TYPO3-CMS/core
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core
4
reference_url https://github.com/TYPO3/typo3/commit/6f2554dc4ea0b670fd5599c54fd788d4db96c4a0
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T14:05:16Z/
url https://github.com/TYPO3/typo3/commit/6f2554dc4ea0b670fd5599c54fd788d4db96c4a0
5
reference_url https://github.com/TYPO3/typo3/security/advisories/GHSA-3r95-23jp-mhvg
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T14:05:16Z/
url https://github.com/TYPO3/typo3/security/advisories/GHSA-3r95-23jp-mhvg
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-31048
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-31048
7
reference_url https://typo3.org/security/advisory/typo3-core-sa-2022-003
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T14:05:16Z/
url https://typo3.org/security/advisory/typo3-core-sa-2022-003
8
reference_url https://github.com/advisories/GHSA-3r95-23jp-mhvg
reference_id GHSA-3r95-23jp-mhvg
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-3r95-23jp-mhvg
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.47
purl pkg:composer/typo3/cms-core@8.7.47
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5paq-5frf-43ed
1
vulnerability VCID-b6er-h7dm-3bev
2
vulnerability VCID-mnz3-rj21-67ad
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.47
1
url pkg:composer/typo3/cms-core@9.5.35
purl pkg:composer/typo3/cms-core@9.5.35
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.35
2
url pkg:composer/typo3/cms-core@10.4.29
purl pkg:composer/typo3/cms-core@10.4.29
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-1yxw-saf5-wue7
2
vulnerability VCID-4t9s-p25a-cfas
3
vulnerability VCID-5paq-5frf-43ed
4
vulnerability VCID-65ue-7jd9-23gf
5
vulnerability VCID-8d2m-1ffv-jqe1
6
vulnerability VCID-8sdd-b1bn-cuhx
7
vulnerability VCID-av8u-rvzq-4fc7
8
vulnerability VCID-axvk-13qf-tka7
9
vulnerability VCID-b6er-h7dm-3bev
10
vulnerability VCID-g4uc-qeb6-myed
11
vulnerability VCID-gv1b-xtv4-4yg3
12
vulnerability VCID-gyyu-n3b1-zbcj
13
vulnerability VCID-h6y3-7gsq-skh2
14
vulnerability VCID-mnz3-rj21-67ad
15
vulnerability VCID-mud2-s4rc-fuf6
16
vulnerability VCID-n7ng-zkkb-2qaz
17
vulnerability VCID-nubu-f1sc-gbes
18
vulnerability VCID-t1n7-eswt-73gw
19
vulnerability VCID-taj6-zj2n-5kg8
20
vulnerability VCID-ve7g-8st5-wffb
21
vulnerability VCID-vwb2-a84s-5qak
22
vulnerability VCID-vyvy-y3cw-hbgr
23
vulnerability VCID-w13x-3rp9-wyej
24
vulnerability VCID-xy6y-312d-rygj
25
vulnerability VCID-zdq2-dhb2-6kaq
26
vulnerability VCID-zn99-ywte-33g6
27
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@10.4.29
3
url pkg:composer/typo3/cms-core@11.5.11
purl pkg:composer/typo3/cms-core@11.5.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-1yxw-saf5-wue7
2
vulnerability VCID-4t9s-p25a-cfas
3
vulnerability VCID-5paq-5frf-43ed
4
vulnerability VCID-65ue-7jd9-23gf
5
vulnerability VCID-8d2m-1ffv-jqe1
6
vulnerability VCID-8sdd-b1bn-cuhx
7
vulnerability VCID-av8u-rvzq-4fc7
8
vulnerability VCID-axvk-13qf-tka7
9
vulnerability VCID-b6er-h7dm-3bev
10
vulnerability VCID-g4uc-qeb6-myed
11
vulnerability VCID-gv1b-xtv4-4yg3
12
vulnerability VCID-gyyu-n3b1-zbcj
13
vulnerability VCID-h6y3-7gsq-skh2
14
vulnerability VCID-mnz3-rj21-67ad
15
vulnerability VCID-mud2-s4rc-fuf6
16
vulnerability VCID-n7ng-zkkb-2qaz
17
vulnerability VCID-nubu-f1sc-gbes
18
vulnerability VCID-t1n7-eswt-73gw
19
vulnerability VCID-taj6-zj2n-5kg8
20
vulnerability VCID-tnxn-p13f-yuah
21
vulnerability VCID-ve7g-8st5-wffb
22
vulnerability VCID-vwb2-a84s-5qak
23
vulnerability VCID-vyvy-y3cw-hbgr
24
vulnerability VCID-w13x-3rp9-wyej
25
vulnerability VCID-xy6y-312d-rygj
26
vulnerability VCID-zdq2-dhb2-6kaq
27
vulnerability VCID-zn99-ywte-33g6
28
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@11.5.11
aliases CVE-2022-31048, GHSA-3r95-23jp-mhvg
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-4jpa-6fqh-hbfg
7
url VCID-551q-gpyd-ffe8
vulnerability_id VCID-551q-gpyd-ffe8
summary 
Cross-site Scripting
Cross-Site Scripting in Fluid `ViewHelpers`.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-005/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-005/
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.23
purl pkg:composer/typo3/cms-core@8.7.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2meq-x4kd-bbdn
1
vulnerability VCID-3n2r-awja-dug9
2
vulnerability VCID-3v4n-fzxa-bfaw
3
vulnerability VCID-4jpa-6fqh-hbfg
4
vulnerability VCID-5jgb-dsyx-hyb4
5
vulnerability VCID-5paq-5frf-43ed
6
vulnerability VCID-5u4q-m66t-wqcj
7
vulnerability VCID-9g62-zd1x-3bdg
8
vulnerability VCID-9gpp-ez8w-rqav
9
vulnerability VCID-9x6r-56xm-n7h7
10
vulnerability VCID-axvk-13qf-tka7
11
vulnerability VCID-b6er-h7dm-3bev
12
vulnerability VCID-bajy-qbwq-fufn
13
vulnerability VCID-cm14-t8uv-k3es
14
vulnerability VCID-dsu7-jjjq-f3e1
15
vulnerability VCID-eajg-ctpd-2bby
16
vulnerability VCID-ekfd-wp8z-d7e1
17
vulnerability VCID-f963-qur3-2qb7
18
vulnerability VCID-g4uc-qeb6-myed
19
vulnerability VCID-gcnj-6qb6-pbgz
20
vulnerability VCID-gv1b-xtv4-4yg3
21
vulnerability VCID-h6y3-7gsq-skh2
22
vulnerability VCID-he5m-6wj4-rbhc
23
vulnerability VCID-hhmn-yz5p-xkap
24
vulnerability VCID-mnz3-rj21-67ad
25
vulnerability VCID-n15v-ta9h-6ffb
26
vulnerability VCID-n7ng-zkkb-2qaz
27
vulnerability VCID-pmzz-9rws-4ud5
28
vulnerability VCID-pss5-as4b-cyf2
29
vulnerability VCID-q8hy-wjd9-nbgp
30
vulnerability VCID-s53a-f91p-huf4
31
vulnerability VCID-s55j-8hbt-akhn
32
vulnerability VCID-s64f-x81f-b7ce
33
vulnerability VCID-stzu-sxe6-5yf5
34
vulnerability VCID-swnc-ke6h-ekew
35
vulnerability VCID-t1n7-eswt-73gw
36
vulnerability VCID-t3jn-vwbx-u7cr
37
vulnerability VCID-taj6-zj2n-5kg8
38
vulnerability VCID-tnjd-pyys-akav
39
vulnerability VCID-vxry-uvph-kbfd
40
vulnerability VCID-vyvy-y3cw-hbgr
41
vulnerability VCID-xa4m-xpa9-v7h8
42
vulnerability VCID-xh7y-56vy-5ud8
43
vulnerability VCID-y32z-2d3f-gkgw
44
vulnerability VCID-zdq2-dhb2-6kaq
45
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.23
1
url pkg:composer/typo3/cms-core@9.5.4
purl pkg:composer/typo3/cms-core@9.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2meq-x4kd-bbdn
1
vulnerability VCID-2mn6-mdmz-4yd9
2
vulnerability VCID-3n2r-awja-dug9
3
vulnerability VCID-3v4n-fzxa-bfaw
4
vulnerability VCID-461j-9hrc-gfbc
5
vulnerability VCID-4jpa-6fqh-hbfg
6
vulnerability VCID-4mkw-tv16-jyca
7
vulnerability VCID-4t9s-p25a-cfas
8
vulnerability VCID-543x-cnbz-1kb9
9
vulnerability VCID-58js-jzm4-4fc7
10
vulnerability VCID-5jgb-dsyx-hyb4
11
vulnerability VCID-5kzs-ex81-bbaj
12
vulnerability VCID-5paq-5frf-43ed
13
vulnerability VCID-5u4q-m66t-wqcj
14
vulnerability VCID-65ue-7jd9-23gf
15
vulnerability VCID-6a9t-8dmn-s3bv
16
vulnerability VCID-8d2m-1ffv-jqe1
17
vulnerability VCID-9g62-zd1x-3bdg
18
vulnerability VCID-9gpp-ez8w-rqav
19
vulnerability VCID-9x6r-56xm-n7h7
20
vulnerability VCID-a49c-fqrj-nbb3
21
vulnerability VCID-axvk-13qf-tka7
22
vulnerability VCID-b6er-h7dm-3bev
23
vulnerability VCID-bajy-qbwq-fufn
24
vulnerability VCID-cm14-t8uv-k3es
25
vulnerability VCID-d8d1-sat6-muhe
26
vulnerability VCID-dmzb-gkdn-6bcm
27
vulnerability VCID-dsu7-jjjq-f3e1
28
vulnerability VCID-e32h-8q61-hbgc
29
vulnerability VCID-eajg-ctpd-2bby
30
vulnerability VCID-ekfd-wp8z-d7e1
31
vulnerability VCID-f963-qur3-2qb7
32
vulnerability VCID-g4uc-qeb6-myed
33
vulnerability VCID-gcnj-6qb6-pbgz
34
vulnerability VCID-gv1b-xtv4-4yg3
35
vulnerability VCID-h6y3-7gsq-skh2
36
vulnerability VCID-he5m-6wj4-rbhc
37
vulnerability VCID-hhmn-yz5p-xkap
38
vulnerability VCID-kj9x-psfz-2ug1
39
vulnerability VCID-mnz3-rj21-67ad
40
vulnerability VCID-mud2-s4rc-fuf6
41
vulnerability VCID-n15v-ta9h-6ffb
42
vulnerability VCID-n7ng-zkkb-2qaz
43
vulnerability VCID-nubu-f1sc-gbes
44
vulnerability VCID-nxq4-m52q-yuh4
45
vulnerability VCID-phgh-sd4m-zbdx
46
vulnerability VCID-pmzz-9rws-4ud5
47
vulnerability VCID-pss5-as4b-cyf2
48
vulnerability VCID-q8hy-wjd9-nbgp
49
vulnerability VCID-raxk-rm9v-hubn
50
vulnerability VCID-remd-55jh-r3g5
51
vulnerability VCID-s53a-f91p-huf4
52
vulnerability VCID-s55j-8hbt-akhn
53
vulnerability VCID-s64f-x81f-b7ce
54
vulnerability VCID-stzu-sxe6-5yf5
55
vulnerability VCID-sw7v-fbjk-13hy
56
vulnerability VCID-swnc-ke6h-ekew
57
vulnerability VCID-t1n7-eswt-73gw
58
vulnerability VCID-t3jn-vwbx-u7cr
59
vulnerability VCID-taj6-zj2n-5kg8
60
vulnerability VCID-tnjd-pyys-akav
61
vulnerability VCID-u9bx-8e86-wbew
62
vulnerability VCID-ve7g-8st5-wffb
63
vulnerability VCID-vxry-uvph-kbfd
64
vulnerability VCID-vyvy-y3cw-hbgr
65
vulnerability VCID-w13x-3rp9-wyej
66
vulnerability VCID-xa4m-xpa9-v7h8
67
vulnerability VCID-xh7y-56vy-5ud8
68
vulnerability VCID-xtdg-uj46-rkcm
69
vulnerability VCID-xy6y-312d-rygj
70
vulnerability VCID-y32z-2d3f-gkgw
71
vulnerability VCID-zdq2-dhb2-6kaq
72
vulnerability VCID-zkea-ge1t-z7gn
73
vulnerability VCID-zn99-ywte-33g6
74
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.4
aliases 2019-01-22-4
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-551q-gpyd-ffe8
8
url VCID-5jgb-dsyx-hyb4
vulnerability_id VCID-5jgb-dsyx-hyb4
summary 
Open Redirection in Login Handling
### Problem
It has been discovered that Login Handling is susceptible to open redirection which allows attackers redirecting to arbitrary content, and conducting phishing attacks. No authentication is required in order to exploit this vulnerability.

### Solution
Update to TYPO3 versions 6.2.57, 7.6.51, 8.7.40, 9.5.25, 10.4.14, 11.1.1 that fix the problem described.

### Credits
Thanks to Alexander Kellner who reported this issue and to TYPO3 security team member Torben Hansen who fixed the issue.

### References
* [TYPO3-CORE-SA-2021-001](https://typo3.org/security/advisory/typo3-core-sa-2021-001)
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-21338
reference_id
reference_type
scores
0
value 0.00253
scoring_system epss
scoring_elements 0.48641
published_at 2026-04-18T12:55:00Z
1
value 0.00253
scoring_system epss
scoring_elements 0.48529
published_at 2026-04-01T12:55:00Z
2
value 0.00253
scoring_system epss
scoring_elements 0.48564
published_at 2026-04-02T12:55:00Z
3
value 0.00253
scoring_system epss
scoring_elements 0.48587
published_at 2026-04-04T12:55:00Z
4
value 0.00253
scoring_system epss
scoring_elements 0.48539
published_at 2026-04-07T12:55:00Z
5
value 0.00253
scoring_system epss
scoring_elements 0.48593
published_at 2026-04-08T12:55:00Z
6
value 0.00253
scoring_system epss
scoring_elements 0.48589
published_at 2026-04-09T12:55:00Z
7
value 0.00253
scoring_system epss
scoring_elements 0.4861
published_at 2026-04-11T12:55:00Z
8
value 0.00253
scoring_system epss
scoring_elements 0.48584
published_at 2026-04-12T12:55:00Z
9
value 0.00253
scoring_system epss
scoring_elements 0.48596
published_at 2026-04-13T12:55:00Z
10
value 0.00253
scoring_system epss
scoring_elements 0.48646
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-21338
1
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21338.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21338.yaml
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21338.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21338.yaml
3
reference_url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-4jhw-2p6j-5wmp
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-4jhw-2p6j-5wmp
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-21338
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-21338
5
reference_url https://packagist.org/packages/typo3/cms-core
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://packagist.org/packages/typo3/cms-core
6
reference_url https://typo3.org/security/advisory/typo3-core-sa-2021-001
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2021-001
7
reference_url https://github.com/advisories/GHSA-4jhw-2p6j-5wmp
reference_id GHSA-4jhw-2p6j-5wmp
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-4jhw-2p6j-5wmp
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.40
purl pkg:composer/typo3/cms-core@8.7.40
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ekfd-wp8z-d7e1
1
vulnerability VCID-n15v-ta9h-6ffb
2
vulnerability VCID-s64f-x81f-b7ce
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.40
1
url pkg:composer/typo3/cms-core@9.5.25
purl pkg:composer/typo3/cms-core@9.5.25
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4jpa-6fqh-hbfg
1
vulnerability VCID-4t9s-p25a-cfas
2
vulnerability VCID-5paq-5frf-43ed
3
vulnerability VCID-65ue-7jd9-23gf
4
vulnerability VCID-6a9t-8dmn-s3bv
5
vulnerability VCID-8d2m-1ffv-jqe1
6
vulnerability VCID-axvk-13qf-tka7
7
vulnerability VCID-b6er-h7dm-3bev
8
vulnerability VCID-bajy-qbwq-fufn
9
vulnerability VCID-e32h-8q61-hbgc
10
vulnerability VCID-ekfd-wp8z-d7e1
11
vulnerability VCID-g4uc-qeb6-myed
12
vulnerability VCID-gv1b-xtv4-4yg3
13
vulnerability VCID-h6y3-7gsq-skh2
14
vulnerability VCID-mnz3-rj21-67ad
15
vulnerability VCID-mud2-s4rc-fuf6
16
vulnerability VCID-n15v-ta9h-6ffb
17
vulnerability VCID-n7ng-zkkb-2qaz
18
vulnerability VCID-nubu-f1sc-gbes
19
vulnerability VCID-remd-55jh-r3g5
20
vulnerability VCID-s55j-8hbt-akhn
21
vulnerability VCID-s64f-x81f-b7ce
22
vulnerability VCID-t1n7-eswt-73gw
23
vulnerability VCID-taj6-zj2n-5kg8
24
vulnerability VCID-ve7g-8st5-wffb
25
vulnerability VCID-vyvy-y3cw-hbgr
26
vulnerability VCID-w13x-3rp9-wyej
27
vulnerability VCID-xy6y-312d-rygj
28
vulnerability VCID-y32z-2d3f-gkgw
29
vulnerability VCID-zdq2-dhb2-6kaq
30
vulnerability VCID-zn99-ywte-33g6
31
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.25
2
url pkg:composer/typo3/cms-core@10.4.14
purl pkg:composer/typo3/cms-core@10.4.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-1yxw-saf5-wue7
2
vulnerability VCID-4jpa-6fqh-hbfg
3
vulnerability VCID-4t9s-p25a-cfas
4
vulnerability VCID-5paq-5frf-43ed
5
vulnerability VCID-65ue-7jd9-23gf
6
vulnerability VCID-6a9t-8dmn-s3bv
7
vulnerability VCID-8d2m-1ffv-jqe1
8
vulnerability VCID-8sdd-b1bn-cuhx
9
vulnerability VCID-av8u-rvzq-4fc7
10
vulnerability VCID-axvk-13qf-tka7
11
vulnerability VCID-b6er-h7dm-3bev
12
vulnerability VCID-bajy-qbwq-fufn
13
vulnerability VCID-e32h-8q61-hbgc
14
vulnerability VCID-ekfd-wp8z-d7e1
15
vulnerability VCID-g4uc-qeb6-myed
16
vulnerability VCID-gv1b-xtv4-4yg3
17
vulnerability VCID-gyyu-n3b1-zbcj
18
vulnerability VCID-h6y3-7gsq-skh2
19
vulnerability VCID-mnz3-rj21-67ad
20
vulnerability VCID-mud2-s4rc-fuf6
21
vulnerability VCID-n15v-ta9h-6ffb
22
vulnerability VCID-n7ng-zkkb-2qaz
23
vulnerability VCID-nubu-f1sc-gbes
24
vulnerability VCID-remd-55jh-r3g5
25
vulnerability VCID-s55j-8hbt-akhn
26
vulnerability VCID-s64f-x81f-b7ce
27
vulnerability VCID-t1n7-eswt-73gw
28
vulnerability VCID-taj6-zj2n-5kg8
29
vulnerability VCID-ve7g-8st5-wffb
30
vulnerability VCID-vwb2-a84s-5qak
31
vulnerability VCID-vyvy-y3cw-hbgr
32
vulnerability VCID-w13x-3rp9-wyej
33
vulnerability VCID-xy6y-312d-rygj
34
vulnerability VCID-y32z-2d3f-gkgw
35
vulnerability VCID-zdq2-dhb2-6kaq
36
vulnerability VCID-zn99-ywte-33g6
37
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@10.4.14
3
url pkg:composer/typo3/cms-core@11.1.1
purl pkg:composer/typo3/cms-core@11.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-1yxw-saf5-wue7
2
vulnerability VCID-4jpa-6fqh-hbfg
3
vulnerability VCID-4t9s-p25a-cfas
4
vulnerability VCID-5paq-5frf-43ed
5
vulnerability VCID-65ue-7jd9-23gf
6
vulnerability VCID-6a9t-8dmn-s3bv
7
vulnerability VCID-8d2m-1ffv-jqe1
8
vulnerability VCID-8sdd-b1bn-cuhx
9
vulnerability VCID-av8u-rvzq-4fc7
10
vulnerability VCID-axvk-13qf-tka7
11
vulnerability VCID-b6er-h7dm-3bev
12
vulnerability VCID-bajy-qbwq-fufn
13
vulnerability VCID-e32h-8q61-hbgc
14
vulnerability VCID-ekfd-wp8z-d7e1
15
vulnerability VCID-g4uc-qeb6-myed
16
vulnerability VCID-gv1b-xtv4-4yg3
17
vulnerability VCID-gyyu-n3b1-zbcj
18
vulnerability VCID-h6y3-7gsq-skh2
19
vulnerability VCID-mnz3-rj21-67ad
20
vulnerability VCID-mud2-s4rc-fuf6
21
vulnerability VCID-n15v-ta9h-6ffb
22
vulnerability VCID-n7ng-zkkb-2qaz
23
vulnerability VCID-nubu-f1sc-gbes
24
vulnerability VCID-remd-55jh-r3g5
25
vulnerability VCID-s55j-8hbt-akhn
26
vulnerability VCID-s64f-x81f-b7ce
27
vulnerability VCID-t1n7-eswt-73gw
28
vulnerability VCID-taj6-zj2n-5kg8
29
vulnerability VCID-uyeu-a3xr-fkh4
30
vulnerability VCID-ve7g-8st5-wffb
31
vulnerability VCID-vwb2-a84s-5qak
32
vulnerability VCID-vyvy-y3cw-hbgr
33
vulnerability VCID-w13x-3rp9-wyej
34
vulnerability VCID-xy6y-312d-rygj
35
vulnerability VCID-y32z-2d3f-gkgw
36
vulnerability VCID-zdq2-dhb2-6kaq
37
vulnerability VCID-zn99-ywte-33g6
38
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@11.1.1
aliases CVE-2021-21338, GHSA-4jhw-2p6j-5wmp
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5jgb-dsyx-hyb4
9
url VCID-5mxm-88r9-hfey
vulnerability_id VCID-5mxm-88r9-hfey
summary 
TYPO3 Broken Access Control in Localization Handling
It has been discovered that backend users having limited access to specific languages are capable of modifying and creating pages in the default language which actually should be disallowed. A valid backend user account is needed in order to exploit this vulnerability.
references
0
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2019-01-22-3.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2019-01-22-3.yaml
1
reference_url https://github.com/TYPO3-CMS/core
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core
2
reference_url https://github.com/TYPO3-CMS/core/commit/64b1b5dc2f7cacb2ba39b74081f4179d6393b2bf
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core/commit/64b1b5dc2f7cacb2ba39b74081f4179d6393b2bf
3
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-003
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2019-003
4
reference_url https://github.com/advisories/GHSA-9rx9-7fmh-gj3g
reference_id GHSA-9rx9-7fmh-gj3g
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-9rx9-7fmh-gj3g
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.23
purl pkg:composer/typo3/cms-core@8.7.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2meq-x4kd-bbdn
1
vulnerability VCID-3n2r-awja-dug9
2
vulnerability VCID-3v4n-fzxa-bfaw
3
vulnerability VCID-4jpa-6fqh-hbfg
4
vulnerability VCID-5jgb-dsyx-hyb4
5
vulnerability VCID-5paq-5frf-43ed
6
vulnerability VCID-5u4q-m66t-wqcj
7
vulnerability VCID-9g62-zd1x-3bdg
8
vulnerability VCID-9gpp-ez8w-rqav
9
vulnerability VCID-9x6r-56xm-n7h7
10
vulnerability VCID-axvk-13qf-tka7
11
vulnerability VCID-b6er-h7dm-3bev
12
vulnerability VCID-bajy-qbwq-fufn
13
vulnerability VCID-cm14-t8uv-k3es
14
vulnerability VCID-dsu7-jjjq-f3e1
15
vulnerability VCID-eajg-ctpd-2bby
16
vulnerability VCID-ekfd-wp8z-d7e1
17
vulnerability VCID-f963-qur3-2qb7
18
vulnerability VCID-g4uc-qeb6-myed
19
vulnerability VCID-gcnj-6qb6-pbgz
20
vulnerability VCID-gv1b-xtv4-4yg3
21
vulnerability VCID-h6y3-7gsq-skh2
22
vulnerability VCID-he5m-6wj4-rbhc
23
vulnerability VCID-hhmn-yz5p-xkap
24
vulnerability VCID-mnz3-rj21-67ad
25
vulnerability VCID-n15v-ta9h-6ffb
26
vulnerability VCID-n7ng-zkkb-2qaz
27
vulnerability VCID-pmzz-9rws-4ud5
28
vulnerability VCID-pss5-as4b-cyf2
29
vulnerability VCID-q8hy-wjd9-nbgp
30
vulnerability VCID-s53a-f91p-huf4
31
vulnerability VCID-s55j-8hbt-akhn
32
vulnerability VCID-s64f-x81f-b7ce
33
vulnerability VCID-stzu-sxe6-5yf5
34
vulnerability VCID-swnc-ke6h-ekew
35
vulnerability VCID-t1n7-eswt-73gw
36
vulnerability VCID-t3jn-vwbx-u7cr
37
vulnerability VCID-taj6-zj2n-5kg8
38
vulnerability VCID-tnjd-pyys-akav
39
vulnerability VCID-vxry-uvph-kbfd
40
vulnerability VCID-vyvy-y3cw-hbgr
41
vulnerability VCID-xa4m-xpa9-v7h8
42
vulnerability VCID-xh7y-56vy-5ud8
43
vulnerability VCID-y32z-2d3f-gkgw
44
vulnerability VCID-zdq2-dhb2-6kaq
45
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.23
aliases GHSA-9rx9-7fmh-gj3g
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5mxm-88r9-hfey
10
url VCID-5paq-5frf-43ed
vulnerability_id VCID-5paq-5frf-43ed
summary 
TYPO3 CMS Stored Cross-Site Scripting via FileDumpController
> ### Meta
> * CVSS: `CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N/E:F/RL:O/RC:C` (5.0)

### Problem
It has been discovered that the `FileDumpController` (backend and frontend context) is vulnerable to cross-site scripting when malicious files are displayed using this component. A valid backend user account is needed to exploit this vulnerability.

### Solution
Update to TYPO3 version 7.6.58 ELTS, 8.7.48 ELTS, 9.5.37 ELTS, 10.4.32 or 11.5.16 that fix the problem described above.

### Credits
Thanks to Vautia who reported this issue and to TYPO3 core & security team member Oliver Hader who fixed the issue.

### References
* [TYPO3-CORE-SA-2022-009](https://typo3.org/security/advisory/typo3-core-sa-2022-009)
* [Vulnerability Report on huntr.dev](https://huntr.dev/bounties/51e9b709-193c-41fd-bd4a-833aaca0bd4e/) (embargoed +30 days)
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-36107
reference_id
reference_type
scores
0
value 0.00687
scoring_system epss
scoring_elements 0.71682
published_at 2026-04-02T12:55:00Z
1
value 0.00687
scoring_system epss
scoring_elements 0.7173
published_at 2026-04-12T12:55:00Z
2
value 0.00687
scoring_system epss
scoring_elements 0.71747
published_at 2026-04-11T12:55:00Z
3
value 0.00687
scoring_system epss
scoring_elements 0.71723
published_at 2026-04-09T12:55:00Z
4
value 0.00687
scoring_system epss
scoring_elements 0.71712
published_at 2026-04-08T12:55:00Z
5
value 0.00687
scoring_system epss
scoring_elements 0.71673
published_at 2026-04-07T12:55:00Z
6
value 0.00687
scoring_system epss
scoring_elements 0.717
published_at 2026-04-04T12:55:00Z
7
value 0.00687
scoring_system epss
scoring_elements 0.71762
published_at 2026-04-18T12:55:00Z
8
value 0.00687
scoring_system epss
scoring_elements 0.71756
published_at 2026-04-16T12:55:00Z
9
value 0.00687
scoring_system epss
scoring_elements 0.71713
published_at 2026-04-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-36107
1
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2022-36107.yaml
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2022-36107.yaml
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2022-36107.yaml
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2022-36107.yaml
3
reference_url https://github.com/TYPO3/typo3
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3
4
reference_url https://github.com/TYPO3/typo3/commit/546208428c861a09d62b86cde141eb19a81fae66
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/546208428c861a09d62b86cde141eb19a81fae66
5
reference_url https://github.com/TYPO3/typo3/commit/bd58d2ff2eeef89e63ef754a2389597d22622a39
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/bd58d2ff2eeef89e63ef754a2389597d22622a39
6
reference_url https://github.com/TYPO3/typo3/security/advisories/GHSA-9c6w-55cp-5w25
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/security/advisories/GHSA-9c6w-55cp-5w25
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-36107
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-36107
8
reference_url https://typo3.org/security/advisory/typo3-core-sa-2022-009
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2022-009
9
reference_url https://github.com/advisories/GHSA-9c6w-55cp-5w25
reference_id GHSA-9c6w-55cp-5w25
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-9c6w-55cp-5w25
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.48
purl pkg:composer/typo3/cms-core@8.7.48
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.48
1
url pkg:composer/typo3/cms-core@9.5.37
purl pkg:composer/typo3/cms-core@9.5.37
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.37
2
url pkg:composer/typo3/cms-core@10.4.32
purl pkg:composer/typo3/cms-core@10.4.32
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-4t9s-p25a-cfas
2
vulnerability VCID-65ue-7jd9-23gf
3
vulnerability VCID-8d2m-1ffv-jqe1
4
vulnerability VCID-8sdd-b1bn-cuhx
5
vulnerability VCID-axvk-13qf-tka7
6
vulnerability VCID-g4uc-qeb6-myed
7
vulnerability VCID-gv1b-xtv4-4yg3
8
vulnerability VCID-gyyu-n3b1-zbcj
9
vulnerability VCID-h6y3-7gsq-skh2
10
vulnerability VCID-mud2-s4rc-fuf6
11
vulnerability VCID-n7ng-zkkb-2qaz
12
vulnerability VCID-nubu-f1sc-gbes
13
vulnerability VCID-t1n7-eswt-73gw
14
vulnerability VCID-taj6-zj2n-5kg8
15
vulnerability VCID-ve7g-8st5-wffb
16
vulnerability VCID-vyvy-y3cw-hbgr
17
vulnerability VCID-w13x-3rp9-wyej
18
vulnerability VCID-xy6y-312d-rygj
19
vulnerability VCID-zdq2-dhb2-6kaq
20
vulnerability VCID-zn99-ywte-33g6
21
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@10.4.32
3
url pkg:composer/typo3/cms-core@11.5.16
purl pkg:composer/typo3/cms-core@11.5.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-4t9s-p25a-cfas
2
vulnerability VCID-65ue-7jd9-23gf
3
vulnerability VCID-8d2m-1ffv-jqe1
4
vulnerability VCID-8sdd-b1bn-cuhx
5
vulnerability VCID-axvk-13qf-tka7
6
vulnerability VCID-g4uc-qeb6-myed
7
vulnerability VCID-gv1b-xtv4-4yg3
8
vulnerability VCID-gyyu-n3b1-zbcj
9
vulnerability VCID-h6y3-7gsq-skh2
10
vulnerability VCID-mud2-s4rc-fuf6
11
vulnerability VCID-n7ng-zkkb-2qaz
12
vulnerability VCID-nubu-f1sc-gbes
13
vulnerability VCID-t1n7-eswt-73gw
14
vulnerability VCID-taj6-zj2n-5kg8
15
vulnerability VCID-ve7g-8st5-wffb
16
vulnerability VCID-vyvy-y3cw-hbgr
17
vulnerability VCID-w13x-3rp9-wyej
18
vulnerability VCID-xy6y-312d-rygj
19
vulnerability VCID-zdq2-dhb2-6kaq
20
vulnerability VCID-zn99-ywte-33g6
21
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@11.5.16
aliases CVE-2022-36107, GHSA-9c6w-55cp-5w25
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5paq-5frf-43ed
11
url VCID-5u4q-m66t-wqcj
vulnerability_id VCID-5u4q-m66t-wqcj
summary 
TYPO3 Cross-Site Scripting in Form Framework validation handling
It has been discovered that the output of field validation errors in the Form Framework is vulnerable to cross-site scripting.
references
0
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2019-12-17-1.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2019-12-17-1.yaml
1
reference_url https://github.com/TYPO3-CMS/core
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core
2
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-021
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2019-021
3
reference_url https://github.com/advisories/GHSA-95qm-3xp7-vfj5
reference_id GHSA-95qm-3xp7-vfj5
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-95qm-3xp7-vfj5
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.30
purl pkg:composer/typo3/cms-core@8.7.30
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4jpa-6fqh-hbfg
1
vulnerability VCID-5jgb-dsyx-hyb4
2
vulnerability VCID-5paq-5frf-43ed
3
vulnerability VCID-axvk-13qf-tka7
4
vulnerability VCID-b6er-h7dm-3bev
5
vulnerability VCID-bajy-qbwq-fufn
6
vulnerability VCID-dsu7-jjjq-f3e1
7
vulnerability VCID-ekfd-wp8z-d7e1
8
vulnerability VCID-f963-qur3-2qb7
9
vulnerability VCID-g4uc-qeb6-myed
10
vulnerability VCID-gv1b-xtv4-4yg3
11
vulnerability VCID-h6y3-7gsq-skh2
12
vulnerability VCID-he5m-6wj4-rbhc
13
vulnerability VCID-mnz3-rj21-67ad
14
vulnerability VCID-n15v-ta9h-6ffb
15
vulnerability VCID-n7ng-zkkb-2qaz
16
vulnerability VCID-s55j-8hbt-akhn
17
vulnerability VCID-s64f-x81f-b7ce
18
vulnerability VCID-t1n7-eswt-73gw
19
vulnerability VCID-t3jn-vwbx-u7cr
20
vulnerability VCID-taj6-zj2n-5kg8
21
vulnerability VCID-vyvy-y3cw-hbgr
22
vulnerability VCID-xh7y-56vy-5ud8
23
vulnerability VCID-y32z-2d3f-gkgw
24
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.30
1
url pkg:composer/typo3/cms-core@9.5.12
purl pkg:composer/typo3/cms-core@9.5.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mn6-mdmz-4yd9
1
vulnerability VCID-4jpa-6fqh-hbfg
2
vulnerability VCID-4t9s-p25a-cfas
3
vulnerability VCID-543x-cnbz-1kb9
4
vulnerability VCID-58js-jzm4-4fc7
5
vulnerability VCID-5jgb-dsyx-hyb4
6
vulnerability VCID-5kzs-ex81-bbaj
7
vulnerability VCID-5paq-5frf-43ed
8
vulnerability VCID-65ue-7jd9-23gf
9
vulnerability VCID-6a9t-8dmn-s3bv
10
vulnerability VCID-7kjw-j8st-mqfr
11
vulnerability VCID-8d2m-1ffv-jqe1
12
vulnerability VCID-a49c-fqrj-nbb3
13
vulnerability VCID-axvk-13qf-tka7
14
vulnerability VCID-b6er-h7dm-3bev
15
vulnerability VCID-bajy-qbwq-fufn
16
vulnerability VCID-d8d1-sat6-muhe
17
vulnerability VCID-dsu7-jjjq-f3e1
18
vulnerability VCID-e32h-8q61-hbgc
19
vulnerability VCID-ekfd-wp8z-d7e1
20
vulnerability VCID-f963-qur3-2qb7
21
vulnerability VCID-g4uc-qeb6-myed
22
vulnerability VCID-gv1b-xtv4-4yg3
23
vulnerability VCID-h6y3-7gsq-skh2
24
vulnerability VCID-he5m-6wj4-rbhc
25
vulnerability VCID-mnz3-rj21-67ad
26
vulnerability VCID-mud2-s4rc-fuf6
27
vulnerability VCID-n15v-ta9h-6ffb
28
vulnerability VCID-n7ng-zkkb-2qaz
29
vulnerability VCID-nubu-f1sc-gbes
30
vulnerability VCID-phgh-sd4m-zbdx
31
vulnerability VCID-remd-55jh-r3g5
32
vulnerability VCID-s55j-8hbt-akhn
33
vulnerability VCID-s64f-x81f-b7ce
34
vulnerability VCID-sw7v-fbjk-13hy
35
vulnerability VCID-t1n7-eswt-73gw
36
vulnerability VCID-t3jn-vwbx-u7cr
37
vulnerability VCID-taj6-zj2n-5kg8
38
vulnerability VCID-ve7g-8st5-wffb
39
vulnerability VCID-vyvy-y3cw-hbgr
40
vulnerability VCID-w13x-3rp9-wyej
41
vulnerability VCID-xh7y-56vy-5ud8
42
vulnerability VCID-xy6y-312d-rygj
43
vulnerability VCID-y32z-2d3f-gkgw
44
vulnerability VCID-zdq2-dhb2-6kaq
45
vulnerability VCID-zn99-ywte-33g6
46
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.12
2
url pkg:composer/typo3/cms-core@10.2.1
purl pkg:composer/typo3/cms-core@10.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1yxw-saf5-wue7
1
vulnerability VCID-2mn6-mdmz-4yd9
2
vulnerability VCID-3n2r-awja-dug9
3
vulnerability VCID-4jpa-6fqh-hbfg
4
vulnerability VCID-4t9s-p25a-cfas
5
vulnerability VCID-543x-cnbz-1kb9
6
vulnerability VCID-58js-jzm4-4fc7
7
vulnerability VCID-5jgb-dsyx-hyb4
8
vulnerability VCID-5kzs-ex81-bbaj
9
vulnerability VCID-5paq-5frf-43ed
10
vulnerability VCID-65ue-7jd9-23gf
11
vulnerability VCID-6a9t-8dmn-s3bv
12
vulnerability VCID-7kjw-j8st-mqfr
13
vulnerability VCID-8d2m-1ffv-jqe1
14
vulnerability VCID-8sdd-b1bn-cuhx
15
vulnerability VCID-a49c-fqrj-nbb3
16
vulnerability VCID-a89c-jvwa-6kh5
17
vulnerability VCID-av8u-rvzq-4fc7
18
vulnerability VCID-axvk-13qf-tka7
19
vulnerability VCID-b6er-h7dm-3bev
20
vulnerability VCID-bajy-qbwq-fufn
21
vulnerability VCID-cdjv-fp71-y3dv
22
vulnerability VCID-d8d1-sat6-muhe
23
vulnerability VCID-dhrm-uxuv-zfaj
24
vulnerability VCID-dsu7-jjjq-f3e1
25
vulnerability VCID-e32h-8q61-hbgc
26
vulnerability VCID-ekfd-wp8z-d7e1
27
vulnerability VCID-f963-qur3-2qb7
28
vulnerability VCID-g4uc-qeb6-myed
29
vulnerability VCID-gcnj-6qb6-pbgz
30
vulnerability VCID-gv1b-xtv4-4yg3
31
vulnerability VCID-gyyu-n3b1-zbcj
32
vulnerability VCID-h6y3-7gsq-skh2
33
vulnerability VCID-he5m-6wj4-rbhc
34
vulnerability VCID-mnz3-rj21-67ad
35
vulnerability VCID-mud2-s4rc-fuf6
36
vulnerability VCID-n15v-ta9h-6ffb
37
vulnerability VCID-n7ng-zkkb-2qaz
38
vulnerability VCID-nubu-f1sc-gbes
39
vulnerability VCID-phgh-sd4m-zbdx
40
vulnerability VCID-remd-55jh-r3g5
41
vulnerability VCID-s55j-8hbt-akhn
42
vulnerability VCID-s64f-x81f-b7ce
43
vulnerability VCID-sw7v-fbjk-13hy
44
vulnerability VCID-t1n7-eswt-73gw
45
vulnerability VCID-t3jn-vwbx-u7cr
46
vulnerability VCID-taj6-zj2n-5kg8
47
vulnerability VCID-usmv-r64u-m7cb
48
vulnerability VCID-ve7g-8st5-wffb
49
vulnerability VCID-vwb2-a84s-5qak
50
vulnerability VCID-vyvy-y3cw-hbgr
51
vulnerability VCID-w13x-3rp9-wyej
52
vulnerability VCID-xh7y-56vy-5ud8
53
vulnerability VCID-xy6y-312d-rygj
54
vulnerability VCID-y32z-2d3f-gkgw
55
vulnerability VCID-zdq2-dhb2-6kaq
56
vulnerability VCID-zn99-ywte-33g6
57
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@10.2.1
aliases GHSA-95qm-3xp7-vfj5
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5u4q-m66t-wqcj
12
url VCID-5z59-dn7p-xbc5
vulnerability_id VCID-5z59-dn7p-xbc5
summary 
TYPO3 Cross-Site Scripting in Backend Modal Component
Failing to properly encode user input, notifications shown in modal windows in the TYPO3 backend are vulnerable to cross-site scripting. A valid backend user account is needed in order to exploit this vulnerability.
references
0
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2018-12-11-2.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2018-12-11-2.yaml
1
reference_url https://github.com/TYPO3-CMS/core
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core
2
reference_url https://github.com/TYPO3-CMS/core/commit/3c1deac4db61ac1ac4231799beb1f49c28eb2b4d
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core/commit/3c1deac4db61ac1ac4231799beb1f49c28eb2b4d
3
reference_url https://github.com/TYPO3-CMS/core/commit/983ecc4ea3a841aca7ff2bb1d2f0e0318c3646b3
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core/commit/983ecc4ea3a841aca7ff2bb1d2f0e0318c3646b3
4
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-007
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2018-007
5
reference_url https://github.com/advisories/GHSA-g4c9-qfvw-fmr4
reference_id GHSA-g4c9-qfvw-fmr4
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-g4c9-qfvw-fmr4
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.21
purl pkg:composer/typo3/cms-core@8.7.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21e8-x7mp-hugk
1
vulnerability VCID-2meq-x4kd-bbdn
2
vulnerability VCID-3n2r-awja-dug9
3
vulnerability VCID-3v4n-fzxa-bfaw
4
vulnerability VCID-4jpa-6fqh-hbfg
5
vulnerability VCID-551q-gpyd-ffe8
6
vulnerability VCID-5jgb-dsyx-hyb4
7
vulnerability VCID-5mxm-88r9-hfey
8
vulnerability VCID-5paq-5frf-43ed
9
vulnerability VCID-5u4q-m66t-wqcj
10
vulnerability VCID-9g62-zd1x-3bdg
11
vulnerability VCID-9gpp-ez8w-rqav
12
vulnerability VCID-9x6r-56xm-n7h7
13
vulnerability VCID-9zqs-hjay-fkev
14
vulnerability VCID-axaf-45kr-kbfe
15
vulnerability VCID-axvk-13qf-tka7
16
vulnerability VCID-b6er-h7dm-3bev
17
vulnerability VCID-bajy-qbwq-fufn
18
vulnerability VCID-cm14-t8uv-k3es
19
vulnerability VCID-d99v-v9cj-zfh2
20
vulnerability VCID-dj88-f3p8-cfbn
21
vulnerability VCID-dsu7-jjjq-f3e1
22
vulnerability VCID-eajg-ctpd-2bby
23
vulnerability VCID-ekfd-wp8z-d7e1
24
vulnerability VCID-f4bv-pzdy-dfcb
25
vulnerability VCID-f963-qur3-2qb7
26
vulnerability VCID-g4uc-qeb6-myed
27
vulnerability VCID-gcnj-6qb6-pbgz
28
vulnerability VCID-gv1b-xtv4-4yg3
29
vulnerability VCID-h6y3-7gsq-skh2
30
vulnerability VCID-he5m-6wj4-rbhc
31
vulnerability VCID-hhmn-yz5p-xkap
32
vulnerability VCID-j77k-hjgx-5kc5
33
vulnerability VCID-k8af-cg9k-87a9
34
vulnerability VCID-mh4f-vtfj-hbb1
35
vulnerability VCID-mnz3-rj21-67ad
36
vulnerability VCID-n15v-ta9h-6ffb
37
vulnerability VCID-n7ng-zkkb-2qaz
38
vulnerability VCID-pmzz-9rws-4ud5
39
vulnerability VCID-pss5-as4b-cyf2
40
vulnerability VCID-px44-19tj-h7aa
41
vulnerability VCID-q8hy-wjd9-nbgp
42
vulnerability VCID-s53a-f91p-huf4
43
vulnerability VCID-s55j-8hbt-akhn
44
vulnerability VCID-s64f-x81f-b7ce
45
vulnerability VCID-stzu-sxe6-5yf5
46
vulnerability VCID-swnc-ke6h-ekew
47
vulnerability VCID-t1n7-eswt-73gw
48
vulnerability VCID-t3jn-vwbx-u7cr
49
vulnerability VCID-taj6-zj2n-5kg8
50
vulnerability VCID-tnjd-pyys-akav
51
vulnerability VCID-vxry-uvph-kbfd
52
vulnerability VCID-vyvy-y3cw-hbgr
53
vulnerability VCID-wea9-egep-h7g5
54
vulnerability VCID-xa4m-xpa9-v7h8
55
vulnerability VCID-xh7y-56vy-5ud8
56
vulnerability VCID-y32z-2d3f-gkgw
57
vulnerability VCID-zdq2-dhb2-6kaq
58
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.21
1
url pkg:composer/typo3/cms-core@9.5.2
purl pkg:composer/typo3/cms-core@9.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21e8-x7mp-hugk
1
vulnerability VCID-2meq-x4kd-bbdn
2
vulnerability VCID-2mn6-mdmz-4yd9
3
vulnerability VCID-3n2r-awja-dug9
4
vulnerability VCID-3v4n-fzxa-bfaw
5
vulnerability VCID-461j-9hrc-gfbc
6
vulnerability VCID-4jpa-6fqh-hbfg
7
vulnerability VCID-4mkw-tv16-jyca
8
vulnerability VCID-4t9s-p25a-cfas
9
vulnerability VCID-543x-cnbz-1kb9
10
vulnerability VCID-551q-gpyd-ffe8
11
vulnerability VCID-58js-jzm4-4fc7
12
vulnerability VCID-5jgb-dsyx-hyb4
13
vulnerability VCID-5kzs-ex81-bbaj
14
vulnerability VCID-5paq-5frf-43ed
15
vulnerability VCID-5u4q-m66t-wqcj
16
vulnerability VCID-65ue-7jd9-23gf
17
vulnerability VCID-6a9t-8dmn-s3bv
18
vulnerability VCID-8d2m-1ffv-jqe1
19
vulnerability VCID-9g62-zd1x-3bdg
20
vulnerability VCID-9gpp-ez8w-rqav
21
vulnerability VCID-9x6r-56xm-n7h7
22
vulnerability VCID-9zqs-hjay-fkev
23
vulnerability VCID-a49c-fqrj-nbb3
24
vulnerability VCID-axaf-45kr-kbfe
25
vulnerability VCID-axvk-13qf-tka7
26
vulnerability VCID-b6er-h7dm-3bev
27
vulnerability VCID-bajy-qbwq-fufn
28
vulnerability VCID-cm14-t8uv-k3es
29
vulnerability VCID-d8d1-sat6-muhe
30
vulnerability VCID-d99v-v9cj-zfh2
31
vulnerability VCID-dj88-f3p8-cfbn
32
vulnerability VCID-dmzb-gkdn-6bcm
33
vulnerability VCID-dsu7-jjjq-f3e1
34
vulnerability VCID-e32h-8q61-hbgc
35
vulnerability VCID-eajg-ctpd-2bby
36
vulnerability VCID-ekfd-wp8z-d7e1
37
vulnerability VCID-f4bv-pzdy-dfcb
38
vulnerability VCID-f963-qur3-2qb7
39
vulnerability VCID-g4uc-qeb6-myed
40
vulnerability VCID-gcnj-6qb6-pbgz
41
vulnerability VCID-gv1b-xtv4-4yg3
42
vulnerability VCID-h6y3-7gsq-skh2
43
vulnerability VCID-he5m-6wj4-rbhc
44
vulnerability VCID-hhmn-yz5p-xkap
45
vulnerability VCID-k8af-cg9k-87a9
46
vulnerability VCID-kj9x-psfz-2ug1
47
vulnerability VCID-mh4f-vtfj-hbb1
48
vulnerability VCID-mnz3-rj21-67ad
49
vulnerability VCID-mud2-s4rc-fuf6
50
vulnerability VCID-n15v-ta9h-6ffb
51
vulnerability VCID-n7ng-zkkb-2qaz
52
vulnerability VCID-nubu-f1sc-gbes
53
vulnerability VCID-nxq4-m52q-yuh4
54
vulnerability VCID-p715-yexd-jfgc
55
vulnerability VCID-phgh-sd4m-zbdx
56
vulnerability VCID-pmzz-9rws-4ud5
57
vulnerability VCID-pss5-as4b-cyf2
58
vulnerability VCID-px44-19tj-h7aa
59
vulnerability VCID-q8hy-wjd9-nbgp
60
vulnerability VCID-raxk-rm9v-hubn
61
vulnerability VCID-remd-55jh-r3g5
62
vulnerability VCID-s53a-f91p-huf4
63
vulnerability VCID-s55j-8hbt-akhn
64
vulnerability VCID-s64f-x81f-b7ce
65
vulnerability VCID-stzu-sxe6-5yf5
66
vulnerability VCID-sw7v-fbjk-13hy
67
vulnerability VCID-swnc-ke6h-ekew
68
vulnerability VCID-t1n7-eswt-73gw
69
vulnerability VCID-t3jn-vwbx-u7cr
70
vulnerability VCID-taj6-zj2n-5kg8
71
vulnerability VCID-tnjd-pyys-akav
72
vulnerability VCID-u9bx-8e86-wbew
73
vulnerability VCID-ve7g-8st5-wffb
74
vulnerability VCID-vxry-uvph-kbfd
75
vulnerability VCID-vyvy-y3cw-hbgr
76
vulnerability VCID-w13x-3rp9-wyej
77
vulnerability VCID-wea9-egep-h7g5
78
vulnerability VCID-xa4m-xpa9-v7h8
79
vulnerability VCID-xh7y-56vy-5ud8
80
vulnerability VCID-xtdg-uj46-rkcm
81
vulnerability VCID-xy6y-312d-rygj
82
vulnerability VCID-y32z-2d3f-gkgw
83
vulnerability VCID-yzx1-4psv-7bhr
84
vulnerability VCID-zdq2-dhb2-6kaq
85
vulnerability VCID-zkea-ge1t-z7gn
86
vulnerability VCID-zn99-ywte-33g6
87
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.2
aliases GHSA-g4c9-qfvw-fmr4
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5z59-dn7p-xbc5
13
url VCID-6xmj-wbea-r7ex
vulnerability_id VCID-6xmj-wbea-r7ex
summary 
TYPO3 Denial of Service in Online Media Asset Handling
Online Media Asset Handling (*.youtube and *.vimeo files) in the TYPO3 backend is vulnerable to denial of service. Putting large files with according file extensions results in high consumption of system resources. This can lead to exceeding limits of the current PHP process which results in a dysfunctional backend component. A valid backend user account or write access on the server system (e.g. SFTP) is needed in order to exploit this vulnerability.
references
0
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2018-12-11-6.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2018-12-11-6.yaml
1
reference_url https://github.com/TYPO3-CMS/core/commit/9b2ecd2a402a76e17b78f78ed2ac9b7fff36d201
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core/commit/9b2ecd2a402a76e17b78f78ed2ac9b7fff36d201
2
reference_url https://github.com/TYPO3-CMS/core/commit/aa2dcb340bc7f2b815c8eee02cf54e100f82f3e7
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core/commit/aa2dcb340bc7f2b815c8eee02cf54e100f82f3e7
3
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-011
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2018-011
4
reference_url https://github.com/advisories/GHSA-29m4-mx89-3mjg
reference_id GHSA-29m4-mx89-3mjg
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-29m4-mx89-3mjg
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.21
purl pkg:composer/typo3/cms-core@8.7.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21e8-x7mp-hugk
1
vulnerability VCID-2meq-x4kd-bbdn
2
vulnerability VCID-3n2r-awja-dug9
3
vulnerability VCID-3v4n-fzxa-bfaw
4
vulnerability VCID-4jpa-6fqh-hbfg
5
vulnerability VCID-551q-gpyd-ffe8
6
vulnerability VCID-5jgb-dsyx-hyb4
7
vulnerability VCID-5mxm-88r9-hfey
8
vulnerability VCID-5paq-5frf-43ed
9
vulnerability VCID-5u4q-m66t-wqcj
10
vulnerability VCID-9g62-zd1x-3bdg
11
vulnerability VCID-9gpp-ez8w-rqav
12
vulnerability VCID-9x6r-56xm-n7h7
13
vulnerability VCID-9zqs-hjay-fkev
14
vulnerability VCID-axaf-45kr-kbfe
15
vulnerability VCID-axvk-13qf-tka7
16
vulnerability VCID-b6er-h7dm-3bev
17
vulnerability VCID-bajy-qbwq-fufn
18
vulnerability VCID-cm14-t8uv-k3es
19
vulnerability VCID-d99v-v9cj-zfh2
20
vulnerability VCID-dj88-f3p8-cfbn
21
vulnerability VCID-dsu7-jjjq-f3e1
22
vulnerability VCID-eajg-ctpd-2bby
23
vulnerability VCID-ekfd-wp8z-d7e1
24
vulnerability VCID-f4bv-pzdy-dfcb
25
vulnerability VCID-f963-qur3-2qb7
26
vulnerability VCID-g4uc-qeb6-myed
27
vulnerability VCID-gcnj-6qb6-pbgz
28
vulnerability VCID-gv1b-xtv4-4yg3
29
vulnerability VCID-h6y3-7gsq-skh2
30
vulnerability VCID-he5m-6wj4-rbhc
31
vulnerability VCID-hhmn-yz5p-xkap
32
vulnerability VCID-j77k-hjgx-5kc5
33
vulnerability VCID-k8af-cg9k-87a9
34
vulnerability VCID-mh4f-vtfj-hbb1
35
vulnerability VCID-mnz3-rj21-67ad
36
vulnerability VCID-n15v-ta9h-6ffb
37
vulnerability VCID-n7ng-zkkb-2qaz
38
vulnerability VCID-pmzz-9rws-4ud5
39
vulnerability VCID-pss5-as4b-cyf2
40
vulnerability VCID-px44-19tj-h7aa
41
vulnerability VCID-q8hy-wjd9-nbgp
42
vulnerability VCID-s53a-f91p-huf4
43
vulnerability VCID-s55j-8hbt-akhn
44
vulnerability VCID-s64f-x81f-b7ce
45
vulnerability VCID-stzu-sxe6-5yf5
46
vulnerability VCID-swnc-ke6h-ekew
47
vulnerability VCID-t1n7-eswt-73gw
48
vulnerability VCID-t3jn-vwbx-u7cr
49
vulnerability VCID-taj6-zj2n-5kg8
50
vulnerability VCID-tnjd-pyys-akav
51
vulnerability VCID-vxry-uvph-kbfd
52
vulnerability VCID-vyvy-y3cw-hbgr
53
vulnerability VCID-wea9-egep-h7g5
54
vulnerability VCID-xa4m-xpa9-v7h8
55
vulnerability VCID-xh7y-56vy-5ud8
56
vulnerability VCID-y32z-2d3f-gkgw
57
vulnerability VCID-zdq2-dhb2-6kaq
58
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.21
1
url pkg:composer/typo3/cms-core@9.5.2
purl pkg:composer/typo3/cms-core@9.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21e8-x7mp-hugk
1
vulnerability VCID-2meq-x4kd-bbdn
2
vulnerability VCID-2mn6-mdmz-4yd9
3
vulnerability VCID-3n2r-awja-dug9
4
vulnerability VCID-3v4n-fzxa-bfaw
5
vulnerability VCID-461j-9hrc-gfbc
6
vulnerability VCID-4jpa-6fqh-hbfg
7
vulnerability VCID-4mkw-tv16-jyca
8
vulnerability VCID-4t9s-p25a-cfas
9
vulnerability VCID-543x-cnbz-1kb9
10
vulnerability VCID-551q-gpyd-ffe8
11
vulnerability VCID-58js-jzm4-4fc7
12
vulnerability VCID-5jgb-dsyx-hyb4
13
vulnerability VCID-5kzs-ex81-bbaj
14
vulnerability VCID-5paq-5frf-43ed
15
vulnerability VCID-5u4q-m66t-wqcj
16
vulnerability VCID-65ue-7jd9-23gf
17
vulnerability VCID-6a9t-8dmn-s3bv
18
vulnerability VCID-8d2m-1ffv-jqe1
19
vulnerability VCID-9g62-zd1x-3bdg
20
vulnerability VCID-9gpp-ez8w-rqav
21
vulnerability VCID-9x6r-56xm-n7h7
22
vulnerability VCID-9zqs-hjay-fkev
23
vulnerability VCID-a49c-fqrj-nbb3
24
vulnerability VCID-axaf-45kr-kbfe
25
vulnerability VCID-axvk-13qf-tka7
26
vulnerability VCID-b6er-h7dm-3bev
27
vulnerability VCID-bajy-qbwq-fufn
28
vulnerability VCID-cm14-t8uv-k3es
29
vulnerability VCID-d8d1-sat6-muhe
30
vulnerability VCID-d99v-v9cj-zfh2
31
vulnerability VCID-dj88-f3p8-cfbn
32
vulnerability VCID-dmzb-gkdn-6bcm
33
vulnerability VCID-dsu7-jjjq-f3e1
34
vulnerability VCID-e32h-8q61-hbgc
35
vulnerability VCID-eajg-ctpd-2bby
36
vulnerability VCID-ekfd-wp8z-d7e1
37
vulnerability VCID-f4bv-pzdy-dfcb
38
vulnerability VCID-f963-qur3-2qb7
39
vulnerability VCID-g4uc-qeb6-myed
40
vulnerability VCID-gcnj-6qb6-pbgz
41
vulnerability VCID-gv1b-xtv4-4yg3
42
vulnerability VCID-h6y3-7gsq-skh2
43
vulnerability VCID-he5m-6wj4-rbhc
44
vulnerability VCID-hhmn-yz5p-xkap
45
vulnerability VCID-k8af-cg9k-87a9
46
vulnerability VCID-kj9x-psfz-2ug1
47
vulnerability VCID-mh4f-vtfj-hbb1
48
vulnerability VCID-mnz3-rj21-67ad
49
vulnerability VCID-mud2-s4rc-fuf6
50
vulnerability VCID-n15v-ta9h-6ffb
51
vulnerability VCID-n7ng-zkkb-2qaz
52
vulnerability VCID-nubu-f1sc-gbes
53
vulnerability VCID-nxq4-m52q-yuh4
54
vulnerability VCID-p715-yexd-jfgc
55
vulnerability VCID-phgh-sd4m-zbdx
56
vulnerability VCID-pmzz-9rws-4ud5
57
vulnerability VCID-pss5-as4b-cyf2
58
vulnerability VCID-px44-19tj-h7aa
59
vulnerability VCID-q8hy-wjd9-nbgp
60
vulnerability VCID-raxk-rm9v-hubn
61
vulnerability VCID-remd-55jh-r3g5
62
vulnerability VCID-s53a-f91p-huf4
63
vulnerability VCID-s55j-8hbt-akhn
64
vulnerability VCID-s64f-x81f-b7ce
65
vulnerability VCID-stzu-sxe6-5yf5
66
vulnerability VCID-sw7v-fbjk-13hy
67
vulnerability VCID-swnc-ke6h-ekew
68
vulnerability VCID-t1n7-eswt-73gw
69
vulnerability VCID-t3jn-vwbx-u7cr
70
vulnerability VCID-taj6-zj2n-5kg8
71
vulnerability VCID-tnjd-pyys-akav
72
vulnerability VCID-u9bx-8e86-wbew
73
vulnerability VCID-ve7g-8st5-wffb
74
vulnerability VCID-vxry-uvph-kbfd
75
vulnerability VCID-vyvy-y3cw-hbgr
76
vulnerability VCID-w13x-3rp9-wyej
77
vulnerability VCID-wea9-egep-h7g5
78
vulnerability VCID-xa4m-xpa9-v7h8
79
vulnerability VCID-xh7y-56vy-5ud8
80
vulnerability VCID-xtdg-uj46-rkcm
81
vulnerability VCID-xy6y-312d-rygj
82
vulnerability VCID-y32z-2d3f-gkgw
83
vulnerability VCID-yzx1-4psv-7bhr
84
vulnerability VCID-zdq2-dhb2-6kaq
85
vulnerability VCID-zkea-ge1t-z7gn
86
vulnerability VCID-zn99-ywte-33g6
87
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.2
aliases GHSA-29m4-mx89-3mjg
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6xmj-wbea-r7ex
14
url VCID-9g62-zd1x-3bdg
vulnerability_id VCID-9g62-zd1x-3bdg
summary 
TYPO3 Vulnerable to Insecure Deserialization
TYPO3 8.x through 8.7.26 and 9.x through 9.5.7 allows Deserialization of Untrusted Data.
references
0
reference_url http://github.com/TYPO3/typo3/commit/647aa7afa582983cddc547fa106d31e2b1ef34fe
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url http://github.com/TYPO3/typo3/commit/647aa7afa582983cddc547fa106d31e2b1ef34fe
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-12747
reference_id
reference_type
scores
0
value 0.01559
scoring_system epss
scoring_elements 0.81506
published_at 2026-04-18T12:55:00Z
1
value 0.01559
scoring_system epss
scoring_elements 0.81403
published_at 2026-04-01T12:55:00Z
2
value 0.01559
scoring_system epss
scoring_elements 0.81412
published_at 2026-04-02T12:55:00Z
3
value 0.01559
scoring_system epss
scoring_elements 0.81435
published_at 2026-04-04T12:55:00Z
4
value 0.01559
scoring_system epss
scoring_elements 0.81433
published_at 2026-04-07T12:55:00Z
5
value 0.01559
scoring_system epss
scoring_elements 0.81461
published_at 2026-04-08T12:55:00Z
6
value 0.01559
scoring_system epss
scoring_elements 0.81467
published_at 2026-04-09T12:55:00Z
7
value 0.01559
scoring_system epss
scoring_elements 0.81488
published_at 2026-04-11T12:55:00Z
8
value 0.01559
scoring_system epss
scoring_elements 0.81475
published_at 2026-04-12T12:55:00Z
9
value 0.01559
scoring_system epss
scoring_elements 0.81468
published_at 2026-04-13T12:55:00Z
10
value 0.01559
scoring_system epss
scoring_elements 0.81505
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-12747
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2019-12747.yaml
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2019-12747.yaml
3
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2019-12747.yaml
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2019-12747.yaml
4
reference_url https://github.com/TYPO3-CMS/core
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-12747
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-12747
6
reference_url https://typo3.org/cms/release-news/typo3-8-release-notes
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://typo3.org/cms/release-news/typo3-8-release-notes
7
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-020
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2019-020
8
reference_url https://github.com/advisories/GHSA-86hp-xrhj-fhpq
reference_id GHSA-86hp-xrhj-fhpq
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-86hp-xrhj-fhpq
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.27
purl pkg:composer/typo3/cms-core@8.7.27
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3n2r-awja-dug9
1
vulnerability VCID-4jpa-6fqh-hbfg
2
vulnerability VCID-5jgb-dsyx-hyb4
3
vulnerability VCID-5paq-5frf-43ed
4
vulnerability VCID-5u4q-m66t-wqcj
5
vulnerability VCID-axvk-13qf-tka7
6
vulnerability VCID-b6er-h7dm-3bev
7
vulnerability VCID-bajy-qbwq-fufn
8
vulnerability VCID-dsu7-jjjq-f3e1
9
vulnerability VCID-ekfd-wp8z-d7e1
10
vulnerability VCID-f963-qur3-2qb7
11
vulnerability VCID-g4uc-qeb6-myed
12
vulnerability VCID-gcnj-6qb6-pbgz
13
vulnerability VCID-gv1b-xtv4-4yg3
14
vulnerability VCID-h6y3-7gsq-skh2
15
vulnerability VCID-he5m-6wj4-rbhc
16
vulnerability VCID-hhmn-yz5p-xkap
17
vulnerability VCID-mnz3-rj21-67ad
18
vulnerability VCID-n15v-ta9h-6ffb
19
vulnerability VCID-n7ng-zkkb-2qaz
20
vulnerability VCID-s55j-8hbt-akhn
21
vulnerability VCID-s64f-x81f-b7ce
22
vulnerability VCID-swnc-ke6h-ekew
23
vulnerability VCID-t1n7-eswt-73gw
24
vulnerability VCID-t3jn-vwbx-u7cr
25
vulnerability VCID-taj6-zj2n-5kg8
26
vulnerability VCID-tnjd-pyys-akav
27
vulnerability VCID-vyvy-y3cw-hbgr
28
vulnerability VCID-xa4m-xpa9-v7h8
29
vulnerability VCID-xh7y-56vy-5ud8
30
vulnerability VCID-y32z-2d3f-gkgw
31
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.27
1
url pkg:composer/typo3/cms-core@9.5.8
purl pkg:composer/typo3/cms-core@9.5.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mn6-mdmz-4yd9
1
vulnerability VCID-3n2r-awja-dug9
2
vulnerability VCID-4jpa-6fqh-hbfg
3
vulnerability VCID-4t9s-p25a-cfas
4
vulnerability VCID-543x-cnbz-1kb9
5
vulnerability VCID-58js-jzm4-4fc7
6
vulnerability VCID-5jgb-dsyx-hyb4
7
vulnerability VCID-5kzs-ex81-bbaj
8
vulnerability VCID-5paq-5frf-43ed
9
vulnerability VCID-5u4q-m66t-wqcj
10
vulnerability VCID-65ue-7jd9-23gf
11
vulnerability VCID-6a9t-8dmn-s3bv
12
vulnerability VCID-8d2m-1ffv-jqe1
13
vulnerability VCID-a49c-fqrj-nbb3
14
vulnerability VCID-axvk-13qf-tka7
15
vulnerability VCID-b6er-h7dm-3bev
16
vulnerability VCID-bajy-qbwq-fufn
17
vulnerability VCID-d8d1-sat6-muhe
18
vulnerability VCID-dsu7-jjjq-f3e1
19
vulnerability VCID-e32h-8q61-hbgc
20
vulnerability VCID-ekfd-wp8z-d7e1
21
vulnerability VCID-f963-qur3-2qb7
22
vulnerability VCID-g4uc-qeb6-myed
23
vulnerability VCID-gcnj-6qb6-pbgz
24
vulnerability VCID-gv1b-xtv4-4yg3
25
vulnerability VCID-h6y3-7gsq-skh2
26
vulnerability VCID-he5m-6wj4-rbhc
27
vulnerability VCID-hhmn-yz5p-xkap
28
vulnerability VCID-mnz3-rj21-67ad
29
vulnerability VCID-mud2-s4rc-fuf6
30
vulnerability VCID-n15v-ta9h-6ffb
31
vulnerability VCID-n7ng-zkkb-2qaz
32
vulnerability VCID-nubu-f1sc-gbes
33
vulnerability VCID-phgh-sd4m-zbdx
34
vulnerability VCID-remd-55jh-r3g5
35
vulnerability VCID-s55j-8hbt-akhn
36
vulnerability VCID-s64f-x81f-b7ce
37
vulnerability VCID-sw7v-fbjk-13hy
38
vulnerability VCID-swnc-ke6h-ekew
39
vulnerability VCID-t1n7-eswt-73gw
40
vulnerability VCID-t3jn-vwbx-u7cr
41
vulnerability VCID-taj6-zj2n-5kg8
42
vulnerability VCID-tnjd-pyys-akav
43
vulnerability VCID-ve7g-8st5-wffb
44
vulnerability VCID-vyvy-y3cw-hbgr
45
vulnerability VCID-w13x-3rp9-wyej
46
vulnerability VCID-xa4m-xpa9-v7h8
47
vulnerability VCID-xh7y-56vy-5ud8
48
vulnerability VCID-xy6y-312d-rygj
49
vulnerability VCID-y32z-2d3f-gkgw
50
vulnerability VCID-zdq2-dhb2-6kaq
51
vulnerability VCID-zn99-ywte-33g6
52
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.8
aliases CVE-2019-12747, GHSA-86hp-xrhj-fhpq
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-9g62-zd1x-3bdg
15
url VCID-9gpp-ez8w-rqav
vulnerability_id VCID-9gpp-ez8w-rqav
summary 
Cross-site Scripting
Cross-Site Scripting in Fluid Engine.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-013/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-013/
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.25
purl pkg:composer/typo3/cms-core@8.7.25
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2meq-x4kd-bbdn
1
vulnerability VCID-3n2r-awja-dug9
2
vulnerability VCID-3v4n-fzxa-bfaw
3
vulnerability VCID-4jpa-6fqh-hbfg
4
vulnerability VCID-5jgb-dsyx-hyb4
5
vulnerability VCID-5paq-5frf-43ed
6
vulnerability VCID-5u4q-m66t-wqcj
7
vulnerability VCID-9g62-zd1x-3bdg
8
vulnerability VCID-9x6r-56xm-n7h7
9
vulnerability VCID-axvk-13qf-tka7
10
vulnerability VCID-b6er-h7dm-3bev
11
vulnerability VCID-bajy-qbwq-fufn
12
vulnerability VCID-cm14-t8uv-k3es
13
vulnerability VCID-dsu7-jjjq-f3e1
14
vulnerability VCID-ekfd-wp8z-d7e1
15
vulnerability VCID-f1rq-qudk-zkf2
16
vulnerability VCID-f963-qur3-2qb7
17
vulnerability VCID-g4uc-qeb6-myed
18
vulnerability VCID-gcnj-6qb6-pbgz
19
vulnerability VCID-gv1b-xtv4-4yg3
20
vulnerability VCID-h6y3-7gsq-skh2
21
vulnerability VCID-he5m-6wj4-rbhc
22
vulnerability VCID-hhmn-yz5p-xkap
23
vulnerability VCID-mnz3-rj21-67ad
24
vulnerability VCID-n15v-ta9h-6ffb
25
vulnerability VCID-n7ng-zkkb-2qaz
26
vulnerability VCID-pmzz-9rws-4ud5
27
vulnerability VCID-s53a-f91p-huf4
28
vulnerability VCID-s55j-8hbt-akhn
29
vulnerability VCID-s64f-x81f-b7ce
30
vulnerability VCID-stzu-sxe6-5yf5
31
vulnerability VCID-swnc-ke6h-ekew
32
vulnerability VCID-t1n7-eswt-73gw
33
vulnerability VCID-t3jn-vwbx-u7cr
34
vulnerability VCID-taj6-zj2n-5kg8
35
vulnerability VCID-tnjd-pyys-akav
36
vulnerability VCID-vxry-uvph-kbfd
37
vulnerability VCID-vyvy-y3cw-hbgr
38
vulnerability VCID-xa4m-xpa9-v7h8
39
vulnerability VCID-xh7y-56vy-5ud8
40
vulnerability VCID-y32z-2d3f-gkgw
41
vulnerability VCID-zdq2-dhb2-6kaq
42
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.25
1
url pkg:composer/typo3/cms-core@9.5.6
purl pkg:composer/typo3/cms-core@9.5.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2meq-x4kd-bbdn
1
vulnerability VCID-2mn6-mdmz-4yd9
2
vulnerability VCID-3n2r-awja-dug9
3
vulnerability VCID-3v4n-fzxa-bfaw
4
vulnerability VCID-4jpa-6fqh-hbfg
5
vulnerability VCID-4mkw-tv16-jyca
6
vulnerability VCID-4t9s-p25a-cfas
7
vulnerability VCID-543x-cnbz-1kb9
8
vulnerability VCID-58js-jzm4-4fc7
9
vulnerability VCID-5jgb-dsyx-hyb4
10
vulnerability VCID-5kzs-ex81-bbaj
11
vulnerability VCID-5paq-5frf-43ed
12
vulnerability VCID-5u4q-m66t-wqcj
13
vulnerability VCID-65ue-7jd9-23gf
14
vulnerability VCID-6a9t-8dmn-s3bv
15
vulnerability VCID-8d2m-1ffv-jqe1
16
vulnerability VCID-9g62-zd1x-3bdg
17
vulnerability VCID-9x6r-56xm-n7h7
18
vulnerability VCID-a49c-fqrj-nbb3
19
vulnerability VCID-axvk-13qf-tka7
20
vulnerability VCID-b6er-h7dm-3bev
21
vulnerability VCID-bajy-qbwq-fufn
22
vulnerability VCID-cm14-t8uv-k3es
23
vulnerability VCID-d8d1-sat6-muhe
24
vulnerability VCID-dmzb-gkdn-6bcm
25
vulnerability VCID-dsu7-jjjq-f3e1
26
vulnerability VCID-e32h-8q61-hbgc
27
vulnerability VCID-ekfd-wp8z-d7e1
28
vulnerability VCID-f1rq-qudk-zkf2
29
vulnerability VCID-f963-qur3-2qb7
30
vulnerability VCID-g4uc-qeb6-myed
31
vulnerability VCID-gcnj-6qb6-pbgz
32
vulnerability VCID-gv1b-xtv4-4yg3
33
vulnerability VCID-h6y3-7gsq-skh2
34
vulnerability VCID-he5m-6wj4-rbhc
35
vulnerability VCID-hhmn-yz5p-xkap
36
vulnerability VCID-mnz3-rj21-67ad
37
vulnerability VCID-mud2-s4rc-fuf6
38
vulnerability VCID-n15v-ta9h-6ffb
39
vulnerability VCID-n7ng-zkkb-2qaz
40
vulnerability VCID-nubu-f1sc-gbes
41
vulnerability VCID-phgh-sd4m-zbdx
42
vulnerability VCID-pmzz-9rws-4ud5
43
vulnerability VCID-remd-55jh-r3g5
44
vulnerability VCID-s53a-f91p-huf4
45
vulnerability VCID-s55j-8hbt-akhn
46
vulnerability VCID-s64f-x81f-b7ce
47
vulnerability VCID-stzu-sxe6-5yf5
48
vulnerability VCID-sw7v-fbjk-13hy
49
vulnerability VCID-swnc-ke6h-ekew
50
vulnerability VCID-t1n7-eswt-73gw
51
vulnerability VCID-t3jn-vwbx-u7cr
52
vulnerability VCID-taj6-zj2n-5kg8
53
vulnerability VCID-tnjd-pyys-akav
54
vulnerability VCID-u9bx-8e86-wbew
55
vulnerability VCID-ve7g-8st5-wffb
56
vulnerability VCID-vxry-uvph-kbfd
57
vulnerability VCID-vyvy-y3cw-hbgr
58
vulnerability VCID-w13x-3rp9-wyej
59
vulnerability VCID-xa4m-xpa9-v7h8
60
vulnerability VCID-xh7y-56vy-5ud8
61
vulnerability VCID-xtdg-uj46-rkcm
62
vulnerability VCID-xy6y-312d-rygj
63
vulnerability VCID-y32z-2d3f-gkgw
64
vulnerability VCID-zdq2-dhb2-6kaq
65
vulnerability VCID-zkea-ge1t-z7gn
66
vulnerability VCID-zn99-ywte-33g6
67
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.6
aliases 2019-05-07-1
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-9gpp-ez8w-rqav
16
url VCID-9x6r-56xm-n7h7
vulnerability_id VCID-9x6r-56xm-n7h7
summary 
TYPO3 Information Disclosure in Backend User Interface
The element information component used to display properties of a certain record is susceptible to information disclosure. The list of references from or to the record is not properly checked for the backend user’s permissions. A valid backend user account is needed in order to exploit this vulnerability.
references
0
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2019-06-25-1.yaml
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2019-06-25-1.yaml
1
reference_url https://github.com/TYPO3-CMS/core
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core
2
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-014
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2019-014
3
reference_url https://github.com/advisories/GHSA-rv8r-8mh5-5376
reference_id GHSA-rv8r-8mh5-5376
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-rv8r-8mh5-5376
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.27
purl pkg:composer/typo3/cms-core@8.7.27
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3n2r-awja-dug9
1
vulnerability VCID-4jpa-6fqh-hbfg
2
vulnerability VCID-5jgb-dsyx-hyb4
3
vulnerability VCID-5paq-5frf-43ed
4
vulnerability VCID-5u4q-m66t-wqcj
5
vulnerability VCID-axvk-13qf-tka7
6
vulnerability VCID-b6er-h7dm-3bev
7
vulnerability VCID-bajy-qbwq-fufn
8
vulnerability VCID-dsu7-jjjq-f3e1
9
vulnerability VCID-ekfd-wp8z-d7e1
10
vulnerability VCID-f963-qur3-2qb7
11
vulnerability VCID-g4uc-qeb6-myed
12
vulnerability VCID-gcnj-6qb6-pbgz
13
vulnerability VCID-gv1b-xtv4-4yg3
14
vulnerability VCID-h6y3-7gsq-skh2
15
vulnerability VCID-he5m-6wj4-rbhc
16
vulnerability VCID-hhmn-yz5p-xkap
17
vulnerability VCID-mnz3-rj21-67ad
18
vulnerability VCID-n15v-ta9h-6ffb
19
vulnerability VCID-n7ng-zkkb-2qaz
20
vulnerability VCID-s55j-8hbt-akhn
21
vulnerability VCID-s64f-x81f-b7ce
22
vulnerability VCID-swnc-ke6h-ekew
23
vulnerability VCID-t1n7-eswt-73gw
24
vulnerability VCID-t3jn-vwbx-u7cr
25
vulnerability VCID-taj6-zj2n-5kg8
26
vulnerability VCID-tnjd-pyys-akav
27
vulnerability VCID-vyvy-y3cw-hbgr
28
vulnerability VCID-xa4m-xpa9-v7h8
29
vulnerability VCID-xh7y-56vy-5ud8
30
vulnerability VCID-y32z-2d3f-gkgw
31
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.27
1
url pkg:composer/typo3/cms-core@9.5.8
purl pkg:composer/typo3/cms-core@9.5.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mn6-mdmz-4yd9
1
vulnerability VCID-3n2r-awja-dug9
2
vulnerability VCID-4jpa-6fqh-hbfg
3
vulnerability VCID-4t9s-p25a-cfas
4
vulnerability VCID-543x-cnbz-1kb9
5
vulnerability VCID-58js-jzm4-4fc7
6
vulnerability VCID-5jgb-dsyx-hyb4
7
vulnerability VCID-5kzs-ex81-bbaj
8
vulnerability VCID-5paq-5frf-43ed
9
vulnerability VCID-5u4q-m66t-wqcj
10
vulnerability VCID-65ue-7jd9-23gf
11
vulnerability VCID-6a9t-8dmn-s3bv
12
vulnerability VCID-8d2m-1ffv-jqe1
13
vulnerability VCID-a49c-fqrj-nbb3
14
vulnerability VCID-axvk-13qf-tka7
15
vulnerability VCID-b6er-h7dm-3bev
16
vulnerability VCID-bajy-qbwq-fufn
17
vulnerability VCID-d8d1-sat6-muhe
18
vulnerability VCID-dsu7-jjjq-f3e1
19
vulnerability VCID-e32h-8q61-hbgc
20
vulnerability VCID-ekfd-wp8z-d7e1
21
vulnerability VCID-f963-qur3-2qb7
22
vulnerability VCID-g4uc-qeb6-myed
23
vulnerability VCID-gcnj-6qb6-pbgz
24
vulnerability VCID-gv1b-xtv4-4yg3
25
vulnerability VCID-h6y3-7gsq-skh2
26
vulnerability VCID-he5m-6wj4-rbhc
27
vulnerability VCID-hhmn-yz5p-xkap
28
vulnerability VCID-mnz3-rj21-67ad
29
vulnerability VCID-mud2-s4rc-fuf6
30
vulnerability VCID-n15v-ta9h-6ffb
31
vulnerability VCID-n7ng-zkkb-2qaz
32
vulnerability VCID-nubu-f1sc-gbes
33
vulnerability VCID-phgh-sd4m-zbdx
34
vulnerability VCID-remd-55jh-r3g5
35
vulnerability VCID-s55j-8hbt-akhn
36
vulnerability VCID-s64f-x81f-b7ce
37
vulnerability VCID-sw7v-fbjk-13hy
38
vulnerability VCID-swnc-ke6h-ekew
39
vulnerability VCID-t1n7-eswt-73gw
40
vulnerability VCID-t3jn-vwbx-u7cr
41
vulnerability VCID-taj6-zj2n-5kg8
42
vulnerability VCID-tnjd-pyys-akav
43
vulnerability VCID-ve7g-8st5-wffb
44
vulnerability VCID-vyvy-y3cw-hbgr
45
vulnerability VCID-w13x-3rp9-wyej
46
vulnerability VCID-xa4m-xpa9-v7h8
47
vulnerability VCID-xh7y-56vy-5ud8
48
vulnerability VCID-xy6y-312d-rygj
49
vulnerability VCID-y32z-2d3f-gkgw
50
vulnerability VCID-zdq2-dhb2-6kaq
51
vulnerability VCID-zn99-ywte-33g6
52
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.8
aliases GHSA-rv8r-8mh5-5376
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-9x6r-56xm-n7h7
17
url VCID-9zqs-hjay-fkev
vulnerability_id VCID-9zqs-hjay-fkev
summary 
TYPO3 Cross-Site Scripting in Fluid ViewHelpers
Failing to properly encode user input, templates using built-in Fluid ViewHelpers are vulnerable to cross-site scripting.
references
0
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2019-01-22-4.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2019-01-22-4.yaml
1
reference_url https://github.com/TYPO3-CMS/core
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core
2
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-005
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2019-005
3
reference_url https://github.com/advisories/GHSA-22q7-cg4r-p9mx
reference_id GHSA-22q7-cg4r-p9mx
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-22q7-cg4r-p9mx
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.23
purl pkg:composer/typo3/cms-core@8.7.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2meq-x4kd-bbdn
1
vulnerability VCID-3n2r-awja-dug9
2
vulnerability VCID-3v4n-fzxa-bfaw
3
vulnerability VCID-4jpa-6fqh-hbfg
4
vulnerability VCID-5jgb-dsyx-hyb4
5
vulnerability VCID-5paq-5frf-43ed
6
vulnerability VCID-5u4q-m66t-wqcj
7
vulnerability VCID-9g62-zd1x-3bdg
8
vulnerability VCID-9gpp-ez8w-rqav
9
vulnerability VCID-9x6r-56xm-n7h7
10
vulnerability VCID-axvk-13qf-tka7
11
vulnerability VCID-b6er-h7dm-3bev
12
vulnerability VCID-bajy-qbwq-fufn
13
vulnerability VCID-cm14-t8uv-k3es
14
vulnerability VCID-dsu7-jjjq-f3e1
15
vulnerability VCID-eajg-ctpd-2bby
16
vulnerability VCID-ekfd-wp8z-d7e1
17
vulnerability VCID-f963-qur3-2qb7
18
vulnerability VCID-g4uc-qeb6-myed
19
vulnerability VCID-gcnj-6qb6-pbgz
20
vulnerability VCID-gv1b-xtv4-4yg3
21
vulnerability VCID-h6y3-7gsq-skh2
22
vulnerability VCID-he5m-6wj4-rbhc
23
vulnerability VCID-hhmn-yz5p-xkap
24
vulnerability VCID-mnz3-rj21-67ad
25
vulnerability VCID-n15v-ta9h-6ffb
26
vulnerability VCID-n7ng-zkkb-2qaz
27
vulnerability VCID-pmzz-9rws-4ud5
28
vulnerability VCID-pss5-as4b-cyf2
29
vulnerability VCID-q8hy-wjd9-nbgp
30
vulnerability VCID-s53a-f91p-huf4
31
vulnerability VCID-s55j-8hbt-akhn
32
vulnerability VCID-s64f-x81f-b7ce
33
vulnerability VCID-stzu-sxe6-5yf5
34
vulnerability VCID-swnc-ke6h-ekew
35
vulnerability VCID-t1n7-eswt-73gw
36
vulnerability VCID-t3jn-vwbx-u7cr
37
vulnerability VCID-taj6-zj2n-5kg8
38
vulnerability VCID-tnjd-pyys-akav
39
vulnerability VCID-vxry-uvph-kbfd
40
vulnerability VCID-vyvy-y3cw-hbgr
41
vulnerability VCID-xa4m-xpa9-v7h8
42
vulnerability VCID-xh7y-56vy-5ud8
43
vulnerability VCID-y32z-2d3f-gkgw
44
vulnerability VCID-zdq2-dhb2-6kaq
45
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.23
1
url pkg:composer/typo3/cms-core@9.5.4
purl pkg:composer/typo3/cms-core@9.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2meq-x4kd-bbdn
1
vulnerability VCID-2mn6-mdmz-4yd9
2
vulnerability VCID-3n2r-awja-dug9
3
vulnerability VCID-3v4n-fzxa-bfaw
4
vulnerability VCID-461j-9hrc-gfbc
5
vulnerability VCID-4jpa-6fqh-hbfg
6
vulnerability VCID-4mkw-tv16-jyca
7
vulnerability VCID-4t9s-p25a-cfas
8
vulnerability VCID-543x-cnbz-1kb9
9
vulnerability VCID-58js-jzm4-4fc7
10
vulnerability VCID-5jgb-dsyx-hyb4
11
vulnerability VCID-5kzs-ex81-bbaj
12
vulnerability VCID-5paq-5frf-43ed
13
vulnerability VCID-5u4q-m66t-wqcj
14
vulnerability VCID-65ue-7jd9-23gf
15
vulnerability VCID-6a9t-8dmn-s3bv
16
vulnerability VCID-8d2m-1ffv-jqe1
17
vulnerability VCID-9g62-zd1x-3bdg
18
vulnerability VCID-9gpp-ez8w-rqav
19
vulnerability VCID-9x6r-56xm-n7h7
20
vulnerability VCID-a49c-fqrj-nbb3
21
vulnerability VCID-axvk-13qf-tka7
22
vulnerability VCID-b6er-h7dm-3bev
23
vulnerability VCID-bajy-qbwq-fufn
24
vulnerability VCID-cm14-t8uv-k3es
25
vulnerability VCID-d8d1-sat6-muhe
26
vulnerability VCID-dmzb-gkdn-6bcm
27
vulnerability VCID-dsu7-jjjq-f3e1
28
vulnerability VCID-e32h-8q61-hbgc
29
vulnerability VCID-eajg-ctpd-2bby
30
vulnerability VCID-ekfd-wp8z-d7e1
31
vulnerability VCID-f963-qur3-2qb7
32
vulnerability VCID-g4uc-qeb6-myed
33
vulnerability VCID-gcnj-6qb6-pbgz
34
vulnerability VCID-gv1b-xtv4-4yg3
35
vulnerability VCID-h6y3-7gsq-skh2
36
vulnerability VCID-he5m-6wj4-rbhc
37
vulnerability VCID-hhmn-yz5p-xkap
38
vulnerability VCID-kj9x-psfz-2ug1
39
vulnerability VCID-mnz3-rj21-67ad
40
vulnerability VCID-mud2-s4rc-fuf6
41
vulnerability VCID-n15v-ta9h-6ffb
42
vulnerability VCID-n7ng-zkkb-2qaz
43
vulnerability VCID-nubu-f1sc-gbes
44
vulnerability VCID-nxq4-m52q-yuh4
45
vulnerability VCID-phgh-sd4m-zbdx
46
vulnerability VCID-pmzz-9rws-4ud5
47
vulnerability VCID-pss5-as4b-cyf2
48
vulnerability VCID-q8hy-wjd9-nbgp
49
vulnerability VCID-raxk-rm9v-hubn
50
vulnerability VCID-remd-55jh-r3g5
51
vulnerability VCID-s53a-f91p-huf4
52
vulnerability VCID-s55j-8hbt-akhn
53
vulnerability VCID-s64f-x81f-b7ce
54
vulnerability VCID-stzu-sxe6-5yf5
55
vulnerability VCID-sw7v-fbjk-13hy
56
vulnerability VCID-swnc-ke6h-ekew
57
vulnerability VCID-t1n7-eswt-73gw
58
vulnerability VCID-t3jn-vwbx-u7cr
59
vulnerability VCID-taj6-zj2n-5kg8
60
vulnerability VCID-tnjd-pyys-akav
61
vulnerability VCID-u9bx-8e86-wbew
62
vulnerability VCID-ve7g-8st5-wffb
63
vulnerability VCID-vxry-uvph-kbfd
64
vulnerability VCID-vyvy-y3cw-hbgr
65
vulnerability VCID-w13x-3rp9-wyej
66
vulnerability VCID-xa4m-xpa9-v7h8
67
vulnerability VCID-xh7y-56vy-5ud8
68
vulnerability VCID-xtdg-uj46-rkcm
69
vulnerability VCID-xy6y-312d-rygj
70
vulnerability VCID-y32z-2d3f-gkgw
71
vulnerability VCID-zdq2-dhb2-6kaq
72
vulnerability VCID-zkea-ge1t-z7gn
73
vulnerability VCID-zn99-ywte-33g6
74
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.4
aliases GHSA-22q7-cg4r-p9mx
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-9zqs-hjay-fkev
18
url VCID-a563-vtwa-hkbr
vulnerability_id VCID-a563-vtwa-hkbr
summary 
TYPO3 Information Disclosure in Install Tool
The Install Tool exposes the current TYPO3 version number to non-authenticated users.
references
0
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2018-12-11-5.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2018-12-11-5.yaml
1
reference_url https://github.com/TYPO3-CMS/core
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core
2
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-010
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2018-010
3
reference_url https://github.com/advisories/GHSA-66c2-7g4p-wx4p
reference_id GHSA-66c2-7g4p-wx4p
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-66c2-7g4p-wx4p
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.21
purl pkg:composer/typo3/cms-core@8.7.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21e8-x7mp-hugk
1
vulnerability VCID-2meq-x4kd-bbdn
2
vulnerability VCID-3n2r-awja-dug9
3
vulnerability VCID-3v4n-fzxa-bfaw
4
vulnerability VCID-4jpa-6fqh-hbfg
5
vulnerability VCID-551q-gpyd-ffe8
6
vulnerability VCID-5jgb-dsyx-hyb4
7
vulnerability VCID-5mxm-88r9-hfey
8
vulnerability VCID-5paq-5frf-43ed
9
vulnerability VCID-5u4q-m66t-wqcj
10
vulnerability VCID-9g62-zd1x-3bdg
11
vulnerability VCID-9gpp-ez8w-rqav
12
vulnerability VCID-9x6r-56xm-n7h7
13
vulnerability VCID-9zqs-hjay-fkev
14
vulnerability VCID-axaf-45kr-kbfe
15
vulnerability VCID-axvk-13qf-tka7
16
vulnerability VCID-b6er-h7dm-3bev
17
vulnerability VCID-bajy-qbwq-fufn
18
vulnerability VCID-cm14-t8uv-k3es
19
vulnerability VCID-d99v-v9cj-zfh2
20
vulnerability VCID-dj88-f3p8-cfbn
21
vulnerability VCID-dsu7-jjjq-f3e1
22
vulnerability VCID-eajg-ctpd-2bby
23
vulnerability VCID-ekfd-wp8z-d7e1
24
vulnerability VCID-f4bv-pzdy-dfcb
25
vulnerability VCID-f963-qur3-2qb7
26
vulnerability VCID-g4uc-qeb6-myed
27
vulnerability VCID-gcnj-6qb6-pbgz
28
vulnerability VCID-gv1b-xtv4-4yg3
29
vulnerability VCID-h6y3-7gsq-skh2
30
vulnerability VCID-he5m-6wj4-rbhc
31
vulnerability VCID-hhmn-yz5p-xkap
32
vulnerability VCID-j77k-hjgx-5kc5
33
vulnerability VCID-k8af-cg9k-87a9
34
vulnerability VCID-mh4f-vtfj-hbb1
35
vulnerability VCID-mnz3-rj21-67ad
36
vulnerability VCID-n15v-ta9h-6ffb
37
vulnerability VCID-n7ng-zkkb-2qaz
38
vulnerability VCID-pmzz-9rws-4ud5
39
vulnerability VCID-pss5-as4b-cyf2
40
vulnerability VCID-px44-19tj-h7aa
41
vulnerability VCID-q8hy-wjd9-nbgp
42
vulnerability VCID-s53a-f91p-huf4
43
vulnerability VCID-s55j-8hbt-akhn
44
vulnerability VCID-s64f-x81f-b7ce
45
vulnerability VCID-stzu-sxe6-5yf5
46
vulnerability VCID-swnc-ke6h-ekew
47
vulnerability VCID-t1n7-eswt-73gw
48
vulnerability VCID-t3jn-vwbx-u7cr
49
vulnerability VCID-taj6-zj2n-5kg8
50
vulnerability VCID-tnjd-pyys-akav
51
vulnerability VCID-vxry-uvph-kbfd
52
vulnerability VCID-vyvy-y3cw-hbgr
53
vulnerability VCID-wea9-egep-h7g5
54
vulnerability VCID-xa4m-xpa9-v7h8
55
vulnerability VCID-xh7y-56vy-5ud8
56
vulnerability VCID-y32z-2d3f-gkgw
57
vulnerability VCID-zdq2-dhb2-6kaq
58
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.21
1
url pkg:composer/typo3/cms-core@9.5.2
purl pkg:composer/typo3/cms-core@9.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21e8-x7mp-hugk
1
vulnerability VCID-2meq-x4kd-bbdn
2
vulnerability VCID-2mn6-mdmz-4yd9
3
vulnerability VCID-3n2r-awja-dug9
4
vulnerability VCID-3v4n-fzxa-bfaw
5
vulnerability VCID-461j-9hrc-gfbc
6
vulnerability VCID-4jpa-6fqh-hbfg
7
vulnerability VCID-4mkw-tv16-jyca
8
vulnerability VCID-4t9s-p25a-cfas
9
vulnerability VCID-543x-cnbz-1kb9
10
vulnerability VCID-551q-gpyd-ffe8
11
vulnerability VCID-58js-jzm4-4fc7
12
vulnerability VCID-5jgb-dsyx-hyb4
13
vulnerability VCID-5kzs-ex81-bbaj
14
vulnerability VCID-5paq-5frf-43ed
15
vulnerability VCID-5u4q-m66t-wqcj
16
vulnerability VCID-65ue-7jd9-23gf
17
vulnerability VCID-6a9t-8dmn-s3bv
18
vulnerability VCID-8d2m-1ffv-jqe1
19
vulnerability VCID-9g62-zd1x-3bdg
20
vulnerability VCID-9gpp-ez8w-rqav
21
vulnerability VCID-9x6r-56xm-n7h7
22
vulnerability VCID-9zqs-hjay-fkev
23
vulnerability VCID-a49c-fqrj-nbb3
24
vulnerability VCID-axaf-45kr-kbfe
25
vulnerability VCID-axvk-13qf-tka7
26
vulnerability VCID-b6er-h7dm-3bev
27
vulnerability VCID-bajy-qbwq-fufn
28
vulnerability VCID-cm14-t8uv-k3es
29
vulnerability VCID-d8d1-sat6-muhe
30
vulnerability VCID-d99v-v9cj-zfh2
31
vulnerability VCID-dj88-f3p8-cfbn
32
vulnerability VCID-dmzb-gkdn-6bcm
33
vulnerability VCID-dsu7-jjjq-f3e1
34
vulnerability VCID-e32h-8q61-hbgc
35
vulnerability VCID-eajg-ctpd-2bby
36
vulnerability VCID-ekfd-wp8z-d7e1
37
vulnerability VCID-f4bv-pzdy-dfcb
38
vulnerability VCID-f963-qur3-2qb7
39
vulnerability VCID-g4uc-qeb6-myed
40
vulnerability VCID-gcnj-6qb6-pbgz
41
vulnerability VCID-gv1b-xtv4-4yg3
42
vulnerability VCID-h6y3-7gsq-skh2
43
vulnerability VCID-he5m-6wj4-rbhc
44
vulnerability VCID-hhmn-yz5p-xkap
45
vulnerability VCID-k8af-cg9k-87a9
46
vulnerability VCID-kj9x-psfz-2ug1
47
vulnerability VCID-mh4f-vtfj-hbb1
48
vulnerability VCID-mnz3-rj21-67ad
49
vulnerability VCID-mud2-s4rc-fuf6
50
vulnerability VCID-n15v-ta9h-6ffb
51
vulnerability VCID-n7ng-zkkb-2qaz
52
vulnerability VCID-nubu-f1sc-gbes
53
vulnerability VCID-nxq4-m52q-yuh4
54
vulnerability VCID-p715-yexd-jfgc
55
vulnerability VCID-phgh-sd4m-zbdx
56
vulnerability VCID-pmzz-9rws-4ud5
57
vulnerability VCID-pss5-as4b-cyf2
58
vulnerability VCID-px44-19tj-h7aa
59
vulnerability VCID-q8hy-wjd9-nbgp
60
vulnerability VCID-raxk-rm9v-hubn
61
vulnerability VCID-remd-55jh-r3g5
62
vulnerability VCID-s53a-f91p-huf4
63
vulnerability VCID-s55j-8hbt-akhn
64
vulnerability VCID-s64f-x81f-b7ce
65
vulnerability VCID-stzu-sxe6-5yf5
66
vulnerability VCID-sw7v-fbjk-13hy
67
vulnerability VCID-swnc-ke6h-ekew
68
vulnerability VCID-t1n7-eswt-73gw
69
vulnerability VCID-t3jn-vwbx-u7cr
70
vulnerability VCID-taj6-zj2n-5kg8
71
vulnerability VCID-tnjd-pyys-akav
72
vulnerability VCID-u9bx-8e86-wbew
73
vulnerability VCID-ve7g-8st5-wffb
74
vulnerability VCID-vxry-uvph-kbfd
75
vulnerability VCID-vyvy-y3cw-hbgr
76
vulnerability VCID-w13x-3rp9-wyej
77
vulnerability VCID-wea9-egep-h7g5
78
vulnerability VCID-xa4m-xpa9-v7h8
79
vulnerability VCID-xh7y-56vy-5ud8
80
vulnerability VCID-xtdg-uj46-rkcm
81
vulnerability VCID-xy6y-312d-rygj
82
vulnerability VCID-y32z-2d3f-gkgw
83
vulnerability VCID-yzx1-4psv-7bhr
84
vulnerability VCID-zdq2-dhb2-6kaq
85
vulnerability VCID-zkea-ge1t-z7gn
86
vulnerability VCID-zn99-ywte-33g6
87
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.2
aliases GHSA-66c2-7g4p-wx4p
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-a563-vtwa-hkbr
19
url VCID-axaf-45kr-kbfe
vulnerability_id VCID-axaf-45kr-kbfe
summary Security Misconfiguration for Backend User Accounts.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-002/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-002/
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.23
purl pkg:composer/typo3/cms-core@8.7.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2meq-x4kd-bbdn
1
vulnerability VCID-3n2r-awja-dug9
2
vulnerability VCID-3v4n-fzxa-bfaw
3
vulnerability VCID-4jpa-6fqh-hbfg
4
vulnerability VCID-5jgb-dsyx-hyb4
5
vulnerability VCID-5paq-5frf-43ed
6
vulnerability VCID-5u4q-m66t-wqcj
7
vulnerability VCID-9g62-zd1x-3bdg
8
vulnerability VCID-9gpp-ez8w-rqav
9
vulnerability VCID-9x6r-56xm-n7h7
10
vulnerability VCID-axvk-13qf-tka7
11
vulnerability VCID-b6er-h7dm-3bev
12
vulnerability VCID-bajy-qbwq-fufn
13
vulnerability VCID-cm14-t8uv-k3es
14
vulnerability VCID-dsu7-jjjq-f3e1
15
vulnerability VCID-eajg-ctpd-2bby
16
vulnerability VCID-ekfd-wp8z-d7e1
17
vulnerability VCID-f963-qur3-2qb7
18
vulnerability VCID-g4uc-qeb6-myed
19
vulnerability VCID-gcnj-6qb6-pbgz
20
vulnerability VCID-gv1b-xtv4-4yg3
21
vulnerability VCID-h6y3-7gsq-skh2
22
vulnerability VCID-he5m-6wj4-rbhc
23
vulnerability VCID-hhmn-yz5p-xkap
24
vulnerability VCID-mnz3-rj21-67ad
25
vulnerability VCID-n15v-ta9h-6ffb
26
vulnerability VCID-n7ng-zkkb-2qaz
27
vulnerability VCID-pmzz-9rws-4ud5
28
vulnerability VCID-pss5-as4b-cyf2
29
vulnerability VCID-q8hy-wjd9-nbgp
30
vulnerability VCID-s53a-f91p-huf4
31
vulnerability VCID-s55j-8hbt-akhn
32
vulnerability VCID-s64f-x81f-b7ce
33
vulnerability VCID-stzu-sxe6-5yf5
34
vulnerability VCID-swnc-ke6h-ekew
35
vulnerability VCID-t1n7-eswt-73gw
36
vulnerability VCID-t3jn-vwbx-u7cr
37
vulnerability VCID-taj6-zj2n-5kg8
38
vulnerability VCID-tnjd-pyys-akav
39
vulnerability VCID-vxry-uvph-kbfd
40
vulnerability VCID-vyvy-y3cw-hbgr
41
vulnerability VCID-xa4m-xpa9-v7h8
42
vulnerability VCID-xh7y-56vy-5ud8
43
vulnerability VCID-y32z-2d3f-gkgw
44
vulnerability VCID-zdq2-dhb2-6kaq
45
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.23
1
url pkg:composer/typo3/cms-core@9.5.4
purl pkg:composer/typo3/cms-core@9.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2meq-x4kd-bbdn
1
vulnerability VCID-2mn6-mdmz-4yd9
2
vulnerability VCID-3n2r-awja-dug9
3
vulnerability VCID-3v4n-fzxa-bfaw
4
vulnerability VCID-461j-9hrc-gfbc
5
vulnerability VCID-4jpa-6fqh-hbfg
6
vulnerability VCID-4mkw-tv16-jyca
7
vulnerability VCID-4t9s-p25a-cfas
8
vulnerability VCID-543x-cnbz-1kb9
9
vulnerability VCID-58js-jzm4-4fc7
10
vulnerability VCID-5jgb-dsyx-hyb4
11
vulnerability VCID-5kzs-ex81-bbaj
12
vulnerability VCID-5paq-5frf-43ed
13
vulnerability VCID-5u4q-m66t-wqcj
14
vulnerability VCID-65ue-7jd9-23gf
15
vulnerability VCID-6a9t-8dmn-s3bv
16
vulnerability VCID-8d2m-1ffv-jqe1
17
vulnerability VCID-9g62-zd1x-3bdg
18
vulnerability VCID-9gpp-ez8w-rqav
19
vulnerability VCID-9x6r-56xm-n7h7
20
vulnerability VCID-a49c-fqrj-nbb3
21
vulnerability VCID-axvk-13qf-tka7
22
vulnerability VCID-b6er-h7dm-3bev
23
vulnerability VCID-bajy-qbwq-fufn
24
vulnerability VCID-cm14-t8uv-k3es
25
vulnerability VCID-d8d1-sat6-muhe
26
vulnerability VCID-dmzb-gkdn-6bcm
27
vulnerability VCID-dsu7-jjjq-f3e1
28
vulnerability VCID-e32h-8q61-hbgc
29
vulnerability VCID-eajg-ctpd-2bby
30
vulnerability VCID-ekfd-wp8z-d7e1
31
vulnerability VCID-f963-qur3-2qb7
32
vulnerability VCID-g4uc-qeb6-myed
33
vulnerability VCID-gcnj-6qb6-pbgz
34
vulnerability VCID-gv1b-xtv4-4yg3
35
vulnerability VCID-h6y3-7gsq-skh2
36
vulnerability VCID-he5m-6wj4-rbhc
37
vulnerability VCID-hhmn-yz5p-xkap
38
vulnerability VCID-kj9x-psfz-2ug1
39
vulnerability VCID-mnz3-rj21-67ad
40
vulnerability VCID-mud2-s4rc-fuf6
41
vulnerability VCID-n15v-ta9h-6ffb
42
vulnerability VCID-n7ng-zkkb-2qaz
43
vulnerability VCID-nubu-f1sc-gbes
44
vulnerability VCID-nxq4-m52q-yuh4
45
vulnerability VCID-phgh-sd4m-zbdx
46
vulnerability VCID-pmzz-9rws-4ud5
47
vulnerability VCID-pss5-as4b-cyf2
48
vulnerability VCID-q8hy-wjd9-nbgp
49
vulnerability VCID-raxk-rm9v-hubn
50
vulnerability VCID-remd-55jh-r3g5
51
vulnerability VCID-s53a-f91p-huf4
52
vulnerability VCID-s55j-8hbt-akhn
53
vulnerability VCID-s64f-x81f-b7ce
54
vulnerability VCID-stzu-sxe6-5yf5
55
vulnerability VCID-sw7v-fbjk-13hy
56
vulnerability VCID-swnc-ke6h-ekew
57
vulnerability VCID-t1n7-eswt-73gw
58
vulnerability VCID-t3jn-vwbx-u7cr
59
vulnerability VCID-taj6-zj2n-5kg8
60
vulnerability VCID-tnjd-pyys-akav
61
vulnerability VCID-u9bx-8e86-wbew
62
vulnerability VCID-ve7g-8st5-wffb
63
vulnerability VCID-vxry-uvph-kbfd
64
vulnerability VCID-vyvy-y3cw-hbgr
65
vulnerability VCID-w13x-3rp9-wyej
66
vulnerability VCID-xa4m-xpa9-v7h8
67
vulnerability VCID-xh7y-56vy-5ud8
68
vulnerability VCID-xtdg-uj46-rkcm
69
vulnerability VCID-xy6y-312d-rygj
70
vulnerability VCID-y32z-2d3f-gkgw
71
vulnerability VCID-zdq2-dhb2-6kaq
72
vulnerability VCID-zkea-ge1t-z7gn
73
vulnerability VCID-zn99-ywte-33g6
74
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.4
aliases 2019-01-22-2
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-axaf-45kr-kbfe
20
url VCID-axvk-13qf-tka7
vulnerability_id VCID-axvk-13qf-tka7
summary 
TYPO3 Install Tool vulnerable to Code Execution
### Problem
Several settings in the Install Tool for configuring the path to system binaries were vulnerable to code execution. Exploiting this vulnerability requires an administrator-level backend user account with system maintainer permissions.

The corresponding change for this advisory involves enforcing the known disadvantages described in [TYPO3-PSA-2020-002: Protecting Install Tool with Sudo Mode](https://typo3.org/security/advisory/typo3-psa-2020-002).

### Solution
Update to TYPO3 versions 8.7.57 ELTS, 9.5.46 ELTS, 10.4.43 ELTS, 11.5.35 LTS, 12.4.11 LTS, 13.0.1 that fix the problem described.

### Credits
Thanks to Rickmer Frier & Daniel Jonka who reported this issue and to TYPO3 core & security team member Benjamin Franzke who fixed the issue.

### References
* [TYPO3-CORE-SA-2024-002](https://typo3.org/security/advisory/typo3-core-sa-2024-002)
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-22188
reference_id
reference_type
scores
0
value 0.00687
scoring_system epss
scoring_elements 0.71704
published_at 2026-04-08T12:55:00Z
1
value 0.00687
scoring_system epss
scoring_elements 0.71753
published_at 2026-04-18T12:55:00Z
2
value 0.00687
scoring_system epss
scoring_elements 0.71747
published_at 2026-04-16T12:55:00Z
3
value 0.00687
scoring_system epss
scoring_elements 0.71703
published_at 2026-04-13T12:55:00Z
4
value 0.00687
scoring_system epss
scoring_elements 0.71721
published_at 2026-04-12T12:55:00Z
5
value 0.00687
scoring_system epss
scoring_elements 0.71738
published_at 2026-04-11T12:55:00Z
6
value 0.00687
scoring_system epss
scoring_elements 0.71715
published_at 2026-04-09T12:55:00Z
7
value 0.00687
scoring_system epss
scoring_elements 0.71692
published_at 2026-04-04T12:55:00Z
8
value 0.00687
scoring_system epss
scoring_elements 0.71665
published_at 2026-04-07T12:55:00Z
9
value 0.00687
scoring_system epss
scoring_elements 0.71674
published_at 2026-04-02T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-22188
1
reference_url https://github.com/TYPO3/typo3
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3
2
reference_url https://github.com/TYPO3/typo3/commit/47e897f8c7668ef299ecc9ce93f52cafbb3497ed
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/47e897f8c7668ef299ecc9ce93f52cafbb3497ed
3
reference_url https://github.com/TYPO3/typo3/commit/6cc11761b8e2434fa4ccc9f096c65ca82569cfdf
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/6cc11761b8e2434fa4ccc9f096c65ca82569cfdf
4
reference_url https://github.com/TYPO3/typo3/commit/84e07e35b880a544b517868432c56987d05d46d4
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/84e07e35b880a544b517868432c56987d05d46d4
5
reference_url https://github.com/TYPO3/typo3/security/advisories/GHSA-5w2h-59j3-8x5w
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
3
value HIGH
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-03-05T16:17:44Z/
url https://github.com/TYPO3/typo3/security/advisories/GHSA-5w2h-59j3-8x5w
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-22188
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-22188
7
reference_url https://typo3.org/help/security-advisories
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://typo3.org/help/security-advisories
8
reference_url https://typo3.org/security/advisory/typo3-core-sa-2024-002
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-03-05T16:17:44Z/
url https://typo3.org/security/advisory/typo3-core-sa-2024-002
9
reference_url https://typo3.org/security/advisory/typo3-psa-2020-002
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-psa-2020-002
10
reference_url https://github.com/advisories/GHSA-5w2h-59j3-8x5w
reference_id GHSA-5w2h-59j3-8x5w
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-5w2h-59j3-8x5w
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.57
purl pkg:composer/typo3/cms-core@8.7.57
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.57
1
url pkg:composer/typo3/cms-core@9.5.46
purl pkg:composer/typo3/cms-core@9.5.46
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.46
2
url pkg:composer/typo3/cms-core@10.4.43
purl pkg:composer/typo3/cms-core@10.4.43
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@10.4.43
3
url pkg:composer/typo3/cms-core@11.5.35
purl pkg:composer/typo3/cms-core@11.5.35
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-4t9s-p25a-cfas
2
vulnerability VCID-65ue-7jd9-23gf
3
vulnerability VCID-8d2m-1ffv-jqe1
4
vulnerability VCID-gyyu-n3b1-zbcj
5
vulnerability VCID-mud2-s4rc-fuf6
6
vulnerability VCID-nubu-f1sc-gbes
7
vulnerability VCID-xy6y-312d-rygj
8
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@11.5.35
4
url pkg:composer/typo3/cms-core@12.4.11
purl pkg:composer/typo3/cms-core@12.4.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-4t9s-p25a-cfas
2
vulnerability VCID-65ue-7jd9-23gf
3
vulnerability VCID-8d2m-1ffv-jqe1
4
vulnerability VCID-gyyu-n3b1-zbcj
5
vulnerability VCID-jxw7-skw6-q7bg
6
vulnerability VCID-mud2-s4rc-fuf6
7
vulnerability VCID-nubu-f1sc-gbes
8
vulnerability VCID-xy6y-312d-rygj
9
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@12.4.11
5
url pkg:composer/typo3/cms-core@13.0.1
purl pkg:composer/typo3/cms-core@13.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-4t9s-p25a-cfas
2
vulnerability VCID-65ue-7jd9-23gf
3
vulnerability VCID-8d2m-1ffv-jqe1
4
vulnerability VCID-gyyu-n3b1-zbcj
5
vulnerability VCID-jxw7-skw6-q7bg
6
vulnerability VCID-mud2-s4rc-fuf6
7
vulnerability VCID-nubu-f1sc-gbes
8
vulnerability VCID-xy6y-312d-rygj
9
vulnerability VCID-yxy9-ngwb-6qdm
10
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@13.0.1
aliases CVE-2024-22188, GHSA-5w2h-59j3-8x5w
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-axvk-13qf-tka7
21
url VCID-b6er-h7dm-3bev
vulnerability_id VCID-b6er-h7dm-3bev
summary 
TYPO3 HTML Sanitizer Bypasses Cross-Site Scripting Protection
> ### Meta
> * CVSS: `CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:F/RL:O/RC:C` (5.7)

### Problem
Due to a parsing issue in upstream package [`masterminds/html5`](https://packagist.org/packages/masterminds/html5), malicious markup used in a sequence with special HTML comments cannot be filtered and sanitized. This allows to by-pass the cross-site scripting mechanism of [`typo3/html-sanitizer`](https://github.com/TYPO3/html-sanitizer).

### Solution
Update to TYPO3 version 7.6.58 ELTS, 8.7.48 ELTS, 9.5.37 ELTS, 10.4.32 or 11.5.16 that fix the problem described above.

### Credits
Thanks to David Klein who reported this issue, and to TYPO3 security team member Oliver Hader who fixed the issue.

### References
* [TYPO3-CORE-SA-2022-011](https://typo3.org/security/advisory/typo3-core-sa-2022-011)
* [GHSA-47m6-46mj-p235](https://github.com/TYPO3/html-sanitizer/security/advisories/GHSA-47m6-46mj-p235)
references
0
reference_url https://github.com/TYPO3/typo3
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3
1
reference_url https://github.com/TYPO3/typo3/commit/d4f260570abd934fcf3819370a135bef33d729b7
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/d4f260570abd934fcf3819370a135bef33d729b7
2
reference_url https://github.com/TYPO3/typo3/security/advisories/GHSA-gqqf-g5r7-84vf
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/security/advisories/GHSA-gqqf-g5r7-84vf
3
reference_url https://github.com/advisories/GHSA-gqqf-g5r7-84vf
reference_id GHSA-gqqf-g5r7-84vf
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-gqqf-g5r7-84vf
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.48
purl pkg:composer/typo3/cms-core@8.7.48
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.48
1
url pkg:composer/typo3/cms-core@9.5.37
purl pkg:composer/typo3/cms-core@9.5.37
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.37
2
url pkg:composer/typo3/cms-core@10.4.32
purl pkg:composer/typo3/cms-core@10.4.32
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-4t9s-p25a-cfas
2
vulnerability VCID-65ue-7jd9-23gf
3
vulnerability VCID-8d2m-1ffv-jqe1
4
vulnerability VCID-8sdd-b1bn-cuhx
5
vulnerability VCID-axvk-13qf-tka7
6
vulnerability VCID-g4uc-qeb6-myed
7
vulnerability VCID-gv1b-xtv4-4yg3
8
vulnerability VCID-gyyu-n3b1-zbcj
9
vulnerability VCID-h6y3-7gsq-skh2
10
vulnerability VCID-mud2-s4rc-fuf6
11
vulnerability VCID-n7ng-zkkb-2qaz
12
vulnerability VCID-nubu-f1sc-gbes
13
vulnerability VCID-t1n7-eswt-73gw
14
vulnerability VCID-taj6-zj2n-5kg8
15
vulnerability VCID-ve7g-8st5-wffb
16
vulnerability VCID-vyvy-y3cw-hbgr
17
vulnerability VCID-w13x-3rp9-wyej
18
vulnerability VCID-xy6y-312d-rygj
19
vulnerability VCID-zdq2-dhb2-6kaq
20
vulnerability VCID-zn99-ywte-33g6
21
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@10.4.32
3
url pkg:composer/typo3/cms-core@11.5.16
purl pkg:composer/typo3/cms-core@11.5.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-4t9s-p25a-cfas
2
vulnerability VCID-65ue-7jd9-23gf
3
vulnerability VCID-8d2m-1ffv-jqe1
4
vulnerability VCID-8sdd-b1bn-cuhx
5
vulnerability VCID-axvk-13qf-tka7
6
vulnerability VCID-g4uc-qeb6-myed
7
vulnerability VCID-gv1b-xtv4-4yg3
8
vulnerability VCID-gyyu-n3b1-zbcj
9
vulnerability VCID-h6y3-7gsq-skh2
10
vulnerability VCID-mud2-s4rc-fuf6
11
vulnerability VCID-n7ng-zkkb-2qaz
12
vulnerability VCID-nubu-f1sc-gbes
13
vulnerability VCID-t1n7-eswt-73gw
14
vulnerability VCID-taj6-zj2n-5kg8
15
vulnerability VCID-ve7g-8st5-wffb
16
vulnerability VCID-vyvy-y3cw-hbgr
17
vulnerability VCID-w13x-3rp9-wyej
18
vulnerability VCID-xy6y-312d-rygj
19
vulnerability VCID-zdq2-dhb2-6kaq
20
vulnerability VCID-zn99-ywte-33g6
21
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@11.5.16
aliases GHSA-gqqf-g5r7-84vf, GMS-2022-4096
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-b6er-h7dm-3bev
22
url VCID-b81w-n2ne-z3ee
vulnerability_id VCID-b81w-n2ne-z3ee
summary 
TYPO3 Denial of Service in Frontend Record Registration
TYPO3’s built-in record registration functionality (aka “basic shopping cart”) using recs URL parameters is vulnerable to denial of service. Failing to properly ensure that anonymous user sessions are valid, attackers can use this vulnerability in order to create  an arbitrary amount of individual session-data records in the database.
references
0
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2018-12-11-7.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2018-12-11-7.yaml
1
reference_url https://github.com/TYPO3-CMS/core
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core
2
reference_url https://github.com/TYPO3-CMS/core/commit/5a44f93e9233e8f72159f9a67db26ed4bd5a10e0
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core/commit/5a44f93e9233e8f72159f9a67db26ed4bd5a10e0
3
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-012
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2018-012
4
reference_url https://github.com/advisories/GHSA-hjx5-v9xg-7h25
reference_id GHSA-hjx5-v9xg-7h25
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-hjx5-v9xg-7h25
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.21
purl pkg:composer/typo3/cms-core@8.7.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21e8-x7mp-hugk
1
vulnerability VCID-2meq-x4kd-bbdn
2
vulnerability VCID-3n2r-awja-dug9
3
vulnerability VCID-3v4n-fzxa-bfaw
4
vulnerability VCID-4jpa-6fqh-hbfg
5
vulnerability VCID-551q-gpyd-ffe8
6
vulnerability VCID-5jgb-dsyx-hyb4
7
vulnerability VCID-5mxm-88r9-hfey
8
vulnerability VCID-5paq-5frf-43ed
9
vulnerability VCID-5u4q-m66t-wqcj
10
vulnerability VCID-9g62-zd1x-3bdg
11
vulnerability VCID-9gpp-ez8w-rqav
12
vulnerability VCID-9x6r-56xm-n7h7
13
vulnerability VCID-9zqs-hjay-fkev
14
vulnerability VCID-axaf-45kr-kbfe
15
vulnerability VCID-axvk-13qf-tka7
16
vulnerability VCID-b6er-h7dm-3bev
17
vulnerability VCID-bajy-qbwq-fufn
18
vulnerability VCID-cm14-t8uv-k3es
19
vulnerability VCID-d99v-v9cj-zfh2
20
vulnerability VCID-dj88-f3p8-cfbn
21
vulnerability VCID-dsu7-jjjq-f3e1
22
vulnerability VCID-eajg-ctpd-2bby
23
vulnerability VCID-ekfd-wp8z-d7e1
24
vulnerability VCID-f4bv-pzdy-dfcb
25
vulnerability VCID-f963-qur3-2qb7
26
vulnerability VCID-g4uc-qeb6-myed
27
vulnerability VCID-gcnj-6qb6-pbgz
28
vulnerability VCID-gv1b-xtv4-4yg3
29
vulnerability VCID-h6y3-7gsq-skh2
30
vulnerability VCID-he5m-6wj4-rbhc
31
vulnerability VCID-hhmn-yz5p-xkap
32
vulnerability VCID-j77k-hjgx-5kc5
33
vulnerability VCID-k8af-cg9k-87a9
34
vulnerability VCID-mh4f-vtfj-hbb1
35
vulnerability VCID-mnz3-rj21-67ad
36
vulnerability VCID-n15v-ta9h-6ffb
37
vulnerability VCID-n7ng-zkkb-2qaz
38
vulnerability VCID-pmzz-9rws-4ud5
39
vulnerability VCID-pss5-as4b-cyf2
40
vulnerability VCID-px44-19tj-h7aa
41
vulnerability VCID-q8hy-wjd9-nbgp
42
vulnerability VCID-s53a-f91p-huf4
43
vulnerability VCID-s55j-8hbt-akhn
44
vulnerability VCID-s64f-x81f-b7ce
45
vulnerability VCID-stzu-sxe6-5yf5
46
vulnerability VCID-swnc-ke6h-ekew
47
vulnerability VCID-t1n7-eswt-73gw
48
vulnerability VCID-t3jn-vwbx-u7cr
49
vulnerability VCID-taj6-zj2n-5kg8
50
vulnerability VCID-tnjd-pyys-akav
51
vulnerability VCID-vxry-uvph-kbfd
52
vulnerability VCID-vyvy-y3cw-hbgr
53
vulnerability VCID-wea9-egep-h7g5
54
vulnerability VCID-xa4m-xpa9-v7h8
55
vulnerability VCID-xh7y-56vy-5ud8
56
vulnerability VCID-y32z-2d3f-gkgw
57
vulnerability VCID-zdq2-dhb2-6kaq
58
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.21
aliases GHSA-hjx5-v9xg-7h25
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-b81w-n2ne-z3ee
23
url VCID-bajy-qbwq-fufn
vulnerability_id VCID-bajy-qbwq-fufn
summary 
Insertion of Sensitive Information into Log File in typo3/cms-core
> ### Meta
> * CVSS: `CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C` (4.9)

### Problem
It has been discovered that system internal credentials or keys (e.g. database credentials) have been logged as plaintext in exception handlers, when logging the complete exception stack trace.

### Solution
Update to TYPO3 versions 7.6.57 ELTS, 8.7.47 ELTS, 9.5.35 ELTS, 10.4.29, 11.5.11 that fix the problem described above.

### Credits
Thanks to Marco Huber who reported this issue and to TYPO3 security member Torben Hansen who fixed the issue.

### References
* [TYPO3-CORE-SA-2022-002](https://typo3.org/security/advisory/typo3-core-sa-2022-002)
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-31047
reference_id
reference_type
scores
0
value 0.00391
scoring_system epss
scoring_elements 0.60107
published_at 2026-04-02T12:55:00Z
1
value 0.00391
scoring_system epss
scoring_elements 0.60201
published_at 2026-04-18T12:55:00Z
2
value 0.00391
scoring_system epss
scoring_elements 0.60194
published_at 2026-04-16T12:55:00Z
3
value 0.00391
scoring_system epss
scoring_elements 0.60155
published_at 2026-04-13T12:55:00Z
4
value 0.00391
scoring_system epss
scoring_elements 0.60173
published_at 2026-04-12T12:55:00Z
5
value 0.00391
scoring_system epss
scoring_elements 0.60187
published_at 2026-04-11T12:55:00Z
6
value 0.00391
scoring_system epss
scoring_elements 0.60165
published_at 2026-04-09T12:55:00Z
7
value 0.00391
scoring_system epss
scoring_elements 0.60151
published_at 2026-04-08T12:55:00Z
8
value 0.00391
scoring_system epss
scoring_elements 0.60101
published_at 2026-04-07T12:55:00Z
9
value 0.00391
scoring_system epss
scoring_elements 0.60132
published_at 2026-04-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-31047
1
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2022-31047.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2022-31047.yaml
2
reference_url https://github.com/TYPO3-CMS/core
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core
3
reference_url https://github.com/TYPO3/typo3/commit/c93ea692e7dfef03b7c50fe5437487545bee4d6a
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T14:05:23Z/
url https://github.com/TYPO3/typo3/commit/c93ea692e7dfef03b7c50fe5437487545bee4d6a
4
reference_url https://github.com/TYPO3/typo3/security/advisories/GHSA-fh99-4pgr-8j99
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T14:05:23Z/
url https://github.com/TYPO3/typo3/security/advisories/GHSA-fh99-4pgr-8j99
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-31047
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-31047
6
reference_url https://typo3.org/security/advisory/typo3-core-sa-2022-002
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T14:05:23Z/
url https://typo3.org/security/advisory/typo3-core-sa-2022-002
7
reference_url https://github.com/advisories/GHSA-fh99-4pgr-8j99
reference_id GHSA-fh99-4pgr-8j99
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-fh99-4pgr-8j99
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.47
purl pkg:composer/typo3/cms-core@8.7.47
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5paq-5frf-43ed
1
vulnerability VCID-b6er-h7dm-3bev
2
vulnerability VCID-mnz3-rj21-67ad
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.47
1
url pkg:composer/typo3/cms-core@9.5.35
purl pkg:composer/typo3/cms-core@9.5.35
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.35
2
url pkg:composer/typo3/cms-core@10.4.29
purl pkg:composer/typo3/cms-core@10.4.29
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-1yxw-saf5-wue7
2
vulnerability VCID-4t9s-p25a-cfas
3
vulnerability VCID-5paq-5frf-43ed
4
vulnerability VCID-65ue-7jd9-23gf
5
vulnerability VCID-8d2m-1ffv-jqe1
6
vulnerability VCID-8sdd-b1bn-cuhx
7
vulnerability VCID-av8u-rvzq-4fc7
8
vulnerability VCID-axvk-13qf-tka7
9
vulnerability VCID-b6er-h7dm-3bev
10
vulnerability VCID-g4uc-qeb6-myed
11
vulnerability VCID-gv1b-xtv4-4yg3
12
vulnerability VCID-gyyu-n3b1-zbcj
13
vulnerability VCID-h6y3-7gsq-skh2
14
vulnerability VCID-mnz3-rj21-67ad
15
vulnerability VCID-mud2-s4rc-fuf6
16
vulnerability VCID-n7ng-zkkb-2qaz
17
vulnerability VCID-nubu-f1sc-gbes
18
vulnerability VCID-t1n7-eswt-73gw
19
vulnerability VCID-taj6-zj2n-5kg8
20
vulnerability VCID-ve7g-8st5-wffb
21
vulnerability VCID-vwb2-a84s-5qak
22
vulnerability VCID-vyvy-y3cw-hbgr
23
vulnerability VCID-w13x-3rp9-wyej
24
vulnerability VCID-xy6y-312d-rygj
25
vulnerability VCID-zdq2-dhb2-6kaq
26
vulnerability VCID-zn99-ywte-33g6
27
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@10.4.29
3
url pkg:composer/typo3/cms-core@11.5.11
purl pkg:composer/typo3/cms-core@11.5.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-1yxw-saf5-wue7
2
vulnerability VCID-4t9s-p25a-cfas
3
vulnerability VCID-5paq-5frf-43ed
4
vulnerability VCID-65ue-7jd9-23gf
5
vulnerability VCID-8d2m-1ffv-jqe1
6
vulnerability VCID-8sdd-b1bn-cuhx
7
vulnerability VCID-av8u-rvzq-4fc7
8
vulnerability VCID-axvk-13qf-tka7
9
vulnerability VCID-b6er-h7dm-3bev
10
vulnerability VCID-g4uc-qeb6-myed
11
vulnerability VCID-gv1b-xtv4-4yg3
12
vulnerability VCID-gyyu-n3b1-zbcj
13
vulnerability VCID-h6y3-7gsq-skh2
14
vulnerability VCID-mnz3-rj21-67ad
15
vulnerability VCID-mud2-s4rc-fuf6
16
vulnerability VCID-n7ng-zkkb-2qaz
17
vulnerability VCID-nubu-f1sc-gbes
18
vulnerability VCID-t1n7-eswt-73gw
19
vulnerability VCID-taj6-zj2n-5kg8
20
vulnerability VCID-tnxn-p13f-yuah
21
vulnerability VCID-ve7g-8st5-wffb
22
vulnerability VCID-vwb2-a84s-5qak
23
vulnerability VCID-vyvy-y3cw-hbgr
24
vulnerability VCID-w13x-3rp9-wyej
25
vulnerability VCID-xy6y-312d-rygj
26
vulnerability VCID-zdq2-dhb2-6kaq
27
vulnerability VCID-zn99-ywte-33g6
28
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@11.5.11
aliases CVE-2022-31047, GHSA-fh99-4pgr-8j99
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-bajy-qbwq-fufn
24
url VCID-bnne-7p2q-eqd2
vulnerability_id VCID-bnne-7p2q-eqd2
summary 
Uncontrolled Resource Consumption
Denial of Service in Online Media Asset Handling.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-011/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2018-011/
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.21
purl pkg:composer/typo3/cms-core@8.7.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21e8-x7mp-hugk
1
vulnerability VCID-2meq-x4kd-bbdn
2
vulnerability VCID-3n2r-awja-dug9
3
vulnerability VCID-3v4n-fzxa-bfaw
4
vulnerability VCID-4jpa-6fqh-hbfg
5
vulnerability VCID-551q-gpyd-ffe8
6
vulnerability VCID-5jgb-dsyx-hyb4
7
vulnerability VCID-5mxm-88r9-hfey
8
vulnerability VCID-5paq-5frf-43ed
9
vulnerability VCID-5u4q-m66t-wqcj
10
vulnerability VCID-9g62-zd1x-3bdg
11
vulnerability VCID-9gpp-ez8w-rqav
12
vulnerability VCID-9x6r-56xm-n7h7
13
vulnerability VCID-9zqs-hjay-fkev
14
vulnerability VCID-axaf-45kr-kbfe
15
vulnerability VCID-axvk-13qf-tka7
16
vulnerability VCID-b6er-h7dm-3bev
17
vulnerability VCID-bajy-qbwq-fufn
18
vulnerability VCID-cm14-t8uv-k3es
19
vulnerability VCID-d99v-v9cj-zfh2
20
vulnerability VCID-dj88-f3p8-cfbn
21
vulnerability VCID-dsu7-jjjq-f3e1
22
vulnerability VCID-eajg-ctpd-2bby
23
vulnerability VCID-ekfd-wp8z-d7e1
24
vulnerability VCID-f4bv-pzdy-dfcb
25
vulnerability VCID-f963-qur3-2qb7
26
vulnerability VCID-g4uc-qeb6-myed
27
vulnerability VCID-gcnj-6qb6-pbgz
28
vulnerability VCID-gv1b-xtv4-4yg3
29
vulnerability VCID-h6y3-7gsq-skh2
30
vulnerability VCID-he5m-6wj4-rbhc
31
vulnerability VCID-hhmn-yz5p-xkap
32
vulnerability VCID-j77k-hjgx-5kc5
33
vulnerability VCID-k8af-cg9k-87a9
34
vulnerability VCID-mh4f-vtfj-hbb1
35
vulnerability VCID-mnz3-rj21-67ad
36
vulnerability VCID-n15v-ta9h-6ffb
37
vulnerability VCID-n7ng-zkkb-2qaz
38
vulnerability VCID-pmzz-9rws-4ud5
39
vulnerability VCID-pss5-as4b-cyf2
40
vulnerability VCID-px44-19tj-h7aa
41
vulnerability VCID-q8hy-wjd9-nbgp
42
vulnerability VCID-s53a-f91p-huf4
43
vulnerability VCID-s55j-8hbt-akhn
44
vulnerability VCID-s64f-x81f-b7ce
45
vulnerability VCID-stzu-sxe6-5yf5
46
vulnerability VCID-swnc-ke6h-ekew
47
vulnerability VCID-t1n7-eswt-73gw
48
vulnerability VCID-t3jn-vwbx-u7cr
49
vulnerability VCID-taj6-zj2n-5kg8
50
vulnerability VCID-tnjd-pyys-akav
51
vulnerability VCID-vxry-uvph-kbfd
52
vulnerability VCID-vyvy-y3cw-hbgr
53
vulnerability VCID-wea9-egep-h7g5
54
vulnerability VCID-xa4m-xpa9-v7h8
55
vulnerability VCID-xh7y-56vy-5ud8
56
vulnerability VCID-y32z-2d3f-gkgw
57
vulnerability VCID-zdq2-dhb2-6kaq
58
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.21
1
url pkg:composer/typo3/cms-core@9.5.2
purl pkg:composer/typo3/cms-core@9.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21e8-x7mp-hugk
1
vulnerability VCID-2meq-x4kd-bbdn
2
vulnerability VCID-2mn6-mdmz-4yd9
3
vulnerability VCID-3n2r-awja-dug9
4
vulnerability VCID-3v4n-fzxa-bfaw
5
vulnerability VCID-461j-9hrc-gfbc
6
vulnerability VCID-4jpa-6fqh-hbfg
7
vulnerability VCID-4mkw-tv16-jyca
8
vulnerability VCID-4t9s-p25a-cfas
9
vulnerability VCID-543x-cnbz-1kb9
10
vulnerability VCID-551q-gpyd-ffe8
11
vulnerability VCID-58js-jzm4-4fc7
12
vulnerability VCID-5jgb-dsyx-hyb4
13
vulnerability VCID-5kzs-ex81-bbaj
14
vulnerability VCID-5paq-5frf-43ed
15
vulnerability VCID-5u4q-m66t-wqcj
16
vulnerability VCID-65ue-7jd9-23gf
17
vulnerability VCID-6a9t-8dmn-s3bv
18
vulnerability VCID-8d2m-1ffv-jqe1
19
vulnerability VCID-9g62-zd1x-3bdg
20
vulnerability VCID-9gpp-ez8w-rqav
21
vulnerability VCID-9x6r-56xm-n7h7
22
vulnerability VCID-9zqs-hjay-fkev
23
vulnerability VCID-a49c-fqrj-nbb3
24
vulnerability VCID-axaf-45kr-kbfe
25
vulnerability VCID-axvk-13qf-tka7
26
vulnerability VCID-b6er-h7dm-3bev
27
vulnerability VCID-bajy-qbwq-fufn
28
vulnerability VCID-cm14-t8uv-k3es
29
vulnerability VCID-d8d1-sat6-muhe
30
vulnerability VCID-d99v-v9cj-zfh2
31
vulnerability VCID-dj88-f3p8-cfbn
32
vulnerability VCID-dmzb-gkdn-6bcm
33
vulnerability VCID-dsu7-jjjq-f3e1
34
vulnerability VCID-e32h-8q61-hbgc
35
vulnerability VCID-eajg-ctpd-2bby
36
vulnerability VCID-ekfd-wp8z-d7e1
37
vulnerability VCID-f4bv-pzdy-dfcb
38
vulnerability VCID-f963-qur3-2qb7
39
vulnerability VCID-g4uc-qeb6-myed
40
vulnerability VCID-gcnj-6qb6-pbgz
41
vulnerability VCID-gv1b-xtv4-4yg3
42
vulnerability VCID-h6y3-7gsq-skh2
43
vulnerability VCID-he5m-6wj4-rbhc
44
vulnerability VCID-hhmn-yz5p-xkap
45
vulnerability VCID-k8af-cg9k-87a9
46
vulnerability VCID-kj9x-psfz-2ug1
47
vulnerability VCID-mh4f-vtfj-hbb1
48
vulnerability VCID-mnz3-rj21-67ad
49
vulnerability VCID-mud2-s4rc-fuf6
50
vulnerability VCID-n15v-ta9h-6ffb
51
vulnerability VCID-n7ng-zkkb-2qaz
52
vulnerability VCID-nubu-f1sc-gbes
53
vulnerability VCID-nxq4-m52q-yuh4
54
vulnerability VCID-p715-yexd-jfgc
55
vulnerability VCID-phgh-sd4m-zbdx
56
vulnerability VCID-pmzz-9rws-4ud5
57
vulnerability VCID-pss5-as4b-cyf2
58
vulnerability VCID-px44-19tj-h7aa
59
vulnerability VCID-q8hy-wjd9-nbgp
60
vulnerability VCID-raxk-rm9v-hubn
61
vulnerability VCID-remd-55jh-r3g5
62
vulnerability VCID-s53a-f91p-huf4
63
vulnerability VCID-s55j-8hbt-akhn
64
vulnerability VCID-s64f-x81f-b7ce
65
vulnerability VCID-stzu-sxe6-5yf5
66
vulnerability VCID-sw7v-fbjk-13hy
67
vulnerability VCID-swnc-ke6h-ekew
68
vulnerability VCID-t1n7-eswt-73gw
69
vulnerability VCID-t3jn-vwbx-u7cr
70
vulnerability VCID-taj6-zj2n-5kg8
71
vulnerability VCID-tnjd-pyys-akav
72
vulnerability VCID-u9bx-8e86-wbew
73
vulnerability VCID-ve7g-8st5-wffb
74
vulnerability VCID-vxry-uvph-kbfd
75
vulnerability VCID-vyvy-y3cw-hbgr
76
vulnerability VCID-w13x-3rp9-wyej
77
vulnerability VCID-wea9-egep-h7g5
78
vulnerability VCID-xa4m-xpa9-v7h8
79
vulnerability VCID-xh7y-56vy-5ud8
80
vulnerability VCID-xtdg-uj46-rkcm
81
vulnerability VCID-xy6y-312d-rygj
82
vulnerability VCID-y32z-2d3f-gkgw
83
vulnerability VCID-yzx1-4psv-7bhr
84
vulnerability VCID-zdq2-dhb2-6kaq
85
vulnerability VCID-zkea-ge1t-z7gn
86
vulnerability VCID-zn99-ywte-33g6
87
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.2
aliases 2018-12-11-6
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-bnne-7p2q-eqd2
25
url VCID-cm14-t8uv-k3es
vulnerability_id VCID-cm14-t8uv-k3es
summary Security Misconfiguration in Frontend Session Handling.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-018/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-018/
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.27
purl pkg:composer/typo3/cms-core@8.7.27
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3n2r-awja-dug9
1
vulnerability VCID-4jpa-6fqh-hbfg
2
vulnerability VCID-5jgb-dsyx-hyb4
3
vulnerability VCID-5paq-5frf-43ed
4
vulnerability VCID-5u4q-m66t-wqcj
5
vulnerability VCID-axvk-13qf-tka7
6
vulnerability VCID-b6er-h7dm-3bev
7
vulnerability VCID-bajy-qbwq-fufn
8
vulnerability VCID-dsu7-jjjq-f3e1
9
vulnerability VCID-ekfd-wp8z-d7e1
10
vulnerability VCID-f963-qur3-2qb7
11
vulnerability VCID-g4uc-qeb6-myed
12
vulnerability VCID-gcnj-6qb6-pbgz
13
vulnerability VCID-gv1b-xtv4-4yg3
14
vulnerability VCID-h6y3-7gsq-skh2
15
vulnerability VCID-he5m-6wj4-rbhc
16
vulnerability VCID-hhmn-yz5p-xkap
17
vulnerability VCID-mnz3-rj21-67ad
18
vulnerability VCID-n15v-ta9h-6ffb
19
vulnerability VCID-n7ng-zkkb-2qaz
20
vulnerability VCID-s55j-8hbt-akhn
21
vulnerability VCID-s64f-x81f-b7ce
22
vulnerability VCID-swnc-ke6h-ekew
23
vulnerability VCID-t1n7-eswt-73gw
24
vulnerability VCID-t3jn-vwbx-u7cr
25
vulnerability VCID-taj6-zj2n-5kg8
26
vulnerability VCID-tnjd-pyys-akav
27
vulnerability VCID-vyvy-y3cw-hbgr
28
vulnerability VCID-xa4m-xpa9-v7h8
29
vulnerability VCID-xh7y-56vy-5ud8
30
vulnerability VCID-y32z-2d3f-gkgw
31
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.27
1
url pkg:composer/typo3/cms-core@9.5.8
purl pkg:composer/typo3/cms-core@9.5.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mn6-mdmz-4yd9
1
vulnerability VCID-3n2r-awja-dug9
2
vulnerability VCID-4jpa-6fqh-hbfg
3
vulnerability VCID-4t9s-p25a-cfas
4
vulnerability VCID-543x-cnbz-1kb9
5
vulnerability VCID-58js-jzm4-4fc7
6
vulnerability VCID-5jgb-dsyx-hyb4
7
vulnerability VCID-5kzs-ex81-bbaj
8
vulnerability VCID-5paq-5frf-43ed
9
vulnerability VCID-5u4q-m66t-wqcj
10
vulnerability VCID-65ue-7jd9-23gf
11
vulnerability VCID-6a9t-8dmn-s3bv
12
vulnerability VCID-8d2m-1ffv-jqe1
13
vulnerability VCID-a49c-fqrj-nbb3
14
vulnerability VCID-axvk-13qf-tka7
15
vulnerability VCID-b6er-h7dm-3bev
16
vulnerability VCID-bajy-qbwq-fufn
17
vulnerability VCID-d8d1-sat6-muhe
18
vulnerability VCID-dsu7-jjjq-f3e1
19
vulnerability VCID-e32h-8q61-hbgc
20
vulnerability VCID-ekfd-wp8z-d7e1
21
vulnerability VCID-f963-qur3-2qb7
22
vulnerability VCID-g4uc-qeb6-myed
23
vulnerability VCID-gcnj-6qb6-pbgz
24
vulnerability VCID-gv1b-xtv4-4yg3
25
vulnerability VCID-h6y3-7gsq-skh2
26
vulnerability VCID-he5m-6wj4-rbhc
27
vulnerability VCID-hhmn-yz5p-xkap
28
vulnerability VCID-mnz3-rj21-67ad
29
vulnerability VCID-mud2-s4rc-fuf6
30
vulnerability VCID-n15v-ta9h-6ffb
31
vulnerability VCID-n7ng-zkkb-2qaz
32
vulnerability VCID-nubu-f1sc-gbes
33
vulnerability VCID-phgh-sd4m-zbdx
34
vulnerability VCID-remd-55jh-r3g5
35
vulnerability VCID-s55j-8hbt-akhn
36
vulnerability VCID-s64f-x81f-b7ce
37
vulnerability VCID-sw7v-fbjk-13hy
38
vulnerability VCID-swnc-ke6h-ekew
39
vulnerability VCID-t1n7-eswt-73gw
40
vulnerability VCID-t3jn-vwbx-u7cr
41
vulnerability VCID-taj6-zj2n-5kg8
42
vulnerability VCID-tnjd-pyys-akav
43
vulnerability VCID-ve7g-8st5-wffb
44
vulnerability VCID-vyvy-y3cw-hbgr
45
vulnerability VCID-w13x-3rp9-wyej
46
vulnerability VCID-xa4m-xpa9-v7h8
47
vulnerability VCID-xh7y-56vy-5ud8
48
vulnerability VCID-xy6y-312d-rygj
49
vulnerability VCID-y32z-2d3f-gkgw
50
vulnerability VCID-zdq2-dhb2-6kaq
51
vulnerability VCID-zn99-ywte-33g6
52
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.8
aliases 2019-06-25-3
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-cm14-t8uv-k3es
26
url VCID-d99v-v9cj-zfh2
vulnerability_id VCID-d99v-v9cj-zfh2
summary 
TYPO3 Security Misconfiguration for Backend User Accounts
When using the TYPO3 backend in order to create new backend user accounts, database records containing insecure or empty credentials might be persisted. When the type of user account is changed - which might be entity type or the admin flag for backend users - the backend form is reloaded in order to reflect changed configuration possibilities. However,  this leads to persisting the current state as well, which can result into some of the following:

- account contains empty login credentials (username and/or password)
- account is incomplete and contains weak credentials (username and/or password)

Albeit the functionality provided by the TYPO3 core cannot be used either with empty usernames or empty passwords, it still can be a severe vulnerability to custom authentication service implementations.

This weakness cannot be directly exploited and requires interaction on purpose by some backend user having according privileges.
references
0
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2019-01-22-2.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2019-01-22-2.yaml
1
reference_url https://github.com/TYPO3-CMS/core
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core
2
reference_url https://github.com/TYPO3-CMS/core/commit/1e0c7a60be0f324e77cdbc2dadef46458e191d47
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core/commit/1e0c7a60be0f324e77cdbc2dadef46458e191d47
3
reference_url https://github.com/TYPO3-CMS/core/commit/88c53ed5006c830d8da3c3a5f3c1b81839f1efb4
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core/commit/88c53ed5006c830d8da3c3a5f3c1b81839f1efb4
4
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-002
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2019-002
5
reference_url https://github.com/advisories/GHSA-rxc9-f2x6-qh4w
reference_id GHSA-rxc9-f2x6-qh4w
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-rxc9-f2x6-qh4w
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.23
purl pkg:composer/typo3/cms-core@8.7.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2meq-x4kd-bbdn
1
vulnerability VCID-3n2r-awja-dug9
2
vulnerability VCID-3v4n-fzxa-bfaw
3
vulnerability VCID-4jpa-6fqh-hbfg
4
vulnerability VCID-5jgb-dsyx-hyb4
5
vulnerability VCID-5paq-5frf-43ed
6
vulnerability VCID-5u4q-m66t-wqcj
7
vulnerability VCID-9g62-zd1x-3bdg
8
vulnerability VCID-9gpp-ez8w-rqav
9
vulnerability VCID-9x6r-56xm-n7h7
10
vulnerability VCID-axvk-13qf-tka7
11
vulnerability VCID-b6er-h7dm-3bev
12
vulnerability VCID-bajy-qbwq-fufn
13
vulnerability VCID-cm14-t8uv-k3es
14
vulnerability VCID-dsu7-jjjq-f3e1
15
vulnerability VCID-eajg-ctpd-2bby
16
vulnerability VCID-ekfd-wp8z-d7e1
17
vulnerability VCID-f963-qur3-2qb7
18
vulnerability VCID-g4uc-qeb6-myed
19
vulnerability VCID-gcnj-6qb6-pbgz
20
vulnerability VCID-gv1b-xtv4-4yg3
21
vulnerability VCID-h6y3-7gsq-skh2
22
vulnerability VCID-he5m-6wj4-rbhc
23
vulnerability VCID-hhmn-yz5p-xkap
24
vulnerability VCID-mnz3-rj21-67ad
25
vulnerability VCID-n15v-ta9h-6ffb
26
vulnerability VCID-n7ng-zkkb-2qaz
27
vulnerability VCID-pmzz-9rws-4ud5
28
vulnerability VCID-pss5-as4b-cyf2
29
vulnerability VCID-q8hy-wjd9-nbgp
30
vulnerability VCID-s53a-f91p-huf4
31
vulnerability VCID-s55j-8hbt-akhn
32
vulnerability VCID-s64f-x81f-b7ce
33
vulnerability VCID-stzu-sxe6-5yf5
34
vulnerability VCID-swnc-ke6h-ekew
35
vulnerability VCID-t1n7-eswt-73gw
36
vulnerability VCID-t3jn-vwbx-u7cr
37
vulnerability VCID-taj6-zj2n-5kg8
38
vulnerability VCID-tnjd-pyys-akav
39
vulnerability VCID-vxry-uvph-kbfd
40
vulnerability VCID-vyvy-y3cw-hbgr
41
vulnerability VCID-xa4m-xpa9-v7h8
42
vulnerability VCID-xh7y-56vy-5ud8
43
vulnerability VCID-y32z-2d3f-gkgw
44
vulnerability VCID-zdq2-dhb2-6kaq
45
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.23
1
url pkg:composer/typo3/cms-core@9.5.4
purl pkg:composer/typo3/cms-core@9.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2meq-x4kd-bbdn
1
vulnerability VCID-2mn6-mdmz-4yd9
2
vulnerability VCID-3n2r-awja-dug9
3
vulnerability VCID-3v4n-fzxa-bfaw
4
vulnerability VCID-461j-9hrc-gfbc
5
vulnerability VCID-4jpa-6fqh-hbfg
6
vulnerability VCID-4mkw-tv16-jyca
7
vulnerability VCID-4t9s-p25a-cfas
8
vulnerability VCID-543x-cnbz-1kb9
9
vulnerability VCID-58js-jzm4-4fc7
10
vulnerability VCID-5jgb-dsyx-hyb4
11
vulnerability VCID-5kzs-ex81-bbaj
12
vulnerability VCID-5paq-5frf-43ed
13
vulnerability VCID-5u4q-m66t-wqcj
14
vulnerability VCID-65ue-7jd9-23gf
15
vulnerability VCID-6a9t-8dmn-s3bv
16
vulnerability VCID-8d2m-1ffv-jqe1
17
vulnerability VCID-9g62-zd1x-3bdg
18
vulnerability VCID-9gpp-ez8w-rqav
19
vulnerability VCID-9x6r-56xm-n7h7
20
vulnerability VCID-a49c-fqrj-nbb3
21
vulnerability VCID-axvk-13qf-tka7
22
vulnerability VCID-b6er-h7dm-3bev
23
vulnerability VCID-bajy-qbwq-fufn
24
vulnerability VCID-cm14-t8uv-k3es
25
vulnerability VCID-d8d1-sat6-muhe
26
vulnerability VCID-dmzb-gkdn-6bcm
27
vulnerability VCID-dsu7-jjjq-f3e1
28
vulnerability VCID-e32h-8q61-hbgc
29
vulnerability VCID-eajg-ctpd-2bby
30
vulnerability VCID-ekfd-wp8z-d7e1
31
vulnerability VCID-f963-qur3-2qb7
32
vulnerability VCID-g4uc-qeb6-myed
33
vulnerability VCID-gcnj-6qb6-pbgz
34
vulnerability VCID-gv1b-xtv4-4yg3
35
vulnerability VCID-h6y3-7gsq-skh2
36
vulnerability VCID-he5m-6wj4-rbhc
37
vulnerability VCID-hhmn-yz5p-xkap
38
vulnerability VCID-kj9x-psfz-2ug1
39
vulnerability VCID-mnz3-rj21-67ad
40
vulnerability VCID-mud2-s4rc-fuf6
41
vulnerability VCID-n15v-ta9h-6ffb
42
vulnerability VCID-n7ng-zkkb-2qaz
43
vulnerability VCID-nubu-f1sc-gbes
44
vulnerability VCID-nxq4-m52q-yuh4
45
vulnerability VCID-phgh-sd4m-zbdx
46
vulnerability VCID-pmzz-9rws-4ud5
47
vulnerability VCID-pss5-as4b-cyf2
48
vulnerability VCID-q8hy-wjd9-nbgp
49
vulnerability VCID-raxk-rm9v-hubn
50
vulnerability VCID-remd-55jh-r3g5
51
vulnerability VCID-s53a-f91p-huf4
52
vulnerability VCID-s55j-8hbt-akhn
53
vulnerability VCID-s64f-x81f-b7ce
54
vulnerability VCID-stzu-sxe6-5yf5
55
vulnerability VCID-sw7v-fbjk-13hy
56
vulnerability VCID-swnc-ke6h-ekew
57
vulnerability VCID-t1n7-eswt-73gw
58
vulnerability VCID-t3jn-vwbx-u7cr
59
vulnerability VCID-taj6-zj2n-5kg8
60
vulnerability VCID-tnjd-pyys-akav
61
vulnerability VCID-u9bx-8e86-wbew
62
vulnerability VCID-ve7g-8st5-wffb
63
vulnerability VCID-vxry-uvph-kbfd
64
vulnerability VCID-vyvy-y3cw-hbgr
65
vulnerability VCID-w13x-3rp9-wyej
66
vulnerability VCID-xa4m-xpa9-v7h8
67
vulnerability VCID-xh7y-56vy-5ud8
68
vulnerability VCID-xtdg-uj46-rkcm
69
vulnerability VCID-xy6y-312d-rygj
70
vulnerability VCID-y32z-2d3f-gkgw
71
vulnerability VCID-zdq2-dhb2-6kaq
72
vulnerability VCID-zkea-ge1t-z7gn
73
vulnerability VCID-zn99-ywte-33g6
74
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.4
aliases GHSA-rxc9-f2x6-qh4w
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-d99v-v9cj-zfh2
27
url VCID-dj88-f3p8-cfbn
vulnerability_id VCID-dj88-f3p8-cfbn
summary 
Code Injection
Arbitrary Code Execution via File List Module.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-008/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-008/
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.23
purl pkg:composer/typo3/cms-core@8.7.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2meq-x4kd-bbdn
1
vulnerability VCID-3n2r-awja-dug9
2
vulnerability VCID-3v4n-fzxa-bfaw
3
vulnerability VCID-4jpa-6fqh-hbfg
4
vulnerability VCID-5jgb-dsyx-hyb4
5
vulnerability VCID-5paq-5frf-43ed
6
vulnerability VCID-5u4q-m66t-wqcj
7
vulnerability VCID-9g62-zd1x-3bdg
8
vulnerability VCID-9gpp-ez8w-rqav
9
vulnerability VCID-9x6r-56xm-n7h7
10
vulnerability VCID-axvk-13qf-tka7
11
vulnerability VCID-b6er-h7dm-3bev
12
vulnerability VCID-bajy-qbwq-fufn
13
vulnerability VCID-cm14-t8uv-k3es
14
vulnerability VCID-dsu7-jjjq-f3e1
15
vulnerability VCID-eajg-ctpd-2bby
16
vulnerability VCID-ekfd-wp8z-d7e1
17
vulnerability VCID-f963-qur3-2qb7
18
vulnerability VCID-g4uc-qeb6-myed
19
vulnerability VCID-gcnj-6qb6-pbgz
20
vulnerability VCID-gv1b-xtv4-4yg3
21
vulnerability VCID-h6y3-7gsq-skh2
22
vulnerability VCID-he5m-6wj4-rbhc
23
vulnerability VCID-hhmn-yz5p-xkap
24
vulnerability VCID-mnz3-rj21-67ad
25
vulnerability VCID-n15v-ta9h-6ffb
26
vulnerability VCID-n7ng-zkkb-2qaz
27
vulnerability VCID-pmzz-9rws-4ud5
28
vulnerability VCID-pss5-as4b-cyf2
29
vulnerability VCID-q8hy-wjd9-nbgp
30
vulnerability VCID-s53a-f91p-huf4
31
vulnerability VCID-s55j-8hbt-akhn
32
vulnerability VCID-s64f-x81f-b7ce
33
vulnerability VCID-stzu-sxe6-5yf5
34
vulnerability VCID-swnc-ke6h-ekew
35
vulnerability VCID-t1n7-eswt-73gw
36
vulnerability VCID-t3jn-vwbx-u7cr
37
vulnerability VCID-taj6-zj2n-5kg8
38
vulnerability VCID-tnjd-pyys-akav
39
vulnerability VCID-vxry-uvph-kbfd
40
vulnerability VCID-vyvy-y3cw-hbgr
41
vulnerability VCID-xa4m-xpa9-v7h8
42
vulnerability VCID-xh7y-56vy-5ud8
43
vulnerability VCID-y32z-2d3f-gkgw
44
vulnerability VCID-zdq2-dhb2-6kaq
45
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.23
1
url pkg:composer/typo3/cms-core@9.5.4
purl pkg:composer/typo3/cms-core@9.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2meq-x4kd-bbdn
1
vulnerability VCID-2mn6-mdmz-4yd9
2
vulnerability VCID-3n2r-awja-dug9
3
vulnerability VCID-3v4n-fzxa-bfaw
4
vulnerability VCID-461j-9hrc-gfbc
5
vulnerability VCID-4jpa-6fqh-hbfg
6
vulnerability VCID-4mkw-tv16-jyca
7
vulnerability VCID-4t9s-p25a-cfas
8
vulnerability VCID-543x-cnbz-1kb9
9
vulnerability VCID-58js-jzm4-4fc7
10
vulnerability VCID-5jgb-dsyx-hyb4
11
vulnerability VCID-5kzs-ex81-bbaj
12
vulnerability VCID-5paq-5frf-43ed
13
vulnerability VCID-5u4q-m66t-wqcj
14
vulnerability VCID-65ue-7jd9-23gf
15
vulnerability VCID-6a9t-8dmn-s3bv
16
vulnerability VCID-8d2m-1ffv-jqe1
17
vulnerability VCID-9g62-zd1x-3bdg
18
vulnerability VCID-9gpp-ez8w-rqav
19
vulnerability VCID-9x6r-56xm-n7h7
20
vulnerability VCID-a49c-fqrj-nbb3
21
vulnerability VCID-axvk-13qf-tka7
22
vulnerability VCID-b6er-h7dm-3bev
23
vulnerability VCID-bajy-qbwq-fufn
24
vulnerability VCID-cm14-t8uv-k3es
25
vulnerability VCID-d8d1-sat6-muhe
26
vulnerability VCID-dmzb-gkdn-6bcm
27
vulnerability VCID-dsu7-jjjq-f3e1
28
vulnerability VCID-e32h-8q61-hbgc
29
vulnerability VCID-eajg-ctpd-2bby
30
vulnerability VCID-ekfd-wp8z-d7e1
31
vulnerability VCID-f963-qur3-2qb7
32
vulnerability VCID-g4uc-qeb6-myed
33
vulnerability VCID-gcnj-6qb6-pbgz
34
vulnerability VCID-gv1b-xtv4-4yg3
35
vulnerability VCID-h6y3-7gsq-skh2
36
vulnerability VCID-he5m-6wj4-rbhc
37
vulnerability VCID-hhmn-yz5p-xkap
38
vulnerability VCID-kj9x-psfz-2ug1
39
vulnerability VCID-mnz3-rj21-67ad
40
vulnerability VCID-mud2-s4rc-fuf6
41
vulnerability VCID-n15v-ta9h-6ffb
42
vulnerability VCID-n7ng-zkkb-2qaz
43
vulnerability VCID-nubu-f1sc-gbes
44
vulnerability VCID-nxq4-m52q-yuh4
45
vulnerability VCID-phgh-sd4m-zbdx
46
vulnerability VCID-pmzz-9rws-4ud5
47
vulnerability VCID-pss5-as4b-cyf2
48
vulnerability VCID-q8hy-wjd9-nbgp
49
vulnerability VCID-raxk-rm9v-hubn
50
vulnerability VCID-remd-55jh-r3g5
51
vulnerability VCID-s53a-f91p-huf4
52
vulnerability VCID-s55j-8hbt-akhn
53
vulnerability VCID-s64f-x81f-b7ce
54
vulnerability VCID-stzu-sxe6-5yf5
55
vulnerability VCID-sw7v-fbjk-13hy
56
vulnerability VCID-swnc-ke6h-ekew
57
vulnerability VCID-t1n7-eswt-73gw
58
vulnerability VCID-t3jn-vwbx-u7cr
59
vulnerability VCID-taj6-zj2n-5kg8
60
vulnerability VCID-tnjd-pyys-akav
61
vulnerability VCID-u9bx-8e86-wbew
62
vulnerability VCID-ve7g-8st5-wffb
63
vulnerability VCID-vxry-uvph-kbfd
64
vulnerability VCID-vyvy-y3cw-hbgr
65
vulnerability VCID-w13x-3rp9-wyej
66
vulnerability VCID-xa4m-xpa9-v7h8
67
vulnerability VCID-xh7y-56vy-5ud8
68
vulnerability VCID-xtdg-uj46-rkcm
69
vulnerability VCID-xy6y-312d-rygj
70
vulnerability VCID-y32z-2d3f-gkgw
71
vulnerability VCID-zdq2-dhb2-6kaq
72
vulnerability VCID-zkea-ge1t-z7gn
73
vulnerability VCID-zn99-ywte-33g6
74
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.4
aliases 2019-01-22-7
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-dj88-f3p8-cfbn
28
url VCID-dm97-51uu-r7gw
vulnerability_id VCID-dm97-51uu-r7gw
summary 
Cross-site Scripting
Cross-Site Scripting in Online Media Asset Rendering.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-006/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2018-006/
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.21
purl pkg:composer/typo3/cms-core@8.7.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21e8-x7mp-hugk
1
vulnerability VCID-2meq-x4kd-bbdn
2
vulnerability VCID-3n2r-awja-dug9
3
vulnerability VCID-3v4n-fzxa-bfaw
4
vulnerability VCID-4jpa-6fqh-hbfg
5
vulnerability VCID-551q-gpyd-ffe8
6
vulnerability VCID-5jgb-dsyx-hyb4
7
vulnerability VCID-5mxm-88r9-hfey
8
vulnerability VCID-5paq-5frf-43ed
9
vulnerability VCID-5u4q-m66t-wqcj
10
vulnerability VCID-9g62-zd1x-3bdg
11
vulnerability VCID-9gpp-ez8w-rqav
12
vulnerability VCID-9x6r-56xm-n7h7
13
vulnerability VCID-9zqs-hjay-fkev
14
vulnerability VCID-axaf-45kr-kbfe
15
vulnerability VCID-axvk-13qf-tka7
16
vulnerability VCID-b6er-h7dm-3bev
17
vulnerability VCID-bajy-qbwq-fufn
18
vulnerability VCID-cm14-t8uv-k3es
19
vulnerability VCID-d99v-v9cj-zfh2
20
vulnerability VCID-dj88-f3p8-cfbn
21
vulnerability VCID-dsu7-jjjq-f3e1
22
vulnerability VCID-eajg-ctpd-2bby
23
vulnerability VCID-ekfd-wp8z-d7e1
24
vulnerability VCID-f4bv-pzdy-dfcb
25
vulnerability VCID-f963-qur3-2qb7
26
vulnerability VCID-g4uc-qeb6-myed
27
vulnerability VCID-gcnj-6qb6-pbgz
28
vulnerability VCID-gv1b-xtv4-4yg3
29
vulnerability VCID-h6y3-7gsq-skh2
30
vulnerability VCID-he5m-6wj4-rbhc
31
vulnerability VCID-hhmn-yz5p-xkap
32
vulnerability VCID-j77k-hjgx-5kc5
33
vulnerability VCID-k8af-cg9k-87a9
34
vulnerability VCID-mh4f-vtfj-hbb1
35
vulnerability VCID-mnz3-rj21-67ad
36
vulnerability VCID-n15v-ta9h-6ffb
37
vulnerability VCID-n7ng-zkkb-2qaz
38
vulnerability VCID-pmzz-9rws-4ud5
39
vulnerability VCID-pss5-as4b-cyf2
40
vulnerability VCID-px44-19tj-h7aa
41
vulnerability VCID-q8hy-wjd9-nbgp
42
vulnerability VCID-s53a-f91p-huf4
43
vulnerability VCID-s55j-8hbt-akhn
44
vulnerability VCID-s64f-x81f-b7ce
45
vulnerability VCID-stzu-sxe6-5yf5
46
vulnerability VCID-swnc-ke6h-ekew
47
vulnerability VCID-t1n7-eswt-73gw
48
vulnerability VCID-t3jn-vwbx-u7cr
49
vulnerability VCID-taj6-zj2n-5kg8
50
vulnerability VCID-tnjd-pyys-akav
51
vulnerability VCID-vxry-uvph-kbfd
52
vulnerability VCID-vyvy-y3cw-hbgr
53
vulnerability VCID-wea9-egep-h7g5
54
vulnerability VCID-xa4m-xpa9-v7h8
55
vulnerability VCID-xh7y-56vy-5ud8
56
vulnerability VCID-y32z-2d3f-gkgw
57
vulnerability VCID-zdq2-dhb2-6kaq
58
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.21
1
url pkg:composer/typo3/cms-core@9.5.2
purl pkg:composer/typo3/cms-core@9.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21e8-x7mp-hugk
1
vulnerability VCID-2meq-x4kd-bbdn
2
vulnerability VCID-2mn6-mdmz-4yd9
3
vulnerability VCID-3n2r-awja-dug9
4
vulnerability VCID-3v4n-fzxa-bfaw
5
vulnerability VCID-461j-9hrc-gfbc
6
vulnerability VCID-4jpa-6fqh-hbfg
7
vulnerability VCID-4mkw-tv16-jyca
8
vulnerability VCID-4t9s-p25a-cfas
9
vulnerability VCID-543x-cnbz-1kb9
10
vulnerability VCID-551q-gpyd-ffe8
11
vulnerability VCID-58js-jzm4-4fc7
12
vulnerability VCID-5jgb-dsyx-hyb4
13
vulnerability VCID-5kzs-ex81-bbaj
14
vulnerability VCID-5paq-5frf-43ed
15
vulnerability VCID-5u4q-m66t-wqcj
16
vulnerability VCID-65ue-7jd9-23gf
17
vulnerability VCID-6a9t-8dmn-s3bv
18
vulnerability VCID-8d2m-1ffv-jqe1
19
vulnerability VCID-9g62-zd1x-3bdg
20
vulnerability VCID-9gpp-ez8w-rqav
21
vulnerability VCID-9x6r-56xm-n7h7
22
vulnerability VCID-9zqs-hjay-fkev
23
vulnerability VCID-a49c-fqrj-nbb3
24
vulnerability VCID-axaf-45kr-kbfe
25
vulnerability VCID-axvk-13qf-tka7
26
vulnerability VCID-b6er-h7dm-3bev
27
vulnerability VCID-bajy-qbwq-fufn
28
vulnerability VCID-cm14-t8uv-k3es
29
vulnerability VCID-d8d1-sat6-muhe
30
vulnerability VCID-d99v-v9cj-zfh2
31
vulnerability VCID-dj88-f3p8-cfbn
32
vulnerability VCID-dmzb-gkdn-6bcm
33
vulnerability VCID-dsu7-jjjq-f3e1
34
vulnerability VCID-e32h-8q61-hbgc
35
vulnerability VCID-eajg-ctpd-2bby
36
vulnerability VCID-ekfd-wp8z-d7e1
37
vulnerability VCID-f4bv-pzdy-dfcb
38
vulnerability VCID-f963-qur3-2qb7
39
vulnerability VCID-g4uc-qeb6-myed
40
vulnerability VCID-gcnj-6qb6-pbgz
41
vulnerability VCID-gv1b-xtv4-4yg3
42
vulnerability VCID-h6y3-7gsq-skh2
43
vulnerability VCID-he5m-6wj4-rbhc
44
vulnerability VCID-hhmn-yz5p-xkap
45
vulnerability VCID-k8af-cg9k-87a9
46
vulnerability VCID-kj9x-psfz-2ug1
47
vulnerability VCID-mh4f-vtfj-hbb1
48
vulnerability VCID-mnz3-rj21-67ad
49
vulnerability VCID-mud2-s4rc-fuf6
50
vulnerability VCID-n15v-ta9h-6ffb
51
vulnerability VCID-n7ng-zkkb-2qaz
52
vulnerability VCID-nubu-f1sc-gbes
53
vulnerability VCID-nxq4-m52q-yuh4
54
vulnerability VCID-p715-yexd-jfgc
55
vulnerability VCID-phgh-sd4m-zbdx
56
vulnerability VCID-pmzz-9rws-4ud5
57
vulnerability VCID-pss5-as4b-cyf2
58
vulnerability VCID-px44-19tj-h7aa
59
vulnerability VCID-q8hy-wjd9-nbgp
60
vulnerability VCID-raxk-rm9v-hubn
61
vulnerability VCID-remd-55jh-r3g5
62
vulnerability VCID-s53a-f91p-huf4
63
vulnerability VCID-s55j-8hbt-akhn
64
vulnerability VCID-s64f-x81f-b7ce
65
vulnerability VCID-stzu-sxe6-5yf5
66
vulnerability VCID-sw7v-fbjk-13hy
67
vulnerability VCID-swnc-ke6h-ekew
68
vulnerability VCID-t1n7-eswt-73gw
69
vulnerability VCID-t3jn-vwbx-u7cr
70
vulnerability VCID-taj6-zj2n-5kg8
71
vulnerability VCID-tnjd-pyys-akav
72
vulnerability VCID-u9bx-8e86-wbew
73
vulnerability VCID-ve7g-8st5-wffb
74
vulnerability VCID-vxry-uvph-kbfd
75
vulnerability VCID-vyvy-y3cw-hbgr
76
vulnerability VCID-w13x-3rp9-wyej
77
vulnerability VCID-wea9-egep-h7g5
78
vulnerability VCID-xa4m-xpa9-v7h8
79
vulnerability VCID-xh7y-56vy-5ud8
80
vulnerability VCID-xtdg-uj46-rkcm
81
vulnerability VCID-xy6y-312d-rygj
82
vulnerability VCID-y32z-2d3f-gkgw
83
vulnerability VCID-yzx1-4psv-7bhr
84
vulnerability VCID-zdq2-dhb2-6kaq
85
vulnerability VCID-zkea-ge1t-z7gn
86
vulnerability VCID-zn99-ywte-33g6
87
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.2
aliases 2018-12-11-1
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-dm97-51uu-r7gw
29
url VCID-dsu7-jjjq-f3e1
vulnerability_id VCID-dsu7-jjjq-f3e1
summary 
Cleartext storage of session identifier
### Problem
User session identifiers were stored in cleartext - without processing of additional cryptographic hashing algorithms. This vulnerability cannot be exploited directly and occurs in combination with a chained attack - like for instance SQL injection in any other component of the system.

### Solution
Update to TYPO3 versions 6.2.57, 7.6.51, 8.7.40, 9.5.25, 10.4.14, 11.1.1 that fix the problem described.

### Credits
Thanks to TYPO3 security team member Oliver Hader who reported this issue and to TYPO3 core & security team members Benni Mack & Oliver Hader who fixed the issue.

### References
* [TYPO3-CORE-SA-2021-006](https://typo3.org/security/advisory/typo3-core-sa-2021-006)
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-21339
reference_id
reference_type
scores
0
value 0.00132
scoring_system epss
scoring_elements 0.32688
published_at 2026-04-18T12:55:00Z
1
value 0.00132
scoring_system epss
scoring_elements 0.32671
published_at 2026-04-01T12:55:00Z
2
value 0.00132
scoring_system epss
scoring_elements 0.32804
published_at 2026-04-02T12:55:00Z
3
value 0.00132
scoring_system epss
scoring_elements 0.3284
published_at 2026-04-04T12:55:00Z
4
value 0.00132
scoring_system epss
scoring_elements 0.32661
published_at 2026-04-07T12:55:00Z
5
value 0.00132
scoring_system epss
scoring_elements 0.32709
published_at 2026-04-08T12:55:00Z
6
value 0.00132
scoring_system epss
scoring_elements 0.32735
published_at 2026-04-09T12:55:00Z
7
value 0.00132
scoring_system epss
scoring_elements 0.32736
published_at 2026-04-11T12:55:00Z
8
value 0.00132
scoring_system epss
scoring_elements 0.327
published_at 2026-04-12T12:55:00Z
9
value 0.00132
scoring_system epss
scoring_elements 0.32672
published_at 2026-04-13T12:55:00Z
10
value 0.00132
scoring_system epss
scoring_elements 0.32711
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-21339
1
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21339.yaml
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21339.yaml
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21339.yaml
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21339.yaml
3
reference_url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-qx3w-4864-94ch
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-qx3w-4864-94ch
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-21339
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-21339
5
reference_url https://packagist.org/packages/typo3/cms-core
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://packagist.org/packages/typo3/cms-core
6
reference_url https://typo3.org/security/advisory/typo3-core-sa-2021-006
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2021-006
7
reference_url https://github.com/advisories/GHSA-qx3w-4864-94ch
reference_id GHSA-qx3w-4864-94ch
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-qx3w-4864-94ch
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.40
purl pkg:composer/typo3/cms-core@8.7.40
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ekfd-wp8z-d7e1
1
vulnerability VCID-n15v-ta9h-6ffb
2
vulnerability VCID-s64f-x81f-b7ce
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.40
1
url pkg:composer/typo3/cms-core@9.5.25
purl pkg:composer/typo3/cms-core@9.5.25
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4jpa-6fqh-hbfg
1
vulnerability VCID-4t9s-p25a-cfas
2
vulnerability VCID-5paq-5frf-43ed
3
vulnerability VCID-65ue-7jd9-23gf
4
vulnerability VCID-6a9t-8dmn-s3bv
5
vulnerability VCID-8d2m-1ffv-jqe1
6
vulnerability VCID-axvk-13qf-tka7
7
vulnerability VCID-b6er-h7dm-3bev
8
vulnerability VCID-bajy-qbwq-fufn
9
vulnerability VCID-e32h-8q61-hbgc
10
vulnerability VCID-ekfd-wp8z-d7e1
11
vulnerability VCID-g4uc-qeb6-myed
12
vulnerability VCID-gv1b-xtv4-4yg3
13
vulnerability VCID-h6y3-7gsq-skh2
14
vulnerability VCID-mnz3-rj21-67ad
15
vulnerability VCID-mud2-s4rc-fuf6
16
vulnerability VCID-n15v-ta9h-6ffb
17
vulnerability VCID-n7ng-zkkb-2qaz
18
vulnerability VCID-nubu-f1sc-gbes
19
vulnerability VCID-remd-55jh-r3g5
20
vulnerability VCID-s55j-8hbt-akhn
21
vulnerability VCID-s64f-x81f-b7ce
22
vulnerability VCID-t1n7-eswt-73gw
23
vulnerability VCID-taj6-zj2n-5kg8
24
vulnerability VCID-ve7g-8st5-wffb
25
vulnerability VCID-vyvy-y3cw-hbgr
26
vulnerability VCID-w13x-3rp9-wyej
27
vulnerability VCID-xy6y-312d-rygj
28
vulnerability VCID-y32z-2d3f-gkgw
29
vulnerability VCID-zdq2-dhb2-6kaq
30
vulnerability VCID-zn99-ywte-33g6
31
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.25
2
url pkg:composer/typo3/cms-core@10.4.14
purl pkg:composer/typo3/cms-core@10.4.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-1yxw-saf5-wue7
2
vulnerability VCID-4jpa-6fqh-hbfg
3
vulnerability VCID-4t9s-p25a-cfas
4
vulnerability VCID-5paq-5frf-43ed
5
vulnerability VCID-65ue-7jd9-23gf
6
vulnerability VCID-6a9t-8dmn-s3bv
7
vulnerability VCID-8d2m-1ffv-jqe1
8
vulnerability VCID-8sdd-b1bn-cuhx
9
vulnerability VCID-av8u-rvzq-4fc7
10
vulnerability VCID-axvk-13qf-tka7
11
vulnerability VCID-b6er-h7dm-3bev
12
vulnerability VCID-bajy-qbwq-fufn
13
vulnerability VCID-e32h-8q61-hbgc
14
vulnerability VCID-ekfd-wp8z-d7e1
15
vulnerability VCID-g4uc-qeb6-myed
16
vulnerability VCID-gv1b-xtv4-4yg3
17
vulnerability VCID-gyyu-n3b1-zbcj
18
vulnerability VCID-h6y3-7gsq-skh2
19
vulnerability VCID-mnz3-rj21-67ad
20
vulnerability VCID-mud2-s4rc-fuf6
21
vulnerability VCID-n15v-ta9h-6ffb
22
vulnerability VCID-n7ng-zkkb-2qaz
23
vulnerability VCID-nubu-f1sc-gbes
24
vulnerability VCID-remd-55jh-r3g5
25
vulnerability VCID-s55j-8hbt-akhn
26
vulnerability VCID-s64f-x81f-b7ce
27
vulnerability VCID-t1n7-eswt-73gw
28
vulnerability VCID-taj6-zj2n-5kg8
29
vulnerability VCID-ve7g-8st5-wffb
30
vulnerability VCID-vwb2-a84s-5qak
31
vulnerability VCID-vyvy-y3cw-hbgr
32
vulnerability VCID-w13x-3rp9-wyej
33
vulnerability VCID-xy6y-312d-rygj
34
vulnerability VCID-y32z-2d3f-gkgw
35
vulnerability VCID-zdq2-dhb2-6kaq
36
vulnerability VCID-zn99-ywte-33g6
37
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@10.4.14
3
url pkg:composer/typo3/cms-core@11.1.1
purl pkg:composer/typo3/cms-core@11.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-1yxw-saf5-wue7
2
vulnerability VCID-4jpa-6fqh-hbfg
3
vulnerability VCID-4t9s-p25a-cfas
4
vulnerability VCID-5paq-5frf-43ed
5
vulnerability VCID-65ue-7jd9-23gf
6
vulnerability VCID-6a9t-8dmn-s3bv
7
vulnerability VCID-8d2m-1ffv-jqe1
8
vulnerability VCID-8sdd-b1bn-cuhx
9
vulnerability VCID-av8u-rvzq-4fc7
10
vulnerability VCID-axvk-13qf-tka7
11
vulnerability VCID-b6er-h7dm-3bev
12
vulnerability VCID-bajy-qbwq-fufn
13
vulnerability VCID-e32h-8q61-hbgc
14
vulnerability VCID-ekfd-wp8z-d7e1
15
vulnerability VCID-g4uc-qeb6-myed
16
vulnerability VCID-gv1b-xtv4-4yg3
17
vulnerability VCID-gyyu-n3b1-zbcj
18
vulnerability VCID-h6y3-7gsq-skh2
19
vulnerability VCID-mnz3-rj21-67ad
20
vulnerability VCID-mud2-s4rc-fuf6
21
vulnerability VCID-n15v-ta9h-6ffb
22
vulnerability VCID-n7ng-zkkb-2qaz
23
vulnerability VCID-nubu-f1sc-gbes
24
vulnerability VCID-remd-55jh-r3g5
25
vulnerability VCID-s55j-8hbt-akhn
26
vulnerability VCID-s64f-x81f-b7ce
27
vulnerability VCID-t1n7-eswt-73gw
28
vulnerability VCID-taj6-zj2n-5kg8
29
vulnerability VCID-uyeu-a3xr-fkh4
30
vulnerability VCID-ve7g-8st5-wffb
31
vulnerability VCID-vwb2-a84s-5qak
32
vulnerability VCID-vyvy-y3cw-hbgr
33
vulnerability VCID-w13x-3rp9-wyej
34
vulnerability VCID-xy6y-312d-rygj
35
vulnerability VCID-y32z-2d3f-gkgw
36
vulnerability VCID-zdq2-dhb2-6kaq
37
vulnerability VCID-zn99-ywte-33g6
38
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@11.1.1
aliases CVE-2021-21339, GHSA-qx3w-4864-94ch
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-dsu7-jjjq-f3e1
30
url VCID-e268-wagv-sbex
vulnerability_id VCID-e268-wagv-sbex
summary 
TYPO3 Cross-Site Scripting in Online Media Asset Rendering
Failing to properly encode user input, online media asset rendering (*.youtube and *.vimeo files) is vulnerable to cross-site scripting. A valid backend user account or write access on the server system (e.g. SFTP) is needed in order to exploit this vulnerability.
references
0
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2018-12-11-1.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2018-12-11-1.yaml
1
reference_url https://github.com/TYPO3-CMS/core
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core
2
reference_url https://github.com/TYPO3-CMS/core/commit/23800859368e2af60604ff27f3eed9971ccd9fbd
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core/commit/23800859368e2af60604ff27f3eed9971ccd9fbd
3
reference_url https://github.com/TYPO3-CMS/core/commit/f9e5e255f41c248e115b2a755b797ce48d10d72a
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core/commit/f9e5e255f41c248e115b2a755b797ce48d10d72a
4
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-006
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2018-006
5
reference_url https://github.com/advisories/GHSA-wg8h-gxf4-g4gh
reference_id GHSA-wg8h-gxf4-g4gh
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-wg8h-gxf4-g4gh
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.21
purl pkg:composer/typo3/cms-core@8.7.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21e8-x7mp-hugk
1
vulnerability VCID-2meq-x4kd-bbdn
2
vulnerability VCID-3n2r-awja-dug9
3
vulnerability VCID-3v4n-fzxa-bfaw
4
vulnerability VCID-4jpa-6fqh-hbfg
5
vulnerability VCID-551q-gpyd-ffe8
6
vulnerability VCID-5jgb-dsyx-hyb4
7
vulnerability VCID-5mxm-88r9-hfey
8
vulnerability VCID-5paq-5frf-43ed
9
vulnerability VCID-5u4q-m66t-wqcj
10
vulnerability VCID-9g62-zd1x-3bdg
11
vulnerability VCID-9gpp-ez8w-rqav
12
vulnerability VCID-9x6r-56xm-n7h7
13
vulnerability VCID-9zqs-hjay-fkev
14
vulnerability VCID-axaf-45kr-kbfe
15
vulnerability VCID-axvk-13qf-tka7
16
vulnerability VCID-b6er-h7dm-3bev
17
vulnerability VCID-bajy-qbwq-fufn
18
vulnerability VCID-cm14-t8uv-k3es
19
vulnerability VCID-d99v-v9cj-zfh2
20
vulnerability VCID-dj88-f3p8-cfbn
21
vulnerability VCID-dsu7-jjjq-f3e1
22
vulnerability VCID-eajg-ctpd-2bby
23
vulnerability VCID-ekfd-wp8z-d7e1
24
vulnerability VCID-f4bv-pzdy-dfcb
25
vulnerability VCID-f963-qur3-2qb7
26
vulnerability VCID-g4uc-qeb6-myed
27
vulnerability VCID-gcnj-6qb6-pbgz
28
vulnerability VCID-gv1b-xtv4-4yg3
29
vulnerability VCID-h6y3-7gsq-skh2
30
vulnerability VCID-he5m-6wj4-rbhc
31
vulnerability VCID-hhmn-yz5p-xkap
32
vulnerability VCID-j77k-hjgx-5kc5
33
vulnerability VCID-k8af-cg9k-87a9
34
vulnerability VCID-mh4f-vtfj-hbb1
35
vulnerability VCID-mnz3-rj21-67ad
36
vulnerability VCID-n15v-ta9h-6ffb
37
vulnerability VCID-n7ng-zkkb-2qaz
38
vulnerability VCID-pmzz-9rws-4ud5
39
vulnerability VCID-pss5-as4b-cyf2
40
vulnerability VCID-px44-19tj-h7aa
41
vulnerability VCID-q8hy-wjd9-nbgp
42
vulnerability VCID-s53a-f91p-huf4
43
vulnerability VCID-s55j-8hbt-akhn
44
vulnerability VCID-s64f-x81f-b7ce
45
vulnerability VCID-stzu-sxe6-5yf5
46
vulnerability VCID-swnc-ke6h-ekew
47
vulnerability VCID-t1n7-eswt-73gw
48
vulnerability VCID-t3jn-vwbx-u7cr
49
vulnerability VCID-taj6-zj2n-5kg8
50
vulnerability VCID-tnjd-pyys-akav
51
vulnerability VCID-vxry-uvph-kbfd
52
vulnerability VCID-vyvy-y3cw-hbgr
53
vulnerability VCID-wea9-egep-h7g5
54
vulnerability VCID-xa4m-xpa9-v7h8
55
vulnerability VCID-xh7y-56vy-5ud8
56
vulnerability VCID-y32z-2d3f-gkgw
57
vulnerability VCID-zdq2-dhb2-6kaq
58
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.21
1
url pkg:composer/typo3/cms-core@9.5.2
purl pkg:composer/typo3/cms-core@9.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21e8-x7mp-hugk
1
vulnerability VCID-2meq-x4kd-bbdn
2
vulnerability VCID-2mn6-mdmz-4yd9
3
vulnerability VCID-3n2r-awja-dug9
4
vulnerability VCID-3v4n-fzxa-bfaw
5
vulnerability VCID-461j-9hrc-gfbc
6
vulnerability VCID-4jpa-6fqh-hbfg
7
vulnerability VCID-4mkw-tv16-jyca
8
vulnerability VCID-4t9s-p25a-cfas
9
vulnerability VCID-543x-cnbz-1kb9
10
vulnerability VCID-551q-gpyd-ffe8
11
vulnerability VCID-58js-jzm4-4fc7
12
vulnerability VCID-5jgb-dsyx-hyb4
13
vulnerability VCID-5kzs-ex81-bbaj
14
vulnerability VCID-5paq-5frf-43ed
15
vulnerability VCID-5u4q-m66t-wqcj
16
vulnerability VCID-65ue-7jd9-23gf
17
vulnerability VCID-6a9t-8dmn-s3bv
18
vulnerability VCID-8d2m-1ffv-jqe1
19
vulnerability VCID-9g62-zd1x-3bdg
20
vulnerability VCID-9gpp-ez8w-rqav
21
vulnerability VCID-9x6r-56xm-n7h7
22
vulnerability VCID-9zqs-hjay-fkev
23
vulnerability VCID-a49c-fqrj-nbb3
24
vulnerability VCID-axaf-45kr-kbfe
25
vulnerability VCID-axvk-13qf-tka7
26
vulnerability VCID-b6er-h7dm-3bev
27
vulnerability VCID-bajy-qbwq-fufn
28
vulnerability VCID-cm14-t8uv-k3es
29
vulnerability VCID-d8d1-sat6-muhe
30
vulnerability VCID-d99v-v9cj-zfh2
31
vulnerability VCID-dj88-f3p8-cfbn
32
vulnerability VCID-dmzb-gkdn-6bcm
33
vulnerability VCID-dsu7-jjjq-f3e1
34
vulnerability VCID-e32h-8q61-hbgc
35
vulnerability VCID-eajg-ctpd-2bby
36
vulnerability VCID-ekfd-wp8z-d7e1
37
vulnerability VCID-f4bv-pzdy-dfcb
38
vulnerability VCID-f963-qur3-2qb7
39
vulnerability VCID-g4uc-qeb6-myed
40
vulnerability VCID-gcnj-6qb6-pbgz
41
vulnerability VCID-gv1b-xtv4-4yg3
42
vulnerability VCID-h6y3-7gsq-skh2
43
vulnerability VCID-he5m-6wj4-rbhc
44
vulnerability VCID-hhmn-yz5p-xkap
45
vulnerability VCID-k8af-cg9k-87a9
46
vulnerability VCID-kj9x-psfz-2ug1
47
vulnerability VCID-mh4f-vtfj-hbb1
48
vulnerability VCID-mnz3-rj21-67ad
49
vulnerability VCID-mud2-s4rc-fuf6
50
vulnerability VCID-n15v-ta9h-6ffb
51
vulnerability VCID-n7ng-zkkb-2qaz
52
vulnerability VCID-nubu-f1sc-gbes
53
vulnerability VCID-nxq4-m52q-yuh4
54
vulnerability VCID-p715-yexd-jfgc
55
vulnerability VCID-phgh-sd4m-zbdx
56
vulnerability VCID-pmzz-9rws-4ud5
57
vulnerability VCID-pss5-as4b-cyf2
58
vulnerability VCID-px44-19tj-h7aa
59
vulnerability VCID-q8hy-wjd9-nbgp
60
vulnerability VCID-raxk-rm9v-hubn
61
vulnerability VCID-remd-55jh-r3g5
62
vulnerability VCID-s53a-f91p-huf4
63
vulnerability VCID-s55j-8hbt-akhn
64
vulnerability VCID-s64f-x81f-b7ce
65
vulnerability VCID-stzu-sxe6-5yf5
66
vulnerability VCID-sw7v-fbjk-13hy
67
vulnerability VCID-swnc-ke6h-ekew
68
vulnerability VCID-t1n7-eswt-73gw
69
vulnerability VCID-t3jn-vwbx-u7cr
70
vulnerability VCID-taj6-zj2n-5kg8
71
vulnerability VCID-tnjd-pyys-akav
72
vulnerability VCID-u9bx-8e86-wbew
73
vulnerability VCID-ve7g-8st5-wffb
74
vulnerability VCID-vxry-uvph-kbfd
75
vulnerability VCID-vyvy-y3cw-hbgr
76
vulnerability VCID-w13x-3rp9-wyej
77
vulnerability VCID-wea9-egep-h7g5
78
vulnerability VCID-xa4m-xpa9-v7h8
79
vulnerability VCID-xh7y-56vy-5ud8
80
vulnerability VCID-xtdg-uj46-rkcm
81
vulnerability VCID-xy6y-312d-rygj
82
vulnerability VCID-y32z-2d3f-gkgw
83
vulnerability VCID-yzx1-4psv-7bhr
84
vulnerability VCID-zdq2-dhb2-6kaq
85
vulnerability VCID-zkea-ge1t-z7gn
86
vulnerability VCID-zn99-ywte-33g6
87
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.2
aliases GHSA-wg8h-gxf4-g4gh
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-e268-wagv-sbex
31
url VCID-eajg-ctpd-2bby
vulnerability_id VCID-eajg-ctpd-2bby
summary Security Misconfiguration in User Session Handling.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-011/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-011/
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.25
purl pkg:composer/typo3/cms-core@8.7.25
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2meq-x4kd-bbdn
1
vulnerability VCID-3n2r-awja-dug9
2
vulnerability VCID-3v4n-fzxa-bfaw
3
vulnerability VCID-4jpa-6fqh-hbfg
4
vulnerability VCID-5jgb-dsyx-hyb4
5
vulnerability VCID-5paq-5frf-43ed
6
vulnerability VCID-5u4q-m66t-wqcj
7
vulnerability VCID-9g62-zd1x-3bdg
8
vulnerability VCID-9x6r-56xm-n7h7
9
vulnerability VCID-axvk-13qf-tka7
10
vulnerability VCID-b6er-h7dm-3bev
11
vulnerability VCID-bajy-qbwq-fufn
12
vulnerability VCID-cm14-t8uv-k3es
13
vulnerability VCID-dsu7-jjjq-f3e1
14
vulnerability VCID-ekfd-wp8z-d7e1
15
vulnerability VCID-f1rq-qudk-zkf2
16
vulnerability VCID-f963-qur3-2qb7
17
vulnerability VCID-g4uc-qeb6-myed
18
vulnerability VCID-gcnj-6qb6-pbgz
19
vulnerability VCID-gv1b-xtv4-4yg3
20
vulnerability VCID-h6y3-7gsq-skh2
21
vulnerability VCID-he5m-6wj4-rbhc
22
vulnerability VCID-hhmn-yz5p-xkap
23
vulnerability VCID-mnz3-rj21-67ad
24
vulnerability VCID-n15v-ta9h-6ffb
25
vulnerability VCID-n7ng-zkkb-2qaz
26
vulnerability VCID-pmzz-9rws-4ud5
27
vulnerability VCID-s53a-f91p-huf4
28
vulnerability VCID-s55j-8hbt-akhn
29
vulnerability VCID-s64f-x81f-b7ce
30
vulnerability VCID-stzu-sxe6-5yf5
31
vulnerability VCID-swnc-ke6h-ekew
32
vulnerability VCID-t1n7-eswt-73gw
33
vulnerability VCID-t3jn-vwbx-u7cr
34
vulnerability VCID-taj6-zj2n-5kg8
35
vulnerability VCID-tnjd-pyys-akav
36
vulnerability VCID-vxry-uvph-kbfd
37
vulnerability VCID-vyvy-y3cw-hbgr
38
vulnerability VCID-xa4m-xpa9-v7h8
39
vulnerability VCID-xh7y-56vy-5ud8
40
vulnerability VCID-y32z-2d3f-gkgw
41
vulnerability VCID-zdq2-dhb2-6kaq
42
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.25
1
url pkg:composer/typo3/cms-core@9.5.6
purl pkg:composer/typo3/cms-core@9.5.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2meq-x4kd-bbdn
1
vulnerability VCID-2mn6-mdmz-4yd9
2
vulnerability VCID-3n2r-awja-dug9
3
vulnerability VCID-3v4n-fzxa-bfaw
4
vulnerability VCID-4jpa-6fqh-hbfg
5
vulnerability VCID-4mkw-tv16-jyca
6
vulnerability VCID-4t9s-p25a-cfas
7
vulnerability VCID-543x-cnbz-1kb9
8
vulnerability VCID-58js-jzm4-4fc7
9
vulnerability VCID-5jgb-dsyx-hyb4
10
vulnerability VCID-5kzs-ex81-bbaj
11
vulnerability VCID-5paq-5frf-43ed
12
vulnerability VCID-5u4q-m66t-wqcj
13
vulnerability VCID-65ue-7jd9-23gf
14
vulnerability VCID-6a9t-8dmn-s3bv
15
vulnerability VCID-8d2m-1ffv-jqe1
16
vulnerability VCID-9g62-zd1x-3bdg
17
vulnerability VCID-9x6r-56xm-n7h7
18
vulnerability VCID-a49c-fqrj-nbb3
19
vulnerability VCID-axvk-13qf-tka7
20
vulnerability VCID-b6er-h7dm-3bev
21
vulnerability VCID-bajy-qbwq-fufn
22
vulnerability VCID-cm14-t8uv-k3es
23
vulnerability VCID-d8d1-sat6-muhe
24
vulnerability VCID-dmzb-gkdn-6bcm
25
vulnerability VCID-dsu7-jjjq-f3e1
26
vulnerability VCID-e32h-8q61-hbgc
27
vulnerability VCID-ekfd-wp8z-d7e1
28
vulnerability VCID-f1rq-qudk-zkf2
29
vulnerability VCID-f963-qur3-2qb7
30
vulnerability VCID-g4uc-qeb6-myed
31
vulnerability VCID-gcnj-6qb6-pbgz
32
vulnerability VCID-gv1b-xtv4-4yg3
33
vulnerability VCID-h6y3-7gsq-skh2
34
vulnerability VCID-he5m-6wj4-rbhc
35
vulnerability VCID-hhmn-yz5p-xkap
36
vulnerability VCID-mnz3-rj21-67ad
37
vulnerability VCID-mud2-s4rc-fuf6
38
vulnerability VCID-n15v-ta9h-6ffb
39
vulnerability VCID-n7ng-zkkb-2qaz
40
vulnerability VCID-nubu-f1sc-gbes
41
vulnerability VCID-phgh-sd4m-zbdx
42
vulnerability VCID-pmzz-9rws-4ud5
43
vulnerability VCID-remd-55jh-r3g5
44
vulnerability VCID-s53a-f91p-huf4
45
vulnerability VCID-s55j-8hbt-akhn
46
vulnerability VCID-s64f-x81f-b7ce
47
vulnerability VCID-stzu-sxe6-5yf5
48
vulnerability VCID-sw7v-fbjk-13hy
49
vulnerability VCID-swnc-ke6h-ekew
50
vulnerability VCID-t1n7-eswt-73gw
51
vulnerability VCID-t3jn-vwbx-u7cr
52
vulnerability VCID-taj6-zj2n-5kg8
53
vulnerability VCID-tnjd-pyys-akav
54
vulnerability VCID-u9bx-8e86-wbew
55
vulnerability VCID-ve7g-8st5-wffb
56
vulnerability VCID-vxry-uvph-kbfd
57
vulnerability VCID-vyvy-y3cw-hbgr
58
vulnerability VCID-w13x-3rp9-wyej
59
vulnerability VCID-xa4m-xpa9-v7h8
60
vulnerability VCID-xh7y-56vy-5ud8
61
vulnerability VCID-xtdg-uj46-rkcm
62
vulnerability VCID-xy6y-312d-rygj
63
vulnerability VCID-y32z-2d3f-gkgw
64
vulnerability VCID-zdq2-dhb2-6kaq
65
vulnerability VCID-zkea-ge1t-z7gn
66
vulnerability VCID-zn99-ywte-33g6
67
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.6
aliases 2019-05-07-2
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-eajg-ctpd-2bby
32
url VCID-ehzg-bzrd-kbcc
vulnerability_id VCID-ehzg-bzrd-kbcc
summary 
Uncontrolled Resource Consumption
Denial of Service in Frontend Record Registration.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-012/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2018-012/
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.21
purl pkg:composer/typo3/cms-core@8.7.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21e8-x7mp-hugk
1
vulnerability VCID-2meq-x4kd-bbdn
2
vulnerability VCID-3n2r-awja-dug9
3
vulnerability VCID-3v4n-fzxa-bfaw
4
vulnerability VCID-4jpa-6fqh-hbfg
5
vulnerability VCID-551q-gpyd-ffe8
6
vulnerability VCID-5jgb-dsyx-hyb4
7
vulnerability VCID-5mxm-88r9-hfey
8
vulnerability VCID-5paq-5frf-43ed
9
vulnerability VCID-5u4q-m66t-wqcj
10
vulnerability VCID-9g62-zd1x-3bdg
11
vulnerability VCID-9gpp-ez8w-rqav
12
vulnerability VCID-9x6r-56xm-n7h7
13
vulnerability VCID-9zqs-hjay-fkev
14
vulnerability VCID-axaf-45kr-kbfe
15
vulnerability VCID-axvk-13qf-tka7
16
vulnerability VCID-b6er-h7dm-3bev
17
vulnerability VCID-bajy-qbwq-fufn
18
vulnerability VCID-cm14-t8uv-k3es
19
vulnerability VCID-d99v-v9cj-zfh2
20
vulnerability VCID-dj88-f3p8-cfbn
21
vulnerability VCID-dsu7-jjjq-f3e1
22
vulnerability VCID-eajg-ctpd-2bby
23
vulnerability VCID-ekfd-wp8z-d7e1
24
vulnerability VCID-f4bv-pzdy-dfcb
25
vulnerability VCID-f963-qur3-2qb7
26
vulnerability VCID-g4uc-qeb6-myed
27
vulnerability VCID-gcnj-6qb6-pbgz
28
vulnerability VCID-gv1b-xtv4-4yg3
29
vulnerability VCID-h6y3-7gsq-skh2
30
vulnerability VCID-he5m-6wj4-rbhc
31
vulnerability VCID-hhmn-yz5p-xkap
32
vulnerability VCID-j77k-hjgx-5kc5
33
vulnerability VCID-k8af-cg9k-87a9
34
vulnerability VCID-mh4f-vtfj-hbb1
35
vulnerability VCID-mnz3-rj21-67ad
36
vulnerability VCID-n15v-ta9h-6ffb
37
vulnerability VCID-n7ng-zkkb-2qaz
38
vulnerability VCID-pmzz-9rws-4ud5
39
vulnerability VCID-pss5-as4b-cyf2
40
vulnerability VCID-px44-19tj-h7aa
41
vulnerability VCID-q8hy-wjd9-nbgp
42
vulnerability VCID-s53a-f91p-huf4
43
vulnerability VCID-s55j-8hbt-akhn
44
vulnerability VCID-s64f-x81f-b7ce
45
vulnerability VCID-stzu-sxe6-5yf5
46
vulnerability VCID-swnc-ke6h-ekew
47
vulnerability VCID-t1n7-eswt-73gw
48
vulnerability VCID-t3jn-vwbx-u7cr
49
vulnerability VCID-taj6-zj2n-5kg8
50
vulnerability VCID-tnjd-pyys-akav
51
vulnerability VCID-vxry-uvph-kbfd
52
vulnerability VCID-vyvy-y3cw-hbgr
53
vulnerability VCID-wea9-egep-h7g5
54
vulnerability VCID-xa4m-xpa9-v7h8
55
vulnerability VCID-xh7y-56vy-5ud8
56
vulnerability VCID-y32z-2d3f-gkgw
57
vulnerability VCID-zdq2-dhb2-6kaq
58
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.21
1
url pkg:composer/typo3/cms-core@9.0.0
purl pkg:composer/typo3/cms-core@9.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12y5-7b81-wkfu
1
vulnerability VCID-21e8-x7mp-hugk
2
vulnerability VCID-28bf-jvah-zkhw
3
vulnerability VCID-2meq-x4kd-bbdn
4
vulnerability VCID-2mn6-mdmz-4yd9
5
vulnerability VCID-3gg5-1921-rbfs
6
vulnerability VCID-3n2r-awja-dug9
7
vulnerability VCID-3v4n-fzxa-bfaw
8
vulnerability VCID-461j-9hrc-gfbc
9
vulnerability VCID-4btk-jt5n-2ugf
10
vulnerability VCID-4hsv-y3rz-e3a2
11
vulnerability VCID-4jpa-6fqh-hbfg
12
vulnerability VCID-4mkw-tv16-jyca
13
vulnerability VCID-4t9s-p25a-cfas
14
vulnerability VCID-543x-cnbz-1kb9
15
vulnerability VCID-551q-gpyd-ffe8
16
vulnerability VCID-58js-jzm4-4fc7
17
vulnerability VCID-5jgb-dsyx-hyb4
18
vulnerability VCID-5kzs-ex81-bbaj
19
vulnerability VCID-5paq-5frf-43ed
20
vulnerability VCID-5u4q-m66t-wqcj
21
vulnerability VCID-5z59-dn7p-xbc5
22
vulnerability VCID-65ue-7jd9-23gf
23
vulnerability VCID-6a9t-8dmn-s3bv
24
vulnerability VCID-6xmj-wbea-r7ex
25
vulnerability VCID-7kjw-j8st-mqfr
26
vulnerability VCID-8d2m-1ffv-jqe1
27
vulnerability VCID-9g62-zd1x-3bdg
28
vulnerability VCID-9gpp-ez8w-rqav
29
vulnerability VCID-9jj4-ec9n-qbhs
30
vulnerability VCID-9x6r-56xm-n7h7
31
vulnerability VCID-9zqs-hjay-fkev
32
vulnerability VCID-a49c-fqrj-nbb3
33
vulnerability VCID-a563-vtwa-hkbr
34
vulnerability VCID-axaf-45kr-kbfe
35
vulnerability VCID-axvk-13qf-tka7
36
vulnerability VCID-ayw6-8pn4-17eb
37
vulnerability VCID-b6er-h7dm-3bev
38
vulnerability VCID-bajy-qbwq-fufn
39
vulnerability VCID-bnne-7p2q-eqd2
40
vulnerability VCID-cm14-t8uv-k3es
41
vulnerability VCID-d8d1-sat6-muhe
42
vulnerability VCID-d99v-v9cj-zfh2
43
vulnerability VCID-dj88-f3p8-cfbn
44
vulnerability VCID-dm97-51uu-r7gw
45
vulnerability VCID-dsu7-jjjq-f3e1
46
vulnerability VCID-e268-wagv-sbex
47
vulnerability VCID-e32h-8q61-hbgc
48
vulnerability VCID-eajg-ctpd-2bby
49
vulnerability VCID-ebpa-58em-wqam
50
vulnerability VCID-ekfd-wp8z-d7e1
51
vulnerability VCID-f1rq-qudk-zkf2
52
vulnerability VCID-f4bv-pzdy-dfcb
53
vulnerability VCID-f963-qur3-2qb7
54
vulnerability VCID-g4uc-qeb6-myed
55
vulnerability VCID-gcnj-6qb6-pbgz
56
vulnerability VCID-gv1b-xtv4-4yg3
57
vulnerability VCID-h6y3-7gsq-skh2
58
vulnerability VCID-he5m-6wj4-rbhc
59
vulnerability VCID-hhmn-yz5p-xkap
60
vulnerability VCID-k8af-cg9k-87a9
61
vulnerability VCID-kj9x-psfz-2ug1
62
vulnerability VCID-m7w6-b2xu-6uee
63
vulnerability VCID-mh4f-vtfj-hbb1
64
vulnerability VCID-mnz3-rj21-67ad
65
vulnerability VCID-mud2-s4rc-fuf6
66
vulnerability VCID-n15v-ta9h-6ffb
67
vulnerability VCID-n1cb-8py6-bbhu
68
vulnerability VCID-n78p-x7hh-gqcf
69
vulnerability VCID-n7ng-zkkb-2qaz
70
vulnerability VCID-nubu-f1sc-gbes
71
vulnerability VCID-nxq4-m52q-yuh4
72
vulnerability VCID-p715-yexd-jfgc
73
vulnerability VCID-phgh-sd4m-zbdx
74
vulnerability VCID-pmzz-9rws-4ud5
75
vulnerability VCID-pss5-as4b-cyf2
76
vulnerability VCID-px44-19tj-h7aa
77
vulnerability VCID-q8hy-wjd9-nbgp
78
vulnerability VCID-qb4j-9tz7-m7a2
79
vulnerability VCID-qeus-f4wj-rubr
80
vulnerability VCID-qzyk-7877-27a3
81
vulnerability VCID-raxk-rm9v-hubn
82
vulnerability VCID-rdrs-mhaw-b3ge
83
vulnerability VCID-remd-55jh-r3g5
84
vulnerability VCID-rwqs-3ktq-qqbd
85
vulnerability VCID-s53a-f91p-huf4
86
vulnerability VCID-s55j-8hbt-akhn
87
vulnerability VCID-s64f-x81f-b7ce
88
vulnerability VCID-sr3p-pdxy-4yhu
89
vulnerability VCID-stzu-sxe6-5yf5
90
vulnerability VCID-sw7v-fbjk-13hy
91
vulnerability VCID-swnc-ke6h-ekew
92
vulnerability VCID-t1n7-eswt-73gw
93
vulnerability VCID-t3jn-vwbx-u7cr
94
vulnerability VCID-taj6-zj2n-5kg8
95
vulnerability VCID-tnjd-pyys-akav
96
vulnerability VCID-tw1y-t4qj-j3d1
97
vulnerability VCID-u9bx-8e86-wbew
98
vulnerability VCID-ve7g-8st5-wffb
99
vulnerability VCID-vxry-uvph-kbfd
100
vulnerability VCID-vyvy-y3cw-hbgr
101
vulnerability VCID-w13x-3rp9-wyej
102
vulnerability VCID-wea9-egep-h7g5
103
vulnerability VCID-wkm6-cgc8-bfa8
104
vulnerability VCID-xa4m-xpa9-v7h8
105
vulnerability VCID-xh7y-56vy-5ud8
106
vulnerability VCID-xtdg-uj46-rkcm
107
vulnerability VCID-xy6y-312d-rygj
108
vulnerability VCID-y32z-2d3f-gkgw
109
vulnerability VCID-zdq2-dhb2-6kaq
110
vulnerability VCID-zkea-ge1t-z7gn
111
vulnerability VCID-zspb-bd6j-wyd2
112
vulnerability VCID-zw9b-6vkf-3fc6
113
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.0.0
aliases 2018-12-11-7
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ehzg-bzrd-kbcc
33
url VCID-ekfd-wp8z-d7e1
vulnerability_id VCID-ekfd-wp8z-d7e1
summary 
Cross-site Scripting
TYPO3 is an open source PHP based web content management system. have a cross-site scripting vulnerability. When settings for _backend layouts_ are not properly encoded, the corresponding grid view is vulnerable to persistent cross-site scripting. A valid backend user account is needed to exploit this vulnerability. TYPO3 contain a patch for this vulnerability.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-32669
reference_id
reference_type
scores
0
value 0.00374
scoring_system epss
scoring_elements 0.59043
published_at 2026-04-07T12:55:00Z
1
value 0.00374
scoring_system epss
scoring_elements 0.59121
published_at 2026-04-18T12:55:00Z
2
value 0.00374
scoring_system epss
scoring_elements 0.59116
published_at 2026-04-16T12:55:00Z
3
value 0.00374
scoring_system epss
scoring_elements 0.5908
published_at 2026-04-13T12:55:00Z
4
value 0.00374
scoring_system epss
scoring_elements 0.59099
published_at 2026-04-12T12:55:00Z
5
value 0.00374
scoring_system epss
scoring_elements 0.58981
published_at 2026-04-01T12:55:00Z
6
value 0.00374
scoring_system epss
scoring_elements 0.59094
published_at 2026-04-08T12:55:00Z
7
value 0.00374
scoring_system epss
scoring_elements 0.59056
published_at 2026-04-02T12:55:00Z
8
value 0.00374
scoring_system epss
scoring_elements 0.59078
published_at 2026-04-04T12:55:00Z
9
value 0.00374
scoring_system epss
scoring_elements 0.59117
published_at 2026-04-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-32669
1
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-32669.yaml
reference_id
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-32669.yaml
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-32669.yaml
reference_id
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-32669.yaml
3
reference_url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-rgcg-28xm-8mmw
reference_id
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-rgcg-28xm-8mmw
4
reference_url https://typo3.org/security/advisory/typo3-core-sa-2021-011
reference_id
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2021-011
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-32669
reference_id CVE-2021-32669
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-32669
6
reference_url https://github.com/advisories/GHSA-rgcg-28xm-8mmw
reference_id GHSA-rgcg-28xm-8mmw
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-rgcg-28xm-8mmw
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.41
purl pkg:composer/typo3/cms-core@8.7.41
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-y32z-2d3f-gkgw
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.41
1
url pkg:composer/typo3/cms-core@9.5.28
purl pkg:composer/typo3/cms-core@9.5.28
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4jpa-6fqh-hbfg
1
vulnerability VCID-4t9s-p25a-cfas
2
vulnerability VCID-5paq-5frf-43ed
3
vulnerability VCID-65ue-7jd9-23gf
4
vulnerability VCID-8d2m-1ffv-jqe1
5
vulnerability VCID-axvk-13qf-tka7
6
vulnerability VCID-b6er-h7dm-3bev
7
vulnerability VCID-bajy-qbwq-fufn
8
vulnerability VCID-e32h-8q61-hbgc
9
vulnerability VCID-ekfd-wp8z-d7e1
10
vulnerability VCID-g4uc-qeb6-myed
11
vulnerability VCID-gv1b-xtv4-4yg3
12
vulnerability VCID-h6y3-7gsq-skh2
13
vulnerability VCID-mnz3-rj21-67ad
14
vulnerability VCID-mud2-s4rc-fuf6
15
vulnerability VCID-n7ng-zkkb-2qaz
16
vulnerability VCID-nubu-f1sc-gbes
17
vulnerability VCID-remd-55jh-r3g5
18
vulnerability VCID-s55j-8hbt-akhn
19
vulnerability VCID-s64f-x81f-b7ce
20
vulnerability VCID-t1n7-eswt-73gw
21
vulnerability VCID-taj6-zj2n-5kg8
22
vulnerability VCID-ve7g-8st5-wffb
23
vulnerability VCID-vyvy-y3cw-hbgr
24
vulnerability VCID-w13x-3rp9-wyej
25
vulnerability VCID-xy6y-312d-rygj
26
vulnerability VCID-y32z-2d3f-gkgw
27
vulnerability VCID-zdq2-dhb2-6kaq
28
vulnerability VCID-zn99-ywte-33g6
29
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.28
2
url pkg:composer/typo3/cms-core@10.4.18
purl pkg:composer/typo3/cms-core@10.4.18
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-1yxw-saf5-wue7
2
vulnerability VCID-4jpa-6fqh-hbfg
3
vulnerability VCID-4t9s-p25a-cfas
4
vulnerability VCID-5paq-5frf-43ed
5
vulnerability VCID-65ue-7jd9-23gf
6
vulnerability VCID-8d2m-1ffv-jqe1
7
vulnerability VCID-8sdd-b1bn-cuhx
8
vulnerability VCID-av8u-rvzq-4fc7
9
vulnerability VCID-axvk-13qf-tka7
10
vulnerability VCID-b6er-h7dm-3bev
11
vulnerability VCID-bajy-qbwq-fufn
12
vulnerability VCID-e32h-8q61-hbgc
13
vulnerability VCID-g4uc-qeb6-myed
14
vulnerability VCID-gv1b-xtv4-4yg3
15
vulnerability VCID-gyyu-n3b1-zbcj
16
vulnerability VCID-h6y3-7gsq-skh2
17
vulnerability VCID-mnz3-rj21-67ad
18
vulnerability VCID-mud2-s4rc-fuf6
19
vulnerability VCID-n7ng-zkkb-2qaz
20
vulnerability VCID-nubu-f1sc-gbes
21
vulnerability VCID-remd-55jh-r3g5
22
vulnerability VCID-s55j-8hbt-akhn
23
vulnerability VCID-t1n7-eswt-73gw
24
vulnerability VCID-taj6-zj2n-5kg8
25
vulnerability VCID-ve7g-8st5-wffb
26
vulnerability VCID-vwb2-a84s-5qak
27
vulnerability VCID-vyvy-y3cw-hbgr
28
vulnerability VCID-w13x-3rp9-wyej
29
vulnerability VCID-xy6y-312d-rygj
30
vulnerability VCID-y32z-2d3f-gkgw
31
vulnerability VCID-zdq2-dhb2-6kaq
32
vulnerability VCID-zn99-ywte-33g6
33
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@10.4.18
3
url pkg:composer/typo3/cms-core@11.3.1
purl pkg:composer/typo3/cms-core@11.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-1yxw-saf5-wue7
2
vulnerability VCID-4jpa-6fqh-hbfg
3
vulnerability VCID-4t9s-p25a-cfas
4
vulnerability VCID-5paq-5frf-43ed
5
vulnerability VCID-65ue-7jd9-23gf
6
vulnerability VCID-8d2m-1ffv-jqe1
7
vulnerability VCID-8sdd-b1bn-cuhx
8
vulnerability VCID-av8u-rvzq-4fc7
9
vulnerability VCID-axvk-13qf-tka7
10
vulnerability VCID-b6er-h7dm-3bev
11
vulnerability VCID-bajy-qbwq-fufn
12
vulnerability VCID-e32h-8q61-hbgc
13
vulnerability VCID-g4uc-qeb6-myed
14
vulnerability VCID-gv1b-xtv4-4yg3
15
vulnerability VCID-gyyu-n3b1-zbcj
16
vulnerability VCID-h6y3-7gsq-skh2
17
vulnerability VCID-jjbn-6efk-nud2
18
vulnerability VCID-mnz3-rj21-67ad
19
vulnerability VCID-mud2-s4rc-fuf6
20
vulnerability VCID-n7ng-zkkb-2qaz
21
vulnerability VCID-nubu-f1sc-gbes
22
vulnerability VCID-remd-55jh-r3g5
23
vulnerability VCID-s55j-8hbt-akhn
24
vulnerability VCID-t1n7-eswt-73gw
25
vulnerability VCID-taj6-zj2n-5kg8
26
vulnerability VCID-uyeu-a3xr-fkh4
27
vulnerability VCID-ve7g-8st5-wffb
28
vulnerability VCID-vwb2-a84s-5qak
29
vulnerability VCID-vyvy-y3cw-hbgr
30
vulnerability VCID-w13x-3rp9-wyej
31
vulnerability VCID-xy6y-312d-rygj
32
vulnerability VCID-y32z-2d3f-gkgw
33
vulnerability VCID-zdq2-dhb2-6kaq
34
vulnerability VCID-zn99-ywte-33g6
35
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@11.3.1
aliases CVE-2021-32669, GHSA-rgcg-28xm-8mmw
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ekfd-wp8z-d7e1
34
url VCID-f4bv-pzdy-dfcb
vulnerability_id VCID-f4bv-pzdy-dfcb
summary 
TYPO3 Disclosure of Information about Installed Extensions
It has been discovered that mechanisms used for configuration of RequireJS package loading are susceptible to information disclosure. This way a potential attack can retrieve additional information about installed system and third party extensions.
references
0
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2019-01-22-1.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2019-01-22-1.yaml
1
reference_url https://github.com/TYPO3-CMS/core/commit/7960334bba1223a681283158f67a999334e88cf1
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core/commit/7960334bba1223a681283158f67a999334e88cf1
2
reference_url https://github.com/TYPO3-CMS/core/commit/9453d8a8763fffa76deb6a16f6b99c0ab6f3d8f1
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core/commit/9453d8a8763fffa76deb6a16f6b99c0ab6f3d8f1
3
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-001
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2019-001
4
reference_url https://github.com/advisories/GHSA-p2h4-7fp3-cmh8
reference_id GHSA-p2h4-7fp3-cmh8
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-p2h4-7fp3-cmh8
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.23
purl pkg:composer/typo3/cms-core@8.7.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2meq-x4kd-bbdn
1
vulnerability VCID-3n2r-awja-dug9
2
vulnerability VCID-3v4n-fzxa-bfaw
3
vulnerability VCID-4jpa-6fqh-hbfg
4
vulnerability VCID-5jgb-dsyx-hyb4
5
vulnerability VCID-5paq-5frf-43ed
6
vulnerability VCID-5u4q-m66t-wqcj
7
vulnerability VCID-9g62-zd1x-3bdg
8
vulnerability VCID-9gpp-ez8w-rqav
9
vulnerability VCID-9x6r-56xm-n7h7
10
vulnerability VCID-axvk-13qf-tka7
11
vulnerability VCID-b6er-h7dm-3bev
12
vulnerability VCID-bajy-qbwq-fufn
13
vulnerability VCID-cm14-t8uv-k3es
14
vulnerability VCID-dsu7-jjjq-f3e1
15
vulnerability VCID-eajg-ctpd-2bby
16
vulnerability VCID-ekfd-wp8z-d7e1
17
vulnerability VCID-f963-qur3-2qb7
18
vulnerability VCID-g4uc-qeb6-myed
19
vulnerability VCID-gcnj-6qb6-pbgz
20
vulnerability VCID-gv1b-xtv4-4yg3
21
vulnerability VCID-h6y3-7gsq-skh2
22
vulnerability VCID-he5m-6wj4-rbhc
23
vulnerability VCID-hhmn-yz5p-xkap
24
vulnerability VCID-mnz3-rj21-67ad
25
vulnerability VCID-n15v-ta9h-6ffb
26
vulnerability VCID-n7ng-zkkb-2qaz
27
vulnerability VCID-pmzz-9rws-4ud5
28
vulnerability VCID-pss5-as4b-cyf2
29
vulnerability VCID-q8hy-wjd9-nbgp
30
vulnerability VCID-s53a-f91p-huf4
31
vulnerability VCID-s55j-8hbt-akhn
32
vulnerability VCID-s64f-x81f-b7ce
33
vulnerability VCID-stzu-sxe6-5yf5
34
vulnerability VCID-swnc-ke6h-ekew
35
vulnerability VCID-t1n7-eswt-73gw
36
vulnerability VCID-t3jn-vwbx-u7cr
37
vulnerability VCID-taj6-zj2n-5kg8
38
vulnerability VCID-tnjd-pyys-akav
39
vulnerability VCID-vxry-uvph-kbfd
40
vulnerability VCID-vyvy-y3cw-hbgr
41
vulnerability VCID-xa4m-xpa9-v7h8
42
vulnerability VCID-xh7y-56vy-5ud8
43
vulnerability VCID-y32z-2d3f-gkgw
44
vulnerability VCID-zdq2-dhb2-6kaq
45
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.23
1
url pkg:composer/typo3/cms-core@9.5.4
purl pkg:composer/typo3/cms-core@9.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2meq-x4kd-bbdn
1
vulnerability VCID-2mn6-mdmz-4yd9
2
vulnerability VCID-3n2r-awja-dug9
3
vulnerability VCID-3v4n-fzxa-bfaw
4
vulnerability VCID-461j-9hrc-gfbc
5
vulnerability VCID-4jpa-6fqh-hbfg
6
vulnerability VCID-4mkw-tv16-jyca
7
vulnerability VCID-4t9s-p25a-cfas
8
vulnerability VCID-543x-cnbz-1kb9
9
vulnerability VCID-58js-jzm4-4fc7
10
vulnerability VCID-5jgb-dsyx-hyb4
11
vulnerability VCID-5kzs-ex81-bbaj
12
vulnerability VCID-5paq-5frf-43ed
13
vulnerability VCID-5u4q-m66t-wqcj
14
vulnerability VCID-65ue-7jd9-23gf
15
vulnerability VCID-6a9t-8dmn-s3bv
16
vulnerability VCID-8d2m-1ffv-jqe1
17
vulnerability VCID-9g62-zd1x-3bdg
18
vulnerability VCID-9gpp-ez8w-rqav
19
vulnerability VCID-9x6r-56xm-n7h7
20
vulnerability VCID-a49c-fqrj-nbb3
21
vulnerability VCID-axvk-13qf-tka7
22
vulnerability VCID-b6er-h7dm-3bev
23
vulnerability VCID-bajy-qbwq-fufn
24
vulnerability VCID-cm14-t8uv-k3es
25
vulnerability VCID-d8d1-sat6-muhe
26
vulnerability VCID-dmzb-gkdn-6bcm
27
vulnerability VCID-dsu7-jjjq-f3e1
28
vulnerability VCID-e32h-8q61-hbgc
29
vulnerability VCID-eajg-ctpd-2bby
30
vulnerability VCID-ekfd-wp8z-d7e1
31
vulnerability VCID-f963-qur3-2qb7
32
vulnerability VCID-g4uc-qeb6-myed
33
vulnerability VCID-gcnj-6qb6-pbgz
34
vulnerability VCID-gv1b-xtv4-4yg3
35
vulnerability VCID-h6y3-7gsq-skh2
36
vulnerability VCID-he5m-6wj4-rbhc
37
vulnerability VCID-hhmn-yz5p-xkap
38
vulnerability VCID-kj9x-psfz-2ug1
39
vulnerability VCID-mnz3-rj21-67ad
40
vulnerability VCID-mud2-s4rc-fuf6
41
vulnerability VCID-n15v-ta9h-6ffb
42
vulnerability VCID-n7ng-zkkb-2qaz
43
vulnerability VCID-nubu-f1sc-gbes
44
vulnerability VCID-nxq4-m52q-yuh4
45
vulnerability VCID-phgh-sd4m-zbdx
46
vulnerability VCID-pmzz-9rws-4ud5
47
vulnerability VCID-pss5-as4b-cyf2
48
vulnerability VCID-q8hy-wjd9-nbgp
49
vulnerability VCID-raxk-rm9v-hubn
50
vulnerability VCID-remd-55jh-r3g5
51
vulnerability VCID-s53a-f91p-huf4
52
vulnerability VCID-s55j-8hbt-akhn
53
vulnerability VCID-s64f-x81f-b7ce
54
vulnerability VCID-stzu-sxe6-5yf5
55
vulnerability VCID-sw7v-fbjk-13hy
56
vulnerability VCID-swnc-ke6h-ekew
57
vulnerability VCID-t1n7-eswt-73gw
58
vulnerability VCID-t3jn-vwbx-u7cr
59
vulnerability VCID-taj6-zj2n-5kg8
60
vulnerability VCID-tnjd-pyys-akav
61
vulnerability VCID-u9bx-8e86-wbew
62
vulnerability VCID-ve7g-8st5-wffb
63
vulnerability VCID-vxry-uvph-kbfd
64
vulnerability VCID-vyvy-y3cw-hbgr
65
vulnerability VCID-w13x-3rp9-wyej
66
vulnerability VCID-xa4m-xpa9-v7h8
67
vulnerability VCID-xh7y-56vy-5ud8
68
vulnerability VCID-xtdg-uj46-rkcm
69
vulnerability VCID-xy6y-312d-rygj
70
vulnerability VCID-y32z-2d3f-gkgw
71
vulnerability VCID-zdq2-dhb2-6kaq
72
vulnerability VCID-zkea-ge1t-z7gn
73
vulnerability VCID-zn99-ywte-33g6
74
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.4
aliases GHSA-p2h4-7fp3-cmh8
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-f4bv-pzdy-dfcb
35
url VCID-f963-qur3-2qb7
vulnerability_id VCID-f963-qur3-2qb7
summary 
Cross-Site Scripting in Fluid view helpers
> ### Meta
> * CVSS: `CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:F/RL:O/RC:C` (5.7)
> * CWE-79

### Problem
It has been discovered that system extension Fluid (`typo3/cms-fluid`) of the TYPO3 core is vulnerable to cross-site scripting passing user-controlled data as argument to Fluid view helpers.

```
<f:form ... fieldNamePrefix="{payload}" />
<f:be.labels.csh ... label="{payload}" />
<f:be.menus.actionMenu ... label="{payload}" />
```

### Solution
Update to TYPO3 versions 9.5.23 or 10.4.10 that fix the problem described.

### Credits
Thanks to TYPO3 security team member Oliver Hader who reported this issue and to TYPO3 security team members Helmut Hummel & Oliver Hader who fixed the issue.

### References
* [TYPO3-CORE-SA-2020-010](https://typo3.org/security/advisory/typo3-core-sa-2020-010)
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-26227
reference_id
reference_type
scores
0
value 0.00359
scoring_system epss
scoring_elements 0.5814
published_at 2026-04-18T12:55:00Z
1
value 0.00359
scoring_system epss
scoring_elements 0.57999
published_at 2026-04-01T12:55:00Z
2
value 0.00359
scoring_system epss
scoring_elements 0.58083
published_at 2026-04-02T12:55:00Z
3
value 0.00359
scoring_system epss
scoring_elements 0.58104
published_at 2026-04-04T12:55:00Z
4
value 0.00359
scoring_system epss
scoring_elements 0.58079
published_at 2026-04-07T12:55:00Z
5
value 0.00359
scoring_system epss
scoring_elements 0.58133
published_at 2026-04-08T12:55:00Z
6
value 0.00359
scoring_system epss
scoring_elements 0.58137
published_at 2026-04-09T12:55:00Z
7
value 0.00359
scoring_system epss
scoring_elements 0.58153
published_at 2026-04-11T12:55:00Z
8
value 0.00359
scoring_system epss
scoring_elements 0.5813
published_at 2026-04-12T12:55:00Z
9
value 0.00359
scoring_system epss
scoring_elements 0.58109
published_at 2026-04-13T12:55:00Z
10
value 0.00359
scoring_system epss
scoring_elements 0.58139
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-26227
1
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2020-26227.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2020-26227.yaml
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2020-26227.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2020-26227.yaml
3
reference_url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-vqqx-jw6p-q3rf
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-vqqx-jw6p-q3rf
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-26227
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-26227
5
reference_url https://packagist.org/packages/typo3/cms-core
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://packagist.org/packages/typo3/cms-core
6
reference_url https://typo3.org/security/advisory/typo3-core-sa-2020-010
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2020-010
7
reference_url https://github.com/advisories/GHSA-vqqx-jw6p-q3rf
reference_id GHSA-vqqx-jw6p-q3rf
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-vqqx-jw6p-q3rf
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.38
purl pkg:composer/typo3/cms-core@8.7.38
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.38
1
url pkg:composer/typo3/cms-core@9.5.23
purl pkg:composer/typo3/cms-core@9.5.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4jpa-6fqh-hbfg
1
vulnerability VCID-4t9s-p25a-cfas
2
vulnerability VCID-5jgb-dsyx-hyb4
3
vulnerability VCID-5paq-5frf-43ed
4
vulnerability VCID-65ue-7jd9-23gf
5
vulnerability VCID-6a9t-8dmn-s3bv
6
vulnerability VCID-8d2m-1ffv-jqe1
7
vulnerability VCID-axvk-13qf-tka7
8
vulnerability VCID-b6er-h7dm-3bev
9
vulnerability VCID-bajy-qbwq-fufn
10
vulnerability VCID-d8d1-sat6-muhe
11
vulnerability VCID-dsu7-jjjq-f3e1
12
vulnerability VCID-e32h-8q61-hbgc
13
vulnerability VCID-ekfd-wp8z-d7e1
14
vulnerability VCID-g4uc-qeb6-myed
15
vulnerability VCID-gv1b-xtv4-4yg3
16
vulnerability VCID-h6y3-7gsq-skh2
17
vulnerability VCID-he5m-6wj4-rbhc
18
vulnerability VCID-mnz3-rj21-67ad
19
vulnerability VCID-mud2-s4rc-fuf6
20
vulnerability VCID-n15v-ta9h-6ffb
21
vulnerability VCID-n7ng-zkkb-2qaz
22
vulnerability VCID-nubu-f1sc-gbes
23
vulnerability VCID-remd-55jh-r3g5
24
vulnerability VCID-s55j-8hbt-akhn
25
vulnerability VCID-s64f-x81f-b7ce
26
vulnerability VCID-t1n7-eswt-73gw
27
vulnerability VCID-t3jn-vwbx-u7cr
28
vulnerability VCID-taj6-zj2n-5kg8
29
vulnerability VCID-ve7g-8st5-wffb
30
vulnerability VCID-vyvy-y3cw-hbgr
31
vulnerability VCID-w13x-3rp9-wyej
32
vulnerability VCID-xh7y-56vy-5ud8
33
vulnerability VCID-xy6y-312d-rygj
34
vulnerability VCID-y32z-2d3f-gkgw
35
vulnerability VCID-zdq2-dhb2-6kaq
36
vulnerability VCID-zn99-ywte-33g6
37
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.23
2
url pkg:composer/typo3/cms-core@10.4.10
purl pkg:composer/typo3/cms-core@10.4.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-1yxw-saf5-wue7
2
vulnerability VCID-4jpa-6fqh-hbfg
3
vulnerability VCID-4t9s-p25a-cfas
4
vulnerability VCID-5jgb-dsyx-hyb4
5
vulnerability VCID-5paq-5frf-43ed
6
vulnerability VCID-65ue-7jd9-23gf
7
vulnerability VCID-6a9t-8dmn-s3bv
8
vulnerability VCID-8d2m-1ffv-jqe1
9
vulnerability VCID-8sdd-b1bn-cuhx
10
vulnerability VCID-a89c-jvwa-6kh5
11
vulnerability VCID-av8u-rvzq-4fc7
12
vulnerability VCID-axvk-13qf-tka7
13
vulnerability VCID-b6er-h7dm-3bev
14
vulnerability VCID-bajy-qbwq-fufn
15
vulnerability VCID-d8d1-sat6-muhe
16
vulnerability VCID-dhrm-uxuv-zfaj
17
vulnerability VCID-dsu7-jjjq-f3e1
18
vulnerability VCID-e32h-8q61-hbgc
19
vulnerability VCID-ekfd-wp8z-d7e1
20
vulnerability VCID-g4uc-qeb6-myed
21
vulnerability VCID-gv1b-xtv4-4yg3
22
vulnerability VCID-gyyu-n3b1-zbcj
23
vulnerability VCID-h6y3-7gsq-skh2
24
vulnerability VCID-he5m-6wj4-rbhc
25
vulnerability VCID-mnz3-rj21-67ad
26
vulnerability VCID-mud2-s4rc-fuf6
27
vulnerability VCID-n15v-ta9h-6ffb
28
vulnerability VCID-n7ng-zkkb-2qaz
29
vulnerability VCID-nubu-f1sc-gbes
30
vulnerability VCID-remd-55jh-r3g5
31
vulnerability VCID-s55j-8hbt-akhn
32
vulnerability VCID-s64f-x81f-b7ce
33
vulnerability VCID-t1n7-eswt-73gw
34
vulnerability VCID-t3jn-vwbx-u7cr
35
vulnerability VCID-taj6-zj2n-5kg8
36
vulnerability VCID-ve7g-8st5-wffb
37
vulnerability VCID-vwb2-a84s-5qak
38
vulnerability VCID-vyvy-y3cw-hbgr
39
vulnerability VCID-w13x-3rp9-wyej
40
vulnerability VCID-xh7y-56vy-5ud8
41
vulnerability VCID-xy6y-312d-rygj
42
vulnerability VCID-y32z-2d3f-gkgw
43
vulnerability VCID-zdq2-dhb2-6kaq
44
vulnerability VCID-zn99-ywte-33g6
45
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@10.4.10
aliases CVE-2020-26227, GHSA-vqqx-jw6p-q3rf
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-f963-qur3-2qb7
36
url VCID-g4uc-qeb6-myed
vulnerability_id VCID-g4uc-qeb6-myed
summary 
TYPO3 Install Tool vulnerable to Information Disclosure of Encryption Key
### Problem
The plaintext value of `$GLOBALS['SYS']['encryptionKey']` was displayed in the editing forms of the TYPO3 Install Tool user interface. This allowed attackers to utilize the value to generate cryptographic hashes used for verifying the authenticity of HTTP request parameters. Exploiting this vulnerability requires an administrator-level backend user account with system maintainer permissions.

### Solution
Update to TYPO3 versions 8.7.57 ELTS, 9.5.46 ELTS, 10.4.43 ELTS, 11.5.35 LTS, 12.4.11 LTS, 13.0.1 that fix the problem described.

### Credits
Thanks to TYPO3 core & security team member Benjamin Franzke who fixed the issue.

### References
* [TYPO3-CORE-SA-2024-004](https://typo3.org/security/advisory/typo3-core-sa-2024-004)
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-25119
reference_id
reference_type
scores
0
value 0.00291
scoring_system epss
scoring_elements 0.52471
published_at 2026-04-02T12:55:00Z
1
value 0.00291
scoring_system epss
scoring_elements 0.52575
published_at 2026-04-18T12:55:00Z
2
value 0.00291
scoring_system epss
scoring_elements 0.52569
published_at 2026-04-16T12:55:00Z
3
value 0.00291
scoring_system epss
scoring_elements 0.5253
published_at 2026-04-13T12:55:00Z
4
value 0.00291
scoring_system epss
scoring_elements 0.52546
published_at 2026-04-12T12:55:00Z
5
value 0.00291
scoring_system epss
scoring_elements 0.52562
published_at 2026-04-11T12:55:00Z
6
value 0.00291
scoring_system epss
scoring_elements 0.52511
published_at 2026-04-09T12:55:00Z
7
value 0.00291
scoring_system epss
scoring_elements 0.52517
published_at 2026-04-08T12:55:00Z
8
value 0.00291
scoring_system epss
scoring_elements 0.52464
published_at 2026-04-07T12:55:00Z
9
value 0.00291
scoring_system epss
scoring_elements 0.52498
published_at 2026-04-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-25119
1
reference_url https://github.com/TYPO3/typo3
reference_id
reference_type
scores
0
value 4.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3
2
reference_url https://github.com/TYPO3/typo3/commit/14d101359c71ee963cf51ad0c8ae777b7b9ec9a1
reference_id
reference_type
scores
0
value 4.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/14d101359c71ee963cf51ad0c8ae777b7b9ec9a1
3
reference_url https://github.com/TYPO3/typo3/commit/df486372ea56fac241d3c96ad43a7729fee64557
reference_id
reference_type
scores
0
value 4.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/df486372ea56fac241d3c96ad43a7729fee64557
4
reference_url https://github.com/TYPO3/typo3/commit/fa12667c046342ebfd9b159c646aeafdbc52fcfd
reference_id
reference_type
scores
0
value 4.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/fa12667c046342ebfd9b159c646aeafdbc52fcfd
5
reference_url https://github.com/TYPO3/typo3/security/advisories/GHSA-h47m-3f78-qp9g
reference_id
reference_type
scores
0
value 4.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-14T15:01:19Z/
url https://github.com/TYPO3/typo3/security/advisories/GHSA-h47m-3f78-qp9g
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-25119
reference_id
reference_type
scores
0
value 4.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-25119
7
reference_url https://typo3.org/security/advisory/typo3-core-sa-2024-004
reference_id
reference_type
scores
0
value 4.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-14T15:01:19Z/
url https://typo3.org/security/advisory/typo3-core-sa-2024-004
8
reference_url https://github.com/advisories/GHSA-h47m-3f78-qp9g
reference_id GHSA-h47m-3f78-qp9g
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-h47m-3f78-qp9g
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.57
purl pkg:composer/typo3/cms-core@8.7.57
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.57
1
url pkg:composer/typo3/cms-core@9.5.46
purl pkg:composer/typo3/cms-core@9.5.46
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.46
2
url pkg:composer/typo3/cms-core@10.4.43
purl pkg:composer/typo3/cms-core@10.4.43
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@10.4.43
3
url pkg:composer/typo3/cms-core@11.5.35
purl pkg:composer/typo3/cms-core@11.5.35
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-4t9s-p25a-cfas
2
vulnerability VCID-65ue-7jd9-23gf
3
vulnerability VCID-8d2m-1ffv-jqe1
4
vulnerability VCID-gyyu-n3b1-zbcj
5
vulnerability VCID-mud2-s4rc-fuf6
6
vulnerability VCID-nubu-f1sc-gbes
7
vulnerability VCID-xy6y-312d-rygj
8
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@11.5.35
4
url pkg:composer/typo3/cms-core@12.4.11
purl pkg:composer/typo3/cms-core@12.4.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-4t9s-p25a-cfas
2
vulnerability VCID-65ue-7jd9-23gf
3
vulnerability VCID-8d2m-1ffv-jqe1
4
vulnerability VCID-gyyu-n3b1-zbcj
5
vulnerability VCID-jxw7-skw6-q7bg
6
vulnerability VCID-mud2-s4rc-fuf6
7
vulnerability VCID-nubu-f1sc-gbes
8
vulnerability VCID-xy6y-312d-rygj
9
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@12.4.11
5
url pkg:composer/typo3/cms-core@13.0.1
purl pkg:composer/typo3/cms-core@13.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-4t9s-p25a-cfas
2
vulnerability VCID-65ue-7jd9-23gf
3
vulnerability VCID-8d2m-1ffv-jqe1
4
vulnerability VCID-gyyu-n3b1-zbcj
5
vulnerability VCID-jxw7-skw6-q7bg
6
vulnerability VCID-mud2-s4rc-fuf6
7
vulnerability VCID-nubu-f1sc-gbes
8
vulnerability VCID-xy6y-312d-rygj
9
vulnerability VCID-yxy9-ngwb-6qdm
10
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@13.0.1
aliases CVE-2024-25119, GHSA-h47m-3f78-qp9g
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-g4uc-qeb6-myed
37
url VCID-gcnj-6qb6-pbgz
vulnerability_id VCID-gcnj-6qb6-pbgz
summary 
TYPO3 Directory Traversal on ZIP extraction
An issue was discovered in TYPO3 before 8.7.30, 9.x before 9.5.12, and 10.x before 10.2.2. It has been discovered that the extraction of manually uploaded ZIP archives in Extension Manager is vulnerable to directory traversal. Admin privileges are required in order to exploit this vulnerability. (In v9 LTS and later, System Maintainer privileges are also required.)
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-19848
reference_id
reference_type
scores
0
value 0.00374
scoring_system epss
scoring_elements 0.59128
published_at 2026-04-18T12:55:00Z
1
value 0.00374
scoring_system epss
scoring_elements 0.58989
published_at 2026-04-01T12:55:00Z
2
value 0.00374
scoring_system epss
scoring_elements 0.59064
published_at 2026-04-02T12:55:00Z
3
value 0.00374
scoring_system epss
scoring_elements 0.59087
published_at 2026-04-13T12:55:00Z
4
value 0.00374
scoring_system epss
scoring_elements 0.59051
published_at 2026-04-07T12:55:00Z
5
value 0.00374
scoring_system epss
scoring_elements 0.59102
published_at 2026-04-08T12:55:00Z
6
value 0.00374
scoring_system epss
scoring_elements 0.59106
published_at 2026-04-12T12:55:00Z
7
value 0.00374
scoring_system epss
scoring_elements 0.59125
published_at 2026-04-11T12:55:00Z
8
value 0.00374
scoring_system epss
scoring_elements 0.59124
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-19848
1
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2019-19848.yaml
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2019-19848.yaml
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2019-19848.yaml
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2019-19848.yaml
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-19848
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-19848
4
reference_url https://review.typo3.org/q/%2522Resolves:+%252388764%2522+topic:security
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://review.typo3.org/q/%2522Resolves:+%252388764%2522+topic:security
5
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-024
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2019-024
6
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-024/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-024/
7
reference_url https://github.com/advisories/GHSA-77p4-wfr8-977w
reference_id GHSA-77p4-wfr8-977w
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-77p4-wfr8-977w
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.30
purl pkg:composer/typo3/cms-core@8.7.30
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4jpa-6fqh-hbfg
1
vulnerability VCID-5jgb-dsyx-hyb4
2
vulnerability VCID-5paq-5frf-43ed
3
vulnerability VCID-axvk-13qf-tka7
4
vulnerability VCID-b6er-h7dm-3bev
5
vulnerability VCID-bajy-qbwq-fufn
6
vulnerability VCID-dsu7-jjjq-f3e1
7
vulnerability VCID-ekfd-wp8z-d7e1
8
vulnerability VCID-f963-qur3-2qb7
9
vulnerability VCID-g4uc-qeb6-myed
10
vulnerability VCID-gv1b-xtv4-4yg3
11
vulnerability VCID-h6y3-7gsq-skh2
12
vulnerability VCID-he5m-6wj4-rbhc
13
vulnerability VCID-mnz3-rj21-67ad
14
vulnerability VCID-n15v-ta9h-6ffb
15
vulnerability VCID-n7ng-zkkb-2qaz
16
vulnerability VCID-s55j-8hbt-akhn
17
vulnerability VCID-s64f-x81f-b7ce
18
vulnerability VCID-t1n7-eswt-73gw
19
vulnerability VCID-t3jn-vwbx-u7cr
20
vulnerability VCID-taj6-zj2n-5kg8
21
vulnerability VCID-vyvy-y3cw-hbgr
22
vulnerability VCID-xh7y-56vy-5ud8
23
vulnerability VCID-y32z-2d3f-gkgw
24
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.30
1
url pkg:composer/typo3/cms-core@9.5.12
purl pkg:composer/typo3/cms-core@9.5.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mn6-mdmz-4yd9
1
vulnerability VCID-4jpa-6fqh-hbfg
2
vulnerability VCID-4t9s-p25a-cfas
3
vulnerability VCID-543x-cnbz-1kb9
4
vulnerability VCID-58js-jzm4-4fc7
5
vulnerability VCID-5jgb-dsyx-hyb4
6
vulnerability VCID-5kzs-ex81-bbaj
7
vulnerability VCID-5paq-5frf-43ed
8
vulnerability VCID-65ue-7jd9-23gf
9
vulnerability VCID-6a9t-8dmn-s3bv
10
vulnerability VCID-7kjw-j8st-mqfr
11
vulnerability VCID-8d2m-1ffv-jqe1
12
vulnerability VCID-a49c-fqrj-nbb3
13
vulnerability VCID-axvk-13qf-tka7
14
vulnerability VCID-b6er-h7dm-3bev
15
vulnerability VCID-bajy-qbwq-fufn
16
vulnerability VCID-d8d1-sat6-muhe
17
vulnerability VCID-dsu7-jjjq-f3e1
18
vulnerability VCID-e32h-8q61-hbgc
19
vulnerability VCID-ekfd-wp8z-d7e1
20
vulnerability VCID-f963-qur3-2qb7
21
vulnerability VCID-g4uc-qeb6-myed
22
vulnerability VCID-gv1b-xtv4-4yg3
23
vulnerability VCID-h6y3-7gsq-skh2
24
vulnerability VCID-he5m-6wj4-rbhc
25
vulnerability VCID-mnz3-rj21-67ad
26
vulnerability VCID-mud2-s4rc-fuf6
27
vulnerability VCID-n15v-ta9h-6ffb
28
vulnerability VCID-n7ng-zkkb-2qaz
29
vulnerability VCID-nubu-f1sc-gbes
30
vulnerability VCID-phgh-sd4m-zbdx
31
vulnerability VCID-remd-55jh-r3g5
32
vulnerability VCID-s55j-8hbt-akhn
33
vulnerability VCID-s64f-x81f-b7ce
34
vulnerability VCID-sw7v-fbjk-13hy
35
vulnerability VCID-t1n7-eswt-73gw
36
vulnerability VCID-t3jn-vwbx-u7cr
37
vulnerability VCID-taj6-zj2n-5kg8
38
vulnerability VCID-ve7g-8st5-wffb
39
vulnerability VCID-vyvy-y3cw-hbgr
40
vulnerability VCID-w13x-3rp9-wyej
41
vulnerability VCID-xh7y-56vy-5ud8
42
vulnerability VCID-xy6y-312d-rygj
43
vulnerability VCID-y32z-2d3f-gkgw
44
vulnerability VCID-zdq2-dhb2-6kaq
45
vulnerability VCID-zn99-ywte-33g6
46
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.12
2
url pkg:composer/typo3/cms-core@10.2.2
purl pkg:composer/typo3/cms-core@10.2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1yxw-saf5-wue7
1
vulnerability VCID-2mn6-mdmz-4yd9
2
vulnerability VCID-4jpa-6fqh-hbfg
3
vulnerability VCID-4t9s-p25a-cfas
4
vulnerability VCID-543x-cnbz-1kb9
5
vulnerability VCID-58js-jzm4-4fc7
6
vulnerability VCID-5jgb-dsyx-hyb4
7
vulnerability VCID-5kzs-ex81-bbaj
8
vulnerability VCID-5paq-5frf-43ed
9
vulnerability VCID-65ue-7jd9-23gf
10
vulnerability VCID-6a9t-8dmn-s3bv
11
vulnerability VCID-7kjw-j8st-mqfr
12
vulnerability VCID-8d2m-1ffv-jqe1
13
vulnerability VCID-8sdd-b1bn-cuhx
14
vulnerability VCID-a49c-fqrj-nbb3
15
vulnerability VCID-a89c-jvwa-6kh5
16
vulnerability VCID-av8u-rvzq-4fc7
17
vulnerability VCID-axvk-13qf-tka7
18
vulnerability VCID-b6er-h7dm-3bev
19
vulnerability VCID-bajy-qbwq-fufn
20
vulnerability VCID-cdjv-fp71-y3dv
21
vulnerability VCID-d8d1-sat6-muhe
22
vulnerability VCID-dhrm-uxuv-zfaj
23
vulnerability VCID-dsu7-jjjq-f3e1
24
vulnerability VCID-e32h-8q61-hbgc
25
vulnerability VCID-ekfd-wp8z-d7e1
26
vulnerability VCID-f963-qur3-2qb7
27
vulnerability VCID-g4uc-qeb6-myed
28
vulnerability VCID-gv1b-xtv4-4yg3
29
vulnerability VCID-gyyu-n3b1-zbcj
30
vulnerability VCID-h6y3-7gsq-skh2
31
vulnerability VCID-he5m-6wj4-rbhc
32
vulnerability VCID-mnz3-rj21-67ad
33
vulnerability VCID-mud2-s4rc-fuf6
34
vulnerability VCID-n15v-ta9h-6ffb
35
vulnerability VCID-n7ng-zkkb-2qaz
36
vulnerability VCID-nubu-f1sc-gbes
37
vulnerability VCID-phgh-sd4m-zbdx
38
vulnerability VCID-remd-55jh-r3g5
39
vulnerability VCID-s55j-8hbt-akhn
40
vulnerability VCID-s64f-x81f-b7ce
41
vulnerability VCID-sw7v-fbjk-13hy
42
vulnerability VCID-t1n7-eswt-73gw
43
vulnerability VCID-t3jn-vwbx-u7cr
44
vulnerability VCID-taj6-zj2n-5kg8
45
vulnerability VCID-usmv-r64u-m7cb
46
vulnerability VCID-ve7g-8st5-wffb
47
vulnerability VCID-vwb2-a84s-5qak
48
vulnerability VCID-vyvy-y3cw-hbgr
49
vulnerability VCID-w13x-3rp9-wyej
50
vulnerability VCID-xh7y-56vy-5ud8
51
vulnerability VCID-xy6y-312d-rygj
52
vulnerability VCID-y32z-2d3f-gkgw
53
vulnerability VCID-zdq2-dhb2-6kaq
54
vulnerability VCID-zn99-ywte-33g6
55
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@10.2.2
aliases CVE-2019-19848, GHSA-77p4-wfr8-977w
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-gcnj-6qb6-pbgz
38
url VCID-gv1b-xtv4-4yg3
vulnerability_id VCID-gv1b-xtv4-4yg3
summary 
TYPO3 Backend Forms vulnerable to Information Disclosure of Hashed Passwords
### Problem
Password hashes were being reflected in the editing forms of the TYPO3 backend user interface. This allowed attackers to crack the plaintext password using brute force techniques. Exploiting this vulnerability requires a valid backend user account.

### Solution
Update to TYPO3 versions 8.7.57 ELTS, 9.5.46 ELTS, 10.4.43 ELTS, 11.5.35 LTS, 12.4.11 LTS, 13.0.1 that fix the problem described.

### Credits
Thanks to the TYPO3 framework merger Christian Kuhn and external security researchers Maximilian Beckmann, Klaus-Günther Schmidt who reported this issue, and TYPO3 security team member Oliver Hader who fixed the issue.

### References
* [TYPO3-CORE-SA-2024-003](https://typo3.org/security/advisory/typo3-core-sa-2024-003)
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-25118
reference_id
reference_type
scores
0
value 0.00508
scoring_system epss
scoring_elements 0.66278
published_at 2026-04-02T12:55:00Z
1
value 0.00508
scoring_system epss
scoring_elements 0.66361
published_at 2026-04-18T12:55:00Z
2
value 0.00508
scoring_system epss
scoring_elements 0.66346
published_at 2026-04-16T12:55:00Z
3
value 0.00508
scoring_system epss
scoring_elements 0.66311
published_at 2026-04-13T12:55:00Z
4
value 0.00508
scoring_system epss
scoring_elements 0.66342
published_at 2026-04-12T12:55:00Z
5
value 0.00508
scoring_system epss
scoring_elements 0.66355
published_at 2026-04-11T12:55:00Z
6
value 0.00508
scoring_system epss
scoring_elements 0.66335
published_at 2026-04-09T12:55:00Z
7
value 0.00508
scoring_system epss
scoring_elements 0.66321
published_at 2026-04-08T12:55:00Z
8
value 0.00508
scoring_system epss
scoring_elements 0.66274
published_at 2026-04-07T12:55:00Z
9
value 0.00508
scoring_system epss
scoring_elements 0.66304
published_at 2026-04-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-25118
1
reference_url https://github.com/TYPO3/typo3
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3
2
reference_url https://github.com/TYPO3/typo3/commit/1186b2fec8a665a8f228ed66e6d60abf8407c17b
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/1186b2fec8a665a8f228ed66e6d60abf8407c17b
3
reference_url https://github.com/TYPO3/typo3/commit/c7a135c25a14b852eebe4335f21ba3c606188f3a
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/c7a135c25a14b852eebe4335f21ba3c606188f3a
4
reference_url https://github.com/TYPO3/typo3/commit/cafc5af7fdce7734e6c8f9ecf2efd17b246fc049
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/cafc5af7fdce7734e6c8f9ecf2efd17b246fc049
5
reference_url https://github.com/TYPO3/typo3/security/advisories/GHSA-38r2-5695-334w
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-22T17:58:02Z/
url https://github.com/TYPO3/typo3/security/advisories/GHSA-38r2-5695-334w
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-25118
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-25118
7
reference_url https://typo3.org/security/advisory/typo3-core-sa-2024-003
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-22T17:58:02Z/
url https://typo3.org/security/advisory/typo3-core-sa-2024-003
8
reference_url https://github.com/advisories/GHSA-38r2-5695-334w
reference_id GHSA-38r2-5695-334w
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-38r2-5695-334w
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.57
purl pkg:composer/typo3/cms-core@8.7.57
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.57
1
url pkg:composer/typo3/cms-core@9.5.46
purl pkg:composer/typo3/cms-core@9.5.46
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.46
2
url pkg:composer/typo3/cms-core@10.4.43
purl pkg:composer/typo3/cms-core@10.4.43
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@10.4.43
3
url pkg:composer/typo3/cms-core@11.5.35
purl pkg:composer/typo3/cms-core@11.5.35
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-4t9s-p25a-cfas
2
vulnerability VCID-65ue-7jd9-23gf
3
vulnerability VCID-8d2m-1ffv-jqe1
4
vulnerability VCID-gyyu-n3b1-zbcj
5
vulnerability VCID-mud2-s4rc-fuf6
6
vulnerability VCID-nubu-f1sc-gbes
7
vulnerability VCID-xy6y-312d-rygj
8
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@11.5.35
4
url pkg:composer/typo3/cms-core@12.4.11
purl pkg:composer/typo3/cms-core@12.4.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-4t9s-p25a-cfas
2
vulnerability VCID-65ue-7jd9-23gf
3
vulnerability VCID-8d2m-1ffv-jqe1
4
vulnerability VCID-gyyu-n3b1-zbcj
5
vulnerability VCID-jxw7-skw6-q7bg
6
vulnerability VCID-mud2-s4rc-fuf6
7
vulnerability VCID-nubu-f1sc-gbes
8
vulnerability VCID-xy6y-312d-rygj
9
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@12.4.11
5
url pkg:composer/typo3/cms-core@13.0.1
purl pkg:composer/typo3/cms-core@13.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-4t9s-p25a-cfas
2
vulnerability VCID-65ue-7jd9-23gf
3
vulnerability VCID-8d2m-1ffv-jqe1
4
vulnerability VCID-gyyu-n3b1-zbcj
5
vulnerability VCID-jxw7-skw6-q7bg
6
vulnerability VCID-mud2-s4rc-fuf6
7
vulnerability VCID-nubu-f1sc-gbes
8
vulnerability VCID-xy6y-312d-rygj
9
vulnerability VCID-yxy9-ngwb-6qdm
10
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@13.0.1
aliases CVE-2024-25118, GHSA-38r2-5695-334w
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-gv1b-xtv4-4yg3
39
url VCID-h6y3-7gsq-skh2
vulnerability_id VCID-h6y3-7gsq-skh2
summary 
TYPO3 vulnerable to Weak Authentication in Session Handling
TYPO3 is an open source PHP based web content management system released under the GNU GPL. In typo3 installations there are always at least two different sites. Eg. first.example.org and second.example.com. In affected versions a session cookie generated for the first site can be reused on the second site without requiring additional authentication. This vulnerability has been addressed in versions 8.7.55, 9.5.44, 10.4.41, 11.5.33, and 12.4.8. Users are advised to upgrade. There are no known workarounds for this vulnerability.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-47127
reference_id
reference_type
scores
0
value 0.00181
scoring_system epss
scoring_elements 0.39866
published_at 2026-04-02T12:55:00Z
1
value 0.00181
scoring_system epss
scoring_elements 0.39861
published_at 2026-04-18T12:55:00Z
2
value 0.00181
scoring_system epss
scoring_elements 0.39839
published_at 2026-04-13T12:55:00Z
3
value 0.00181
scoring_system epss
scoring_elements 0.39856
published_at 2026-04-12T12:55:00Z
4
value 0.00181
scoring_system epss
scoring_elements 0.3989
published_at 2026-04-11T12:55:00Z
5
value 0.00181
scoring_system epss
scoring_elements 0.3988
published_at 2026-04-09T12:55:00Z
6
value 0.00181
scoring_system epss
scoring_elements 0.39867
published_at 2026-04-08T12:55:00Z
7
value 0.00181
scoring_system epss
scoring_elements 0.39812
published_at 2026-04-07T12:55:00Z
8
value 0.00181
scoring_system epss
scoring_elements 0.39889
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-47127
1
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2023-47127.yaml
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2023-47127.yaml
2
reference_url https://github.com/TYPO3/typo3
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3
3
reference_url https://github.com/TYPO3/typo3/commit/535dfbdc54fd5362e0bc08d911db44eac7f64019
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-08-29T20:41:35Z/
url https://github.com/TYPO3/typo3/commit/535dfbdc54fd5362e0bc08d911db44eac7f64019
4
reference_url https://typo3.org/security/advisory/typo3-core-sa-2023-006
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-08-29T20:41:35Z/
url https://typo3.org/security/advisory/typo3-core-sa-2023-006
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-47127
reference_id CVE-2023-47127
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-47127
6
reference_url https://github.com/advisories/GHSA-3vmm-7h4j-69rm
reference_id GHSA-3vmm-7h4j-69rm
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-3vmm-7h4j-69rm
7
reference_url https://github.com/TYPO3/typo3/security/advisories/GHSA-3vmm-7h4j-69rm
reference_id GHSA-3vmm-7h4j-69rm
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-08-29T20:41:35Z/
url https://github.com/TYPO3/typo3/security/advisories/GHSA-3vmm-7h4j-69rm
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.55
purl pkg:composer/typo3/cms-core@8.7.55
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.55
1
url pkg:composer/typo3/cms-core@9.5.44
purl pkg:composer/typo3/cms-core@9.5.44
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.44
2
url pkg:composer/typo3/cms-core@10.4.41
purl pkg:composer/typo3/cms-core@10.4.41
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@10.4.41
3
url pkg:composer/typo3/cms-core@11.5.33
purl pkg:composer/typo3/cms-core@11.5.33
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-4t9s-p25a-cfas
2
vulnerability VCID-65ue-7jd9-23gf
3
vulnerability VCID-8d2m-1ffv-jqe1
4
vulnerability VCID-axvk-13qf-tka7
5
vulnerability VCID-g4uc-qeb6-myed
6
vulnerability VCID-gv1b-xtv4-4yg3
7
vulnerability VCID-gyyu-n3b1-zbcj
8
vulnerability VCID-mud2-s4rc-fuf6
9
vulnerability VCID-n7ng-zkkb-2qaz
10
vulnerability VCID-nubu-f1sc-gbes
11
vulnerability VCID-taj6-zj2n-5kg8
12
vulnerability VCID-xy6y-312d-rygj
13
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@11.5.33
4
url pkg:composer/typo3/cms-core@12.4.8
purl pkg:composer/typo3/cms-core@12.4.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-4t9s-p25a-cfas
2
vulnerability VCID-65ue-7jd9-23gf
3
vulnerability VCID-8d2m-1ffv-jqe1
4
vulnerability VCID-axvk-13qf-tka7
5
vulnerability VCID-g4uc-qeb6-myed
6
vulnerability VCID-gv1b-xtv4-4yg3
7
vulnerability VCID-gyyu-n3b1-zbcj
8
vulnerability VCID-jxw7-skw6-q7bg
9
vulnerability VCID-mud2-s4rc-fuf6
10
vulnerability VCID-n7ng-zkkb-2qaz
11
vulnerability VCID-nubu-f1sc-gbes
12
vulnerability VCID-taj6-zj2n-5kg8
13
vulnerability VCID-xy6y-312d-rygj
14
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@12.4.8
aliases CVE-2023-47127, GHSA-3vmm-7h4j-69rm
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-h6y3-7gsq-skh2
40
url VCID-he5m-6wj4-rbhc
vulnerability_id VCID-he5m-6wj4-rbhc
summary 
Broken Access Control in Form Framework
### Problem
Due to improper input validation, attackers can by-pass restrictions of predefined options and submit arbitrary data in the Form Designer backend module of the Form Framework.

In the default configuration of the Form Framework this allows attackers to explicitly allow arbitrary mime-types for file uploads - however, default _fileDenyPattern_ successfully blocked files like _.htaccess_ or _malicious.php_. Besides that, attackers can persist those files in any writable directory of the corresponding TYPO3 installation.

A valid backend user account with access to the form module is needed to exploit this vulnerability.

### Solution
Update to TYPO3 versions 8.7.40, 9.5.25, 10.4.14, 11.1.1 that fix the problem described.

### Credits
Thanks to Richie Lee who reported this issue and to TYPO3 contributor Ralf Zimmermann who fixed the issue.

### References
* [TYPO3-CORE-SA-2021-003](https://typo3.org/security/advisory/typo3-core-sa-2021-003)
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-21357
reference_id
reference_type
scores
0
value 0.01121
scoring_system epss
scoring_elements 0.78276
published_at 2026-04-18T12:55:00Z
1
value 0.01121
scoring_system epss
scoring_elements 0.78191
published_at 2026-04-01T12:55:00Z
2
value 0.01121
scoring_system epss
scoring_elements 0.78199
published_at 2026-04-02T12:55:00Z
3
value 0.01121
scoring_system epss
scoring_elements 0.78229
published_at 2026-04-04T12:55:00Z
4
value 0.01121
scoring_system epss
scoring_elements 0.78212
published_at 2026-04-07T12:55:00Z
5
value 0.01121
scoring_system epss
scoring_elements 0.78238
published_at 2026-04-08T12:55:00Z
6
value 0.01121
scoring_system epss
scoring_elements 0.78243
published_at 2026-04-09T12:55:00Z
7
value 0.01121
scoring_system epss
scoring_elements 0.78269
published_at 2026-04-11T12:55:00Z
8
value 0.01121
scoring_system epss
scoring_elements 0.78252
published_at 2026-04-12T12:55:00Z
9
value 0.01121
scoring_system epss
scoring_elements 0.78248
published_at 2026-04-13T12:55:00Z
10
value 0.01121
scoring_system epss
scoring_elements 0.78279
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-21357
1
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21357.yaml
reference_id
reference_type
scores
0
value 8.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H/E:H/RL:O/RC:C
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21357.yaml
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21357.yaml
reference_id
reference_type
scores
0
value 8.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H/E:H/RL:O/RC:C
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21357.yaml
3
reference_url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-3vg7-jw9m-pc3f
reference_id
reference_type
scores
0
value 8.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H/E:H/RL:O/RC:C
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-3vg7-jw9m-pc3f
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-21357
reference_id
reference_type
scores
0
value 8.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H/E:H/RL:O/RC:C
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-21357
5
reference_url https://packagist.org/packages/typo3/cms-form
reference_id
reference_type
scores
0
value 8.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H/E:H/RL:O/RC:C
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://packagist.org/packages/typo3/cms-form
6
reference_url https://typo3.org/security/advisory/typo3-core-sa-2021-003
reference_id
reference_type
scores
0
value 8.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H/E:H/RL:O/RC:C
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2021-003
7
reference_url https://github.com/advisories/GHSA-3vg7-jw9m-pc3f
reference_id GHSA-3vg7-jw9m-pc3f
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-3vg7-jw9m-pc3f
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.40
purl pkg:composer/typo3/cms-core@8.7.40
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ekfd-wp8z-d7e1
1
vulnerability VCID-n15v-ta9h-6ffb
2
vulnerability VCID-s64f-x81f-b7ce
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.40
1
url pkg:composer/typo3/cms-core@9.5.25
purl pkg:composer/typo3/cms-core@9.5.25
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4jpa-6fqh-hbfg
1
vulnerability VCID-4t9s-p25a-cfas
2
vulnerability VCID-5paq-5frf-43ed
3
vulnerability VCID-65ue-7jd9-23gf
4
vulnerability VCID-6a9t-8dmn-s3bv
5
vulnerability VCID-8d2m-1ffv-jqe1
6
vulnerability VCID-axvk-13qf-tka7
7
vulnerability VCID-b6er-h7dm-3bev
8
vulnerability VCID-bajy-qbwq-fufn
9
vulnerability VCID-e32h-8q61-hbgc
10
vulnerability VCID-ekfd-wp8z-d7e1
11
vulnerability VCID-g4uc-qeb6-myed
12
vulnerability VCID-gv1b-xtv4-4yg3
13
vulnerability VCID-h6y3-7gsq-skh2
14
vulnerability VCID-mnz3-rj21-67ad
15
vulnerability VCID-mud2-s4rc-fuf6
16
vulnerability VCID-n15v-ta9h-6ffb
17
vulnerability VCID-n7ng-zkkb-2qaz
18
vulnerability VCID-nubu-f1sc-gbes
19
vulnerability VCID-remd-55jh-r3g5
20
vulnerability VCID-s55j-8hbt-akhn
21
vulnerability VCID-s64f-x81f-b7ce
22
vulnerability VCID-t1n7-eswt-73gw
23
vulnerability VCID-taj6-zj2n-5kg8
24
vulnerability VCID-ve7g-8st5-wffb
25
vulnerability VCID-vyvy-y3cw-hbgr
26
vulnerability VCID-w13x-3rp9-wyej
27
vulnerability VCID-xy6y-312d-rygj
28
vulnerability VCID-y32z-2d3f-gkgw
29
vulnerability VCID-zdq2-dhb2-6kaq
30
vulnerability VCID-zn99-ywte-33g6
31
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.25
2
url pkg:composer/typo3/cms-core@10.4.14
purl pkg:composer/typo3/cms-core@10.4.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-1yxw-saf5-wue7
2
vulnerability VCID-4jpa-6fqh-hbfg
3
vulnerability VCID-4t9s-p25a-cfas
4
vulnerability VCID-5paq-5frf-43ed
5
vulnerability VCID-65ue-7jd9-23gf
6
vulnerability VCID-6a9t-8dmn-s3bv
7
vulnerability VCID-8d2m-1ffv-jqe1
8
vulnerability VCID-8sdd-b1bn-cuhx
9
vulnerability VCID-av8u-rvzq-4fc7
10
vulnerability VCID-axvk-13qf-tka7
11
vulnerability VCID-b6er-h7dm-3bev
12
vulnerability VCID-bajy-qbwq-fufn
13
vulnerability VCID-e32h-8q61-hbgc
14
vulnerability VCID-ekfd-wp8z-d7e1
15
vulnerability VCID-g4uc-qeb6-myed
16
vulnerability VCID-gv1b-xtv4-4yg3
17
vulnerability VCID-gyyu-n3b1-zbcj
18
vulnerability VCID-h6y3-7gsq-skh2
19
vulnerability VCID-mnz3-rj21-67ad
20
vulnerability VCID-mud2-s4rc-fuf6
21
vulnerability VCID-n15v-ta9h-6ffb
22
vulnerability VCID-n7ng-zkkb-2qaz
23
vulnerability VCID-nubu-f1sc-gbes
24
vulnerability VCID-remd-55jh-r3g5
25
vulnerability VCID-s55j-8hbt-akhn
26
vulnerability VCID-s64f-x81f-b7ce
27
vulnerability VCID-t1n7-eswt-73gw
28
vulnerability VCID-taj6-zj2n-5kg8
29
vulnerability VCID-ve7g-8st5-wffb
30
vulnerability VCID-vwb2-a84s-5qak
31
vulnerability VCID-vyvy-y3cw-hbgr
32
vulnerability VCID-w13x-3rp9-wyej
33
vulnerability VCID-xy6y-312d-rygj
34
vulnerability VCID-y32z-2d3f-gkgw
35
vulnerability VCID-zdq2-dhb2-6kaq
36
vulnerability VCID-zn99-ywte-33g6
37
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@10.4.14
3
url pkg:composer/typo3/cms-core@11.1.1
purl pkg:composer/typo3/cms-core@11.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-1yxw-saf5-wue7
2
vulnerability VCID-4jpa-6fqh-hbfg
3
vulnerability VCID-4t9s-p25a-cfas
4
vulnerability VCID-5paq-5frf-43ed
5
vulnerability VCID-65ue-7jd9-23gf
6
vulnerability VCID-6a9t-8dmn-s3bv
7
vulnerability VCID-8d2m-1ffv-jqe1
8
vulnerability VCID-8sdd-b1bn-cuhx
9
vulnerability VCID-av8u-rvzq-4fc7
10
vulnerability VCID-axvk-13qf-tka7
11
vulnerability VCID-b6er-h7dm-3bev
12
vulnerability VCID-bajy-qbwq-fufn
13
vulnerability VCID-e32h-8q61-hbgc
14
vulnerability VCID-ekfd-wp8z-d7e1
15
vulnerability VCID-g4uc-qeb6-myed
16
vulnerability VCID-gv1b-xtv4-4yg3
17
vulnerability VCID-gyyu-n3b1-zbcj
18
vulnerability VCID-h6y3-7gsq-skh2
19
vulnerability VCID-mnz3-rj21-67ad
20
vulnerability VCID-mud2-s4rc-fuf6
21
vulnerability VCID-n15v-ta9h-6ffb
22
vulnerability VCID-n7ng-zkkb-2qaz
23
vulnerability VCID-nubu-f1sc-gbes
24
vulnerability VCID-remd-55jh-r3g5
25
vulnerability VCID-s55j-8hbt-akhn
26
vulnerability VCID-s64f-x81f-b7ce
27
vulnerability VCID-t1n7-eswt-73gw
28
vulnerability VCID-taj6-zj2n-5kg8
29
vulnerability VCID-uyeu-a3xr-fkh4
30
vulnerability VCID-ve7g-8st5-wffb
31
vulnerability VCID-vwb2-a84s-5qak
32
vulnerability VCID-vyvy-y3cw-hbgr
33
vulnerability VCID-w13x-3rp9-wyej
34
vulnerability VCID-xy6y-312d-rygj
35
vulnerability VCID-y32z-2d3f-gkgw
36
vulnerability VCID-zdq2-dhb2-6kaq
37
vulnerability VCID-zn99-ywte-33g6
38
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@11.1.1
aliases CVE-2021-21357, GHSA-3vg7-jw9m-pc3f
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-he5m-6wj4-rbhc
41
url VCID-hhmn-yz5p-xkap
vulnerability_id VCID-hhmn-yz5p-xkap
summary 
TYPO3 Cross-Site Scripting in Link Handling
It has been discovered that t3:// URL handling and typolink functionality are vulnerable to cross-site scripting. Not only regular backend forms are affected but also frontend extensions which use the rendering with typolink.
references
0
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2019-12-17-2.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2019-12-17-2.yaml
1
reference_url https://github.com/TYPO3-CMS/core
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core
2
reference_url https://github.com/TYPO3-CMS/core/commit/280908c9472aa5e1d9ee005327bbb9aed53f613a
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core/commit/280908c9472aa5e1d9ee005327bbb9aed53f613a
3
reference_url https://github.com/TYPO3-CMS/core/commit/89f5817c09a50d8d60821158d651bd618521164e
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core/commit/89f5817c09a50d8d60821158d651bd618521164e
4
reference_url https://github.com/TYPO3-CMS/core/commit/d2823a451d65ac59dd42ec54c92903d70d29c813
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core/commit/d2823a451d65ac59dd42ec54c92903d70d29c813
5
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-022
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2019-022
6
reference_url https://github.com/advisories/GHSA-4ppr-jw47-9qm5
reference_id GHSA-4ppr-jw47-9qm5
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-4ppr-jw47-9qm5
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.30
purl pkg:composer/typo3/cms-core@8.7.30
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4jpa-6fqh-hbfg
1
vulnerability VCID-5jgb-dsyx-hyb4
2
vulnerability VCID-5paq-5frf-43ed
3
vulnerability VCID-axvk-13qf-tka7
4
vulnerability VCID-b6er-h7dm-3bev
5
vulnerability VCID-bajy-qbwq-fufn
6
vulnerability VCID-dsu7-jjjq-f3e1
7
vulnerability VCID-ekfd-wp8z-d7e1
8
vulnerability VCID-f963-qur3-2qb7
9
vulnerability VCID-g4uc-qeb6-myed
10
vulnerability VCID-gv1b-xtv4-4yg3
11
vulnerability VCID-h6y3-7gsq-skh2
12
vulnerability VCID-he5m-6wj4-rbhc
13
vulnerability VCID-mnz3-rj21-67ad
14
vulnerability VCID-n15v-ta9h-6ffb
15
vulnerability VCID-n7ng-zkkb-2qaz
16
vulnerability VCID-s55j-8hbt-akhn
17
vulnerability VCID-s64f-x81f-b7ce
18
vulnerability VCID-t1n7-eswt-73gw
19
vulnerability VCID-t3jn-vwbx-u7cr
20
vulnerability VCID-taj6-zj2n-5kg8
21
vulnerability VCID-vyvy-y3cw-hbgr
22
vulnerability VCID-xh7y-56vy-5ud8
23
vulnerability VCID-y32z-2d3f-gkgw
24
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.30
1
url pkg:composer/typo3/cms-core@9.5.12
purl pkg:composer/typo3/cms-core@9.5.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mn6-mdmz-4yd9
1
vulnerability VCID-4jpa-6fqh-hbfg
2
vulnerability VCID-4t9s-p25a-cfas
3
vulnerability VCID-543x-cnbz-1kb9
4
vulnerability VCID-58js-jzm4-4fc7
5
vulnerability VCID-5jgb-dsyx-hyb4
6
vulnerability VCID-5kzs-ex81-bbaj
7
vulnerability VCID-5paq-5frf-43ed
8
vulnerability VCID-65ue-7jd9-23gf
9
vulnerability VCID-6a9t-8dmn-s3bv
10
vulnerability VCID-7kjw-j8st-mqfr
11
vulnerability VCID-8d2m-1ffv-jqe1
12
vulnerability VCID-a49c-fqrj-nbb3
13
vulnerability VCID-axvk-13qf-tka7
14
vulnerability VCID-b6er-h7dm-3bev
15
vulnerability VCID-bajy-qbwq-fufn
16
vulnerability VCID-d8d1-sat6-muhe
17
vulnerability VCID-dsu7-jjjq-f3e1
18
vulnerability VCID-e32h-8q61-hbgc
19
vulnerability VCID-ekfd-wp8z-d7e1
20
vulnerability VCID-f963-qur3-2qb7
21
vulnerability VCID-g4uc-qeb6-myed
22
vulnerability VCID-gv1b-xtv4-4yg3
23
vulnerability VCID-h6y3-7gsq-skh2
24
vulnerability VCID-he5m-6wj4-rbhc
25
vulnerability VCID-mnz3-rj21-67ad
26
vulnerability VCID-mud2-s4rc-fuf6
27
vulnerability VCID-n15v-ta9h-6ffb
28
vulnerability VCID-n7ng-zkkb-2qaz
29
vulnerability VCID-nubu-f1sc-gbes
30
vulnerability VCID-phgh-sd4m-zbdx
31
vulnerability VCID-remd-55jh-r3g5
32
vulnerability VCID-s55j-8hbt-akhn
33
vulnerability VCID-s64f-x81f-b7ce
34
vulnerability VCID-sw7v-fbjk-13hy
35
vulnerability VCID-t1n7-eswt-73gw
36
vulnerability VCID-t3jn-vwbx-u7cr
37
vulnerability VCID-taj6-zj2n-5kg8
38
vulnerability VCID-ve7g-8st5-wffb
39
vulnerability VCID-vyvy-y3cw-hbgr
40
vulnerability VCID-w13x-3rp9-wyej
41
vulnerability VCID-xh7y-56vy-5ud8
42
vulnerability VCID-xy6y-312d-rygj
43
vulnerability VCID-y32z-2d3f-gkgw
44
vulnerability VCID-zdq2-dhb2-6kaq
45
vulnerability VCID-zn99-ywte-33g6
46
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.12
2
url pkg:composer/typo3/cms-core@10.2.1
purl pkg:composer/typo3/cms-core@10.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1yxw-saf5-wue7
1
vulnerability VCID-2mn6-mdmz-4yd9
2
vulnerability VCID-3n2r-awja-dug9
3
vulnerability VCID-4jpa-6fqh-hbfg
4
vulnerability VCID-4t9s-p25a-cfas
5
vulnerability VCID-543x-cnbz-1kb9
6
vulnerability VCID-58js-jzm4-4fc7
7
vulnerability VCID-5jgb-dsyx-hyb4
8
vulnerability VCID-5kzs-ex81-bbaj
9
vulnerability VCID-5paq-5frf-43ed
10
vulnerability VCID-65ue-7jd9-23gf
11
vulnerability VCID-6a9t-8dmn-s3bv
12
vulnerability VCID-7kjw-j8st-mqfr
13
vulnerability VCID-8d2m-1ffv-jqe1
14
vulnerability VCID-8sdd-b1bn-cuhx
15
vulnerability VCID-a49c-fqrj-nbb3
16
vulnerability VCID-a89c-jvwa-6kh5
17
vulnerability VCID-av8u-rvzq-4fc7
18
vulnerability VCID-axvk-13qf-tka7
19
vulnerability VCID-b6er-h7dm-3bev
20
vulnerability VCID-bajy-qbwq-fufn
21
vulnerability VCID-cdjv-fp71-y3dv
22
vulnerability VCID-d8d1-sat6-muhe
23
vulnerability VCID-dhrm-uxuv-zfaj
24
vulnerability VCID-dsu7-jjjq-f3e1
25
vulnerability VCID-e32h-8q61-hbgc
26
vulnerability VCID-ekfd-wp8z-d7e1
27
vulnerability VCID-f963-qur3-2qb7
28
vulnerability VCID-g4uc-qeb6-myed
29
vulnerability VCID-gcnj-6qb6-pbgz
30
vulnerability VCID-gv1b-xtv4-4yg3
31
vulnerability VCID-gyyu-n3b1-zbcj
32
vulnerability VCID-h6y3-7gsq-skh2
33
vulnerability VCID-he5m-6wj4-rbhc
34
vulnerability VCID-mnz3-rj21-67ad
35
vulnerability VCID-mud2-s4rc-fuf6
36
vulnerability VCID-n15v-ta9h-6ffb
37
vulnerability VCID-n7ng-zkkb-2qaz
38
vulnerability VCID-nubu-f1sc-gbes
39
vulnerability VCID-phgh-sd4m-zbdx
40
vulnerability VCID-remd-55jh-r3g5
41
vulnerability VCID-s55j-8hbt-akhn
42
vulnerability VCID-s64f-x81f-b7ce
43
vulnerability VCID-sw7v-fbjk-13hy
44
vulnerability VCID-t1n7-eswt-73gw
45
vulnerability VCID-t3jn-vwbx-u7cr
46
vulnerability VCID-taj6-zj2n-5kg8
47
vulnerability VCID-usmv-r64u-m7cb
48
vulnerability VCID-ve7g-8st5-wffb
49
vulnerability VCID-vwb2-a84s-5qak
50
vulnerability VCID-vyvy-y3cw-hbgr
51
vulnerability VCID-w13x-3rp9-wyej
52
vulnerability VCID-xh7y-56vy-5ud8
53
vulnerability VCID-xy6y-312d-rygj
54
vulnerability VCID-y32z-2d3f-gkgw
55
vulnerability VCID-zdq2-dhb2-6kaq
56
vulnerability VCID-zn99-ywte-33g6
57
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@10.2.1
aliases GHSA-4ppr-jw47-9qm5
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hhmn-yz5p-xkap
42
url VCID-j77k-hjgx-5kc5
vulnerability_id VCID-j77k-hjgx-5kc5
summary 
Improper Access Control
Broken Access Control in Localization Handling.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-003/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-003/
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.23
purl pkg:composer/typo3/cms-core@8.7.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2meq-x4kd-bbdn
1
vulnerability VCID-3n2r-awja-dug9
2
vulnerability VCID-3v4n-fzxa-bfaw
3
vulnerability VCID-4jpa-6fqh-hbfg
4
vulnerability VCID-5jgb-dsyx-hyb4
5
vulnerability VCID-5paq-5frf-43ed
6
vulnerability VCID-5u4q-m66t-wqcj
7
vulnerability VCID-9g62-zd1x-3bdg
8
vulnerability VCID-9gpp-ez8w-rqav
9
vulnerability VCID-9x6r-56xm-n7h7
10
vulnerability VCID-axvk-13qf-tka7
11
vulnerability VCID-b6er-h7dm-3bev
12
vulnerability VCID-bajy-qbwq-fufn
13
vulnerability VCID-cm14-t8uv-k3es
14
vulnerability VCID-dsu7-jjjq-f3e1
15
vulnerability VCID-eajg-ctpd-2bby
16
vulnerability VCID-ekfd-wp8z-d7e1
17
vulnerability VCID-f963-qur3-2qb7
18
vulnerability VCID-g4uc-qeb6-myed
19
vulnerability VCID-gcnj-6qb6-pbgz
20
vulnerability VCID-gv1b-xtv4-4yg3
21
vulnerability VCID-h6y3-7gsq-skh2
22
vulnerability VCID-he5m-6wj4-rbhc
23
vulnerability VCID-hhmn-yz5p-xkap
24
vulnerability VCID-mnz3-rj21-67ad
25
vulnerability VCID-n15v-ta9h-6ffb
26
vulnerability VCID-n7ng-zkkb-2qaz
27
vulnerability VCID-pmzz-9rws-4ud5
28
vulnerability VCID-pss5-as4b-cyf2
29
vulnerability VCID-q8hy-wjd9-nbgp
30
vulnerability VCID-s53a-f91p-huf4
31
vulnerability VCID-s55j-8hbt-akhn
32
vulnerability VCID-s64f-x81f-b7ce
33
vulnerability VCID-stzu-sxe6-5yf5
34
vulnerability VCID-swnc-ke6h-ekew
35
vulnerability VCID-t1n7-eswt-73gw
36
vulnerability VCID-t3jn-vwbx-u7cr
37
vulnerability VCID-taj6-zj2n-5kg8
38
vulnerability VCID-tnjd-pyys-akav
39
vulnerability VCID-vxry-uvph-kbfd
40
vulnerability VCID-vyvy-y3cw-hbgr
41
vulnerability VCID-xa4m-xpa9-v7h8
42
vulnerability VCID-xh7y-56vy-5ud8
43
vulnerability VCID-y32z-2d3f-gkgw
44
vulnerability VCID-zdq2-dhb2-6kaq
45
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.23
1
url pkg:composer/typo3/cms-core@9.0.0
purl pkg:composer/typo3/cms-core@9.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12y5-7b81-wkfu
1
vulnerability VCID-21e8-x7mp-hugk
2
vulnerability VCID-28bf-jvah-zkhw
3
vulnerability VCID-2meq-x4kd-bbdn
4
vulnerability VCID-2mn6-mdmz-4yd9
5
vulnerability VCID-3gg5-1921-rbfs
6
vulnerability VCID-3n2r-awja-dug9
7
vulnerability VCID-3v4n-fzxa-bfaw
8
vulnerability VCID-461j-9hrc-gfbc
9
vulnerability VCID-4btk-jt5n-2ugf
10
vulnerability VCID-4hsv-y3rz-e3a2
11
vulnerability VCID-4jpa-6fqh-hbfg
12
vulnerability VCID-4mkw-tv16-jyca
13
vulnerability VCID-4t9s-p25a-cfas
14
vulnerability VCID-543x-cnbz-1kb9
15
vulnerability VCID-551q-gpyd-ffe8
16
vulnerability VCID-58js-jzm4-4fc7
17
vulnerability VCID-5jgb-dsyx-hyb4
18
vulnerability VCID-5kzs-ex81-bbaj
19
vulnerability VCID-5paq-5frf-43ed
20
vulnerability VCID-5u4q-m66t-wqcj
21
vulnerability VCID-5z59-dn7p-xbc5
22
vulnerability VCID-65ue-7jd9-23gf
23
vulnerability VCID-6a9t-8dmn-s3bv
24
vulnerability VCID-6xmj-wbea-r7ex
25
vulnerability VCID-7kjw-j8st-mqfr
26
vulnerability VCID-8d2m-1ffv-jqe1
27
vulnerability VCID-9g62-zd1x-3bdg
28
vulnerability VCID-9gpp-ez8w-rqav
29
vulnerability VCID-9jj4-ec9n-qbhs
30
vulnerability VCID-9x6r-56xm-n7h7
31
vulnerability VCID-9zqs-hjay-fkev
32
vulnerability VCID-a49c-fqrj-nbb3
33
vulnerability VCID-a563-vtwa-hkbr
34
vulnerability VCID-axaf-45kr-kbfe
35
vulnerability VCID-axvk-13qf-tka7
36
vulnerability VCID-ayw6-8pn4-17eb
37
vulnerability VCID-b6er-h7dm-3bev
38
vulnerability VCID-bajy-qbwq-fufn
39
vulnerability VCID-bnne-7p2q-eqd2
40
vulnerability VCID-cm14-t8uv-k3es
41
vulnerability VCID-d8d1-sat6-muhe
42
vulnerability VCID-d99v-v9cj-zfh2
43
vulnerability VCID-dj88-f3p8-cfbn
44
vulnerability VCID-dm97-51uu-r7gw
45
vulnerability VCID-dsu7-jjjq-f3e1
46
vulnerability VCID-e268-wagv-sbex
47
vulnerability VCID-e32h-8q61-hbgc
48
vulnerability VCID-eajg-ctpd-2bby
49
vulnerability VCID-ebpa-58em-wqam
50
vulnerability VCID-ekfd-wp8z-d7e1
51
vulnerability VCID-f1rq-qudk-zkf2
52
vulnerability VCID-f4bv-pzdy-dfcb
53
vulnerability VCID-f963-qur3-2qb7
54
vulnerability VCID-g4uc-qeb6-myed
55
vulnerability VCID-gcnj-6qb6-pbgz
56
vulnerability VCID-gv1b-xtv4-4yg3
57
vulnerability VCID-h6y3-7gsq-skh2
58
vulnerability VCID-he5m-6wj4-rbhc
59
vulnerability VCID-hhmn-yz5p-xkap
60
vulnerability VCID-k8af-cg9k-87a9
61
vulnerability VCID-kj9x-psfz-2ug1
62
vulnerability VCID-m7w6-b2xu-6uee
63
vulnerability VCID-mh4f-vtfj-hbb1
64
vulnerability VCID-mnz3-rj21-67ad
65
vulnerability VCID-mud2-s4rc-fuf6
66
vulnerability VCID-n15v-ta9h-6ffb
67
vulnerability VCID-n1cb-8py6-bbhu
68
vulnerability VCID-n78p-x7hh-gqcf
69
vulnerability VCID-n7ng-zkkb-2qaz
70
vulnerability VCID-nubu-f1sc-gbes
71
vulnerability VCID-nxq4-m52q-yuh4
72
vulnerability VCID-p715-yexd-jfgc
73
vulnerability VCID-phgh-sd4m-zbdx
74
vulnerability VCID-pmzz-9rws-4ud5
75
vulnerability VCID-pss5-as4b-cyf2
76
vulnerability VCID-px44-19tj-h7aa
77
vulnerability VCID-q8hy-wjd9-nbgp
78
vulnerability VCID-qb4j-9tz7-m7a2
79
vulnerability VCID-qeus-f4wj-rubr
80
vulnerability VCID-qzyk-7877-27a3
81
vulnerability VCID-raxk-rm9v-hubn
82
vulnerability VCID-rdrs-mhaw-b3ge
83
vulnerability VCID-remd-55jh-r3g5
84
vulnerability VCID-rwqs-3ktq-qqbd
85
vulnerability VCID-s53a-f91p-huf4
86
vulnerability VCID-s55j-8hbt-akhn
87
vulnerability VCID-s64f-x81f-b7ce
88
vulnerability VCID-sr3p-pdxy-4yhu
89
vulnerability VCID-stzu-sxe6-5yf5
90
vulnerability VCID-sw7v-fbjk-13hy
91
vulnerability VCID-swnc-ke6h-ekew
92
vulnerability VCID-t1n7-eswt-73gw
93
vulnerability VCID-t3jn-vwbx-u7cr
94
vulnerability VCID-taj6-zj2n-5kg8
95
vulnerability VCID-tnjd-pyys-akav
96
vulnerability VCID-tw1y-t4qj-j3d1
97
vulnerability VCID-u9bx-8e86-wbew
98
vulnerability VCID-ve7g-8st5-wffb
99
vulnerability VCID-vxry-uvph-kbfd
100
vulnerability VCID-vyvy-y3cw-hbgr
101
vulnerability VCID-w13x-3rp9-wyej
102
vulnerability VCID-wea9-egep-h7g5
103
vulnerability VCID-wkm6-cgc8-bfa8
104
vulnerability VCID-xa4m-xpa9-v7h8
105
vulnerability VCID-xh7y-56vy-5ud8
106
vulnerability VCID-xtdg-uj46-rkcm
107
vulnerability VCID-xy6y-312d-rygj
108
vulnerability VCID-y32z-2d3f-gkgw
109
vulnerability VCID-zdq2-dhb2-6kaq
110
vulnerability VCID-zkea-ge1t-z7gn
111
vulnerability VCID-zspb-bd6j-wyd2
112
vulnerability VCID-zw9b-6vkf-3fc6
113
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.0.0
aliases 2019-01-22-3
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-j77k-hjgx-5kc5
43
url VCID-k8af-cg9k-87a9
vulnerability_id VCID-k8af-cg9k-87a9
summary 
Cross-site Scripting
Cross-Site Scripting in Bootstrap CSS toolkit.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-006/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-006/
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.23
purl pkg:composer/typo3/cms-core@8.7.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2meq-x4kd-bbdn
1
vulnerability VCID-3n2r-awja-dug9
2
vulnerability VCID-3v4n-fzxa-bfaw
3
vulnerability VCID-4jpa-6fqh-hbfg
4
vulnerability VCID-5jgb-dsyx-hyb4
5
vulnerability VCID-5paq-5frf-43ed
6
vulnerability VCID-5u4q-m66t-wqcj
7
vulnerability VCID-9g62-zd1x-3bdg
8
vulnerability VCID-9gpp-ez8w-rqav
9
vulnerability VCID-9x6r-56xm-n7h7
10
vulnerability VCID-axvk-13qf-tka7
11
vulnerability VCID-b6er-h7dm-3bev
12
vulnerability VCID-bajy-qbwq-fufn
13
vulnerability VCID-cm14-t8uv-k3es
14
vulnerability VCID-dsu7-jjjq-f3e1
15
vulnerability VCID-eajg-ctpd-2bby
16
vulnerability VCID-ekfd-wp8z-d7e1
17
vulnerability VCID-f963-qur3-2qb7
18
vulnerability VCID-g4uc-qeb6-myed
19
vulnerability VCID-gcnj-6qb6-pbgz
20
vulnerability VCID-gv1b-xtv4-4yg3
21
vulnerability VCID-h6y3-7gsq-skh2
22
vulnerability VCID-he5m-6wj4-rbhc
23
vulnerability VCID-hhmn-yz5p-xkap
24
vulnerability VCID-mnz3-rj21-67ad
25
vulnerability VCID-n15v-ta9h-6ffb
26
vulnerability VCID-n7ng-zkkb-2qaz
27
vulnerability VCID-pmzz-9rws-4ud5
28
vulnerability VCID-pss5-as4b-cyf2
29
vulnerability VCID-q8hy-wjd9-nbgp
30
vulnerability VCID-s53a-f91p-huf4
31
vulnerability VCID-s55j-8hbt-akhn
32
vulnerability VCID-s64f-x81f-b7ce
33
vulnerability VCID-stzu-sxe6-5yf5
34
vulnerability VCID-swnc-ke6h-ekew
35
vulnerability VCID-t1n7-eswt-73gw
36
vulnerability VCID-t3jn-vwbx-u7cr
37
vulnerability VCID-taj6-zj2n-5kg8
38
vulnerability VCID-tnjd-pyys-akav
39
vulnerability VCID-vxry-uvph-kbfd
40
vulnerability VCID-vyvy-y3cw-hbgr
41
vulnerability VCID-xa4m-xpa9-v7h8
42
vulnerability VCID-xh7y-56vy-5ud8
43
vulnerability VCID-y32z-2d3f-gkgw
44
vulnerability VCID-zdq2-dhb2-6kaq
45
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.23
1
url pkg:composer/typo3/cms-core@9.5.4
purl pkg:composer/typo3/cms-core@9.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2meq-x4kd-bbdn
1
vulnerability VCID-2mn6-mdmz-4yd9
2
vulnerability VCID-3n2r-awja-dug9
3
vulnerability VCID-3v4n-fzxa-bfaw
4
vulnerability VCID-461j-9hrc-gfbc
5
vulnerability VCID-4jpa-6fqh-hbfg
6
vulnerability VCID-4mkw-tv16-jyca
7
vulnerability VCID-4t9s-p25a-cfas
8
vulnerability VCID-543x-cnbz-1kb9
9
vulnerability VCID-58js-jzm4-4fc7
10
vulnerability VCID-5jgb-dsyx-hyb4
11
vulnerability VCID-5kzs-ex81-bbaj
12
vulnerability VCID-5paq-5frf-43ed
13
vulnerability VCID-5u4q-m66t-wqcj
14
vulnerability VCID-65ue-7jd9-23gf
15
vulnerability VCID-6a9t-8dmn-s3bv
16
vulnerability VCID-8d2m-1ffv-jqe1
17
vulnerability VCID-9g62-zd1x-3bdg
18
vulnerability VCID-9gpp-ez8w-rqav
19
vulnerability VCID-9x6r-56xm-n7h7
20
vulnerability VCID-a49c-fqrj-nbb3
21
vulnerability VCID-axvk-13qf-tka7
22
vulnerability VCID-b6er-h7dm-3bev
23
vulnerability VCID-bajy-qbwq-fufn
24
vulnerability VCID-cm14-t8uv-k3es
25
vulnerability VCID-d8d1-sat6-muhe
26
vulnerability VCID-dmzb-gkdn-6bcm
27
vulnerability VCID-dsu7-jjjq-f3e1
28
vulnerability VCID-e32h-8q61-hbgc
29
vulnerability VCID-eajg-ctpd-2bby
30
vulnerability VCID-ekfd-wp8z-d7e1
31
vulnerability VCID-f963-qur3-2qb7
32
vulnerability VCID-g4uc-qeb6-myed
33
vulnerability VCID-gcnj-6qb6-pbgz
34
vulnerability VCID-gv1b-xtv4-4yg3
35
vulnerability VCID-h6y3-7gsq-skh2
36
vulnerability VCID-he5m-6wj4-rbhc
37
vulnerability VCID-hhmn-yz5p-xkap
38
vulnerability VCID-kj9x-psfz-2ug1
39
vulnerability VCID-mnz3-rj21-67ad
40
vulnerability VCID-mud2-s4rc-fuf6
41
vulnerability VCID-n15v-ta9h-6ffb
42
vulnerability VCID-n7ng-zkkb-2qaz
43
vulnerability VCID-nubu-f1sc-gbes
44
vulnerability VCID-nxq4-m52q-yuh4
45
vulnerability VCID-phgh-sd4m-zbdx
46
vulnerability VCID-pmzz-9rws-4ud5
47
vulnerability VCID-pss5-as4b-cyf2
48
vulnerability VCID-q8hy-wjd9-nbgp
49
vulnerability VCID-raxk-rm9v-hubn
50
vulnerability VCID-remd-55jh-r3g5
51
vulnerability VCID-s53a-f91p-huf4
52
vulnerability VCID-s55j-8hbt-akhn
53
vulnerability VCID-s64f-x81f-b7ce
54
vulnerability VCID-stzu-sxe6-5yf5
55
vulnerability VCID-sw7v-fbjk-13hy
56
vulnerability VCID-swnc-ke6h-ekew
57
vulnerability VCID-t1n7-eswt-73gw
58
vulnerability VCID-t3jn-vwbx-u7cr
59
vulnerability VCID-taj6-zj2n-5kg8
60
vulnerability VCID-tnjd-pyys-akav
61
vulnerability VCID-u9bx-8e86-wbew
62
vulnerability VCID-ve7g-8st5-wffb
63
vulnerability VCID-vxry-uvph-kbfd
64
vulnerability VCID-vyvy-y3cw-hbgr
65
vulnerability VCID-w13x-3rp9-wyej
66
vulnerability VCID-xa4m-xpa9-v7h8
67
vulnerability VCID-xh7y-56vy-5ud8
68
vulnerability VCID-xtdg-uj46-rkcm
69
vulnerability VCID-xy6y-312d-rygj
70
vulnerability VCID-y32z-2d3f-gkgw
71
vulnerability VCID-zdq2-dhb2-6kaq
72
vulnerability VCID-zkea-ge1t-z7gn
73
vulnerability VCID-zn99-ywte-33g6
74
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.4
aliases 2019-01-22-5
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-k8af-cg9k-87a9
44
url VCID-mh4f-vtfj-hbb1
vulnerability_id VCID-mh4f-vtfj-hbb1
summary 
TYPO3 Cross-Site Scripting in Form Framework
Failing to properly encode user input, frontend forms handled by the form framework (system extension “form”) are vulnerable to cross-site scripting.
references
0
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2019-01-22-6.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2019-01-22-6.yaml
1
reference_url https://github.com/TYPO3-CMS/core
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core
2
reference_url https://github.com/TYPO3-CMS/core/commit/3b8b8b4416b921df4ccc7c5b4a8e9a069562be35
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core/commit/3b8b8b4416b921df4ccc7c5b4a8e9a069562be35
3
reference_url https://github.com/TYPO3-CMS/core/commit/a0e917008320e24c26780ba385fbfe738fcd45b9
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core/commit/a0e917008320e24c26780ba385fbfe738fcd45b9
4
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-007
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2019-007
5
reference_url https://github.com/advisories/GHSA-4459-qrcc-vfcf
reference_id GHSA-4459-qrcc-vfcf
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-4459-qrcc-vfcf
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.23
purl pkg:composer/typo3/cms-core@8.7.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2meq-x4kd-bbdn
1
vulnerability VCID-3n2r-awja-dug9
2
vulnerability VCID-3v4n-fzxa-bfaw
3
vulnerability VCID-4jpa-6fqh-hbfg
4
vulnerability VCID-5jgb-dsyx-hyb4
5
vulnerability VCID-5paq-5frf-43ed
6
vulnerability VCID-5u4q-m66t-wqcj
7
vulnerability VCID-9g62-zd1x-3bdg
8
vulnerability VCID-9gpp-ez8w-rqav
9
vulnerability VCID-9x6r-56xm-n7h7
10
vulnerability VCID-axvk-13qf-tka7
11
vulnerability VCID-b6er-h7dm-3bev
12
vulnerability VCID-bajy-qbwq-fufn
13
vulnerability VCID-cm14-t8uv-k3es
14
vulnerability VCID-dsu7-jjjq-f3e1
15
vulnerability VCID-eajg-ctpd-2bby
16
vulnerability VCID-ekfd-wp8z-d7e1
17
vulnerability VCID-f963-qur3-2qb7
18
vulnerability VCID-g4uc-qeb6-myed
19
vulnerability VCID-gcnj-6qb6-pbgz
20
vulnerability VCID-gv1b-xtv4-4yg3
21
vulnerability VCID-h6y3-7gsq-skh2
22
vulnerability VCID-he5m-6wj4-rbhc
23
vulnerability VCID-hhmn-yz5p-xkap
24
vulnerability VCID-mnz3-rj21-67ad
25
vulnerability VCID-n15v-ta9h-6ffb
26
vulnerability VCID-n7ng-zkkb-2qaz
27
vulnerability VCID-pmzz-9rws-4ud5
28
vulnerability VCID-pss5-as4b-cyf2
29
vulnerability VCID-q8hy-wjd9-nbgp
30
vulnerability VCID-s53a-f91p-huf4
31
vulnerability VCID-s55j-8hbt-akhn
32
vulnerability VCID-s64f-x81f-b7ce
33
vulnerability VCID-stzu-sxe6-5yf5
34
vulnerability VCID-swnc-ke6h-ekew
35
vulnerability VCID-t1n7-eswt-73gw
36
vulnerability VCID-t3jn-vwbx-u7cr
37
vulnerability VCID-taj6-zj2n-5kg8
38
vulnerability VCID-tnjd-pyys-akav
39
vulnerability VCID-vxry-uvph-kbfd
40
vulnerability VCID-vyvy-y3cw-hbgr
41
vulnerability VCID-xa4m-xpa9-v7h8
42
vulnerability VCID-xh7y-56vy-5ud8
43
vulnerability VCID-y32z-2d3f-gkgw
44
vulnerability VCID-zdq2-dhb2-6kaq
45
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.23
1
url pkg:composer/typo3/cms-core@9.5.4
purl pkg:composer/typo3/cms-core@9.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2meq-x4kd-bbdn
1
vulnerability VCID-2mn6-mdmz-4yd9
2
vulnerability VCID-3n2r-awja-dug9
3
vulnerability VCID-3v4n-fzxa-bfaw
4
vulnerability VCID-461j-9hrc-gfbc
5
vulnerability VCID-4jpa-6fqh-hbfg
6
vulnerability VCID-4mkw-tv16-jyca
7
vulnerability VCID-4t9s-p25a-cfas
8
vulnerability VCID-543x-cnbz-1kb9
9
vulnerability VCID-58js-jzm4-4fc7
10
vulnerability VCID-5jgb-dsyx-hyb4
11
vulnerability VCID-5kzs-ex81-bbaj
12
vulnerability VCID-5paq-5frf-43ed
13
vulnerability VCID-5u4q-m66t-wqcj
14
vulnerability VCID-65ue-7jd9-23gf
15
vulnerability VCID-6a9t-8dmn-s3bv
16
vulnerability VCID-8d2m-1ffv-jqe1
17
vulnerability VCID-9g62-zd1x-3bdg
18
vulnerability VCID-9gpp-ez8w-rqav
19
vulnerability VCID-9x6r-56xm-n7h7
20
vulnerability VCID-a49c-fqrj-nbb3
21
vulnerability VCID-axvk-13qf-tka7
22
vulnerability VCID-b6er-h7dm-3bev
23
vulnerability VCID-bajy-qbwq-fufn
24
vulnerability VCID-cm14-t8uv-k3es
25
vulnerability VCID-d8d1-sat6-muhe
26
vulnerability VCID-dmzb-gkdn-6bcm
27
vulnerability VCID-dsu7-jjjq-f3e1
28
vulnerability VCID-e32h-8q61-hbgc
29
vulnerability VCID-eajg-ctpd-2bby
30
vulnerability VCID-ekfd-wp8z-d7e1
31
vulnerability VCID-f963-qur3-2qb7
32
vulnerability VCID-g4uc-qeb6-myed
33
vulnerability VCID-gcnj-6qb6-pbgz
34
vulnerability VCID-gv1b-xtv4-4yg3
35
vulnerability VCID-h6y3-7gsq-skh2
36
vulnerability VCID-he5m-6wj4-rbhc
37
vulnerability VCID-hhmn-yz5p-xkap
38
vulnerability VCID-kj9x-psfz-2ug1
39
vulnerability VCID-mnz3-rj21-67ad
40
vulnerability VCID-mud2-s4rc-fuf6
41
vulnerability VCID-n15v-ta9h-6ffb
42
vulnerability VCID-n7ng-zkkb-2qaz
43
vulnerability VCID-nubu-f1sc-gbes
44
vulnerability VCID-nxq4-m52q-yuh4
45
vulnerability VCID-phgh-sd4m-zbdx
46
vulnerability VCID-pmzz-9rws-4ud5
47
vulnerability VCID-pss5-as4b-cyf2
48
vulnerability VCID-q8hy-wjd9-nbgp
49
vulnerability VCID-raxk-rm9v-hubn
50
vulnerability VCID-remd-55jh-r3g5
51
vulnerability VCID-s53a-f91p-huf4
52
vulnerability VCID-s55j-8hbt-akhn
53
vulnerability VCID-s64f-x81f-b7ce
54
vulnerability VCID-stzu-sxe6-5yf5
55
vulnerability VCID-sw7v-fbjk-13hy
56
vulnerability VCID-swnc-ke6h-ekew
57
vulnerability VCID-t1n7-eswt-73gw
58
vulnerability VCID-t3jn-vwbx-u7cr
59
vulnerability VCID-taj6-zj2n-5kg8
60
vulnerability VCID-tnjd-pyys-akav
61
vulnerability VCID-u9bx-8e86-wbew
62
vulnerability VCID-ve7g-8st5-wffb
63
vulnerability VCID-vxry-uvph-kbfd
64
vulnerability VCID-vyvy-y3cw-hbgr
65
vulnerability VCID-w13x-3rp9-wyej
66
vulnerability VCID-xa4m-xpa9-v7h8
67
vulnerability VCID-xh7y-56vy-5ud8
68
vulnerability VCID-xtdg-uj46-rkcm
69
vulnerability VCID-xy6y-312d-rygj
70
vulnerability VCID-y32z-2d3f-gkgw
71
vulnerability VCID-zdq2-dhb2-6kaq
72
vulnerability VCID-zkea-ge1t-z7gn
73
vulnerability VCID-zn99-ywte-33g6
74
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.4
aliases GHSA-4459-qrcc-vfcf
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-mh4f-vtfj-hbb1
45
url VCID-mnz3-rj21-67ad
vulnerability_id VCID-mnz3-rj21-67ad
summary 
TYPO3 CMS vulnerable to User Enumeration via Response Timing
> ### Meta
> * CVSS: `CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:F/RL:O/RC:C` (4.9)

### Problem
It has been discovered that observing response time during user authentication (backend and frontend) can be used to distinguish between existing and non-existing user accounts.

Extension authors of 3rd party TYPO3 extensions providing a custom authentication service should check if the extension is affected by the described problem. Affected extensions must implement new `MimicServiceInterface::mimicAuthUser`, which simulates corresponding times regular processing would usually take.

### Solution
Update to TYPO3 version 7.6.58 ELTS, 8.7.48 ELTS, 9.5.37 ELTS, 10.4.32 or 11.5.16 that fix the problem described above.

### Credits
Thanks to Vautia who reported this issue and to TYPO3 core & security team members Oliver Hader who fixed the issue.

### References
* [TYPO3-CORE-SA-2022-007](https://typo3.org/security/advisory/typo3-core-sa-2022-007)
* [Vulnerability Report on huntr.dev](https://huntr.dev/bounties/7d519735-2877-4fad-bd77-accde3e290a7/) (embargoed +30 days)
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-36105
reference_id
reference_type
scores
0
value 0.00283
scoring_system epss
scoring_elements 0.51649
published_at 2026-04-02T12:55:00Z
1
value 0.00283
scoring_system epss
scoring_elements 0.51712
published_at 2026-04-12T12:55:00Z
2
value 0.00283
scoring_system epss
scoring_elements 0.51734
published_at 2026-04-11T12:55:00Z
3
value 0.00283
scoring_system epss
scoring_elements 0.51685
published_at 2026-04-09T12:55:00Z
4
value 0.00283
scoring_system epss
scoring_elements 0.51689
published_at 2026-04-08T12:55:00Z
5
value 0.00283
scoring_system epss
scoring_elements 0.51634
published_at 2026-04-07T12:55:00Z
6
value 0.00283
scoring_system epss
scoring_elements 0.51674
published_at 2026-04-04T12:55:00Z
7
value 0.00283
scoring_system epss
scoring_elements 0.51744
published_at 2026-04-18T12:55:00Z
8
value 0.00283
scoring_system epss
scoring_elements 0.51737
published_at 2026-04-16T12:55:00Z
9
value 0.00283
scoring_system epss
scoring_elements 0.51696
published_at 2026-04-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-36105
1
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2022-36105.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2022-36105.yaml
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2022-36105.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2022-36105.yaml
3
reference_url https://github.com/TYPO3/typo3
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3
4
reference_url https://github.com/TYPO3/typo3/commit/f0fc9c4cd7c38207c30dd158de53ee5d9d6f41a2
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/f0fc9c4cd7c38207c30dd158de53ee5d9d6f41a2
5
reference_url https://github.com/TYPO3/typo3/commit/f8b83ce15d4ea275a5a5e564e5d324242f7937b6
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T15:51:34Z/
url https://github.com/TYPO3/typo3/commit/f8b83ce15d4ea275a5a5e564e5d324242f7937b6
6
reference_url https://github.com/TYPO3/typo3/security/advisories/GHSA-m392-235j-9r7r
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T15:51:34Z/
url https://github.com/TYPO3/typo3/security/advisories/GHSA-m392-235j-9r7r
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-36105
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-36105
8
reference_url https://typo3.org/security/advisory/typo3-core-sa-2022-007
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T15:51:34Z/
url https://typo3.org/security/advisory/typo3-core-sa-2022-007
9
reference_url https://github.com/advisories/GHSA-m392-235j-9r7r
reference_id GHSA-m392-235j-9r7r
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-m392-235j-9r7r
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.48
purl pkg:composer/typo3/cms-core@8.7.48
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.48
1
url pkg:composer/typo3/cms-core@9.5.37
purl pkg:composer/typo3/cms-core@9.5.37
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.37
2
url pkg:composer/typo3/cms-core@10.4.32
purl pkg:composer/typo3/cms-core@10.4.32
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-4t9s-p25a-cfas
2
vulnerability VCID-65ue-7jd9-23gf
3
vulnerability VCID-8d2m-1ffv-jqe1
4
vulnerability VCID-8sdd-b1bn-cuhx
5
vulnerability VCID-axvk-13qf-tka7
6
vulnerability VCID-g4uc-qeb6-myed
7
vulnerability VCID-gv1b-xtv4-4yg3
8
vulnerability VCID-gyyu-n3b1-zbcj
9
vulnerability VCID-h6y3-7gsq-skh2
10
vulnerability VCID-mud2-s4rc-fuf6
11
vulnerability VCID-n7ng-zkkb-2qaz
12
vulnerability VCID-nubu-f1sc-gbes
13
vulnerability VCID-t1n7-eswt-73gw
14
vulnerability VCID-taj6-zj2n-5kg8
15
vulnerability VCID-ve7g-8st5-wffb
16
vulnerability VCID-vyvy-y3cw-hbgr
17
vulnerability VCID-w13x-3rp9-wyej
18
vulnerability VCID-xy6y-312d-rygj
19
vulnerability VCID-zdq2-dhb2-6kaq
20
vulnerability VCID-zn99-ywte-33g6
21
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@10.4.32
3
url pkg:composer/typo3/cms-core@11.5.16
purl pkg:composer/typo3/cms-core@11.5.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-4t9s-p25a-cfas
2
vulnerability VCID-65ue-7jd9-23gf
3
vulnerability VCID-8d2m-1ffv-jqe1
4
vulnerability VCID-8sdd-b1bn-cuhx
5
vulnerability VCID-axvk-13qf-tka7
6
vulnerability VCID-g4uc-qeb6-myed
7
vulnerability VCID-gv1b-xtv4-4yg3
8
vulnerability VCID-gyyu-n3b1-zbcj
9
vulnerability VCID-h6y3-7gsq-skh2
10
vulnerability VCID-mud2-s4rc-fuf6
11
vulnerability VCID-n7ng-zkkb-2qaz
12
vulnerability VCID-nubu-f1sc-gbes
13
vulnerability VCID-t1n7-eswt-73gw
14
vulnerability VCID-taj6-zj2n-5kg8
15
vulnerability VCID-ve7g-8st5-wffb
16
vulnerability VCID-vyvy-y3cw-hbgr
17
vulnerability VCID-w13x-3rp9-wyej
18
vulnerability VCID-xy6y-312d-rygj
19
vulnerability VCID-zdq2-dhb2-6kaq
20
vulnerability VCID-zn99-ywte-33g6
21
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@11.5.16
aliases CVE-2022-36105, GHSA-m392-235j-9r7r
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-mnz3-rj21-67ad
46
url VCID-n15v-ta9h-6ffb
vulnerability_id VCID-n15v-ta9h-6ffb
summary 
Inclusion of Sensitive Information in Log Files
TYPO3 is an open source PHP based web content management system. User credentials may been logged as plain-text. This occurs when explicitly using log level debug, which is not the default configuration. TYPO3 contain a patch for this vulnerability.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-32767
reference_id
reference_type
scores
0
value 0.00327
scoring_system epss
scoring_elements 0.55519
published_at 2026-04-01T12:55:00Z
1
value 0.00327
scoring_system epss
scoring_elements 0.55701
published_at 2026-04-18T12:55:00Z
2
value 0.00327
scoring_system epss
scoring_elements 0.55697
published_at 2026-04-16T12:55:00Z
3
value 0.00327
scoring_system epss
scoring_elements 0.55658
published_at 2026-04-13T12:55:00Z
4
value 0.00327
scoring_system epss
scoring_elements 0.55676
published_at 2026-04-12T12:55:00Z
5
value 0.00327
scoring_system epss
scoring_elements 0.55696
published_at 2026-04-11T12:55:00Z
6
value 0.00327
scoring_system epss
scoring_elements 0.55687
published_at 2026-04-09T12:55:00Z
7
value 0.00327
scoring_system epss
scoring_elements 0.55684
published_at 2026-04-08T12:55:00Z
8
value 0.00327
scoring_system epss
scoring_elements 0.55632
published_at 2026-04-07T12:55:00Z
9
value 0.00327
scoring_system epss
scoring_elements 0.55654
published_at 2026-04-04T12:55:00Z
10
value 0.00327
scoring_system epss
scoring_elements 0.5563
published_at 2026-04-02T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-32767
1
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-32767.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-32767.yaml
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-32767.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-32767.yaml
3
reference_url https://github.com/TYPO3/typo3
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3
4
reference_url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-34fr-fhqr-7235
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-34fr-fhqr-7235
5
reference_url https://github.com/TYPO3/typo3/commit/0b4950163b8919451964133febc65bcdfcec721c
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/0b4950163b8919451964133febc65bcdfcec721c
6
reference_url https://github.com/TYPO3/typo3/security/advisories/GHSA-34fr-fhqr-7235
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/security/advisories/GHSA-34fr-fhqr-7235
7
reference_url https://typo3.org/security/advisory/typo3-core-sa-2021-012
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2021-012
8
reference_url https://typo3.org/security/advisory/typo3-core-sa-2021-013
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2021-013
9
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-32767
reference_id CVE-2021-32767
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-32767
10
reference_url https://github.com/advisories/GHSA-34fr-fhqr-7235
reference_id GHSA-34fr-fhqr-7235
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-34fr-fhqr-7235
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.41
purl pkg:composer/typo3/cms-core@8.7.41
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-y32z-2d3f-gkgw
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.41
1
url pkg:composer/typo3/cms-core@9.5.28
purl pkg:composer/typo3/cms-core@9.5.28
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4jpa-6fqh-hbfg
1
vulnerability VCID-4t9s-p25a-cfas
2
vulnerability VCID-5paq-5frf-43ed
3
vulnerability VCID-65ue-7jd9-23gf
4
vulnerability VCID-8d2m-1ffv-jqe1
5
vulnerability VCID-axvk-13qf-tka7
6
vulnerability VCID-b6er-h7dm-3bev
7
vulnerability VCID-bajy-qbwq-fufn
8
vulnerability VCID-e32h-8q61-hbgc
9
vulnerability VCID-ekfd-wp8z-d7e1
10
vulnerability VCID-g4uc-qeb6-myed
11
vulnerability VCID-gv1b-xtv4-4yg3
12
vulnerability VCID-h6y3-7gsq-skh2
13
vulnerability VCID-mnz3-rj21-67ad
14
vulnerability VCID-mud2-s4rc-fuf6
15
vulnerability VCID-n7ng-zkkb-2qaz
16
vulnerability VCID-nubu-f1sc-gbes
17
vulnerability VCID-remd-55jh-r3g5
18
vulnerability VCID-s55j-8hbt-akhn
19
vulnerability VCID-s64f-x81f-b7ce
20
vulnerability VCID-t1n7-eswt-73gw
21
vulnerability VCID-taj6-zj2n-5kg8
22
vulnerability VCID-ve7g-8st5-wffb
23
vulnerability VCID-vyvy-y3cw-hbgr
24
vulnerability VCID-w13x-3rp9-wyej
25
vulnerability VCID-xy6y-312d-rygj
26
vulnerability VCID-y32z-2d3f-gkgw
27
vulnerability VCID-zdq2-dhb2-6kaq
28
vulnerability VCID-zn99-ywte-33g6
29
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.28
2
url pkg:composer/typo3/cms-core@10.4.18
purl pkg:composer/typo3/cms-core@10.4.18
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-1yxw-saf5-wue7
2
vulnerability VCID-4jpa-6fqh-hbfg
3
vulnerability VCID-4t9s-p25a-cfas
4
vulnerability VCID-5paq-5frf-43ed
5
vulnerability VCID-65ue-7jd9-23gf
6
vulnerability VCID-8d2m-1ffv-jqe1
7
vulnerability VCID-8sdd-b1bn-cuhx
8
vulnerability VCID-av8u-rvzq-4fc7
9
vulnerability VCID-axvk-13qf-tka7
10
vulnerability VCID-b6er-h7dm-3bev
11
vulnerability VCID-bajy-qbwq-fufn
12
vulnerability VCID-e32h-8q61-hbgc
13
vulnerability VCID-g4uc-qeb6-myed
14
vulnerability VCID-gv1b-xtv4-4yg3
15
vulnerability VCID-gyyu-n3b1-zbcj
16
vulnerability VCID-h6y3-7gsq-skh2
17
vulnerability VCID-mnz3-rj21-67ad
18
vulnerability VCID-mud2-s4rc-fuf6
19
vulnerability VCID-n7ng-zkkb-2qaz
20
vulnerability VCID-nubu-f1sc-gbes
21
vulnerability VCID-remd-55jh-r3g5
22
vulnerability VCID-s55j-8hbt-akhn
23
vulnerability VCID-t1n7-eswt-73gw
24
vulnerability VCID-taj6-zj2n-5kg8
25
vulnerability VCID-ve7g-8st5-wffb
26
vulnerability VCID-vwb2-a84s-5qak
27
vulnerability VCID-vyvy-y3cw-hbgr
28
vulnerability VCID-w13x-3rp9-wyej
29
vulnerability VCID-xy6y-312d-rygj
30
vulnerability VCID-y32z-2d3f-gkgw
31
vulnerability VCID-zdq2-dhb2-6kaq
32
vulnerability VCID-zn99-ywte-33g6
33
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@10.4.18
3
url pkg:composer/typo3/cms-core@11.3.1
purl pkg:composer/typo3/cms-core@11.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-1yxw-saf5-wue7
2
vulnerability VCID-4jpa-6fqh-hbfg
3
vulnerability VCID-4t9s-p25a-cfas
4
vulnerability VCID-5paq-5frf-43ed
5
vulnerability VCID-65ue-7jd9-23gf
6
vulnerability VCID-8d2m-1ffv-jqe1
7
vulnerability VCID-8sdd-b1bn-cuhx
8
vulnerability VCID-av8u-rvzq-4fc7
9
vulnerability VCID-axvk-13qf-tka7
10
vulnerability VCID-b6er-h7dm-3bev
11
vulnerability VCID-bajy-qbwq-fufn
12
vulnerability VCID-e32h-8q61-hbgc
13
vulnerability VCID-g4uc-qeb6-myed
14
vulnerability VCID-gv1b-xtv4-4yg3
15
vulnerability VCID-gyyu-n3b1-zbcj
16
vulnerability VCID-h6y3-7gsq-skh2
17
vulnerability VCID-jjbn-6efk-nud2
18
vulnerability VCID-mnz3-rj21-67ad
19
vulnerability VCID-mud2-s4rc-fuf6
20
vulnerability VCID-n7ng-zkkb-2qaz
21
vulnerability VCID-nubu-f1sc-gbes
22
vulnerability VCID-remd-55jh-r3g5
23
vulnerability VCID-s55j-8hbt-akhn
24
vulnerability VCID-t1n7-eswt-73gw
25
vulnerability VCID-taj6-zj2n-5kg8
26
vulnerability VCID-uyeu-a3xr-fkh4
27
vulnerability VCID-ve7g-8st5-wffb
28
vulnerability VCID-vwb2-a84s-5qak
29
vulnerability VCID-vyvy-y3cw-hbgr
30
vulnerability VCID-w13x-3rp9-wyej
31
vulnerability VCID-xy6y-312d-rygj
32
vulnerability VCID-y32z-2d3f-gkgw
33
vulnerability VCID-zdq2-dhb2-6kaq
34
vulnerability VCID-zn99-ywte-33g6
35
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@11.3.1
aliases CVE-2021-32767, GHSA-34fr-fhqr-7235
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-n15v-ta9h-6ffb
47
url VCID-n1cb-8py6-bbhu
vulnerability_id VCID-n1cb-8py6-bbhu
summary 
TYPO3 Security Misconfiguration in Install Tool Cookie
It has been discovered that cookies created in the Install Tool are not hardened to be submitted only via HTTP. In combination with other vulnerabilities such as cross-site scripting it can lead to hijacking an active and valid session in the Install Tool.
references
0
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2018-12-11-4.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2018-12-11-4.yaml
1
reference_url https://github.com/TYPO3-CMS/core
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core
2
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-009
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2018-009
3
reference_url https://github.com/advisories/GHSA-ppvg-hw62-6ph9
reference_id GHSA-ppvg-hw62-6ph9
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-ppvg-hw62-6ph9
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.21
purl pkg:composer/typo3/cms-core@8.7.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21e8-x7mp-hugk
1
vulnerability VCID-2meq-x4kd-bbdn
2
vulnerability VCID-3n2r-awja-dug9
3
vulnerability VCID-3v4n-fzxa-bfaw
4
vulnerability VCID-4jpa-6fqh-hbfg
5
vulnerability VCID-551q-gpyd-ffe8
6
vulnerability VCID-5jgb-dsyx-hyb4
7
vulnerability VCID-5mxm-88r9-hfey
8
vulnerability VCID-5paq-5frf-43ed
9
vulnerability VCID-5u4q-m66t-wqcj
10
vulnerability VCID-9g62-zd1x-3bdg
11
vulnerability VCID-9gpp-ez8w-rqav
12
vulnerability VCID-9x6r-56xm-n7h7
13
vulnerability VCID-9zqs-hjay-fkev
14
vulnerability VCID-axaf-45kr-kbfe
15
vulnerability VCID-axvk-13qf-tka7
16
vulnerability VCID-b6er-h7dm-3bev
17
vulnerability VCID-bajy-qbwq-fufn
18
vulnerability VCID-cm14-t8uv-k3es
19
vulnerability VCID-d99v-v9cj-zfh2
20
vulnerability VCID-dj88-f3p8-cfbn
21
vulnerability VCID-dsu7-jjjq-f3e1
22
vulnerability VCID-eajg-ctpd-2bby
23
vulnerability VCID-ekfd-wp8z-d7e1
24
vulnerability VCID-f4bv-pzdy-dfcb
25
vulnerability VCID-f963-qur3-2qb7
26
vulnerability VCID-g4uc-qeb6-myed
27
vulnerability VCID-gcnj-6qb6-pbgz
28
vulnerability VCID-gv1b-xtv4-4yg3
29
vulnerability VCID-h6y3-7gsq-skh2
30
vulnerability VCID-he5m-6wj4-rbhc
31
vulnerability VCID-hhmn-yz5p-xkap
32
vulnerability VCID-j77k-hjgx-5kc5
33
vulnerability VCID-k8af-cg9k-87a9
34
vulnerability VCID-mh4f-vtfj-hbb1
35
vulnerability VCID-mnz3-rj21-67ad
36
vulnerability VCID-n15v-ta9h-6ffb
37
vulnerability VCID-n7ng-zkkb-2qaz
38
vulnerability VCID-pmzz-9rws-4ud5
39
vulnerability VCID-pss5-as4b-cyf2
40
vulnerability VCID-px44-19tj-h7aa
41
vulnerability VCID-q8hy-wjd9-nbgp
42
vulnerability VCID-s53a-f91p-huf4
43
vulnerability VCID-s55j-8hbt-akhn
44
vulnerability VCID-s64f-x81f-b7ce
45
vulnerability VCID-stzu-sxe6-5yf5
46
vulnerability VCID-swnc-ke6h-ekew
47
vulnerability VCID-t1n7-eswt-73gw
48
vulnerability VCID-t3jn-vwbx-u7cr
49
vulnerability VCID-taj6-zj2n-5kg8
50
vulnerability VCID-tnjd-pyys-akav
51
vulnerability VCID-vxry-uvph-kbfd
52
vulnerability VCID-vyvy-y3cw-hbgr
53
vulnerability VCID-wea9-egep-h7g5
54
vulnerability VCID-xa4m-xpa9-v7h8
55
vulnerability VCID-xh7y-56vy-5ud8
56
vulnerability VCID-y32z-2d3f-gkgw
57
vulnerability VCID-zdq2-dhb2-6kaq
58
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.21
1
url pkg:composer/typo3/cms-core@9.5.2
purl pkg:composer/typo3/cms-core@9.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21e8-x7mp-hugk
1
vulnerability VCID-2meq-x4kd-bbdn
2
vulnerability VCID-2mn6-mdmz-4yd9
3
vulnerability VCID-3n2r-awja-dug9
4
vulnerability VCID-3v4n-fzxa-bfaw
5
vulnerability VCID-461j-9hrc-gfbc
6
vulnerability VCID-4jpa-6fqh-hbfg
7
vulnerability VCID-4mkw-tv16-jyca
8
vulnerability VCID-4t9s-p25a-cfas
9
vulnerability VCID-543x-cnbz-1kb9
10
vulnerability VCID-551q-gpyd-ffe8
11
vulnerability VCID-58js-jzm4-4fc7
12
vulnerability VCID-5jgb-dsyx-hyb4
13
vulnerability VCID-5kzs-ex81-bbaj
14
vulnerability VCID-5paq-5frf-43ed
15
vulnerability VCID-5u4q-m66t-wqcj
16
vulnerability VCID-65ue-7jd9-23gf
17
vulnerability VCID-6a9t-8dmn-s3bv
18
vulnerability VCID-8d2m-1ffv-jqe1
19
vulnerability VCID-9g62-zd1x-3bdg
20
vulnerability VCID-9gpp-ez8w-rqav
21
vulnerability VCID-9x6r-56xm-n7h7
22
vulnerability VCID-9zqs-hjay-fkev
23
vulnerability VCID-a49c-fqrj-nbb3
24
vulnerability VCID-axaf-45kr-kbfe
25
vulnerability VCID-axvk-13qf-tka7
26
vulnerability VCID-b6er-h7dm-3bev
27
vulnerability VCID-bajy-qbwq-fufn
28
vulnerability VCID-cm14-t8uv-k3es
29
vulnerability VCID-d8d1-sat6-muhe
30
vulnerability VCID-d99v-v9cj-zfh2
31
vulnerability VCID-dj88-f3p8-cfbn
32
vulnerability VCID-dmzb-gkdn-6bcm
33
vulnerability VCID-dsu7-jjjq-f3e1
34
vulnerability VCID-e32h-8q61-hbgc
35
vulnerability VCID-eajg-ctpd-2bby
36
vulnerability VCID-ekfd-wp8z-d7e1
37
vulnerability VCID-f4bv-pzdy-dfcb
38
vulnerability VCID-f963-qur3-2qb7
39
vulnerability VCID-g4uc-qeb6-myed
40
vulnerability VCID-gcnj-6qb6-pbgz
41
vulnerability VCID-gv1b-xtv4-4yg3
42
vulnerability VCID-h6y3-7gsq-skh2
43
vulnerability VCID-he5m-6wj4-rbhc
44
vulnerability VCID-hhmn-yz5p-xkap
45
vulnerability VCID-k8af-cg9k-87a9
46
vulnerability VCID-kj9x-psfz-2ug1
47
vulnerability VCID-mh4f-vtfj-hbb1
48
vulnerability VCID-mnz3-rj21-67ad
49
vulnerability VCID-mud2-s4rc-fuf6
50
vulnerability VCID-n15v-ta9h-6ffb
51
vulnerability VCID-n7ng-zkkb-2qaz
52
vulnerability VCID-nubu-f1sc-gbes
53
vulnerability VCID-nxq4-m52q-yuh4
54
vulnerability VCID-p715-yexd-jfgc
55
vulnerability VCID-phgh-sd4m-zbdx
56
vulnerability VCID-pmzz-9rws-4ud5
57
vulnerability VCID-pss5-as4b-cyf2
58
vulnerability VCID-px44-19tj-h7aa
59
vulnerability VCID-q8hy-wjd9-nbgp
60
vulnerability VCID-raxk-rm9v-hubn
61
vulnerability VCID-remd-55jh-r3g5
62
vulnerability VCID-s53a-f91p-huf4
63
vulnerability VCID-s55j-8hbt-akhn
64
vulnerability VCID-s64f-x81f-b7ce
65
vulnerability VCID-stzu-sxe6-5yf5
66
vulnerability VCID-sw7v-fbjk-13hy
67
vulnerability VCID-swnc-ke6h-ekew
68
vulnerability VCID-t1n7-eswt-73gw
69
vulnerability VCID-t3jn-vwbx-u7cr
70
vulnerability VCID-taj6-zj2n-5kg8
71
vulnerability VCID-tnjd-pyys-akav
72
vulnerability VCID-u9bx-8e86-wbew
73
vulnerability VCID-ve7g-8st5-wffb
74
vulnerability VCID-vxry-uvph-kbfd
75
vulnerability VCID-vyvy-y3cw-hbgr
76
vulnerability VCID-w13x-3rp9-wyej
77
vulnerability VCID-wea9-egep-h7g5
78
vulnerability VCID-xa4m-xpa9-v7h8
79
vulnerability VCID-xh7y-56vy-5ud8
80
vulnerability VCID-xtdg-uj46-rkcm
81
vulnerability VCID-xy6y-312d-rygj
82
vulnerability VCID-y32z-2d3f-gkgw
83
vulnerability VCID-yzx1-4psv-7bhr
84
vulnerability VCID-zdq2-dhb2-6kaq
85
vulnerability VCID-zkea-ge1t-z7gn
86
vulnerability VCID-zn99-ywte-33g6
87
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.2
aliases GHSA-ppvg-hw62-6ph9
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-n1cb-8py6-bbhu
48
url VCID-n78p-x7hh-gqcf
vulnerability_id VCID-n78p-x7hh-gqcf
summary Information Disclosure in Install Tool.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-010/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2018-010/
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.21
purl pkg:composer/typo3/cms-core@8.7.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21e8-x7mp-hugk
1
vulnerability VCID-2meq-x4kd-bbdn
2
vulnerability VCID-3n2r-awja-dug9
3
vulnerability VCID-3v4n-fzxa-bfaw
4
vulnerability VCID-4jpa-6fqh-hbfg
5
vulnerability VCID-551q-gpyd-ffe8
6
vulnerability VCID-5jgb-dsyx-hyb4
7
vulnerability VCID-5mxm-88r9-hfey
8
vulnerability VCID-5paq-5frf-43ed
9
vulnerability VCID-5u4q-m66t-wqcj
10
vulnerability VCID-9g62-zd1x-3bdg
11
vulnerability VCID-9gpp-ez8w-rqav
12
vulnerability VCID-9x6r-56xm-n7h7
13
vulnerability VCID-9zqs-hjay-fkev
14
vulnerability VCID-axaf-45kr-kbfe
15
vulnerability VCID-axvk-13qf-tka7
16
vulnerability VCID-b6er-h7dm-3bev
17
vulnerability VCID-bajy-qbwq-fufn
18
vulnerability VCID-cm14-t8uv-k3es
19
vulnerability VCID-d99v-v9cj-zfh2
20
vulnerability VCID-dj88-f3p8-cfbn
21
vulnerability VCID-dsu7-jjjq-f3e1
22
vulnerability VCID-eajg-ctpd-2bby
23
vulnerability VCID-ekfd-wp8z-d7e1
24
vulnerability VCID-f4bv-pzdy-dfcb
25
vulnerability VCID-f963-qur3-2qb7
26
vulnerability VCID-g4uc-qeb6-myed
27
vulnerability VCID-gcnj-6qb6-pbgz
28
vulnerability VCID-gv1b-xtv4-4yg3
29
vulnerability VCID-h6y3-7gsq-skh2
30
vulnerability VCID-he5m-6wj4-rbhc
31
vulnerability VCID-hhmn-yz5p-xkap
32
vulnerability VCID-j77k-hjgx-5kc5
33
vulnerability VCID-k8af-cg9k-87a9
34
vulnerability VCID-mh4f-vtfj-hbb1
35
vulnerability VCID-mnz3-rj21-67ad
36
vulnerability VCID-n15v-ta9h-6ffb
37
vulnerability VCID-n7ng-zkkb-2qaz
38
vulnerability VCID-pmzz-9rws-4ud5
39
vulnerability VCID-pss5-as4b-cyf2
40
vulnerability VCID-px44-19tj-h7aa
41
vulnerability VCID-q8hy-wjd9-nbgp
42
vulnerability VCID-s53a-f91p-huf4
43
vulnerability VCID-s55j-8hbt-akhn
44
vulnerability VCID-s64f-x81f-b7ce
45
vulnerability VCID-stzu-sxe6-5yf5
46
vulnerability VCID-swnc-ke6h-ekew
47
vulnerability VCID-t1n7-eswt-73gw
48
vulnerability VCID-t3jn-vwbx-u7cr
49
vulnerability VCID-taj6-zj2n-5kg8
50
vulnerability VCID-tnjd-pyys-akav
51
vulnerability VCID-vxry-uvph-kbfd
52
vulnerability VCID-vyvy-y3cw-hbgr
53
vulnerability VCID-wea9-egep-h7g5
54
vulnerability VCID-xa4m-xpa9-v7h8
55
vulnerability VCID-xh7y-56vy-5ud8
56
vulnerability VCID-y32z-2d3f-gkgw
57
vulnerability VCID-zdq2-dhb2-6kaq
58
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.21
1
url pkg:composer/typo3/cms-core@9.5.2
purl pkg:composer/typo3/cms-core@9.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21e8-x7mp-hugk
1
vulnerability VCID-2meq-x4kd-bbdn
2
vulnerability VCID-2mn6-mdmz-4yd9
3
vulnerability VCID-3n2r-awja-dug9
4
vulnerability VCID-3v4n-fzxa-bfaw
5
vulnerability VCID-461j-9hrc-gfbc
6
vulnerability VCID-4jpa-6fqh-hbfg
7
vulnerability VCID-4mkw-tv16-jyca
8
vulnerability VCID-4t9s-p25a-cfas
9
vulnerability VCID-543x-cnbz-1kb9
10
vulnerability VCID-551q-gpyd-ffe8
11
vulnerability VCID-58js-jzm4-4fc7
12
vulnerability VCID-5jgb-dsyx-hyb4
13
vulnerability VCID-5kzs-ex81-bbaj
14
vulnerability VCID-5paq-5frf-43ed
15
vulnerability VCID-5u4q-m66t-wqcj
16
vulnerability VCID-65ue-7jd9-23gf
17
vulnerability VCID-6a9t-8dmn-s3bv
18
vulnerability VCID-8d2m-1ffv-jqe1
19
vulnerability VCID-9g62-zd1x-3bdg
20
vulnerability VCID-9gpp-ez8w-rqav
21
vulnerability VCID-9x6r-56xm-n7h7
22
vulnerability VCID-9zqs-hjay-fkev
23
vulnerability VCID-a49c-fqrj-nbb3
24
vulnerability VCID-axaf-45kr-kbfe
25
vulnerability VCID-axvk-13qf-tka7
26
vulnerability VCID-b6er-h7dm-3bev
27
vulnerability VCID-bajy-qbwq-fufn
28
vulnerability VCID-cm14-t8uv-k3es
29
vulnerability VCID-d8d1-sat6-muhe
30
vulnerability VCID-d99v-v9cj-zfh2
31
vulnerability VCID-dj88-f3p8-cfbn
32
vulnerability VCID-dmzb-gkdn-6bcm
33
vulnerability VCID-dsu7-jjjq-f3e1
34
vulnerability VCID-e32h-8q61-hbgc
35
vulnerability VCID-eajg-ctpd-2bby
36
vulnerability VCID-ekfd-wp8z-d7e1
37
vulnerability VCID-f4bv-pzdy-dfcb
38
vulnerability VCID-f963-qur3-2qb7
39
vulnerability VCID-g4uc-qeb6-myed
40
vulnerability VCID-gcnj-6qb6-pbgz
41
vulnerability VCID-gv1b-xtv4-4yg3
42
vulnerability VCID-h6y3-7gsq-skh2
43
vulnerability VCID-he5m-6wj4-rbhc
44
vulnerability VCID-hhmn-yz5p-xkap
45
vulnerability VCID-k8af-cg9k-87a9
46
vulnerability VCID-kj9x-psfz-2ug1
47
vulnerability VCID-mh4f-vtfj-hbb1
48
vulnerability VCID-mnz3-rj21-67ad
49
vulnerability VCID-mud2-s4rc-fuf6
50
vulnerability VCID-n15v-ta9h-6ffb
51
vulnerability VCID-n7ng-zkkb-2qaz
52
vulnerability VCID-nubu-f1sc-gbes
53
vulnerability VCID-nxq4-m52q-yuh4
54
vulnerability VCID-p715-yexd-jfgc
55
vulnerability VCID-phgh-sd4m-zbdx
56
vulnerability VCID-pmzz-9rws-4ud5
57
vulnerability VCID-pss5-as4b-cyf2
58
vulnerability VCID-px44-19tj-h7aa
59
vulnerability VCID-q8hy-wjd9-nbgp
60
vulnerability VCID-raxk-rm9v-hubn
61
vulnerability VCID-remd-55jh-r3g5
62
vulnerability VCID-s53a-f91p-huf4
63
vulnerability VCID-s55j-8hbt-akhn
64
vulnerability VCID-s64f-x81f-b7ce
65
vulnerability VCID-stzu-sxe6-5yf5
66
vulnerability VCID-sw7v-fbjk-13hy
67
vulnerability VCID-swnc-ke6h-ekew
68
vulnerability VCID-t1n7-eswt-73gw
69
vulnerability VCID-t3jn-vwbx-u7cr
70
vulnerability VCID-taj6-zj2n-5kg8
71
vulnerability VCID-tnjd-pyys-akav
72
vulnerability VCID-u9bx-8e86-wbew
73
vulnerability VCID-ve7g-8st5-wffb
74
vulnerability VCID-vxry-uvph-kbfd
75
vulnerability VCID-vyvy-y3cw-hbgr
76
vulnerability VCID-w13x-3rp9-wyej
77
vulnerability VCID-wea9-egep-h7g5
78
vulnerability VCID-xa4m-xpa9-v7h8
79
vulnerability VCID-xh7y-56vy-5ud8
80
vulnerability VCID-xtdg-uj46-rkcm
81
vulnerability VCID-xy6y-312d-rygj
82
vulnerability VCID-y32z-2d3f-gkgw
83
vulnerability VCID-yzx1-4psv-7bhr
84
vulnerability VCID-zdq2-dhb2-6kaq
85
vulnerability VCID-zkea-ge1t-z7gn
86
vulnerability VCID-zn99-ywte-33g6
87
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.2
aliases 2018-12-11-5
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-n78p-x7hh-gqcf
49
url VCID-n7ng-zkkb-2qaz
vulnerability_id VCID-n7ng-zkkb-2qaz
summary 
TYPO3 vulnerable to Improper Access Control of Resources Referenced by t3:// URI Scheme
### Problem
The TYPO3-specific [`t3://` URI scheme](https://docs.typo3.org/m/typo3/reference-typoscript/main/en-us/Functions/Typolink.html#resource-references) could be used to access resources outside of the users' permission scope. This encompassed files, folders, pages, and records (although only if a valid link-handling configuration was provided). Exploiting this vulnerability requires a valid backend user account.

### Solution
Update to TYPO3 versions 8.7.57 ELTS, 9.5.46 ELTS, 10.4.43 ELTS, 11.5.35 LTS, 12.4.11 LTS, 13.0.1 that fix the problem described.

### Credits
Thanks to Richie Lee who reported this issue and to TYPO3 core & security team member Benjamin Franzke who fixed the issue.

### References
* [TYPO3-CORE-SA-2024-005](https://typo3.org/security/advisory/typo3-core-sa-2024-005)
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-25120
reference_id
reference_type
scores
0
value 0.00188
scoring_system epss
scoring_elements 0.40722
published_at 2026-04-04T12:55:00Z
1
value 0.00188
scoring_system epss
scoring_elements 0.40681
published_at 2026-04-18T12:55:00Z
2
value 0.00188
scoring_system epss
scoring_elements 0.40711
published_at 2026-04-16T12:55:00Z
3
value 0.00188
scoring_system epss
scoring_elements 0.40666
published_at 2026-04-13T12:55:00Z
4
value 0.00188
scoring_system epss
scoring_elements 0.40684
published_at 2026-04-12T12:55:00Z
5
value 0.00188
scoring_system epss
scoring_elements 0.40719
published_at 2026-04-11T12:55:00Z
6
value 0.00188
scoring_system epss
scoring_elements 0.40702
published_at 2026-04-09T12:55:00Z
7
value 0.00188
scoring_system epss
scoring_elements 0.40695
published_at 2026-04-08T12:55:00Z
8
value 0.00188
scoring_system epss
scoring_elements 0.40645
published_at 2026-04-07T12:55:00Z
9
value 0.00188
scoring_system epss
scoring_elements 0.40694
published_at 2026-04-02T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-25120
1
reference_url https://docs.typo3.org/m/typo3/reference-typoscript/main/en-us/Functions/Typolink.html#resource-references
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-14T15:55:10Z/
url https://docs.typo3.org/m/typo3/reference-typoscript/main/en-us/Functions/Typolink.html#resource-references
2
reference_url https://github.com/TYPO3/typo3
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3
3
reference_url https://github.com/TYPO3/typo3/commit/2de87ff113ba24333ab7cbb8078588743f8958d6
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/2de87ff113ba24333ab7cbb8078588743f8958d6
4
reference_url https://github.com/TYPO3/typo3/commit/33f4d279b82bca0a509227a17065244c6156e68f
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/33f4d279b82bca0a509227a17065244c6156e68f
5
reference_url https://github.com/TYPO3/typo3/commit/ae0dfc4c058a90c10eedb3f49cfaf33164d21cdd
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/ae0dfc4c058a90c10eedb3f49cfaf33164d21cdd
6
reference_url https://github.com/TYPO3/typo3/security/advisories/GHSA-wf85-8hx9-gj7c
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-14T15:55:10Z/
url https://github.com/TYPO3/typo3/security/advisories/GHSA-wf85-8hx9-gj7c
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-25120
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-25120
8
reference_url https://typo3.org/security/advisory/typo3-core-sa-2024-005
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-14T15:55:10Z/
url https://typo3.org/security/advisory/typo3-core-sa-2024-005
9
reference_url https://github.com/advisories/GHSA-wf85-8hx9-gj7c
reference_id GHSA-wf85-8hx9-gj7c
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-wf85-8hx9-gj7c
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.57
purl pkg:composer/typo3/cms-core@8.7.57
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.57
1
url pkg:composer/typo3/cms-core@9.5.46
purl pkg:composer/typo3/cms-core@9.5.46
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.46
2
url pkg:composer/typo3/cms-core@10.4.43
purl pkg:composer/typo3/cms-core@10.4.43
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@10.4.43
3
url pkg:composer/typo3/cms-core@11.5.35
purl pkg:composer/typo3/cms-core@11.5.35
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-4t9s-p25a-cfas
2
vulnerability VCID-65ue-7jd9-23gf
3
vulnerability VCID-8d2m-1ffv-jqe1
4
vulnerability VCID-gyyu-n3b1-zbcj
5
vulnerability VCID-mud2-s4rc-fuf6
6
vulnerability VCID-nubu-f1sc-gbes
7
vulnerability VCID-xy6y-312d-rygj
8
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@11.5.35
4
url pkg:composer/typo3/cms-core@12.4.11
purl pkg:composer/typo3/cms-core@12.4.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-4t9s-p25a-cfas
2
vulnerability VCID-65ue-7jd9-23gf
3
vulnerability VCID-8d2m-1ffv-jqe1
4
vulnerability VCID-gyyu-n3b1-zbcj
5
vulnerability VCID-jxw7-skw6-q7bg
6
vulnerability VCID-mud2-s4rc-fuf6
7
vulnerability VCID-nubu-f1sc-gbes
8
vulnerability VCID-xy6y-312d-rygj
9
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@12.4.11
5
url pkg:composer/typo3/cms-core@13.0.1
purl pkg:composer/typo3/cms-core@13.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-4t9s-p25a-cfas
2
vulnerability VCID-65ue-7jd9-23gf
3
vulnerability VCID-8d2m-1ffv-jqe1
4
vulnerability VCID-gyyu-n3b1-zbcj
5
vulnerability VCID-jxw7-skw6-q7bg
6
vulnerability VCID-mud2-s4rc-fuf6
7
vulnerability VCID-nubu-f1sc-gbes
8
vulnerability VCID-xy6y-312d-rygj
9
vulnerability VCID-yxy9-ngwb-6qdm
10
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@13.0.1
aliases CVE-2024-25120, GHSA-wf85-8hx9-gj7c
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-n7ng-zkkb-2qaz
50
url VCID-pmzz-9rws-4ud5
vulnerability_id VCID-pmzz-9rws-4ud5
summary 
TYPO3 Arbitrary Code Execution and Cross-Site Scripting in Backend API
Backend API configuration using Page TSconfig is vulnerable to arbitrary code execution and cross-site scripting. TSconfig fields of page properties in backend forms can be used to inject malicious sequences. Field tsconfig_includes is vulnerable to directory traversal leading to same scenarios as having direct access to TSconfig settings.

A valid backend user account having access to modify values for fields `pages.TSconfig` and `pages.tsconfig_includes` is needed in order to exploit this vulnerability.
references
0
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2019-06-25-4.yaml
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2019-06-25-4.yaml
1
reference_url https://github.com/TYPO3-CMS/core
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core
2
reference_url https://github.com/TYPO3-CMS/core/commit/3a99a0877de6ad9cb39ba73146292b90e13294db
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core/commit/3a99a0877de6ad9cb39ba73146292b90e13294db
3
reference_url https://github.com/TYPO3-CMS/core/commit/822e62ec267fbe3c70a26f1c4f73f47fc615c930
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core/commit/822e62ec267fbe3c70a26f1c4f73f47fc615c930
4
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-019
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2019-019
5
reference_url https://github.com/advisories/GHSA-x428-565f-8xj2
reference_id GHSA-x428-565f-8xj2
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-x428-565f-8xj2
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.27
purl pkg:composer/typo3/cms-core@8.7.27
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3n2r-awja-dug9
1
vulnerability VCID-4jpa-6fqh-hbfg
2
vulnerability VCID-5jgb-dsyx-hyb4
3
vulnerability VCID-5paq-5frf-43ed
4
vulnerability VCID-5u4q-m66t-wqcj
5
vulnerability VCID-axvk-13qf-tka7
6
vulnerability VCID-b6er-h7dm-3bev
7
vulnerability VCID-bajy-qbwq-fufn
8
vulnerability VCID-dsu7-jjjq-f3e1
9
vulnerability VCID-ekfd-wp8z-d7e1
10
vulnerability VCID-f963-qur3-2qb7
11
vulnerability VCID-g4uc-qeb6-myed
12
vulnerability VCID-gcnj-6qb6-pbgz
13
vulnerability VCID-gv1b-xtv4-4yg3
14
vulnerability VCID-h6y3-7gsq-skh2
15
vulnerability VCID-he5m-6wj4-rbhc
16
vulnerability VCID-hhmn-yz5p-xkap
17
vulnerability VCID-mnz3-rj21-67ad
18
vulnerability VCID-n15v-ta9h-6ffb
19
vulnerability VCID-n7ng-zkkb-2qaz
20
vulnerability VCID-s55j-8hbt-akhn
21
vulnerability VCID-s64f-x81f-b7ce
22
vulnerability VCID-swnc-ke6h-ekew
23
vulnerability VCID-t1n7-eswt-73gw
24
vulnerability VCID-t3jn-vwbx-u7cr
25
vulnerability VCID-taj6-zj2n-5kg8
26
vulnerability VCID-tnjd-pyys-akav
27
vulnerability VCID-vyvy-y3cw-hbgr
28
vulnerability VCID-xa4m-xpa9-v7h8
29
vulnerability VCID-xh7y-56vy-5ud8
30
vulnerability VCID-y32z-2d3f-gkgw
31
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.27
1
url pkg:composer/typo3/cms-core@9.5.8
purl pkg:composer/typo3/cms-core@9.5.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mn6-mdmz-4yd9
1
vulnerability VCID-3n2r-awja-dug9
2
vulnerability VCID-4jpa-6fqh-hbfg
3
vulnerability VCID-4t9s-p25a-cfas
4
vulnerability VCID-543x-cnbz-1kb9
5
vulnerability VCID-58js-jzm4-4fc7
6
vulnerability VCID-5jgb-dsyx-hyb4
7
vulnerability VCID-5kzs-ex81-bbaj
8
vulnerability VCID-5paq-5frf-43ed
9
vulnerability VCID-5u4q-m66t-wqcj
10
vulnerability VCID-65ue-7jd9-23gf
11
vulnerability VCID-6a9t-8dmn-s3bv
12
vulnerability VCID-8d2m-1ffv-jqe1
13
vulnerability VCID-a49c-fqrj-nbb3
14
vulnerability VCID-axvk-13qf-tka7
15
vulnerability VCID-b6er-h7dm-3bev
16
vulnerability VCID-bajy-qbwq-fufn
17
vulnerability VCID-d8d1-sat6-muhe
18
vulnerability VCID-dsu7-jjjq-f3e1
19
vulnerability VCID-e32h-8q61-hbgc
20
vulnerability VCID-ekfd-wp8z-d7e1
21
vulnerability VCID-f963-qur3-2qb7
22
vulnerability VCID-g4uc-qeb6-myed
23
vulnerability VCID-gcnj-6qb6-pbgz
24
vulnerability VCID-gv1b-xtv4-4yg3
25
vulnerability VCID-h6y3-7gsq-skh2
26
vulnerability VCID-he5m-6wj4-rbhc
27
vulnerability VCID-hhmn-yz5p-xkap
28
vulnerability VCID-mnz3-rj21-67ad
29
vulnerability VCID-mud2-s4rc-fuf6
30
vulnerability VCID-n15v-ta9h-6ffb
31
vulnerability VCID-n7ng-zkkb-2qaz
32
vulnerability VCID-nubu-f1sc-gbes
33
vulnerability VCID-phgh-sd4m-zbdx
34
vulnerability VCID-remd-55jh-r3g5
35
vulnerability VCID-s55j-8hbt-akhn
36
vulnerability VCID-s64f-x81f-b7ce
37
vulnerability VCID-sw7v-fbjk-13hy
38
vulnerability VCID-swnc-ke6h-ekew
39
vulnerability VCID-t1n7-eswt-73gw
40
vulnerability VCID-t3jn-vwbx-u7cr
41
vulnerability VCID-taj6-zj2n-5kg8
42
vulnerability VCID-tnjd-pyys-akav
43
vulnerability VCID-ve7g-8st5-wffb
44
vulnerability VCID-vyvy-y3cw-hbgr
45
vulnerability VCID-w13x-3rp9-wyej
46
vulnerability VCID-xa4m-xpa9-v7h8
47
vulnerability VCID-xh7y-56vy-5ud8
48
vulnerability VCID-xy6y-312d-rygj
49
vulnerability VCID-y32z-2d3f-gkgw
50
vulnerability VCID-zdq2-dhb2-6kaq
51
vulnerability VCID-zn99-ywte-33g6
52
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.8
aliases GHSA-x428-565f-8xj2
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pmzz-9rws-4ud5
51
url VCID-pss5-as4b-cyf2
vulnerability_id VCID-pss5-as4b-cyf2
summary 
TYPO3 Security Misconfiguration in User Session Handling
When users change their password existing sessions for that particular user account are not revoked. A valid backend or frontend user account is required in order to make use of this vulnerability.
references
0
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2019-05-07-2.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2019-05-07-2.yaml
1
reference_url https://github.com/TYPO3-CMS/core
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core
2
reference_url https://github.com/TYPO3-CMS/core/commit/437bf78c0ef64a059c7feaa5164f6f028507b425
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core/commit/437bf78c0ef64a059c7feaa5164f6f028507b425
3
reference_url https://github.com/TYPO3-CMS/core/commit/e21f0e5d29b68a7e64448762b3f86ac24d36627f
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core/commit/e21f0e5d29b68a7e64448762b3f86ac24d36627f
4
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-011
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2019-011
5
reference_url https://github.com/advisories/GHSA-xmgr-jff3-fcfv
reference_id GHSA-xmgr-jff3-fcfv
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-xmgr-jff3-fcfv
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.25
purl pkg:composer/typo3/cms-core@8.7.25
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2meq-x4kd-bbdn
1
vulnerability VCID-3n2r-awja-dug9
2
vulnerability VCID-3v4n-fzxa-bfaw
3
vulnerability VCID-4jpa-6fqh-hbfg
4
vulnerability VCID-5jgb-dsyx-hyb4
5
vulnerability VCID-5paq-5frf-43ed
6
vulnerability VCID-5u4q-m66t-wqcj
7
vulnerability VCID-9g62-zd1x-3bdg
8
vulnerability VCID-9x6r-56xm-n7h7
9
vulnerability VCID-axvk-13qf-tka7
10
vulnerability VCID-b6er-h7dm-3bev
11
vulnerability VCID-bajy-qbwq-fufn
12
vulnerability VCID-cm14-t8uv-k3es
13
vulnerability VCID-dsu7-jjjq-f3e1
14
vulnerability VCID-ekfd-wp8z-d7e1
15
vulnerability VCID-f1rq-qudk-zkf2
16
vulnerability VCID-f963-qur3-2qb7
17
vulnerability VCID-g4uc-qeb6-myed
18
vulnerability VCID-gcnj-6qb6-pbgz
19
vulnerability VCID-gv1b-xtv4-4yg3
20
vulnerability VCID-h6y3-7gsq-skh2
21
vulnerability VCID-he5m-6wj4-rbhc
22
vulnerability VCID-hhmn-yz5p-xkap
23
vulnerability VCID-mnz3-rj21-67ad
24
vulnerability VCID-n15v-ta9h-6ffb
25
vulnerability VCID-n7ng-zkkb-2qaz
26
vulnerability VCID-pmzz-9rws-4ud5
27
vulnerability VCID-s53a-f91p-huf4
28
vulnerability VCID-s55j-8hbt-akhn
29
vulnerability VCID-s64f-x81f-b7ce
30
vulnerability VCID-stzu-sxe6-5yf5
31
vulnerability VCID-swnc-ke6h-ekew
32
vulnerability VCID-t1n7-eswt-73gw
33
vulnerability VCID-t3jn-vwbx-u7cr
34
vulnerability VCID-taj6-zj2n-5kg8
35
vulnerability VCID-tnjd-pyys-akav
36
vulnerability VCID-vxry-uvph-kbfd
37
vulnerability VCID-vyvy-y3cw-hbgr
38
vulnerability VCID-xa4m-xpa9-v7h8
39
vulnerability VCID-xh7y-56vy-5ud8
40
vulnerability VCID-y32z-2d3f-gkgw
41
vulnerability VCID-zdq2-dhb2-6kaq
42
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.25
1
url pkg:composer/typo3/cms-core@9.5.6
purl pkg:composer/typo3/cms-core@9.5.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2meq-x4kd-bbdn
1
vulnerability VCID-2mn6-mdmz-4yd9
2
vulnerability VCID-3n2r-awja-dug9
3
vulnerability VCID-3v4n-fzxa-bfaw
4
vulnerability VCID-4jpa-6fqh-hbfg
5
vulnerability VCID-4mkw-tv16-jyca
6
vulnerability VCID-4t9s-p25a-cfas
7
vulnerability VCID-543x-cnbz-1kb9
8
vulnerability VCID-58js-jzm4-4fc7
9
vulnerability VCID-5jgb-dsyx-hyb4
10
vulnerability VCID-5kzs-ex81-bbaj
11
vulnerability VCID-5paq-5frf-43ed
12
vulnerability VCID-5u4q-m66t-wqcj
13
vulnerability VCID-65ue-7jd9-23gf
14
vulnerability VCID-6a9t-8dmn-s3bv
15
vulnerability VCID-8d2m-1ffv-jqe1
16
vulnerability VCID-9g62-zd1x-3bdg
17
vulnerability VCID-9x6r-56xm-n7h7
18
vulnerability VCID-a49c-fqrj-nbb3
19
vulnerability VCID-axvk-13qf-tka7
20
vulnerability VCID-b6er-h7dm-3bev
21
vulnerability VCID-bajy-qbwq-fufn
22
vulnerability VCID-cm14-t8uv-k3es
23
vulnerability VCID-d8d1-sat6-muhe
24
vulnerability VCID-dmzb-gkdn-6bcm
25
vulnerability VCID-dsu7-jjjq-f3e1
26
vulnerability VCID-e32h-8q61-hbgc
27
vulnerability VCID-ekfd-wp8z-d7e1
28
vulnerability VCID-f1rq-qudk-zkf2
29
vulnerability VCID-f963-qur3-2qb7
30
vulnerability VCID-g4uc-qeb6-myed
31
vulnerability VCID-gcnj-6qb6-pbgz
32
vulnerability VCID-gv1b-xtv4-4yg3
33
vulnerability VCID-h6y3-7gsq-skh2
34
vulnerability VCID-he5m-6wj4-rbhc
35
vulnerability VCID-hhmn-yz5p-xkap
36
vulnerability VCID-mnz3-rj21-67ad
37
vulnerability VCID-mud2-s4rc-fuf6
38
vulnerability VCID-n15v-ta9h-6ffb
39
vulnerability VCID-n7ng-zkkb-2qaz
40
vulnerability VCID-nubu-f1sc-gbes
41
vulnerability VCID-phgh-sd4m-zbdx
42
vulnerability VCID-pmzz-9rws-4ud5
43
vulnerability VCID-remd-55jh-r3g5
44
vulnerability VCID-s53a-f91p-huf4
45
vulnerability VCID-s55j-8hbt-akhn
46
vulnerability VCID-s64f-x81f-b7ce
47
vulnerability VCID-stzu-sxe6-5yf5
48
vulnerability VCID-sw7v-fbjk-13hy
49
vulnerability VCID-swnc-ke6h-ekew
50
vulnerability VCID-t1n7-eswt-73gw
51
vulnerability VCID-t3jn-vwbx-u7cr
52
vulnerability VCID-taj6-zj2n-5kg8
53
vulnerability VCID-tnjd-pyys-akav
54
vulnerability VCID-u9bx-8e86-wbew
55
vulnerability VCID-ve7g-8st5-wffb
56
vulnerability VCID-vxry-uvph-kbfd
57
vulnerability VCID-vyvy-y3cw-hbgr
58
vulnerability VCID-w13x-3rp9-wyej
59
vulnerability VCID-xa4m-xpa9-v7h8
60
vulnerability VCID-xh7y-56vy-5ud8
61
vulnerability VCID-xtdg-uj46-rkcm
62
vulnerability VCID-xy6y-312d-rygj
63
vulnerability VCID-y32z-2d3f-gkgw
64
vulnerability VCID-zdq2-dhb2-6kaq
65
vulnerability VCID-zkea-ge1t-z7gn
66
vulnerability VCID-zn99-ywte-33g6
67
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.6
aliases GHSA-xmgr-jff3-fcfv
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pss5-as4b-cyf2
52
url VCID-px44-19tj-h7aa
vulnerability_id VCID-px44-19tj-h7aa
summary 
Cross-site Scripting
Cross-Site Scripting in Form Framework.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-007/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-007/
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.23
purl pkg:composer/typo3/cms-core@8.7.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2meq-x4kd-bbdn
1
vulnerability VCID-3n2r-awja-dug9
2
vulnerability VCID-3v4n-fzxa-bfaw
3
vulnerability VCID-4jpa-6fqh-hbfg
4
vulnerability VCID-5jgb-dsyx-hyb4
5
vulnerability VCID-5paq-5frf-43ed
6
vulnerability VCID-5u4q-m66t-wqcj
7
vulnerability VCID-9g62-zd1x-3bdg
8
vulnerability VCID-9gpp-ez8w-rqav
9
vulnerability VCID-9x6r-56xm-n7h7
10
vulnerability VCID-axvk-13qf-tka7
11
vulnerability VCID-b6er-h7dm-3bev
12
vulnerability VCID-bajy-qbwq-fufn
13
vulnerability VCID-cm14-t8uv-k3es
14
vulnerability VCID-dsu7-jjjq-f3e1
15
vulnerability VCID-eajg-ctpd-2bby
16
vulnerability VCID-ekfd-wp8z-d7e1
17
vulnerability VCID-f963-qur3-2qb7
18
vulnerability VCID-g4uc-qeb6-myed
19
vulnerability VCID-gcnj-6qb6-pbgz
20
vulnerability VCID-gv1b-xtv4-4yg3
21
vulnerability VCID-h6y3-7gsq-skh2
22
vulnerability VCID-he5m-6wj4-rbhc
23
vulnerability VCID-hhmn-yz5p-xkap
24
vulnerability VCID-mnz3-rj21-67ad
25
vulnerability VCID-n15v-ta9h-6ffb
26
vulnerability VCID-n7ng-zkkb-2qaz
27
vulnerability VCID-pmzz-9rws-4ud5
28
vulnerability VCID-pss5-as4b-cyf2
29
vulnerability VCID-q8hy-wjd9-nbgp
30
vulnerability VCID-s53a-f91p-huf4
31
vulnerability VCID-s55j-8hbt-akhn
32
vulnerability VCID-s64f-x81f-b7ce
33
vulnerability VCID-stzu-sxe6-5yf5
34
vulnerability VCID-swnc-ke6h-ekew
35
vulnerability VCID-t1n7-eswt-73gw
36
vulnerability VCID-t3jn-vwbx-u7cr
37
vulnerability VCID-taj6-zj2n-5kg8
38
vulnerability VCID-tnjd-pyys-akav
39
vulnerability VCID-vxry-uvph-kbfd
40
vulnerability VCID-vyvy-y3cw-hbgr
41
vulnerability VCID-xa4m-xpa9-v7h8
42
vulnerability VCID-xh7y-56vy-5ud8
43
vulnerability VCID-y32z-2d3f-gkgw
44
vulnerability VCID-zdq2-dhb2-6kaq
45
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.23
1
url pkg:composer/typo3/cms-core@9.5.4
purl pkg:composer/typo3/cms-core@9.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2meq-x4kd-bbdn
1
vulnerability VCID-2mn6-mdmz-4yd9
2
vulnerability VCID-3n2r-awja-dug9
3
vulnerability VCID-3v4n-fzxa-bfaw
4
vulnerability VCID-461j-9hrc-gfbc
5
vulnerability VCID-4jpa-6fqh-hbfg
6
vulnerability VCID-4mkw-tv16-jyca
7
vulnerability VCID-4t9s-p25a-cfas
8
vulnerability VCID-543x-cnbz-1kb9
9
vulnerability VCID-58js-jzm4-4fc7
10
vulnerability VCID-5jgb-dsyx-hyb4
11
vulnerability VCID-5kzs-ex81-bbaj
12
vulnerability VCID-5paq-5frf-43ed
13
vulnerability VCID-5u4q-m66t-wqcj
14
vulnerability VCID-65ue-7jd9-23gf
15
vulnerability VCID-6a9t-8dmn-s3bv
16
vulnerability VCID-8d2m-1ffv-jqe1
17
vulnerability VCID-9g62-zd1x-3bdg
18
vulnerability VCID-9gpp-ez8w-rqav
19
vulnerability VCID-9x6r-56xm-n7h7
20
vulnerability VCID-a49c-fqrj-nbb3
21
vulnerability VCID-axvk-13qf-tka7
22
vulnerability VCID-b6er-h7dm-3bev
23
vulnerability VCID-bajy-qbwq-fufn
24
vulnerability VCID-cm14-t8uv-k3es
25
vulnerability VCID-d8d1-sat6-muhe
26
vulnerability VCID-dmzb-gkdn-6bcm
27
vulnerability VCID-dsu7-jjjq-f3e1
28
vulnerability VCID-e32h-8q61-hbgc
29
vulnerability VCID-eajg-ctpd-2bby
30
vulnerability VCID-ekfd-wp8z-d7e1
31
vulnerability VCID-f963-qur3-2qb7
32
vulnerability VCID-g4uc-qeb6-myed
33
vulnerability VCID-gcnj-6qb6-pbgz
34
vulnerability VCID-gv1b-xtv4-4yg3
35
vulnerability VCID-h6y3-7gsq-skh2
36
vulnerability VCID-he5m-6wj4-rbhc
37
vulnerability VCID-hhmn-yz5p-xkap
38
vulnerability VCID-kj9x-psfz-2ug1
39
vulnerability VCID-mnz3-rj21-67ad
40
vulnerability VCID-mud2-s4rc-fuf6
41
vulnerability VCID-n15v-ta9h-6ffb
42
vulnerability VCID-n7ng-zkkb-2qaz
43
vulnerability VCID-nubu-f1sc-gbes
44
vulnerability VCID-nxq4-m52q-yuh4
45
vulnerability VCID-phgh-sd4m-zbdx
46
vulnerability VCID-pmzz-9rws-4ud5
47
vulnerability VCID-pss5-as4b-cyf2
48
vulnerability VCID-q8hy-wjd9-nbgp
49
vulnerability VCID-raxk-rm9v-hubn
50
vulnerability VCID-remd-55jh-r3g5
51
vulnerability VCID-s53a-f91p-huf4
52
vulnerability VCID-s55j-8hbt-akhn
53
vulnerability VCID-s64f-x81f-b7ce
54
vulnerability VCID-stzu-sxe6-5yf5
55
vulnerability VCID-sw7v-fbjk-13hy
56
vulnerability VCID-swnc-ke6h-ekew
57
vulnerability VCID-t1n7-eswt-73gw
58
vulnerability VCID-t3jn-vwbx-u7cr
59
vulnerability VCID-taj6-zj2n-5kg8
60
vulnerability VCID-tnjd-pyys-akav
61
vulnerability VCID-u9bx-8e86-wbew
62
vulnerability VCID-ve7g-8st5-wffb
63
vulnerability VCID-vxry-uvph-kbfd
64
vulnerability VCID-vyvy-y3cw-hbgr
65
vulnerability VCID-w13x-3rp9-wyej
66
vulnerability VCID-xa4m-xpa9-v7h8
67
vulnerability VCID-xh7y-56vy-5ud8
68
vulnerability VCID-xtdg-uj46-rkcm
69
vulnerability VCID-xy6y-312d-rygj
70
vulnerability VCID-y32z-2d3f-gkgw
71
vulnerability VCID-zdq2-dhb2-6kaq
72
vulnerability VCID-zkea-ge1t-z7gn
73
vulnerability VCID-zn99-ywte-33g6
74
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.4
aliases 2019-01-22-6
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-px44-19tj-h7aa
53
url VCID-q8hy-wjd9-nbgp
vulnerability_id VCID-q8hy-wjd9-nbgp
summary 
Code Injection
Possible Arbitrary Code Execution in Image Processing.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-012/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-012/
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.25
purl pkg:composer/typo3/cms-core@8.7.25
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2meq-x4kd-bbdn
1
vulnerability VCID-3n2r-awja-dug9
2
vulnerability VCID-3v4n-fzxa-bfaw
3
vulnerability VCID-4jpa-6fqh-hbfg
4
vulnerability VCID-5jgb-dsyx-hyb4
5
vulnerability VCID-5paq-5frf-43ed
6
vulnerability VCID-5u4q-m66t-wqcj
7
vulnerability VCID-9g62-zd1x-3bdg
8
vulnerability VCID-9x6r-56xm-n7h7
9
vulnerability VCID-axvk-13qf-tka7
10
vulnerability VCID-b6er-h7dm-3bev
11
vulnerability VCID-bajy-qbwq-fufn
12
vulnerability VCID-cm14-t8uv-k3es
13
vulnerability VCID-dsu7-jjjq-f3e1
14
vulnerability VCID-ekfd-wp8z-d7e1
15
vulnerability VCID-f1rq-qudk-zkf2
16
vulnerability VCID-f963-qur3-2qb7
17
vulnerability VCID-g4uc-qeb6-myed
18
vulnerability VCID-gcnj-6qb6-pbgz
19
vulnerability VCID-gv1b-xtv4-4yg3
20
vulnerability VCID-h6y3-7gsq-skh2
21
vulnerability VCID-he5m-6wj4-rbhc
22
vulnerability VCID-hhmn-yz5p-xkap
23
vulnerability VCID-mnz3-rj21-67ad
24
vulnerability VCID-n15v-ta9h-6ffb
25
vulnerability VCID-n7ng-zkkb-2qaz
26
vulnerability VCID-pmzz-9rws-4ud5
27
vulnerability VCID-s53a-f91p-huf4
28
vulnerability VCID-s55j-8hbt-akhn
29
vulnerability VCID-s64f-x81f-b7ce
30
vulnerability VCID-stzu-sxe6-5yf5
31
vulnerability VCID-swnc-ke6h-ekew
32
vulnerability VCID-t1n7-eswt-73gw
33
vulnerability VCID-t3jn-vwbx-u7cr
34
vulnerability VCID-taj6-zj2n-5kg8
35
vulnerability VCID-tnjd-pyys-akav
36
vulnerability VCID-vxry-uvph-kbfd
37
vulnerability VCID-vyvy-y3cw-hbgr
38
vulnerability VCID-xa4m-xpa9-v7h8
39
vulnerability VCID-xh7y-56vy-5ud8
40
vulnerability VCID-y32z-2d3f-gkgw
41
vulnerability VCID-zdq2-dhb2-6kaq
42
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.25
1
url pkg:composer/typo3/cms-core@9.5.6
purl pkg:composer/typo3/cms-core@9.5.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2meq-x4kd-bbdn
1
vulnerability VCID-2mn6-mdmz-4yd9
2
vulnerability VCID-3n2r-awja-dug9
3
vulnerability VCID-3v4n-fzxa-bfaw
4
vulnerability VCID-4jpa-6fqh-hbfg
5
vulnerability VCID-4mkw-tv16-jyca
6
vulnerability VCID-4t9s-p25a-cfas
7
vulnerability VCID-543x-cnbz-1kb9
8
vulnerability VCID-58js-jzm4-4fc7
9
vulnerability VCID-5jgb-dsyx-hyb4
10
vulnerability VCID-5kzs-ex81-bbaj
11
vulnerability VCID-5paq-5frf-43ed
12
vulnerability VCID-5u4q-m66t-wqcj
13
vulnerability VCID-65ue-7jd9-23gf
14
vulnerability VCID-6a9t-8dmn-s3bv
15
vulnerability VCID-8d2m-1ffv-jqe1
16
vulnerability VCID-9g62-zd1x-3bdg
17
vulnerability VCID-9x6r-56xm-n7h7
18
vulnerability VCID-a49c-fqrj-nbb3
19
vulnerability VCID-axvk-13qf-tka7
20
vulnerability VCID-b6er-h7dm-3bev
21
vulnerability VCID-bajy-qbwq-fufn
22
vulnerability VCID-cm14-t8uv-k3es
23
vulnerability VCID-d8d1-sat6-muhe
24
vulnerability VCID-dmzb-gkdn-6bcm
25
vulnerability VCID-dsu7-jjjq-f3e1
26
vulnerability VCID-e32h-8q61-hbgc
27
vulnerability VCID-ekfd-wp8z-d7e1
28
vulnerability VCID-f1rq-qudk-zkf2
29
vulnerability VCID-f963-qur3-2qb7
30
vulnerability VCID-g4uc-qeb6-myed
31
vulnerability VCID-gcnj-6qb6-pbgz
32
vulnerability VCID-gv1b-xtv4-4yg3
33
vulnerability VCID-h6y3-7gsq-skh2
34
vulnerability VCID-he5m-6wj4-rbhc
35
vulnerability VCID-hhmn-yz5p-xkap
36
vulnerability VCID-mnz3-rj21-67ad
37
vulnerability VCID-mud2-s4rc-fuf6
38
vulnerability VCID-n15v-ta9h-6ffb
39
vulnerability VCID-n7ng-zkkb-2qaz
40
vulnerability VCID-nubu-f1sc-gbes
41
vulnerability VCID-phgh-sd4m-zbdx
42
vulnerability VCID-pmzz-9rws-4ud5
43
vulnerability VCID-remd-55jh-r3g5
44
vulnerability VCID-s53a-f91p-huf4
45
vulnerability VCID-s55j-8hbt-akhn
46
vulnerability VCID-s64f-x81f-b7ce
47
vulnerability VCID-stzu-sxe6-5yf5
48
vulnerability VCID-sw7v-fbjk-13hy
49
vulnerability VCID-swnc-ke6h-ekew
50
vulnerability VCID-t1n7-eswt-73gw
51
vulnerability VCID-t3jn-vwbx-u7cr
52
vulnerability VCID-taj6-zj2n-5kg8
53
vulnerability VCID-tnjd-pyys-akav
54
vulnerability VCID-u9bx-8e86-wbew
55
vulnerability VCID-ve7g-8st5-wffb
56
vulnerability VCID-vxry-uvph-kbfd
57
vulnerability VCID-vyvy-y3cw-hbgr
58
vulnerability VCID-w13x-3rp9-wyej
59
vulnerability VCID-xa4m-xpa9-v7h8
60
vulnerability VCID-xh7y-56vy-5ud8
61
vulnerability VCID-xtdg-uj46-rkcm
62
vulnerability VCID-xy6y-312d-rygj
63
vulnerability VCID-y32z-2d3f-gkgw
64
vulnerability VCID-zdq2-dhb2-6kaq
65
vulnerability VCID-zkea-ge1t-z7gn
66
vulnerability VCID-zn99-ywte-33g6
67
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.6
aliases 2019-05-07-3
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-q8hy-wjd9-nbgp
54
url VCID-qb4j-9tz7-m7a2
vulnerability_id VCID-qb4j-9tz7-m7a2
summary 
Cross-site Scripting
CKEditor allows user-assisted XSS involving a source-mode paste.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-17960
reference_id
reference_type
scores
0
value 0.02024
scoring_system epss
scoring_elements 0.83783
published_at 2026-04-11T12:55:00Z
1
value 0.02024
scoring_system epss
scoring_elements 0.83808
published_at 2026-04-18T12:55:00Z
2
value 0.02024
scoring_system epss
scoring_elements 0.83806
published_at 2026-04-16T12:55:00Z
3
value 0.02024
scoring_system epss
scoring_elements 0.83773
published_at 2026-04-13T12:55:00Z
4
value 0.02024
scoring_system epss
scoring_elements 0.83777
published_at 2026-04-12T12:55:00Z
5
value 0.02024
scoring_system epss
scoring_elements 0.83706
published_at 2026-04-01T12:55:00Z
6
value 0.02024
scoring_system epss
scoring_elements 0.8372
published_at 2026-04-02T12:55:00Z
7
value 0.02024
scoring_system epss
scoring_elements 0.83734
published_at 2026-04-04T12:55:00Z
8
value 0.02024
scoring_system epss
scoring_elements 0.83737
published_at 2026-04-07T12:55:00Z
9
value 0.02024
scoring_system epss
scoring_elements 0.83761
published_at 2026-04-08T12:55:00Z
10
value 0.02024
scoring_system epss
scoring_elements 0.83767
published_at 2026-04-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-17960
1
reference_url https://ckeditor.com/blog/CKEditor-4.11-with-emoji-dropdown-and-auto-link-on-typing-released
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://ckeditor.com/blog/CKEditor-4.11-with-emoji-dropdown-and-auto-link-on-typing-released
2
reference_url https://ckeditor.com/blog/CKEditor-4.11-with-emoji-dropdown-and-auto-link-on-typing-released/
reference_id
reference_type
scores
url https://ckeditor.com/blog/CKEditor-4.11-with-emoji-dropdown-and-auto-link-on-typing-released/
3
reference_url https://ckeditor.com/cke4/release/CKEditor-4.11.0
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://ckeditor.com/cke4/release/CKEditor-4.11.0
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17960
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17960
5
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-005
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2018-005
6
reference_url https://web.archive.org/web/20200227030123/http://www.securityfocus.com/bid/109205
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20200227030123/http://www.securityfocus.com/bid/109205
7
reference_url https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
8
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1015217
reference_id 1015217
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1015217
9
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-17960
reference_id CVE-2018-17960
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-17960
10
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2018-17960.yaml
reference_id CVE-2018-17960.YAML
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2018-17960.yaml
11
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2018-17960.yaml
reference_id CVE-2018-17960.YAML
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2018-17960.yaml
12
reference_url https://github.com/advisories/GHSA-g68x-vvqq-pvw3
reference_id GHSA-g68x-vvqq-pvw3
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-g68x-vvqq-pvw3
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.21
purl pkg:composer/typo3/cms-core@8.7.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21e8-x7mp-hugk
1
vulnerability VCID-2meq-x4kd-bbdn
2
vulnerability VCID-3n2r-awja-dug9
3
vulnerability VCID-3v4n-fzxa-bfaw
4
vulnerability VCID-4jpa-6fqh-hbfg
5
vulnerability VCID-551q-gpyd-ffe8
6
vulnerability VCID-5jgb-dsyx-hyb4
7
vulnerability VCID-5mxm-88r9-hfey
8
vulnerability VCID-5paq-5frf-43ed
9
vulnerability VCID-5u4q-m66t-wqcj
10
vulnerability VCID-9g62-zd1x-3bdg
11
vulnerability VCID-9gpp-ez8w-rqav
12
vulnerability VCID-9x6r-56xm-n7h7
13
vulnerability VCID-9zqs-hjay-fkev
14
vulnerability VCID-axaf-45kr-kbfe
15
vulnerability VCID-axvk-13qf-tka7
16
vulnerability VCID-b6er-h7dm-3bev
17
vulnerability VCID-bajy-qbwq-fufn
18
vulnerability VCID-cm14-t8uv-k3es
19
vulnerability VCID-d99v-v9cj-zfh2
20
vulnerability VCID-dj88-f3p8-cfbn
21
vulnerability VCID-dsu7-jjjq-f3e1
22
vulnerability VCID-eajg-ctpd-2bby
23
vulnerability VCID-ekfd-wp8z-d7e1
24
vulnerability VCID-f4bv-pzdy-dfcb
25
vulnerability VCID-f963-qur3-2qb7
26
vulnerability VCID-g4uc-qeb6-myed
27
vulnerability VCID-gcnj-6qb6-pbgz
28
vulnerability VCID-gv1b-xtv4-4yg3
29
vulnerability VCID-h6y3-7gsq-skh2
30
vulnerability VCID-he5m-6wj4-rbhc
31
vulnerability VCID-hhmn-yz5p-xkap
32
vulnerability VCID-j77k-hjgx-5kc5
33
vulnerability VCID-k8af-cg9k-87a9
34
vulnerability VCID-mh4f-vtfj-hbb1
35
vulnerability VCID-mnz3-rj21-67ad
36
vulnerability VCID-n15v-ta9h-6ffb
37
vulnerability VCID-n7ng-zkkb-2qaz
38
vulnerability VCID-pmzz-9rws-4ud5
39
vulnerability VCID-pss5-as4b-cyf2
40
vulnerability VCID-px44-19tj-h7aa
41
vulnerability VCID-q8hy-wjd9-nbgp
42
vulnerability VCID-s53a-f91p-huf4
43
vulnerability VCID-s55j-8hbt-akhn
44
vulnerability VCID-s64f-x81f-b7ce
45
vulnerability VCID-stzu-sxe6-5yf5
46
vulnerability VCID-swnc-ke6h-ekew
47
vulnerability VCID-t1n7-eswt-73gw
48
vulnerability VCID-t3jn-vwbx-u7cr
49
vulnerability VCID-taj6-zj2n-5kg8
50
vulnerability VCID-tnjd-pyys-akav
51
vulnerability VCID-vxry-uvph-kbfd
52
vulnerability VCID-vyvy-y3cw-hbgr
53
vulnerability VCID-wea9-egep-h7g5
54
vulnerability VCID-xa4m-xpa9-v7h8
55
vulnerability VCID-xh7y-56vy-5ud8
56
vulnerability VCID-y32z-2d3f-gkgw
57
vulnerability VCID-zdq2-dhb2-6kaq
58
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.21
1
url pkg:composer/typo3/cms-core@9.5.2
purl pkg:composer/typo3/cms-core@9.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21e8-x7mp-hugk
1
vulnerability VCID-2meq-x4kd-bbdn
2
vulnerability VCID-2mn6-mdmz-4yd9
3
vulnerability VCID-3n2r-awja-dug9
4
vulnerability VCID-3v4n-fzxa-bfaw
5
vulnerability VCID-461j-9hrc-gfbc
6
vulnerability VCID-4jpa-6fqh-hbfg
7
vulnerability VCID-4mkw-tv16-jyca
8
vulnerability VCID-4t9s-p25a-cfas
9
vulnerability VCID-543x-cnbz-1kb9
10
vulnerability VCID-551q-gpyd-ffe8
11
vulnerability VCID-58js-jzm4-4fc7
12
vulnerability VCID-5jgb-dsyx-hyb4
13
vulnerability VCID-5kzs-ex81-bbaj
14
vulnerability VCID-5paq-5frf-43ed
15
vulnerability VCID-5u4q-m66t-wqcj
16
vulnerability VCID-65ue-7jd9-23gf
17
vulnerability VCID-6a9t-8dmn-s3bv
18
vulnerability VCID-8d2m-1ffv-jqe1
19
vulnerability VCID-9g62-zd1x-3bdg
20
vulnerability VCID-9gpp-ez8w-rqav
21
vulnerability VCID-9x6r-56xm-n7h7
22
vulnerability VCID-9zqs-hjay-fkev
23
vulnerability VCID-a49c-fqrj-nbb3
24
vulnerability VCID-axaf-45kr-kbfe
25
vulnerability VCID-axvk-13qf-tka7
26
vulnerability VCID-b6er-h7dm-3bev
27
vulnerability VCID-bajy-qbwq-fufn
28
vulnerability VCID-cm14-t8uv-k3es
29
vulnerability VCID-d8d1-sat6-muhe
30
vulnerability VCID-d99v-v9cj-zfh2
31
vulnerability VCID-dj88-f3p8-cfbn
32
vulnerability VCID-dmzb-gkdn-6bcm
33
vulnerability VCID-dsu7-jjjq-f3e1
34
vulnerability VCID-e32h-8q61-hbgc
35
vulnerability VCID-eajg-ctpd-2bby
36
vulnerability VCID-ekfd-wp8z-d7e1
37
vulnerability VCID-f4bv-pzdy-dfcb
38
vulnerability VCID-f963-qur3-2qb7
39
vulnerability VCID-g4uc-qeb6-myed
40
vulnerability VCID-gcnj-6qb6-pbgz
41
vulnerability VCID-gv1b-xtv4-4yg3
42
vulnerability VCID-h6y3-7gsq-skh2
43
vulnerability VCID-he5m-6wj4-rbhc
44
vulnerability VCID-hhmn-yz5p-xkap
45
vulnerability VCID-k8af-cg9k-87a9
46
vulnerability VCID-kj9x-psfz-2ug1
47
vulnerability VCID-mh4f-vtfj-hbb1
48
vulnerability VCID-mnz3-rj21-67ad
49
vulnerability VCID-mud2-s4rc-fuf6
50
vulnerability VCID-n15v-ta9h-6ffb
51
vulnerability VCID-n7ng-zkkb-2qaz
52
vulnerability VCID-nubu-f1sc-gbes
53
vulnerability VCID-nxq4-m52q-yuh4
54
vulnerability VCID-p715-yexd-jfgc
55
vulnerability VCID-phgh-sd4m-zbdx
56
vulnerability VCID-pmzz-9rws-4ud5
57
vulnerability VCID-pss5-as4b-cyf2
58
vulnerability VCID-px44-19tj-h7aa
59
vulnerability VCID-q8hy-wjd9-nbgp
60
vulnerability VCID-raxk-rm9v-hubn
61
vulnerability VCID-remd-55jh-r3g5
62
vulnerability VCID-s53a-f91p-huf4
63
vulnerability VCID-s55j-8hbt-akhn
64
vulnerability VCID-s64f-x81f-b7ce
65
vulnerability VCID-stzu-sxe6-5yf5
66
vulnerability VCID-sw7v-fbjk-13hy
67
vulnerability VCID-swnc-ke6h-ekew
68
vulnerability VCID-t1n7-eswt-73gw
69
vulnerability VCID-t3jn-vwbx-u7cr
70
vulnerability VCID-taj6-zj2n-5kg8
71
vulnerability VCID-tnjd-pyys-akav
72
vulnerability VCID-u9bx-8e86-wbew
73
vulnerability VCID-ve7g-8st5-wffb
74
vulnerability VCID-vxry-uvph-kbfd
75
vulnerability VCID-vyvy-y3cw-hbgr
76
vulnerability VCID-w13x-3rp9-wyej
77
vulnerability VCID-wea9-egep-h7g5
78
vulnerability VCID-xa4m-xpa9-v7h8
79
vulnerability VCID-xh7y-56vy-5ud8
80
vulnerability VCID-xtdg-uj46-rkcm
81
vulnerability VCID-xy6y-312d-rygj
82
vulnerability VCID-y32z-2d3f-gkgw
83
vulnerability VCID-yzx1-4psv-7bhr
84
vulnerability VCID-zdq2-dhb2-6kaq
85
vulnerability VCID-zkea-ge1t-z7gn
86
vulnerability VCID-zn99-ywte-33g6
87
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.2
aliases CVE-2018-17960, GHSA-g68x-vvqq-pvw3
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qb4j-9tz7-m7a2
55
url VCID-rdrs-mhaw-b3ge
vulnerability_id VCID-rdrs-mhaw-b3ge
summary 
Cross-site Scripting
Cross-Site Scripting in Frontend User Login.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-008/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2018-008/
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.21
purl pkg:composer/typo3/cms-core@8.7.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21e8-x7mp-hugk
1
vulnerability VCID-2meq-x4kd-bbdn
2
vulnerability VCID-3n2r-awja-dug9
3
vulnerability VCID-3v4n-fzxa-bfaw
4
vulnerability VCID-4jpa-6fqh-hbfg
5
vulnerability VCID-551q-gpyd-ffe8
6
vulnerability VCID-5jgb-dsyx-hyb4
7
vulnerability VCID-5mxm-88r9-hfey
8
vulnerability VCID-5paq-5frf-43ed
9
vulnerability VCID-5u4q-m66t-wqcj
10
vulnerability VCID-9g62-zd1x-3bdg
11
vulnerability VCID-9gpp-ez8w-rqav
12
vulnerability VCID-9x6r-56xm-n7h7
13
vulnerability VCID-9zqs-hjay-fkev
14
vulnerability VCID-axaf-45kr-kbfe
15
vulnerability VCID-axvk-13qf-tka7
16
vulnerability VCID-b6er-h7dm-3bev
17
vulnerability VCID-bajy-qbwq-fufn
18
vulnerability VCID-cm14-t8uv-k3es
19
vulnerability VCID-d99v-v9cj-zfh2
20
vulnerability VCID-dj88-f3p8-cfbn
21
vulnerability VCID-dsu7-jjjq-f3e1
22
vulnerability VCID-eajg-ctpd-2bby
23
vulnerability VCID-ekfd-wp8z-d7e1
24
vulnerability VCID-f4bv-pzdy-dfcb
25
vulnerability VCID-f963-qur3-2qb7
26
vulnerability VCID-g4uc-qeb6-myed
27
vulnerability VCID-gcnj-6qb6-pbgz
28
vulnerability VCID-gv1b-xtv4-4yg3
29
vulnerability VCID-h6y3-7gsq-skh2
30
vulnerability VCID-he5m-6wj4-rbhc
31
vulnerability VCID-hhmn-yz5p-xkap
32
vulnerability VCID-j77k-hjgx-5kc5
33
vulnerability VCID-k8af-cg9k-87a9
34
vulnerability VCID-mh4f-vtfj-hbb1
35
vulnerability VCID-mnz3-rj21-67ad
36
vulnerability VCID-n15v-ta9h-6ffb
37
vulnerability VCID-n7ng-zkkb-2qaz
38
vulnerability VCID-pmzz-9rws-4ud5
39
vulnerability VCID-pss5-as4b-cyf2
40
vulnerability VCID-px44-19tj-h7aa
41
vulnerability VCID-q8hy-wjd9-nbgp
42
vulnerability VCID-s53a-f91p-huf4
43
vulnerability VCID-s55j-8hbt-akhn
44
vulnerability VCID-s64f-x81f-b7ce
45
vulnerability VCID-stzu-sxe6-5yf5
46
vulnerability VCID-swnc-ke6h-ekew
47
vulnerability VCID-t1n7-eswt-73gw
48
vulnerability VCID-t3jn-vwbx-u7cr
49
vulnerability VCID-taj6-zj2n-5kg8
50
vulnerability VCID-tnjd-pyys-akav
51
vulnerability VCID-vxry-uvph-kbfd
52
vulnerability VCID-vyvy-y3cw-hbgr
53
vulnerability VCID-wea9-egep-h7g5
54
vulnerability VCID-xa4m-xpa9-v7h8
55
vulnerability VCID-xh7y-56vy-5ud8
56
vulnerability VCID-y32z-2d3f-gkgw
57
vulnerability VCID-zdq2-dhb2-6kaq
58
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.21
1
url pkg:composer/typo3/cms-core@9.5.2
purl pkg:composer/typo3/cms-core@9.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21e8-x7mp-hugk
1
vulnerability VCID-2meq-x4kd-bbdn
2
vulnerability VCID-2mn6-mdmz-4yd9
3
vulnerability VCID-3n2r-awja-dug9
4
vulnerability VCID-3v4n-fzxa-bfaw
5
vulnerability VCID-461j-9hrc-gfbc
6
vulnerability VCID-4jpa-6fqh-hbfg
7
vulnerability VCID-4mkw-tv16-jyca
8
vulnerability VCID-4t9s-p25a-cfas
9
vulnerability VCID-543x-cnbz-1kb9
10
vulnerability VCID-551q-gpyd-ffe8
11
vulnerability VCID-58js-jzm4-4fc7
12
vulnerability VCID-5jgb-dsyx-hyb4
13
vulnerability VCID-5kzs-ex81-bbaj
14
vulnerability VCID-5paq-5frf-43ed
15
vulnerability VCID-5u4q-m66t-wqcj
16
vulnerability VCID-65ue-7jd9-23gf
17
vulnerability VCID-6a9t-8dmn-s3bv
18
vulnerability VCID-8d2m-1ffv-jqe1
19
vulnerability VCID-9g62-zd1x-3bdg
20
vulnerability VCID-9gpp-ez8w-rqav
21
vulnerability VCID-9x6r-56xm-n7h7
22
vulnerability VCID-9zqs-hjay-fkev
23
vulnerability VCID-a49c-fqrj-nbb3
24
vulnerability VCID-axaf-45kr-kbfe
25
vulnerability VCID-axvk-13qf-tka7
26
vulnerability VCID-b6er-h7dm-3bev
27
vulnerability VCID-bajy-qbwq-fufn
28
vulnerability VCID-cm14-t8uv-k3es
29
vulnerability VCID-d8d1-sat6-muhe
30
vulnerability VCID-d99v-v9cj-zfh2
31
vulnerability VCID-dj88-f3p8-cfbn
32
vulnerability VCID-dmzb-gkdn-6bcm
33
vulnerability VCID-dsu7-jjjq-f3e1
34
vulnerability VCID-e32h-8q61-hbgc
35
vulnerability VCID-eajg-ctpd-2bby
36
vulnerability VCID-ekfd-wp8z-d7e1
37
vulnerability VCID-f4bv-pzdy-dfcb
38
vulnerability VCID-f963-qur3-2qb7
39
vulnerability VCID-g4uc-qeb6-myed
40
vulnerability VCID-gcnj-6qb6-pbgz
41
vulnerability VCID-gv1b-xtv4-4yg3
42
vulnerability VCID-h6y3-7gsq-skh2
43
vulnerability VCID-he5m-6wj4-rbhc
44
vulnerability VCID-hhmn-yz5p-xkap
45
vulnerability VCID-k8af-cg9k-87a9
46
vulnerability VCID-kj9x-psfz-2ug1
47
vulnerability VCID-mh4f-vtfj-hbb1
48
vulnerability VCID-mnz3-rj21-67ad
49
vulnerability VCID-mud2-s4rc-fuf6
50
vulnerability VCID-n15v-ta9h-6ffb
51
vulnerability VCID-n7ng-zkkb-2qaz
52
vulnerability VCID-nubu-f1sc-gbes
53
vulnerability VCID-nxq4-m52q-yuh4
54
vulnerability VCID-p715-yexd-jfgc
55
vulnerability VCID-phgh-sd4m-zbdx
56
vulnerability VCID-pmzz-9rws-4ud5
57
vulnerability VCID-pss5-as4b-cyf2
58
vulnerability VCID-px44-19tj-h7aa
59
vulnerability VCID-q8hy-wjd9-nbgp
60
vulnerability VCID-raxk-rm9v-hubn
61
vulnerability VCID-remd-55jh-r3g5
62
vulnerability VCID-s53a-f91p-huf4
63
vulnerability VCID-s55j-8hbt-akhn
64
vulnerability VCID-s64f-x81f-b7ce
65
vulnerability VCID-stzu-sxe6-5yf5
66
vulnerability VCID-sw7v-fbjk-13hy
67
vulnerability VCID-swnc-ke6h-ekew
68
vulnerability VCID-t1n7-eswt-73gw
69
vulnerability VCID-t3jn-vwbx-u7cr
70
vulnerability VCID-taj6-zj2n-5kg8
71
vulnerability VCID-tnjd-pyys-akav
72
vulnerability VCID-u9bx-8e86-wbew
73
vulnerability VCID-ve7g-8st5-wffb
74
vulnerability VCID-vxry-uvph-kbfd
75
vulnerability VCID-vyvy-y3cw-hbgr
76
vulnerability VCID-w13x-3rp9-wyej
77
vulnerability VCID-wea9-egep-h7g5
78
vulnerability VCID-xa4m-xpa9-v7h8
79
vulnerability VCID-xh7y-56vy-5ud8
80
vulnerability VCID-xtdg-uj46-rkcm
81
vulnerability VCID-xy6y-312d-rygj
82
vulnerability VCID-y32z-2d3f-gkgw
83
vulnerability VCID-yzx1-4psv-7bhr
84
vulnerability VCID-zdq2-dhb2-6kaq
85
vulnerability VCID-zkea-ge1t-z7gn
86
vulnerability VCID-zn99-ywte-33g6
87
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.2
aliases 2018-12-11-3
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-rdrs-mhaw-b3ge
56
url VCID-rwqs-3ktq-qqbd
vulnerability_id VCID-rwqs-3ktq-qqbd
summary 
TYPO3 Cross-Site Scripting in Frontend User Login
Failing to properly encode user input, login status display is vulnerable to cross-site scripting in the website frontend. A valid user account is needed in order to exploit this vulnerability - either a backend user or a frontend user having the possibility to modify their user profile.

Template patterns that are affected are

- ###FEUSER_[fieldName]### using system extension felogin
- <!--###USERNAME###--> for regular frontend rendering (pattern can be defined individually using TypoScript setting config.USERNAME_substToken)
references
0
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2018-12-11-3.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2018-12-11-3.yaml
1
reference_url https://github.com/TYPO3-CMS/core
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core
2
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-008
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2018-008
3
reference_url https://github.com/advisories/GHSA-8c25-vj2w-p72j
reference_id GHSA-8c25-vj2w-p72j
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-8c25-vj2w-p72j
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.21
purl pkg:composer/typo3/cms-core@8.7.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21e8-x7mp-hugk
1
vulnerability VCID-2meq-x4kd-bbdn
2
vulnerability VCID-3n2r-awja-dug9
3
vulnerability VCID-3v4n-fzxa-bfaw
4
vulnerability VCID-4jpa-6fqh-hbfg
5
vulnerability VCID-551q-gpyd-ffe8
6
vulnerability VCID-5jgb-dsyx-hyb4
7
vulnerability VCID-5mxm-88r9-hfey
8
vulnerability VCID-5paq-5frf-43ed
9
vulnerability VCID-5u4q-m66t-wqcj
10
vulnerability VCID-9g62-zd1x-3bdg
11
vulnerability VCID-9gpp-ez8w-rqav
12
vulnerability VCID-9x6r-56xm-n7h7
13
vulnerability VCID-9zqs-hjay-fkev
14
vulnerability VCID-axaf-45kr-kbfe
15
vulnerability VCID-axvk-13qf-tka7
16
vulnerability VCID-b6er-h7dm-3bev
17
vulnerability VCID-bajy-qbwq-fufn
18
vulnerability VCID-cm14-t8uv-k3es
19
vulnerability VCID-d99v-v9cj-zfh2
20
vulnerability VCID-dj88-f3p8-cfbn
21
vulnerability VCID-dsu7-jjjq-f3e1
22
vulnerability VCID-eajg-ctpd-2bby
23
vulnerability VCID-ekfd-wp8z-d7e1
24
vulnerability VCID-f4bv-pzdy-dfcb
25
vulnerability VCID-f963-qur3-2qb7
26
vulnerability VCID-g4uc-qeb6-myed
27
vulnerability VCID-gcnj-6qb6-pbgz
28
vulnerability VCID-gv1b-xtv4-4yg3
29
vulnerability VCID-h6y3-7gsq-skh2
30
vulnerability VCID-he5m-6wj4-rbhc
31
vulnerability VCID-hhmn-yz5p-xkap
32
vulnerability VCID-j77k-hjgx-5kc5
33
vulnerability VCID-k8af-cg9k-87a9
34
vulnerability VCID-mh4f-vtfj-hbb1
35
vulnerability VCID-mnz3-rj21-67ad
36
vulnerability VCID-n15v-ta9h-6ffb
37
vulnerability VCID-n7ng-zkkb-2qaz
38
vulnerability VCID-pmzz-9rws-4ud5
39
vulnerability VCID-pss5-as4b-cyf2
40
vulnerability VCID-px44-19tj-h7aa
41
vulnerability VCID-q8hy-wjd9-nbgp
42
vulnerability VCID-s53a-f91p-huf4
43
vulnerability VCID-s55j-8hbt-akhn
44
vulnerability VCID-s64f-x81f-b7ce
45
vulnerability VCID-stzu-sxe6-5yf5
46
vulnerability VCID-swnc-ke6h-ekew
47
vulnerability VCID-t1n7-eswt-73gw
48
vulnerability VCID-t3jn-vwbx-u7cr
49
vulnerability VCID-taj6-zj2n-5kg8
50
vulnerability VCID-tnjd-pyys-akav
51
vulnerability VCID-vxry-uvph-kbfd
52
vulnerability VCID-vyvy-y3cw-hbgr
53
vulnerability VCID-wea9-egep-h7g5
54
vulnerability VCID-xa4m-xpa9-v7h8
55
vulnerability VCID-xh7y-56vy-5ud8
56
vulnerability VCID-y32z-2d3f-gkgw
57
vulnerability VCID-zdq2-dhb2-6kaq
58
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.21
1
url pkg:composer/typo3/cms-core@9.5.2
purl pkg:composer/typo3/cms-core@9.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21e8-x7mp-hugk
1
vulnerability VCID-2meq-x4kd-bbdn
2
vulnerability VCID-2mn6-mdmz-4yd9
3
vulnerability VCID-3n2r-awja-dug9
4
vulnerability VCID-3v4n-fzxa-bfaw
5
vulnerability VCID-461j-9hrc-gfbc
6
vulnerability VCID-4jpa-6fqh-hbfg
7
vulnerability VCID-4mkw-tv16-jyca
8
vulnerability VCID-4t9s-p25a-cfas
9
vulnerability VCID-543x-cnbz-1kb9
10
vulnerability VCID-551q-gpyd-ffe8
11
vulnerability VCID-58js-jzm4-4fc7
12
vulnerability VCID-5jgb-dsyx-hyb4
13
vulnerability VCID-5kzs-ex81-bbaj
14
vulnerability VCID-5paq-5frf-43ed
15
vulnerability VCID-5u4q-m66t-wqcj
16
vulnerability VCID-65ue-7jd9-23gf
17
vulnerability VCID-6a9t-8dmn-s3bv
18
vulnerability VCID-8d2m-1ffv-jqe1
19
vulnerability VCID-9g62-zd1x-3bdg
20
vulnerability VCID-9gpp-ez8w-rqav
21
vulnerability VCID-9x6r-56xm-n7h7
22
vulnerability VCID-9zqs-hjay-fkev
23
vulnerability VCID-a49c-fqrj-nbb3
24
vulnerability VCID-axaf-45kr-kbfe
25
vulnerability VCID-axvk-13qf-tka7
26
vulnerability VCID-b6er-h7dm-3bev
27
vulnerability VCID-bajy-qbwq-fufn
28
vulnerability VCID-cm14-t8uv-k3es
29
vulnerability VCID-d8d1-sat6-muhe
30
vulnerability VCID-d99v-v9cj-zfh2
31
vulnerability VCID-dj88-f3p8-cfbn
32
vulnerability VCID-dmzb-gkdn-6bcm
33
vulnerability VCID-dsu7-jjjq-f3e1
34
vulnerability VCID-e32h-8q61-hbgc
35
vulnerability VCID-eajg-ctpd-2bby
36
vulnerability VCID-ekfd-wp8z-d7e1
37
vulnerability VCID-f4bv-pzdy-dfcb
38
vulnerability VCID-f963-qur3-2qb7
39
vulnerability VCID-g4uc-qeb6-myed
40
vulnerability VCID-gcnj-6qb6-pbgz
41
vulnerability VCID-gv1b-xtv4-4yg3
42
vulnerability VCID-h6y3-7gsq-skh2
43
vulnerability VCID-he5m-6wj4-rbhc
44
vulnerability VCID-hhmn-yz5p-xkap
45
vulnerability VCID-k8af-cg9k-87a9
46
vulnerability VCID-kj9x-psfz-2ug1
47
vulnerability VCID-mh4f-vtfj-hbb1
48
vulnerability VCID-mnz3-rj21-67ad
49
vulnerability VCID-mud2-s4rc-fuf6
50
vulnerability VCID-n15v-ta9h-6ffb
51
vulnerability VCID-n7ng-zkkb-2qaz
52
vulnerability VCID-nubu-f1sc-gbes
53
vulnerability VCID-nxq4-m52q-yuh4
54
vulnerability VCID-p715-yexd-jfgc
55
vulnerability VCID-phgh-sd4m-zbdx
56
vulnerability VCID-pmzz-9rws-4ud5
57
vulnerability VCID-pss5-as4b-cyf2
58
vulnerability VCID-px44-19tj-h7aa
59
vulnerability VCID-q8hy-wjd9-nbgp
60
vulnerability VCID-raxk-rm9v-hubn
61
vulnerability VCID-remd-55jh-r3g5
62
vulnerability VCID-s53a-f91p-huf4
63
vulnerability VCID-s55j-8hbt-akhn
64
vulnerability VCID-s64f-x81f-b7ce
65
vulnerability VCID-stzu-sxe6-5yf5
66
vulnerability VCID-sw7v-fbjk-13hy
67
vulnerability VCID-swnc-ke6h-ekew
68
vulnerability VCID-t1n7-eswt-73gw
69
vulnerability VCID-t3jn-vwbx-u7cr
70
vulnerability VCID-taj6-zj2n-5kg8
71
vulnerability VCID-tnjd-pyys-akav
72
vulnerability VCID-u9bx-8e86-wbew
73
vulnerability VCID-ve7g-8st5-wffb
74
vulnerability VCID-vxry-uvph-kbfd
75
vulnerability VCID-vyvy-y3cw-hbgr
76
vulnerability VCID-w13x-3rp9-wyej
77
vulnerability VCID-wea9-egep-h7g5
78
vulnerability VCID-xa4m-xpa9-v7h8
79
vulnerability VCID-xh7y-56vy-5ud8
80
vulnerability VCID-xtdg-uj46-rkcm
81
vulnerability VCID-xy6y-312d-rygj
82
vulnerability VCID-y32z-2d3f-gkgw
83
vulnerability VCID-yzx1-4psv-7bhr
84
vulnerability VCID-zdq2-dhb2-6kaq
85
vulnerability VCID-zkea-ge1t-z7gn
86
vulnerability VCID-zn99-ywte-33g6
87
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.2
aliases GHSA-8c25-vj2w-p72j
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-rwqs-3ktq-qqbd
57
url VCID-s53a-f91p-huf4
vulnerability_id VCID-s53a-f91p-huf4
summary 
TYPO3 Security Misconfiguration in Frontend Session Handling
It has been discovered session data of properly authenticated and logged in frontend users is kept and transformed into an anonymous user session during the logout process. This way the next user using the same client application gains access to previous session data.
references
0
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2019-06-25-3.yaml
reference_id
reference_type
scores
0
value 8.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2019-06-25-3.yaml
1
reference_url https://github.com/TYPO3-CMS/core
reference_id
reference_type
scores
0
value 8.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core
2
reference_url https://github.com/TYPO3-CMS/core/commit/c8c08ca0c26db02753c243e175a8a045628341b6
reference_id
reference_type
scores
0
value 8.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core/commit/c8c08ca0c26db02753c243e175a8a045628341b6
3
reference_url https://github.com/TYPO3-CMS/core/commit/fe43834075ae283c8cd91949e9f1dfd18b2d492f
reference_id
reference_type
scores
0
value 8.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core/commit/fe43834075ae283c8cd91949e9f1dfd18b2d492f
4
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-018
reference_id
reference_type
scores
0
value 8.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2019-018
5
reference_url https://github.com/advisories/GHSA-82vp-jr39-4j2j
reference_id GHSA-82vp-jr39-4j2j
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-82vp-jr39-4j2j
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.27
purl pkg:composer/typo3/cms-core@8.7.27
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3n2r-awja-dug9
1
vulnerability VCID-4jpa-6fqh-hbfg
2
vulnerability VCID-5jgb-dsyx-hyb4
3
vulnerability VCID-5paq-5frf-43ed
4
vulnerability VCID-5u4q-m66t-wqcj
5
vulnerability VCID-axvk-13qf-tka7
6
vulnerability VCID-b6er-h7dm-3bev
7
vulnerability VCID-bajy-qbwq-fufn
8
vulnerability VCID-dsu7-jjjq-f3e1
9
vulnerability VCID-ekfd-wp8z-d7e1
10
vulnerability VCID-f963-qur3-2qb7
11
vulnerability VCID-g4uc-qeb6-myed
12
vulnerability VCID-gcnj-6qb6-pbgz
13
vulnerability VCID-gv1b-xtv4-4yg3
14
vulnerability VCID-h6y3-7gsq-skh2
15
vulnerability VCID-he5m-6wj4-rbhc
16
vulnerability VCID-hhmn-yz5p-xkap
17
vulnerability VCID-mnz3-rj21-67ad
18
vulnerability VCID-n15v-ta9h-6ffb
19
vulnerability VCID-n7ng-zkkb-2qaz
20
vulnerability VCID-s55j-8hbt-akhn
21
vulnerability VCID-s64f-x81f-b7ce
22
vulnerability VCID-swnc-ke6h-ekew
23
vulnerability VCID-t1n7-eswt-73gw
24
vulnerability VCID-t3jn-vwbx-u7cr
25
vulnerability VCID-taj6-zj2n-5kg8
26
vulnerability VCID-tnjd-pyys-akav
27
vulnerability VCID-vyvy-y3cw-hbgr
28
vulnerability VCID-xa4m-xpa9-v7h8
29
vulnerability VCID-xh7y-56vy-5ud8
30
vulnerability VCID-y32z-2d3f-gkgw
31
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.27
1
url pkg:composer/typo3/cms-core@9.5.8
purl pkg:composer/typo3/cms-core@9.5.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mn6-mdmz-4yd9
1
vulnerability VCID-3n2r-awja-dug9
2
vulnerability VCID-4jpa-6fqh-hbfg
3
vulnerability VCID-4t9s-p25a-cfas
4
vulnerability VCID-543x-cnbz-1kb9
5
vulnerability VCID-58js-jzm4-4fc7
6
vulnerability VCID-5jgb-dsyx-hyb4
7
vulnerability VCID-5kzs-ex81-bbaj
8
vulnerability VCID-5paq-5frf-43ed
9
vulnerability VCID-5u4q-m66t-wqcj
10
vulnerability VCID-65ue-7jd9-23gf
11
vulnerability VCID-6a9t-8dmn-s3bv
12
vulnerability VCID-8d2m-1ffv-jqe1
13
vulnerability VCID-a49c-fqrj-nbb3
14
vulnerability VCID-axvk-13qf-tka7
15
vulnerability VCID-b6er-h7dm-3bev
16
vulnerability VCID-bajy-qbwq-fufn
17
vulnerability VCID-d8d1-sat6-muhe
18
vulnerability VCID-dsu7-jjjq-f3e1
19
vulnerability VCID-e32h-8q61-hbgc
20
vulnerability VCID-ekfd-wp8z-d7e1
21
vulnerability VCID-f963-qur3-2qb7
22
vulnerability VCID-g4uc-qeb6-myed
23
vulnerability VCID-gcnj-6qb6-pbgz
24
vulnerability VCID-gv1b-xtv4-4yg3
25
vulnerability VCID-h6y3-7gsq-skh2
26
vulnerability VCID-he5m-6wj4-rbhc
27
vulnerability VCID-hhmn-yz5p-xkap
28
vulnerability VCID-mnz3-rj21-67ad
29
vulnerability VCID-mud2-s4rc-fuf6
30
vulnerability VCID-n15v-ta9h-6ffb
31
vulnerability VCID-n7ng-zkkb-2qaz
32
vulnerability VCID-nubu-f1sc-gbes
33
vulnerability VCID-phgh-sd4m-zbdx
34
vulnerability VCID-remd-55jh-r3g5
35
vulnerability VCID-s55j-8hbt-akhn
36
vulnerability VCID-s64f-x81f-b7ce
37
vulnerability VCID-sw7v-fbjk-13hy
38
vulnerability VCID-swnc-ke6h-ekew
39
vulnerability VCID-t1n7-eswt-73gw
40
vulnerability VCID-t3jn-vwbx-u7cr
41
vulnerability VCID-taj6-zj2n-5kg8
42
vulnerability VCID-tnjd-pyys-akav
43
vulnerability VCID-ve7g-8st5-wffb
44
vulnerability VCID-vyvy-y3cw-hbgr
45
vulnerability VCID-w13x-3rp9-wyej
46
vulnerability VCID-xa4m-xpa9-v7h8
47
vulnerability VCID-xh7y-56vy-5ud8
48
vulnerability VCID-xy6y-312d-rygj
49
vulnerability VCID-y32z-2d3f-gkgw
50
vulnerability VCID-zdq2-dhb2-6kaq
51
vulnerability VCID-zn99-ywte-33g6
52
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.8
aliases GHSA-82vp-jr39-4j2j
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-s53a-f91p-huf4
58
url VCID-s55j-8hbt-akhn
vulnerability_id VCID-s55j-8hbt-akhn
summary 
Information Disclosure via Export Module
> ### Meta
> * CVSS: `CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:F/RL:O/RC:C` (4.0)

### Problem
The export functionality fails to limit the result set to allowed columns of a particular database table. This allows authenticated users to export internal details of database tables to which they already have access.

### Solution
Update to TYPO3 versions 7.6.57 ELTS, 8.7.47 ELTS, 9.5.35 ELTS, 10.4.29, 11.5.11 that fix the problem described above.

In order to address this issue, access to mentioned export functionality is completely denied for regular backend users.

ℹ️  **Strong security defaults - Manual actions required**
Following User TSconfig setting would allow using the export functionality for particular users:
```
options.impexp.enableExportForNonAdminUser = 1
```

### Credits
Thanks to TYPO3 core merger Lina Wolf who reported this issue and to TYPO3 security member Torben Hansen  who fixed the issue.

### References
* [TYPO3-CORE-SA-2022-001](https://typo3.org/security/advisory/typo3-core-sa-2022-001)
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-31046
reference_id
reference_type
scores
0
value 0.00148
scoring_system epss
scoring_elements 0.35391
published_at 2026-04-08T12:55:00Z
1
value 0.00148
scoring_system epss
scoring_elements 0.35437
published_at 2026-04-02T12:55:00Z
2
value 0.00148
scoring_system epss
scoring_elements 0.35387
published_at 2026-04-18T12:55:00Z
3
value 0.00148
scoring_system epss
scoring_elements 0.35398
published_at 2026-04-16T12:55:00Z
4
value 0.00148
scoring_system epss
scoring_elements 0.35359
published_at 2026-04-13T12:55:00Z
5
value 0.00148
scoring_system epss
scoring_elements 0.35381
published_at 2026-04-12T12:55:00Z
6
value 0.00148
scoring_system epss
scoring_elements 0.35417
published_at 2026-04-11T12:55:00Z
7
value 0.00148
scoring_system epss
scoring_elements 0.35416
published_at 2026-04-09T12:55:00Z
8
value 0.00148
scoring_system epss
scoring_elements 0.35461
published_at 2026-04-04T12:55:00Z
9
value 0.00148
scoring_system epss
scoring_elements 0.35345
published_at 2026-04-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-31046
1
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2022-31046.yaml
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2022-31046.yaml
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2022-31046.yaml
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2022-31046.yaml
3
reference_url https://github.com/TYPO3-CMS/core
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core
4
reference_url https://github.com/TYPO3/typo3/commit/7447a3d1283017d2ee08737a7972c720001a93e9
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T14:05:21Z/
url https://github.com/TYPO3/typo3/commit/7447a3d1283017d2ee08737a7972c720001a93e9
5
reference_url https://github.com/TYPO3/typo3/security/advisories/GHSA-8gmv-9hwg-w89g
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T14:05:21Z/
url https://github.com/TYPO3/typo3/security/advisories/GHSA-8gmv-9hwg-w89g
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-31046
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-31046
7
reference_url https://typo3.org/security/advisory/typo3-core-sa-2022-001
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-23T14:05:21Z/
url https://typo3.org/security/advisory/typo3-core-sa-2022-001
8
reference_url https://github.com/advisories/GHSA-8gmv-9hwg-w89g
reference_id GHSA-8gmv-9hwg-w89g
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-8gmv-9hwg-w89g
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.47
purl pkg:composer/typo3/cms-core@8.7.47
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5paq-5frf-43ed
1
vulnerability VCID-b6er-h7dm-3bev
2
vulnerability VCID-mnz3-rj21-67ad
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.47
1
url pkg:composer/typo3/cms-core@9.5.35
purl pkg:composer/typo3/cms-core@9.5.35
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.35
2
url pkg:composer/typo3/cms-core@10.4.29
purl pkg:composer/typo3/cms-core@10.4.29
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-1yxw-saf5-wue7
2
vulnerability VCID-4t9s-p25a-cfas
3
vulnerability VCID-5paq-5frf-43ed
4
vulnerability VCID-65ue-7jd9-23gf
5
vulnerability VCID-8d2m-1ffv-jqe1
6
vulnerability VCID-8sdd-b1bn-cuhx
7
vulnerability VCID-av8u-rvzq-4fc7
8
vulnerability VCID-axvk-13qf-tka7
9
vulnerability VCID-b6er-h7dm-3bev
10
vulnerability VCID-g4uc-qeb6-myed
11
vulnerability VCID-gv1b-xtv4-4yg3
12
vulnerability VCID-gyyu-n3b1-zbcj
13
vulnerability VCID-h6y3-7gsq-skh2
14
vulnerability VCID-mnz3-rj21-67ad
15
vulnerability VCID-mud2-s4rc-fuf6
16
vulnerability VCID-n7ng-zkkb-2qaz
17
vulnerability VCID-nubu-f1sc-gbes
18
vulnerability VCID-t1n7-eswt-73gw
19
vulnerability VCID-taj6-zj2n-5kg8
20
vulnerability VCID-ve7g-8st5-wffb
21
vulnerability VCID-vwb2-a84s-5qak
22
vulnerability VCID-vyvy-y3cw-hbgr
23
vulnerability VCID-w13x-3rp9-wyej
24
vulnerability VCID-xy6y-312d-rygj
25
vulnerability VCID-zdq2-dhb2-6kaq
26
vulnerability VCID-zn99-ywte-33g6
27
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@10.4.29
3
url pkg:composer/typo3/cms-core@11.5.11
purl pkg:composer/typo3/cms-core@11.5.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-1yxw-saf5-wue7
2
vulnerability VCID-4t9s-p25a-cfas
3
vulnerability VCID-5paq-5frf-43ed
4
vulnerability VCID-65ue-7jd9-23gf
5
vulnerability VCID-8d2m-1ffv-jqe1
6
vulnerability VCID-8sdd-b1bn-cuhx
7
vulnerability VCID-av8u-rvzq-4fc7
8
vulnerability VCID-axvk-13qf-tka7
9
vulnerability VCID-b6er-h7dm-3bev
10
vulnerability VCID-g4uc-qeb6-myed
11
vulnerability VCID-gv1b-xtv4-4yg3
12
vulnerability VCID-gyyu-n3b1-zbcj
13
vulnerability VCID-h6y3-7gsq-skh2
14
vulnerability VCID-mnz3-rj21-67ad
15
vulnerability VCID-mud2-s4rc-fuf6
16
vulnerability VCID-n7ng-zkkb-2qaz
17
vulnerability VCID-nubu-f1sc-gbes
18
vulnerability VCID-t1n7-eswt-73gw
19
vulnerability VCID-taj6-zj2n-5kg8
20
vulnerability VCID-tnxn-p13f-yuah
21
vulnerability VCID-ve7g-8st5-wffb
22
vulnerability VCID-vwb2-a84s-5qak
23
vulnerability VCID-vyvy-y3cw-hbgr
24
vulnerability VCID-w13x-3rp9-wyej
25
vulnerability VCID-xy6y-312d-rygj
26
vulnerability VCID-zdq2-dhb2-6kaq
27
vulnerability VCID-zn99-ywte-33g6
28
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@11.5.11
aliases CVE-2022-31046, GHSA-8gmv-9hwg-w89g
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-s55j-8hbt-akhn
59
url VCID-s64f-x81f-b7ce
vulnerability_id VCID-s64f-x81f-b7ce
summary 
Cross-site Scripting
TYPO3 contains a cross-site scripting vulnerability. When error messages are not properly encoded, the components `_QueryGenerator_` and `_QueryView_` are vulnerable to both reflected and persistent cross-site scripting. A valid backend user account having administrator privileges is needed to exploit this vulnerability. TYPO3 contain a patch for this issue.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-32668
reference_id
reference_type
scores
0
value 0.00364
scoring_system epss
scoring_elements 0.5848
published_at 2026-04-18T12:55:00Z
1
value 0.00364
scoring_system epss
scoring_elements 0.58328
published_at 2026-04-01T12:55:00Z
2
value 0.00364
scoring_system epss
scoring_elements 0.58412
published_at 2026-04-02T12:55:00Z
3
value 0.00364
scoring_system epss
scoring_elements 0.58432
published_at 2026-04-04T12:55:00Z
4
value 0.00364
scoring_system epss
scoring_elements 0.58406
published_at 2026-04-07T12:55:00Z
5
value 0.00364
scoring_system epss
scoring_elements 0.58459
published_at 2026-04-08T12:55:00Z
6
value 0.00364
scoring_system epss
scoring_elements 0.58465
published_at 2026-04-09T12:55:00Z
7
value 0.00364
scoring_system epss
scoring_elements 0.58482
published_at 2026-04-11T12:55:00Z
8
value 0.00364
scoring_system epss
scoring_elements 0.58463
published_at 2026-04-12T12:55:00Z
9
value 0.00364
scoring_system epss
scoring_elements 0.58444
published_at 2026-04-13T12:55:00Z
10
value 0.00364
scoring_system epss
scoring_elements 0.58475
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-32668
1
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-32668.yaml
reference_id
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-32668.yaml
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-32668.yaml
reference_id
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-32668.yaml
3
reference_url https://github.com/TYPO3/typo3
reference_id
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3
4
reference_url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-6mh3-j5r5-2379
reference_id
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-6mh3-j5r5-2379
5
reference_url https://github.com/TYPO3/typo3/security/advisories/GHSA-6mh3-j5r5-2379
reference_id
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/security/advisories/GHSA-6mh3-j5r5-2379
6
reference_url https://typo3.org/security/advisory/typo3-core-sa-2021-010
reference_id
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2021-010
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-32668
reference_id CVE-2021-32668
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-32668
8
reference_url https://github.com/advisories/GHSA-6mh3-j5r5-2379
reference_id GHSA-6mh3-j5r5-2379
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-6mh3-j5r5-2379
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.41
purl pkg:composer/typo3/cms-core@8.7.41
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-y32z-2d3f-gkgw
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.41
1
url pkg:composer/typo3/cms-core@9.5.28
purl pkg:composer/typo3/cms-core@9.5.28
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4jpa-6fqh-hbfg
1
vulnerability VCID-4t9s-p25a-cfas
2
vulnerability VCID-5paq-5frf-43ed
3
vulnerability VCID-65ue-7jd9-23gf
4
vulnerability VCID-8d2m-1ffv-jqe1
5
vulnerability VCID-axvk-13qf-tka7
6
vulnerability VCID-b6er-h7dm-3bev
7
vulnerability VCID-bajy-qbwq-fufn
8
vulnerability VCID-e32h-8q61-hbgc
9
vulnerability VCID-ekfd-wp8z-d7e1
10
vulnerability VCID-g4uc-qeb6-myed
11
vulnerability VCID-gv1b-xtv4-4yg3
12
vulnerability VCID-h6y3-7gsq-skh2
13
vulnerability VCID-mnz3-rj21-67ad
14
vulnerability VCID-mud2-s4rc-fuf6
15
vulnerability VCID-n7ng-zkkb-2qaz
16
vulnerability VCID-nubu-f1sc-gbes
17
vulnerability VCID-remd-55jh-r3g5
18
vulnerability VCID-s55j-8hbt-akhn
19
vulnerability VCID-s64f-x81f-b7ce
20
vulnerability VCID-t1n7-eswt-73gw
21
vulnerability VCID-taj6-zj2n-5kg8
22
vulnerability VCID-ve7g-8st5-wffb
23
vulnerability VCID-vyvy-y3cw-hbgr
24
vulnerability VCID-w13x-3rp9-wyej
25
vulnerability VCID-xy6y-312d-rygj
26
vulnerability VCID-y32z-2d3f-gkgw
27
vulnerability VCID-zdq2-dhb2-6kaq
28
vulnerability VCID-zn99-ywte-33g6
29
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.28
2
url pkg:composer/typo3/cms-core@10.4.18
purl pkg:composer/typo3/cms-core@10.4.18
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-1yxw-saf5-wue7
2
vulnerability VCID-4jpa-6fqh-hbfg
3
vulnerability VCID-4t9s-p25a-cfas
4
vulnerability VCID-5paq-5frf-43ed
5
vulnerability VCID-65ue-7jd9-23gf
6
vulnerability VCID-8d2m-1ffv-jqe1
7
vulnerability VCID-8sdd-b1bn-cuhx
8
vulnerability VCID-av8u-rvzq-4fc7
9
vulnerability VCID-axvk-13qf-tka7
10
vulnerability VCID-b6er-h7dm-3bev
11
vulnerability VCID-bajy-qbwq-fufn
12
vulnerability VCID-e32h-8q61-hbgc
13
vulnerability VCID-g4uc-qeb6-myed
14
vulnerability VCID-gv1b-xtv4-4yg3
15
vulnerability VCID-gyyu-n3b1-zbcj
16
vulnerability VCID-h6y3-7gsq-skh2
17
vulnerability VCID-mnz3-rj21-67ad
18
vulnerability VCID-mud2-s4rc-fuf6
19
vulnerability VCID-n7ng-zkkb-2qaz
20
vulnerability VCID-nubu-f1sc-gbes
21
vulnerability VCID-remd-55jh-r3g5
22
vulnerability VCID-s55j-8hbt-akhn
23
vulnerability VCID-t1n7-eswt-73gw
24
vulnerability VCID-taj6-zj2n-5kg8
25
vulnerability VCID-ve7g-8st5-wffb
26
vulnerability VCID-vwb2-a84s-5qak
27
vulnerability VCID-vyvy-y3cw-hbgr
28
vulnerability VCID-w13x-3rp9-wyej
29
vulnerability VCID-xy6y-312d-rygj
30
vulnerability VCID-y32z-2d3f-gkgw
31
vulnerability VCID-zdq2-dhb2-6kaq
32
vulnerability VCID-zn99-ywte-33g6
33
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@10.4.18
3
url pkg:composer/typo3/cms-core@11.3.1
purl pkg:composer/typo3/cms-core@11.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-1yxw-saf5-wue7
2
vulnerability VCID-4jpa-6fqh-hbfg
3
vulnerability VCID-4t9s-p25a-cfas
4
vulnerability VCID-5paq-5frf-43ed
5
vulnerability VCID-65ue-7jd9-23gf
6
vulnerability VCID-8d2m-1ffv-jqe1
7
vulnerability VCID-8sdd-b1bn-cuhx
8
vulnerability VCID-av8u-rvzq-4fc7
9
vulnerability VCID-axvk-13qf-tka7
10
vulnerability VCID-b6er-h7dm-3bev
11
vulnerability VCID-bajy-qbwq-fufn
12
vulnerability VCID-e32h-8q61-hbgc
13
vulnerability VCID-g4uc-qeb6-myed
14
vulnerability VCID-gv1b-xtv4-4yg3
15
vulnerability VCID-gyyu-n3b1-zbcj
16
vulnerability VCID-h6y3-7gsq-skh2
17
vulnerability VCID-jjbn-6efk-nud2
18
vulnerability VCID-mnz3-rj21-67ad
19
vulnerability VCID-mud2-s4rc-fuf6
20
vulnerability VCID-n7ng-zkkb-2qaz
21
vulnerability VCID-nubu-f1sc-gbes
22
vulnerability VCID-remd-55jh-r3g5
23
vulnerability VCID-s55j-8hbt-akhn
24
vulnerability VCID-t1n7-eswt-73gw
25
vulnerability VCID-taj6-zj2n-5kg8
26
vulnerability VCID-uyeu-a3xr-fkh4
27
vulnerability VCID-ve7g-8st5-wffb
28
vulnerability VCID-vwb2-a84s-5qak
29
vulnerability VCID-vyvy-y3cw-hbgr
30
vulnerability VCID-w13x-3rp9-wyej
31
vulnerability VCID-xy6y-312d-rygj
32
vulnerability VCID-y32z-2d3f-gkgw
33
vulnerability VCID-zdq2-dhb2-6kaq
34
vulnerability VCID-zn99-ywte-33g6
35
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@11.3.1
aliases CVE-2021-32668, GHSA-6mh3-j5r5-2379
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-s64f-x81f-b7ce
60
url VCID-stzu-sxe6-5yf5
vulnerability_id VCID-stzu-sxe6-5yf5
summary Information Disclosure in Backend User Interface.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-014/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-014/
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.27
purl pkg:composer/typo3/cms-core@8.7.27
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3n2r-awja-dug9
1
vulnerability VCID-4jpa-6fqh-hbfg
2
vulnerability VCID-5jgb-dsyx-hyb4
3
vulnerability VCID-5paq-5frf-43ed
4
vulnerability VCID-5u4q-m66t-wqcj
5
vulnerability VCID-axvk-13qf-tka7
6
vulnerability VCID-b6er-h7dm-3bev
7
vulnerability VCID-bajy-qbwq-fufn
8
vulnerability VCID-dsu7-jjjq-f3e1
9
vulnerability VCID-ekfd-wp8z-d7e1
10
vulnerability VCID-f963-qur3-2qb7
11
vulnerability VCID-g4uc-qeb6-myed
12
vulnerability VCID-gcnj-6qb6-pbgz
13
vulnerability VCID-gv1b-xtv4-4yg3
14
vulnerability VCID-h6y3-7gsq-skh2
15
vulnerability VCID-he5m-6wj4-rbhc
16
vulnerability VCID-hhmn-yz5p-xkap
17
vulnerability VCID-mnz3-rj21-67ad
18
vulnerability VCID-n15v-ta9h-6ffb
19
vulnerability VCID-n7ng-zkkb-2qaz
20
vulnerability VCID-s55j-8hbt-akhn
21
vulnerability VCID-s64f-x81f-b7ce
22
vulnerability VCID-swnc-ke6h-ekew
23
vulnerability VCID-t1n7-eswt-73gw
24
vulnerability VCID-t3jn-vwbx-u7cr
25
vulnerability VCID-taj6-zj2n-5kg8
26
vulnerability VCID-tnjd-pyys-akav
27
vulnerability VCID-vyvy-y3cw-hbgr
28
vulnerability VCID-xa4m-xpa9-v7h8
29
vulnerability VCID-xh7y-56vy-5ud8
30
vulnerability VCID-y32z-2d3f-gkgw
31
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.27
1
url pkg:composer/typo3/cms-core@9.5.8
purl pkg:composer/typo3/cms-core@9.5.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mn6-mdmz-4yd9
1
vulnerability VCID-3n2r-awja-dug9
2
vulnerability VCID-4jpa-6fqh-hbfg
3
vulnerability VCID-4t9s-p25a-cfas
4
vulnerability VCID-543x-cnbz-1kb9
5
vulnerability VCID-58js-jzm4-4fc7
6
vulnerability VCID-5jgb-dsyx-hyb4
7
vulnerability VCID-5kzs-ex81-bbaj
8
vulnerability VCID-5paq-5frf-43ed
9
vulnerability VCID-5u4q-m66t-wqcj
10
vulnerability VCID-65ue-7jd9-23gf
11
vulnerability VCID-6a9t-8dmn-s3bv
12
vulnerability VCID-8d2m-1ffv-jqe1
13
vulnerability VCID-a49c-fqrj-nbb3
14
vulnerability VCID-axvk-13qf-tka7
15
vulnerability VCID-b6er-h7dm-3bev
16
vulnerability VCID-bajy-qbwq-fufn
17
vulnerability VCID-d8d1-sat6-muhe
18
vulnerability VCID-dsu7-jjjq-f3e1
19
vulnerability VCID-e32h-8q61-hbgc
20
vulnerability VCID-ekfd-wp8z-d7e1
21
vulnerability VCID-f963-qur3-2qb7
22
vulnerability VCID-g4uc-qeb6-myed
23
vulnerability VCID-gcnj-6qb6-pbgz
24
vulnerability VCID-gv1b-xtv4-4yg3
25
vulnerability VCID-h6y3-7gsq-skh2
26
vulnerability VCID-he5m-6wj4-rbhc
27
vulnerability VCID-hhmn-yz5p-xkap
28
vulnerability VCID-mnz3-rj21-67ad
29
vulnerability VCID-mud2-s4rc-fuf6
30
vulnerability VCID-n15v-ta9h-6ffb
31
vulnerability VCID-n7ng-zkkb-2qaz
32
vulnerability VCID-nubu-f1sc-gbes
33
vulnerability VCID-phgh-sd4m-zbdx
34
vulnerability VCID-remd-55jh-r3g5
35
vulnerability VCID-s55j-8hbt-akhn
36
vulnerability VCID-s64f-x81f-b7ce
37
vulnerability VCID-sw7v-fbjk-13hy
38
vulnerability VCID-swnc-ke6h-ekew
39
vulnerability VCID-t1n7-eswt-73gw
40
vulnerability VCID-t3jn-vwbx-u7cr
41
vulnerability VCID-taj6-zj2n-5kg8
42
vulnerability VCID-tnjd-pyys-akav
43
vulnerability VCID-ve7g-8st5-wffb
44
vulnerability VCID-vyvy-y3cw-hbgr
45
vulnerability VCID-w13x-3rp9-wyej
46
vulnerability VCID-xa4m-xpa9-v7h8
47
vulnerability VCID-xh7y-56vy-5ud8
48
vulnerability VCID-xy6y-312d-rygj
49
vulnerability VCID-y32z-2d3f-gkgw
50
vulnerability VCID-zdq2-dhb2-6kaq
51
vulnerability VCID-zn99-ywte-33g6
52
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.8
aliases 2019-06-25-1
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-stzu-sxe6-5yf5
61
url VCID-swnc-ke6h-ekew
vulnerability_id VCID-swnc-ke6h-ekew
summary 
TYPO3 Cross-Site Scripting in Filelist Module
It has been discovered that the output table listing in the “Files” backend module is vulnerable to cross-site scripting when a file extension contains malicious sequences.

Access to the file system of the server - either directly or through synchronization - is required to exploit the vulnerability.
references
0
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2019-12-17-3.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2019-12-17-3.yaml
1
reference_url https://github.com/TYPO3-CMS/core
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core
2
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-023
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2019-023
3
reference_url https://github.com/advisories/GHSA-6xwf-7rfm-4gwc
reference_id GHSA-6xwf-7rfm-4gwc
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-6xwf-7rfm-4gwc
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.30
purl pkg:composer/typo3/cms-core@8.7.30
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4jpa-6fqh-hbfg
1
vulnerability VCID-5jgb-dsyx-hyb4
2
vulnerability VCID-5paq-5frf-43ed
3
vulnerability VCID-axvk-13qf-tka7
4
vulnerability VCID-b6er-h7dm-3bev
5
vulnerability VCID-bajy-qbwq-fufn
6
vulnerability VCID-dsu7-jjjq-f3e1
7
vulnerability VCID-ekfd-wp8z-d7e1
8
vulnerability VCID-f963-qur3-2qb7
9
vulnerability VCID-g4uc-qeb6-myed
10
vulnerability VCID-gv1b-xtv4-4yg3
11
vulnerability VCID-h6y3-7gsq-skh2
12
vulnerability VCID-he5m-6wj4-rbhc
13
vulnerability VCID-mnz3-rj21-67ad
14
vulnerability VCID-n15v-ta9h-6ffb
15
vulnerability VCID-n7ng-zkkb-2qaz
16
vulnerability VCID-s55j-8hbt-akhn
17
vulnerability VCID-s64f-x81f-b7ce
18
vulnerability VCID-t1n7-eswt-73gw
19
vulnerability VCID-t3jn-vwbx-u7cr
20
vulnerability VCID-taj6-zj2n-5kg8
21
vulnerability VCID-vyvy-y3cw-hbgr
22
vulnerability VCID-xh7y-56vy-5ud8
23
vulnerability VCID-y32z-2d3f-gkgw
24
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.30
1
url pkg:composer/typo3/cms-core@9.5.12
purl pkg:composer/typo3/cms-core@9.5.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mn6-mdmz-4yd9
1
vulnerability VCID-4jpa-6fqh-hbfg
2
vulnerability VCID-4t9s-p25a-cfas
3
vulnerability VCID-543x-cnbz-1kb9
4
vulnerability VCID-58js-jzm4-4fc7
5
vulnerability VCID-5jgb-dsyx-hyb4
6
vulnerability VCID-5kzs-ex81-bbaj
7
vulnerability VCID-5paq-5frf-43ed
8
vulnerability VCID-65ue-7jd9-23gf
9
vulnerability VCID-6a9t-8dmn-s3bv
10
vulnerability VCID-7kjw-j8st-mqfr
11
vulnerability VCID-8d2m-1ffv-jqe1
12
vulnerability VCID-a49c-fqrj-nbb3
13
vulnerability VCID-axvk-13qf-tka7
14
vulnerability VCID-b6er-h7dm-3bev
15
vulnerability VCID-bajy-qbwq-fufn
16
vulnerability VCID-d8d1-sat6-muhe
17
vulnerability VCID-dsu7-jjjq-f3e1
18
vulnerability VCID-e32h-8q61-hbgc
19
vulnerability VCID-ekfd-wp8z-d7e1
20
vulnerability VCID-f963-qur3-2qb7
21
vulnerability VCID-g4uc-qeb6-myed
22
vulnerability VCID-gv1b-xtv4-4yg3
23
vulnerability VCID-h6y3-7gsq-skh2
24
vulnerability VCID-he5m-6wj4-rbhc
25
vulnerability VCID-mnz3-rj21-67ad
26
vulnerability VCID-mud2-s4rc-fuf6
27
vulnerability VCID-n15v-ta9h-6ffb
28
vulnerability VCID-n7ng-zkkb-2qaz
29
vulnerability VCID-nubu-f1sc-gbes
30
vulnerability VCID-phgh-sd4m-zbdx
31
vulnerability VCID-remd-55jh-r3g5
32
vulnerability VCID-s55j-8hbt-akhn
33
vulnerability VCID-s64f-x81f-b7ce
34
vulnerability VCID-sw7v-fbjk-13hy
35
vulnerability VCID-t1n7-eswt-73gw
36
vulnerability VCID-t3jn-vwbx-u7cr
37
vulnerability VCID-taj6-zj2n-5kg8
38
vulnerability VCID-ve7g-8st5-wffb
39
vulnerability VCID-vyvy-y3cw-hbgr
40
vulnerability VCID-w13x-3rp9-wyej
41
vulnerability VCID-xh7y-56vy-5ud8
42
vulnerability VCID-xy6y-312d-rygj
43
vulnerability VCID-y32z-2d3f-gkgw
44
vulnerability VCID-zdq2-dhb2-6kaq
45
vulnerability VCID-zn99-ywte-33g6
46
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.12
2
url pkg:composer/typo3/cms-core@10.2.1
purl pkg:composer/typo3/cms-core@10.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1yxw-saf5-wue7
1
vulnerability VCID-2mn6-mdmz-4yd9
2
vulnerability VCID-3n2r-awja-dug9
3
vulnerability VCID-4jpa-6fqh-hbfg
4
vulnerability VCID-4t9s-p25a-cfas
5
vulnerability VCID-543x-cnbz-1kb9
6
vulnerability VCID-58js-jzm4-4fc7
7
vulnerability VCID-5jgb-dsyx-hyb4
8
vulnerability VCID-5kzs-ex81-bbaj
9
vulnerability VCID-5paq-5frf-43ed
10
vulnerability VCID-65ue-7jd9-23gf
11
vulnerability VCID-6a9t-8dmn-s3bv
12
vulnerability VCID-7kjw-j8st-mqfr
13
vulnerability VCID-8d2m-1ffv-jqe1
14
vulnerability VCID-8sdd-b1bn-cuhx
15
vulnerability VCID-a49c-fqrj-nbb3
16
vulnerability VCID-a89c-jvwa-6kh5
17
vulnerability VCID-av8u-rvzq-4fc7
18
vulnerability VCID-axvk-13qf-tka7
19
vulnerability VCID-b6er-h7dm-3bev
20
vulnerability VCID-bajy-qbwq-fufn
21
vulnerability VCID-cdjv-fp71-y3dv
22
vulnerability VCID-d8d1-sat6-muhe
23
vulnerability VCID-dhrm-uxuv-zfaj
24
vulnerability VCID-dsu7-jjjq-f3e1
25
vulnerability VCID-e32h-8q61-hbgc
26
vulnerability VCID-ekfd-wp8z-d7e1
27
vulnerability VCID-f963-qur3-2qb7
28
vulnerability VCID-g4uc-qeb6-myed
29
vulnerability VCID-gcnj-6qb6-pbgz
30
vulnerability VCID-gv1b-xtv4-4yg3
31
vulnerability VCID-gyyu-n3b1-zbcj
32
vulnerability VCID-h6y3-7gsq-skh2
33
vulnerability VCID-he5m-6wj4-rbhc
34
vulnerability VCID-mnz3-rj21-67ad
35
vulnerability VCID-mud2-s4rc-fuf6
36
vulnerability VCID-n15v-ta9h-6ffb
37
vulnerability VCID-n7ng-zkkb-2qaz
38
vulnerability VCID-nubu-f1sc-gbes
39
vulnerability VCID-phgh-sd4m-zbdx
40
vulnerability VCID-remd-55jh-r3g5
41
vulnerability VCID-s55j-8hbt-akhn
42
vulnerability VCID-s64f-x81f-b7ce
43
vulnerability VCID-sw7v-fbjk-13hy
44
vulnerability VCID-t1n7-eswt-73gw
45
vulnerability VCID-t3jn-vwbx-u7cr
46
vulnerability VCID-taj6-zj2n-5kg8
47
vulnerability VCID-usmv-r64u-m7cb
48
vulnerability VCID-ve7g-8st5-wffb
49
vulnerability VCID-vwb2-a84s-5qak
50
vulnerability VCID-vyvy-y3cw-hbgr
51
vulnerability VCID-w13x-3rp9-wyej
52
vulnerability VCID-xh7y-56vy-5ud8
53
vulnerability VCID-xy6y-312d-rygj
54
vulnerability VCID-y32z-2d3f-gkgw
55
vulnerability VCID-zdq2-dhb2-6kaq
56
vulnerability VCID-zn99-ywte-33g6
57
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@10.2.1
aliases GHSA-6xwf-7rfm-4gwc
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-swnc-ke6h-ekew
62
url VCID-t1n7-eswt-73gw
vulnerability_id VCID-t1n7-eswt-73gw
summary 
TYPO3 CMS vulnerable to Arbitrary Code Execution via Form Framework
### Problem
Due to the lack of separating user-submitted data from the internal configuration in the Form Designer backend module, it was possible to inject code instructions to be processed and executed via TypoScript as PHP code.

The existence of individual TypoScript instructions for a particular form item (known as [`formDefinitionOverrides`](https://docs.typo3.org/c/typo3/cms-form/main/en-us/I/Concepts/FrontendRendering/Index.html#form-element-properties)) and a valid backend user account with access to the form module are needed to exploit this vulnerability.

### Solution
Update to TYPO3 versions 8.7.49 ELTS, 9.5.38 ELTS, 10.4.33, 11.5.20, 12.1.1 that fix the problem described above.

### References
* [TYPO3-CORE-SA-2022-015](https://typo3.org/security/advisory/typo3-core-sa-2022-015)
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-23503
reference_id
reference_type
scores
0
value 0.00517
scoring_system epss
scoring_elements 0.66719
published_at 2026-04-08T12:55:00Z
1
value 0.00517
scoring_system epss
scoring_elements 0.66759
published_at 2026-04-18T12:55:00Z
2
value 0.00517
scoring_system epss
scoring_elements 0.66745
published_at 2026-04-16T12:55:00Z
3
value 0.00517
scoring_system epss
scoring_elements 0.66711
published_at 2026-04-13T12:55:00Z
4
value 0.00517
scoring_system epss
scoring_elements 0.6674
published_at 2026-04-12T12:55:00Z
5
value 0.00517
scoring_system epss
scoring_elements 0.66754
published_at 2026-04-11T12:55:00Z
6
value 0.00517
scoring_system epss
scoring_elements 0.66734
published_at 2026-04-09T12:55:00Z
7
value 0.00517
scoring_system epss
scoring_elements 0.66671
published_at 2026-04-02T12:55:00Z
8
value 0.00517
scoring_system epss
scoring_elements 0.66697
published_at 2026-04-04T12:55:00Z
9
value 0.00517
scoring_system epss
scoring_elements 0.6667
published_at 2026-04-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-23503
1
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2022-23503.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2022-23503.yaml
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2022-23503.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2022-23503.yaml
3
reference_url https://github.com/TYPO3/typo3
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3
4
reference_url https://github.com/TYPO3/typo3/commit/1302e88565821f2159e08b5d818d28de17ecc830
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/1302e88565821f2159e08b5d818d28de17ecc830
5
reference_url https://github.com/TYPO3/typo3/security/advisories/GHSA-c5wx-6c2c-f7rm
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-18T18:23:57Z/
url https://github.com/TYPO3/typo3/security/advisories/GHSA-c5wx-6c2c-f7rm
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-23503
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-23503
7
reference_url https://typo3.org/security/advisory/typo3-core-sa-2022-015
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2022-015
8
reference_url https://github.com/advisories/GHSA-c5wx-6c2c-f7rm
reference_id GHSA-c5wx-6c2c-f7rm
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-c5wx-6c2c-f7rm
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.49
purl pkg:composer/typo3/cms-core@8.7.49
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.49
1
url pkg:composer/typo3/cms-core@9.5.38
purl pkg:composer/typo3/cms-core@9.5.38
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.38
2
url pkg:composer/typo3/cms-core@10.4.33
purl pkg:composer/typo3/cms-core@10.4.33
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-4t9s-p25a-cfas
2
vulnerability VCID-65ue-7jd9-23gf
3
vulnerability VCID-8d2m-1ffv-jqe1
4
vulnerability VCID-axvk-13qf-tka7
5
vulnerability VCID-g4uc-qeb6-myed
6
vulnerability VCID-gv1b-xtv4-4yg3
7
vulnerability VCID-gyyu-n3b1-zbcj
8
vulnerability VCID-h6y3-7gsq-skh2
9
vulnerability VCID-mud2-s4rc-fuf6
10
vulnerability VCID-n7ng-zkkb-2qaz
11
vulnerability VCID-nubu-f1sc-gbes
12
vulnerability VCID-taj6-zj2n-5kg8
13
vulnerability VCID-vyvy-y3cw-hbgr
14
vulnerability VCID-xy6y-312d-rygj
15
vulnerability VCID-zn99-ywte-33g6
16
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@10.4.33
3
url pkg:composer/typo3/cms-core@11.5.20
purl pkg:composer/typo3/cms-core@11.5.20
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-4t9s-p25a-cfas
2
vulnerability VCID-65ue-7jd9-23gf
3
vulnerability VCID-8d2m-1ffv-jqe1
4
vulnerability VCID-axvk-13qf-tka7
5
vulnerability VCID-g4uc-qeb6-myed
6
vulnerability VCID-gv1b-xtv4-4yg3
7
vulnerability VCID-gyyu-n3b1-zbcj
8
vulnerability VCID-h6y3-7gsq-skh2
9
vulnerability VCID-mud2-s4rc-fuf6
10
vulnerability VCID-n7ng-zkkb-2qaz
11
vulnerability VCID-nubu-f1sc-gbes
12
vulnerability VCID-taj6-zj2n-5kg8
13
vulnerability VCID-vyvy-y3cw-hbgr
14
vulnerability VCID-xy6y-312d-rygj
15
vulnerability VCID-zn99-ywte-33g6
16
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@11.5.20
4
url pkg:composer/typo3/cms-core@12.1.1
purl pkg:composer/typo3/cms-core@12.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-4t9s-p25a-cfas
2
vulnerability VCID-65ue-7jd9-23gf
3
vulnerability VCID-8d2m-1ffv-jqe1
4
vulnerability VCID-axvk-13qf-tka7
5
vulnerability VCID-g4uc-qeb6-myed
6
vulnerability VCID-gv1b-xtv4-4yg3
7
vulnerability VCID-gyyu-n3b1-zbcj
8
vulnerability VCID-h6y3-7gsq-skh2
9
vulnerability VCID-jxw7-skw6-q7bg
10
vulnerability VCID-mud2-s4rc-fuf6
11
vulnerability VCID-n7ng-zkkb-2qaz
12
vulnerability VCID-nubu-f1sc-gbes
13
vulnerability VCID-taj6-zj2n-5kg8
14
vulnerability VCID-vyvy-y3cw-hbgr
15
vulnerability VCID-xy6y-312d-rygj
16
vulnerability VCID-zn99-ywte-33g6
17
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@12.1.1
aliases CVE-2022-23503, GHSA-c5wx-6c2c-f7rm, GMS-2022-8132
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-t1n7-eswt-73gw
63
url VCID-t3jn-vwbx-u7cr
vulnerability_id VCID-t3jn-vwbx-u7cr
summary 
Cross-Site Scripting in Content Preview (CType menu)
### Problem
It has been discovered that content elements of type _menu_ are vulnerable to cross-site scripting when their referenced items get previewed in the page module. A valid backend user account is needed to exploit this vulnerability.

### Solution
Update to TYPO3 versions 7.6.51, 8.7.40, 9.5.25, 10.4.14, 11.1.1 that fix the problem described.

### Credits
Thanks to TYPO3 contributor Oliver Bartsch who reported and fixed the issue.

### References
* [TYPO3-CORE-SA-2021-008](https://typo3.org/security/advisory/typo3-core-sa-2021-008)
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-21370
reference_id
reference_type
scores
0
value 0.00342
scoring_system epss
scoring_elements 0.56917
published_at 2026-04-18T12:55:00Z
1
value 0.00342
scoring_system epss
scoring_elements 0.56779
published_at 2026-04-01T12:55:00Z
2
value 0.00342
scoring_system epss
scoring_elements 0.56873
published_at 2026-04-02T12:55:00Z
3
value 0.00342
scoring_system epss
scoring_elements 0.56895
published_at 2026-04-04T12:55:00Z
4
value 0.00342
scoring_system epss
scoring_elements 0.56871
published_at 2026-04-07T12:55:00Z
5
value 0.00342
scoring_system epss
scoring_elements 0.56922
published_at 2026-04-08T12:55:00Z
6
value 0.00342
scoring_system epss
scoring_elements 0.56926
published_at 2026-04-09T12:55:00Z
7
value 0.00342
scoring_system epss
scoring_elements 0.56935
published_at 2026-04-11T12:55:00Z
8
value 0.00342
scoring_system epss
scoring_elements 0.56914
published_at 2026-04-12T12:55:00Z
9
value 0.00342
scoring_system epss
scoring_elements 0.56891
published_at 2026-04-13T12:55:00Z
10
value 0.00342
scoring_system epss
scoring_elements 0.56921
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-21370
1
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21370.yaml
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21370.yaml
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21370.yaml
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21370.yaml
3
reference_url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-x7hc-x7fm-f7qh
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-x7hc-x7fm-f7qh
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-21370
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-21370
5
reference_url https://packagist.org/packages/typo3/cms-backend
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://packagist.org/packages/typo3/cms-backend
6
reference_url https://typo3.org/security/advisory/typo3-core-sa-2021-008
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2021-008
7
reference_url https://github.com/advisories/GHSA-x7hc-x7fm-f7qh
reference_id GHSA-x7hc-x7fm-f7qh
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-x7hc-x7fm-f7qh
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.40
purl pkg:composer/typo3/cms-core@8.7.40
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ekfd-wp8z-d7e1
1
vulnerability VCID-n15v-ta9h-6ffb
2
vulnerability VCID-s64f-x81f-b7ce
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.40
1
url pkg:composer/typo3/cms-core@9.5.25
purl pkg:composer/typo3/cms-core@9.5.25
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4jpa-6fqh-hbfg
1
vulnerability VCID-4t9s-p25a-cfas
2
vulnerability VCID-5paq-5frf-43ed
3
vulnerability VCID-65ue-7jd9-23gf
4
vulnerability VCID-6a9t-8dmn-s3bv
5
vulnerability VCID-8d2m-1ffv-jqe1
6
vulnerability VCID-axvk-13qf-tka7
7
vulnerability VCID-b6er-h7dm-3bev
8
vulnerability VCID-bajy-qbwq-fufn
9
vulnerability VCID-e32h-8q61-hbgc
10
vulnerability VCID-ekfd-wp8z-d7e1
11
vulnerability VCID-g4uc-qeb6-myed
12
vulnerability VCID-gv1b-xtv4-4yg3
13
vulnerability VCID-h6y3-7gsq-skh2
14
vulnerability VCID-mnz3-rj21-67ad
15
vulnerability VCID-mud2-s4rc-fuf6
16
vulnerability VCID-n15v-ta9h-6ffb
17
vulnerability VCID-n7ng-zkkb-2qaz
18
vulnerability VCID-nubu-f1sc-gbes
19
vulnerability VCID-remd-55jh-r3g5
20
vulnerability VCID-s55j-8hbt-akhn
21
vulnerability VCID-s64f-x81f-b7ce
22
vulnerability VCID-t1n7-eswt-73gw
23
vulnerability VCID-taj6-zj2n-5kg8
24
vulnerability VCID-ve7g-8st5-wffb
25
vulnerability VCID-vyvy-y3cw-hbgr
26
vulnerability VCID-w13x-3rp9-wyej
27
vulnerability VCID-xy6y-312d-rygj
28
vulnerability VCID-y32z-2d3f-gkgw
29
vulnerability VCID-zdq2-dhb2-6kaq
30
vulnerability VCID-zn99-ywte-33g6
31
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.25
2
url pkg:composer/typo3/cms-core@10.4.14
purl pkg:composer/typo3/cms-core@10.4.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-1yxw-saf5-wue7
2
vulnerability VCID-4jpa-6fqh-hbfg
3
vulnerability VCID-4t9s-p25a-cfas
4
vulnerability VCID-5paq-5frf-43ed
5
vulnerability VCID-65ue-7jd9-23gf
6
vulnerability VCID-6a9t-8dmn-s3bv
7
vulnerability VCID-8d2m-1ffv-jqe1
8
vulnerability VCID-8sdd-b1bn-cuhx
9
vulnerability VCID-av8u-rvzq-4fc7
10
vulnerability VCID-axvk-13qf-tka7
11
vulnerability VCID-b6er-h7dm-3bev
12
vulnerability VCID-bajy-qbwq-fufn
13
vulnerability VCID-e32h-8q61-hbgc
14
vulnerability VCID-ekfd-wp8z-d7e1
15
vulnerability VCID-g4uc-qeb6-myed
16
vulnerability VCID-gv1b-xtv4-4yg3
17
vulnerability VCID-gyyu-n3b1-zbcj
18
vulnerability VCID-h6y3-7gsq-skh2
19
vulnerability VCID-mnz3-rj21-67ad
20
vulnerability VCID-mud2-s4rc-fuf6
21
vulnerability VCID-n15v-ta9h-6ffb
22
vulnerability VCID-n7ng-zkkb-2qaz
23
vulnerability VCID-nubu-f1sc-gbes
24
vulnerability VCID-remd-55jh-r3g5
25
vulnerability VCID-s55j-8hbt-akhn
26
vulnerability VCID-s64f-x81f-b7ce
27
vulnerability VCID-t1n7-eswt-73gw
28
vulnerability VCID-taj6-zj2n-5kg8
29
vulnerability VCID-ve7g-8st5-wffb
30
vulnerability VCID-vwb2-a84s-5qak
31
vulnerability VCID-vyvy-y3cw-hbgr
32
vulnerability VCID-w13x-3rp9-wyej
33
vulnerability VCID-xy6y-312d-rygj
34
vulnerability VCID-y32z-2d3f-gkgw
35
vulnerability VCID-zdq2-dhb2-6kaq
36
vulnerability VCID-zn99-ywte-33g6
37
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@10.4.14
3
url pkg:composer/typo3/cms-core@11.1.1
purl pkg:composer/typo3/cms-core@11.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-1yxw-saf5-wue7
2
vulnerability VCID-4jpa-6fqh-hbfg
3
vulnerability VCID-4t9s-p25a-cfas
4
vulnerability VCID-5paq-5frf-43ed
5
vulnerability VCID-65ue-7jd9-23gf
6
vulnerability VCID-6a9t-8dmn-s3bv
7
vulnerability VCID-8d2m-1ffv-jqe1
8
vulnerability VCID-8sdd-b1bn-cuhx
9
vulnerability VCID-av8u-rvzq-4fc7
10
vulnerability VCID-axvk-13qf-tka7
11
vulnerability VCID-b6er-h7dm-3bev
12
vulnerability VCID-bajy-qbwq-fufn
13
vulnerability VCID-e32h-8q61-hbgc
14
vulnerability VCID-ekfd-wp8z-d7e1
15
vulnerability VCID-g4uc-qeb6-myed
16
vulnerability VCID-gv1b-xtv4-4yg3
17
vulnerability VCID-gyyu-n3b1-zbcj
18
vulnerability VCID-h6y3-7gsq-skh2
19
vulnerability VCID-mnz3-rj21-67ad
20
vulnerability VCID-mud2-s4rc-fuf6
21
vulnerability VCID-n15v-ta9h-6ffb
22
vulnerability VCID-n7ng-zkkb-2qaz
23
vulnerability VCID-nubu-f1sc-gbes
24
vulnerability VCID-remd-55jh-r3g5
25
vulnerability VCID-s55j-8hbt-akhn
26
vulnerability VCID-s64f-x81f-b7ce
27
vulnerability VCID-t1n7-eswt-73gw
28
vulnerability VCID-taj6-zj2n-5kg8
29
vulnerability VCID-uyeu-a3xr-fkh4
30
vulnerability VCID-ve7g-8st5-wffb
31
vulnerability VCID-vwb2-a84s-5qak
32
vulnerability VCID-vyvy-y3cw-hbgr
33
vulnerability VCID-w13x-3rp9-wyej
34
vulnerability VCID-xy6y-312d-rygj
35
vulnerability VCID-y32z-2d3f-gkgw
36
vulnerability VCID-zdq2-dhb2-6kaq
37
vulnerability VCID-zn99-ywte-33g6
38
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@11.1.1
aliases CVE-2021-21370, GHSA-x7hc-x7fm-f7qh
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-t3jn-vwbx-u7cr
64
url VCID-taj6-zj2n-5kg8
vulnerability_id VCID-taj6-zj2n-5kg8
summary 
TYPO3 vulnerable to Improper Access Control Persisting File Abstraction Layer Entities via Data Handler
### Problem
Entities of the File Abstraction Layer (FAL) could be persisted directly via `DataHandler`. This allowed attackers to reference files in the fallback storage directly and retrieve their file names and contents. The fallback storage ("zero-storage") is used as a backward compatibility layer for files located outside properly configured file storages and within the public web root directory. Exploiting this vulnerability requires a valid backend user account.


### Solution
Update to TYPO3 versions 8.7.57 ELTS, 9.5.46 ELTS, 10.4.43 ELTS, 11.5.35 LTS, 12.4.11 LTS, 13.0.1 that fix the problem described.

#### ℹ️ Strong security defaults - Manual actions required

When persisting entities of the File Abstraction Layer directly via DataHandler, `sys_file` entities are now denied by default, and `sys_file_reference` & `sys_file_metadata` entities are not permitted to reference files in the fallback storage anymore.

When importing data from secure origins, this must be explicitly enabled in the corresponding DataHandler instance by using `$dataHandler->isImporting = true;`.

### Credits
Thanks to TYPO3 core & security team member Oliver Hader who reported and fixed the issue.

### References
* [TYPO3-CORE-SA-2024-006](https://typo3.org/security/advisory/typo3-core-sa-2024-006)
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-25121
reference_id
reference_type
scores
0
value 0.003
scoring_system epss
scoring_elements 0.53262
published_at 2026-04-04T12:55:00Z
1
value 0.003
scoring_system epss
scoring_elements 0.53338
published_at 2026-04-18T12:55:00Z
2
value 0.003
scoring_system epss
scoring_elements 0.53332
published_at 2026-04-16T12:55:00Z
3
value 0.003
scoring_system epss
scoring_elements 0.53294
published_at 2026-04-13T12:55:00Z
4
value 0.003
scoring_system epss
scoring_elements 0.53311
published_at 2026-04-12T12:55:00Z
5
value 0.003
scoring_system epss
scoring_elements 0.53327
published_at 2026-04-11T12:55:00Z
6
value 0.003
scoring_system epss
scoring_elements 0.53276
published_at 2026-04-09T12:55:00Z
7
value 0.003
scoring_system epss
scoring_elements 0.53282
published_at 2026-04-08T12:55:00Z
8
value 0.003
scoring_system epss
scoring_elements 0.5323
published_at 2026-04-07T12:55:00Z
9
value 0.003
scoring_system epss
scoring_elements 0.53236
published_at 2026-04-02T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-25121
1
reference_url https://github.com/TYPO3/typo3
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3
2
reference_url https://github.com/TYPO3/typo3/commit/38f0bf9a61e10365be26eb75bc23a81184dbed07
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/38f0bf9a61e10365be26eb75bc23a81184dbed07
3
reference_url https://github.com/TYPO3/typo3/commit/71e652bf84b16fd3592205f61f36750ab03db74c
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/71e652bf84b16fd3592205f61f36750ab03db74c
4
reference_url https://github.com/TYPO3/typo3/commit/b47b6ddf5a5f3f852c6e43f837360780c12e3c47
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/b47b6ddf5a5f3f852c6e43f837360780c12e3c47
5
reference_url https://github.com/TYPO3/typo3/security/advisories/GHSA-rj3x-wvc6-5j66
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-08T19:07:53Z/
url https://github.com/TYPO3/typo3/security/advisories/GHSA-rj3x-wvc6-5j66
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-25121
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-25121
7
reference_url https://typo3.org/security/advisory/typo3-core-sa-2024-006
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-08T19:07:53Z/
url https://typo3.org/security/advisory/typo3-core-sa-2024-006
8
reference_url https://github.com/advisories/GHSA-rj3x-wvc6-5j66
reference_id GHSA-rj3x-wvc6-5j66
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-rj3x-wvc6-5j66
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.57
purl pkg:composer/typo3/cms-core@8.7.57
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.57
1
url pkg:composer/typo3/cms-core@9.5.46
purl pkg:composer/typo3/cms-core@9.5.46
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.46
2
url pkg:composer/typo3/cms-core@10.4.43
purl pkg:composer/typo3/cms-core@10.4.43
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@10.4.43
3
url pkg:composer/typo3/cms-core@11.5.35
purl pkg:composer/typo3/cms-core@11.5.35
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-4t9s-p25a-cfas
2
vulnerability VCID-65ue-7jd9-23gf
3
vulnerability VCID-8d2m-1ffv-jqe1
4
vulnerability VCID-gyyu-n3b1-zbcj
5
vulnerability VCID-mud2-s4rc-fuf6
6
vulnerability VCID-nubu-f1sc-gbes
7
vulnerability VCID-xy6y-312d-rygj
8
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@11.5.35
4
url pkg:composer/typo3/cms-core@12.4.11
purl pkg:composer/typo3/cms-core@12.4.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-4t9s-p25a-cfas
2
vulnerability VCID-65ue-7jd9-23gf
3
vulnerability VCID-8d2m-1ffv-jqe1
4
vulnerability VCID-gyyu-n3b1-zbcj
5
vulnerability VCID-jxw7-skw6-q7bg
6
vulnerability VCID-mud2-s4rc-fuf6
7
vulnerability VCID-nubu-f1sc-gbes
8
vulnerability VCID-xy6y-312d-rygj
9
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@12.4.11
5
url pkg:composer/typo3/cms-core@13.0.1
purl pkg:composer/typo3/cms-core@13.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-4t9s-p25a-cfas
2
vulnerability VCID-65ue-7jd9-23gf
3
vulnerability VCID-8d2m-1ffv-jqe1
4
vulnerability VCID-gyyu-n3b1-zbcj
5
vulnerability VCID-jxw7-skw6-q7bg
6
vulnerability VCID-mud2-s4rc-fuf6
7
vulnerability VCID-nubu-f1sc-gbes
8
vulnerability VCID-xy6y-312d-rygj
9
vulnerability VCID-yxy9-ngwb-6qdm
10
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@13.0.1
aliases CVE-2024-25121, GHSA-rj3x-wvc6-5j66
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-taj6-zj2n-5kg8
65
url VCID-tnjd-pyys-akav
vulnerability_id VCID-tnjd-pyys-akav
summary 
TYPO3 Possible Insecure Deserialization in Extbase Request Handling
It has been discovered that request handling in Extbase can be vulnerable to insecure deserialization. User submitted payload has to be signed with a corresponding HMAC-SHA1 using the sensitive TYPO3 encryptionKey as secret - invalid or unsigned payload is not deserialized.

However, since sensitive information could have been leaked by accident (e.g. in repositories or in commonly known and unprotected backup files), there is the possibility that attackers know the private encryptionKey and are able to calculate the required HMAC-SHA1 to allow a malicious payload to be deserialized.

Requirements for successfully exploiting this vulnerability (all of the following):

- rendering at least one Extbase plugin in the frontend
- encryptionKey has been leaked (from LocalConfiguration.php or corresponding .env file)
references
0
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2019-12-17-7.yaml
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2019-12-17-7.yaml
1
reference_url https://github.com/TYPO3-CMS/core
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core
2
reference_url https://typo3.org/security/advisory/typo3-psa-2019-011
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-psa-2019-011
3
reference_url https://github.com/advisories/GHSA-5h5v-m596-r6rf
reference_id GHSA-5h5v-m596-r6rf
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-5h5v-m596-r6rf
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.30
purl pkg:composer/typo3/cms-core@8.7.30
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4jpa-6fqh-hbfg
1
vulnerability VCID-5jgb-dsyx-hyb4
2
vulnerability VCID-5paq-5frf-43ed
3
vulnerability VCID-axvk-13qf-tka7
4
vulnerability VCID-b6er-h7dm-3bev
5
vulnerability VCID-bajy-qbwq-fufn
6
vulnerability VCID-dsu7-jjjq-f3e1
7
vulnerability VCID-ekfd-wp8z-d7e1
8
vulnerability VCID-f963-qur3-2qb7
9
vulnerability VCID-g4uc-qeb6-myed
10
vulnerability VCID-gv1b-xtv4-4yg3
11
vulnerability VCID-h6y3-7gsq-skh2
12
vulnerability VCID-he5m-6wj4-rbhc
13
vulnerability VCID-mnz3-rj21-67ad
14
vulnerability VCID-n15v-ta9h-6ffb
15
vulnerability VCID-n7ng-zkkb-2qaz
16
vulnerability VCID-s55j-8hbt-akhn
17
vulnerability VCID-s64f-x81f-b7ce
18
vulnerability VCID-t1n7-eswt-73gw
19
vulnerability VCID-t3jn-vwbx-u7cr
20
vulnerability VCID-taj6-zj2n-5kg8
21
vulnerability VCID-vyvy-y3cw-hbgr
22
vulnerability VCID-xh7y-56vy-5ud8
23
vulnerability VCID-y32z-2d3f-gkgw
24
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.30
1
url pkg:composer/typo3/cms-core@9.5.12
purl pkg:composer/typo3/cms-core@9.5.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mn6-mdmz-4yd9
1
vulnerability VCID-4jpa-6fqh-hbfg
2
vulnerability VCID-4t9s-p25a-cfas
3
vulnerability VCID-543x-cnbz-1kb9
4
vulnerability VCID-58js-jzm4-4fc7
5
vulnerability VCID-5jgb-dsyx-hyb4
6
vulnerability VCID-5kzs-ex81-bbaj
7
vulnerability VCID-5paq-5frf-43ed
8
vulnerability VCID-65ue-7jd9-23gf
9
vulnerability VCID-6a9t-8dmn-s3bv
10
vulnerability VCID-7kjw-j8st-mqfr
11
vulnerability VCID-8d2m-1ffv-jqe1
12
vulnerability VCID-a49c-fqrj-nbb3
13
vulnerability VCID-axvk-13qf-tka7
14
vulnerability VCID-b6er-h7dm-3bev
15
vulnerability VCID-bajy-qbwq-fufn
16
vulnerability VCID-d8d1-sat6-muhe
17
vulnerability VCID-dsu7-jjjq-f3e1
18
vulnerability VCID-e32h-8q61-hbgc
19
vulnerability VCID-ekfd-wp8z-d7e1
20
vulnerability VCID-f963-qur3-2qb7
21
vulnerability VCID-g4uc-qeb6-myed
22
vulnerability VCID-gv1b-xtv4-4yg3
23
vulnerability VCID-h6y3-7gsq-skh2
24
vulnerability VCID-he5m-6wj4-rbhc
25
vulnerability VCID-mnz3-rj21-67ad
26
vulnerability VCID-mud2-s4rc-fuf6
27
vulnerability VCID-n15v-ta9h-6ffb
28
vulnerability VCID-n7ng-zkkb-2qaz
29
vulnerability VCID-nubu-f1sc-gbes
30
vulnerability VCID-phgh-sd4m-zbdx
31
vulnerability VCID-remd-55jh-r3g5
32
vulnerability VCID-s55j-8hbt-akhn
33
vulnerability VCID-s64f-x81f-b7ce
34
vulnerability VCID-sw7v-fbjk-13hy
35
vulnerability VCID-t1n7-eswt-73gw
36
vulnerability VCID-t3jn-vwbx-u7cr
37
vulnerability VCID-taj6-zj2n-5kg8
38
vulnerability VCID-ve7g-8st5-wffb
39
vulnerability VCID-vyvy-y3cw-hbgr
40
vulnerability VCID-w13x-3rp9-wyej
41
vulnerability VCID-xh7y-56vy-5ud8
42
vulnerability VCID-xy6y-312d-rygj
43
vulnerability VCID-y32z-2d3f-gkgw
44
vulnerability VCID-zdq2-dhb2-6kaq
45
vulnerability VCID-zn99-ywte-33g6
46
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.12
aliases GHSA-5h5v-m596-r6rf
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-tnjd-pyys-akav
66
url VCID-tw1y-t4qj-j3d1
vulnerability_id VCID-tw1y-t4qj-j3d1
summary 
Cross-site Scripting
Cross-Site Scripting in Backend Modal Component.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-007/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2018-007/
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.21
purl pkg:composer/typo3/cms-core@8.7.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21e8-x7mp-hugk
1
vulnerability VCID-2meq-x4kd-bbdn
2
vulnerability VCID-3n2r-awja-dug9
3
vulnerability VCID-3v4n-fzxa-bfaw
4
vulnerability VCID-4jpa-6fqh-hbfg
5
vulnerability VCID-551q-gpyd-ffe8
6
vulnerability VCID-5jgb-dsyx-hyb4
7
vulnerability VCID-5mxm-88r9-hfey
8
vulnerability VCID-5paq-5frf-43ed
9
vulnerability VCID-5u4q-m66t-wqcj
10
vulnerability VCID-9g62-zd1x-3bdg
11
vulnerability VCID-9gpp-ez8w-rqav
12
vulnerability VCID-9x6r-56xm-n7h7
13
vulnerability VCID-9zqs-hjay-fkev
14
vulnerability VCID-axaf-45kr-kbfe
15
vulnerability VCID-axvk-13qf-tka7
16
vulnerability VCID-b6er-h7dm-3bev
17
vulnerability VCID-bajy-qbwq-fufn
18
vulnerability VCID-cm14-t8uv-k3es
19
vulnerability VCID-d99v-v9cj-zfh2
20
vulnerability VCID-dj88-f3p8-cfbn
21
vulnerability VCID-dsu7-jjjq-f3e1
22
vulnerability VCID-eajg-ctpd-2bby
23
vulnerability VCID-ekfd-wp8z-d7e1
24
vulnerability VCID-f4bv-pzdy-dfcb
25
vulnerability VCID-f963-qur3-2qb7
26
vulnerability VCID-g4uc-qeb6-myed
27
vulnerability VCID-gcnj-6qb6-pbgz
28
vulnerability VCID-gv1b-xtv4-4yg3
29
vulnerability VCID-h6y3-7gsq-skh2
30
vulnerability VCID-he5m-6wj4-rbhc
31
vulnerability VCID-hhmn-yz5p-xkap
32
vulnerability VCID-j77k-hjgx-5kc5
33
vulnerability VCID-k8af-cg9k-87a9
34
vulnerability VCID-mh4f-vtfj-hbb1
35
vulnerability VCID-mnz3-rj21-67ad
36
vulnerability VCID-n15v-ta9h-6ffb
37
vulnerability VCID-n7ng-zkkb-2qaz
38
vulnerability VCID-pmzz-9rws-4ud5
39
vulnerability VCID-pss5-as4b-cyf2
40
vulnerability VCID-px44-19tj-h7aa
41
vulnerability VCID-q8hy-wjd9-nbgp
42
vulnerability VCID-s53a-f91p-huf4
43
vulnerability VCID-s55j-8hbt-akhn
44
vulnerability VCID-s64f-x81f-b7ce
45
vulnerability VCID-stzu-sxe6-5yf5
46
vulnerability VCID-swnc-ke6h-ekew
47
vulnerability VCID-t1n7-eswt-73gw
48
vulnerability VCID-t3jn-vwbx-u7cr
49
vulnerability VCID-taj6-zj2n-5kg8
50
vulnerability VCID-tnjd-pyys-akav
51
vulnerability VCID-vxry-uvph-kbfd
52
vulnerability VCID-vyvy-y3cw-hbgr
53
vulnerability VCID-wea9-egep-h7g5
54
vulnerability VCID-xa4m-xpa9-v7h8
55
vulnerability VCID-xh7y-56vy-5ud8
56
vulnerability VCID-y32z-2d3f-gkgw
57
vulnerability VCID-zdq2-dhb2-6kaq
58
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.21
1
url pkg:composer/typo3/cms-core@9.5.2
purl pkg:composer/typo3/cms-core@9.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21e8-x7mp-hugk
1
vulnerability VCID-2meq-x4kd-bbdn
2
vulnerability VCID-2mn6-mdmz-4yd9
3
vulnerability VCID-3n2r-awja-dug9
4
vulnerability VCID-3v4n-fzxa-bfaw
5
vulnerability VCID-461j-9hrc-gfbc
6
vulnerability VCID-4jpa-6fqh-hbfg
7
vulnerability VCID-4mkw-tv16-jyca
8
vulnerability VCID-4t9s-p25a-cfas
9
vulnerability VCID-543x-cnbz-1kb9
10
vulnerability VCID-551q-gpyd-ffe8
11
vulnerability VCID-58js-jzm4-4fc7
12
vulnerability VCID-5jgb-dsyx-hyb4
13
vulnerability VCID-5kzs-ex81-bbaj
14
vulnerability VCID-5paq-5frf-43ed
15
vulnerability VCID-5u4q-m66t-wqcj
16
vulnerability VCID-65ue-7jd9-23gf
17
vulnerability VCID-6a9t-8dmn-s3bv
18
vulnerability VCID-8d2m-1ffv-jqe1
19
vulnerability VCID-9g62-zd1x-3bdg
20
vulnerability VCID-9gpp-ez8w-rqav
21
vulnerability VCID-9x6r-56xm-n7h7
22
vulnerability VCID-9zqs-hjay-fkev
23
vulnerability VCID-a49c-fqrj-nbb3
24
vulnerability VCID-axaf-45kr-kbfe
25
vulnerability VCID-axvk-13qf-tka7
26
vulnerability VCID-b6er-h7dm-3bev
27
vulnerability VCID-bajy-qbwq-fufn
28
vulnerability VCID-cm14-t8uv-k3es
29
vulnerability VCID-d8d1-sat6-muhe
30
vulnerability VCID-d99v-v9cj-zfh2
31
vulnerability VCID-dj88-f3p8-cfbn
32
vulnerability VCID-dmzb-gkdn-6bcm
33
vulnerability VCID-dsu7-jjjq-f3e1
34
vulnerability VCID-e32h-8q61-hbgc
35
vulnerability VCID-eajg-ctpd-2bby
36
vulnerability VCID-ekfd-wp8z-d7e1
37
vulnerability VCID-f4bv-pzdy-dfcb
38
vulnerability VCID-f963-qur3-2qb7
39
vulnerability VCID-g4uc-qeb6-myed
40
vulnerability VCID-gcnj-6qb6-pbgz
41
vulnerability VCID-gv1b-xtv4-4yg3
42
vulnerability VCID-h6y3-7gsq-skh2
43
vulnerability VCID-he5m-6wj4-rbhc
44
vulnerability VCID-hhmn-yz5p-xkap
45
vulnerability VCID-k8af-cg9k-87a9
46
vulnerability VCID-kj9x-psfz-2ug1
47
vulnerability VCID-mh4f-vtfj-hbb1
48
vulnerability VCID-mnz3-rj21-67ad
49
vulnerability VCID-mud2-s4rc-fuf6
50
vulnerability VCID-n15v-ta9h-6ffb
51
vulnerability VCID-n7ng-zkkb-2qaz
52
vulnerability VCID-nubu-f1sc-gbes
53
vulnerability VCID-nxq4-m52q-yuh4
54
vulnerability VCID-p715-yexd-jfgc
55
vulnerability VCID-phgh-sd4m-zbdx
56
vulnerability VCID-pmzz-9rws-4ud5
57
vulnerability VCID-pss5-as4b-cyf2
58
vulnerability VCID-px44-19tj-h7aa
59
vulnerability VCID-q8hy-wjd9-nbgp
60
vulnerability VCID-raxk-rm9v-hubn
61
vulnerability VCID-remd-55jh-r3g5
62
vulnerability VCID-s53a-f91p-huf4
63
vulnerability VCID-s55j-8hbt-akhn
64
vulnerability VCID-s64f-x81f-b7ce
65
vulnerability VCID-stzu-sxe6-5yf5
66
vulnerability VCID-sw7v-fbjk-13hy
67
vulnerability VCID-swnc-ke6h-ekew
68
vulnerability VCID-t1n7-eswt-73gw
69
vulnerability VCID-t3jn-vwbx-u7cr
70
vulnerability VCID-taj6-zj2n-5kg8
71
vulnerability VCID-tnjd-pyys-akav
72
vulnerability VCID-u9bx-8e86-wbew
73
vulnerability VCID-ve7g-8st5-wffb
74
vulnerability VCID-vxry-uvph-kbfd
75
vulnerability VCID-vyvy-y3cw-hbgr
76
vulnerability VCID-w13x-3rp9-wyej
77
vulnerability VCID-wea9-egep-h7g5
78
vulnerability VCID-xa4m-xpa9-v7h8
79
vulnerability VCID-xh7y-56vy-5ud8
80
vulnerability VCID-xtdg-uj46-rkcm
81
vulnerability VCID-xy6y-312d-rygj
82
vulnerability VCID-y32z-2d3f-gkgw
83
vulnerability VCID-yzx1-4psv-7bhr
84
vulnerability VCID-zdq2-dhb2-6kaq
85
vulnerability VCID-zkea-ge1t-z7gn
86
vulnerability VCID-zn99-ywte-33g6
87
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.2
aliases 2018-12-11-2
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-tw1y-t4qj-j3d1
67
url VCID-vxry-uvph-kbfd
vulnerability_id VCID-vxry-uvph-kbfd
summary 
Cross-site Scripting
Cross-Site Scripting in Link Handling.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-015/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-015/
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.27
purl pkg:composer/typo3/cms-core@8.7.27
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3n2r-awja-dug9
1
vulnerability VCID-4jpa-6fqh-hbfg
2
vulnerability VCID-5jgb-dsyx-hyb4
3
vulnerability VCID-5paq-5frf-43ed
4
vulnerability VCID-5u4q-m66t-wqcj
5
vulnerability VCID-axvk-13qf-tka7
6
vulnerability VCID-b6er-h7dm-3bev
7
vulnerability VCID-bajy-qbwq-fufn
8
vulnerability VCID-dsu7-jjjq-f3e1
9
vulnerability VCID-ekfd-wp8z-d7e1
10
vulnerability VCID-f963-qur3-2qb7
11
vulnerability VCID-g4uc-qeb6-myed
12
vulnerability VCID-gcnj-6qb6-pbgz
13
vulnerability VCID-gv1b-xtv4-4yg3
14
vulnerability VCID-h6y3-7gsq-skh2
15
vulnerability VCID-he5m-6wj4-rbhc
16
vulnerability VCID-hhmn-yz5p-xkap
17
vulnerability VCID-mnz3-rj21-67ad
18
vulnerability VCID-n15v-ta9h-6ffb
19
vulnerability VCID-n7ng-zkkb-2qaz
20
vulnerability VCID-s55j-8hbt-akhn
21
vulnerability VCID-s64f-x81f-b7ce
22
vulnerability VCID-swnc-ke6h-ekew
23
vulnerability VCID-t1n7-eswt-73gw
24
vulnerability VCID-t3jn-vwbx-u7cr
25
vulnerability VCID-taj6-zj2n-5kg8
26
vulnerability VCID-tnjd-pyys-akav
27
vulnerability VCID-vyvy-y3cw-hbgr
28
vulnerability VCID-xa4m-xpa9-v7h8
29
vulnerability VCID-xh7y-56vy-5ud8
30
vulnerability VCID-y32z-2d3f-gkgw
31
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.27
1
url pkg:composer/typo3/cms-core@9.5.8
purl pkg:composer/typo3/cms-core@9.5.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mn6-mdmz-4yd9
1
vulnerability VCID-3n2r-awja-dug9
2
vulnerability VCID-4jpa-6fqh-hbfg
3
vulnerability VCID-4t9s-p25a-cfas
4
vulnerability VCID-543x-cnbz-1kb9
5
vulnerability VCID-58js-jzm4-4fc7
6
vulnerability VCID-5jgb-dsyx-hyb4
7
vulnerability VCID-5kzs-ex81-bbaj
8
vulnerability VCID-5paq-5frf-43ed
9
vulnerability VCID-5u4q-m66t-wqcj
10
vulnerability VCID-65ue-7jd9-23gf
11
vulnerability VCID-6a9t-8dmn-s3bv
12
vulnerability VCID-8d2m-1ffv-jqe1
13
vulnerability VCID-a49c-fqrj-nbb3
14
vulnerability VCID-axvk-13qf-tka7
15
vulnerability VCID-b6er-h7dm-3bev
16
vulnerability VCID-bajy-qbwq-fufn
17
vulnerability VCID-d8d1-sat6-muhe
18
vulnerability VCID-dsu7-jjjq-f3e1
19
vulnerability VCID-e32h-8q61-hbgc
20
vulnerability VCID-ekfd-wp8z-d7e1
21
vulnerability VCID-f963-qur3-2qb7
22
vulnerability VCID-g4uc-qeb6-myed
23
vulnerability VCID-gcnj-6qb6-pbgz
24
vulnerability VCID-gv1b-xtv4-4yg3
25
vulnerability VCID-h6y3-7gsq-skh2
26
vulnerability VCID-he5m-6wj4-rbhc
27
vulnerability VCID-hhmn-yz5p-xkap
28
vulnerability VCID-mnz3-rj21-67ad
29
vulnerability VCID-mud2-s4rc-fuf6
30
vulnerability VCID-n15v-ta9h-6ffb
31
vulnerability VCID-n7ng-zkkb-2qaz
32
vulnerability VCID-nubu-f1sc-gbes
33
vulnerability VCID-phgh-sd4m-zbdx
34
vulnerability VCID-remd-55jh-r3g5
35
vulnerability VCID-s55j-8hbt-akhn
36
vulnerability VCID-s64f-x81f-b7ce
37
vulnerability VCID-sw7v-fbjk-13hy
38
vulnerability VCID-swnc-ke6h-ekew
39
vulnerability VCID-t1n7-eswt-73gw
40
vulnerability VCID-t3jn-vwbx-u7cr
41
vulnerability VCID-taj6-zj2n-5kg8
42
vulnerability VCID-tnjd-pyys-akav
43
vulnerability VCID-ve7g-8st5-wffb
44
vulnerability VCID-vyvy-y3cw-hbgr
45
vulnerability VCID-w13x-3rp9-wyej
46
vulnerability VCID-xa4m-xpa9-v7h8
47
vulnerability VCID-xh7y-56vy-5ud8
48
vulnerability VCID-xy6y-312d-rygj
49
vulnerability VCID-y32z-2d3f-gkgw
50
vulnerability VCID-zdq2-dhb2-6kaq
51
vulnerability VCID-zn99-ywte-33g6
52
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.8
aliases 2019-06-25-2
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-vxry-uvph-kbfd
68
url VCID-vyvy-y3cw-hbgr
vulnerability_id VCID-vyvy-y3cw-hbgr
summary 
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
TYPO3 is a free and open source Content Management Framework released under the GNU General Public License. In affected versions the TYPO3 core component `GeneralUtility::getIndpEnv()` uses the unfiltered server environment variable `PATH_INFO`, which allows attackers to inject malicious content. In combination with the TypoScript setting `config.absRefPrefix=auto`, attackers can inject malicious HTML code to pages that have not been rendered and cached, yet. As a result, injected values would be cached and delivered to other website visitors (persisted cross-site scripting). Individual code which relies on the resolved value of `GeneralUtility::getIndpEnv('SCRIPT_NAME')` and corresponding usages (as shown below) is vulnerable as well. Additional investigations confirmed that at least Apache web server deployments using CGI (FPM, FCGI/FastCGI, and similar) are affected. However, there still might be the risk that other scenarios like nginx, IIS, or Apache/mod_php is vulnerable. The usage of server environment variable `PATH_INFO` has been removed from corresponding processings in `GeneralUtility::getIndpEnv()`. Besides that, the public property `TypoScriptFrontendController::$absRefPrefix` is encoded for both being used as a URI component and for being used as a prefix in an HTML context. This mitigates the cross-site scripting vulnerability. Users are advised to update to TYPO3 versions 8.7.51 ELTS, 9.5.40 ELTS, 10.4.35 LTS, 11.5.23 LTS and 12.2.0 which fix this problem. For users who are unable to patch in a timely manner the TypoScript setting `config.absRefPrefix` should at least be set to a static path value, instead of using auto - e.g. `config.absRefPrefix=/`. This workaround **does not fix all aspects of the vulnerability**, and is just considered to be an intermediate mitigation to the most prominent manifestation.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-24814
reference_id
reference_type
scores
0
value 0.00867
scoring_system epss
scoring_elements 0.75119
published_at 2026-04-07T12:55:00Z
1
value 0.00867
scoring_system epss
scoring_elements 0.75197
published_at 2026-04-18T12:55:00Z
2
value 0.00867
scoring_system epss
scoring_elements 0.7519
published_at 2026-04-16T12:55:00Z
3
value 0.00867
scoring_system epss
scoring_elements 0.75187
published_at 2026-04-11T12:55:00Z
4
value 0.00867
scoring_system epss
scoring_elements 0.75165
published_at 2026-04-12T12:55:00Z
5
value 0.00867
scoring_system epss
scoring_elements 0.75153
published_at 2026-04-13T12:55:00Z
6
value 0.01074
scoring_system epss
scoring_elements 0.77713
published_at 2026-04-02T12:55:00Z
7
value 0.01074
scoring_system epss
scoring_elements 0.7774
published_at 2026-04-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-24814
1
reference_url https://docs.typo3.org/m/typo3/reference-typoscript/main/en-us/Setup/Config/Index.html#absrefprefix
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-10T21:01:14Z/
url https://docs.typo3.org/m/typo3/reference-typoscript/main/en-us/Setup/Config/Index.html#absrefprefix
2
reference_url https://github.com/TYPO3/typo3
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3
3
reference_url https://github.com/TYPO3/typo3/blob/v11.5.22/typo3/sysext/core/Classes/Utility/GeneralUtility.php#L2481-L2484
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-10T21:01:14Z/
url https://github.com/TYPO3/typo3/blob/v11.5.22/typo3/sysext/core/Classes/Utility/GeneralUtility.php#L2481-L2484
4
reference_url https://github.com/TYPO3/typo3/blob/v11.5.22/typo3/sysext/frontend/Classes/Controller/TypoScriptFrontendController.php#L2547-L2549
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-10T21:01:14Z/
url https://github.com/TYPO3/typo3/blob/v11.5.22/typo3/sysext/frontend/Classes/Controller/TypoScriptFrontendController.php#L2547-L2549
5
reference_url https://github.com/TYPO3/typo3/commit/0005a6fd86ab97eff8bf2e3a5828bf0e7cb6263a
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-10T21:01:14Z/
url https://github.com/TYPO3/typo3/commit/0005a6fd86ab97eff8bf2e3a5828bf0e7cb6263a
6
reference_url https://typo3.org/security/advisory/typo3-core-sa-2023-001
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-10T21:01:14Z/
url https://typo3.org/security/advisory/typo3-core-sa-2023-001
7
reference_url https://typo3.org/security/advisory/typo3-psa-2023-001
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-10T21:01:14Z/
url https://typo3.org/security/advisory/typo3-psa-2023-001
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-24814
reference_id CVE-2023-24814
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-24814
9
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2023-24814.yaml
reference_id CVE-2023-24814.YAML
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2023-24814.yaml
10
reference_url https://github.com/advisories/GHSA-r4f8-f93x-5qh3
reference_id GHSA-r4f8-f93x-5qh3
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-r4f8-f93x-5qh3
11
reference_url https://github.com/TYPO3/typo3/security/advisories/GHSA-r4f8-f93x-5qh3
reference_id GHSA-r4f8-f93x-5qh3
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-10T21:01:14Z/
url https://github.com/TYPO3/typo3/security/advisories/GHSA-r4f8-f93x-5qh3
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.51
purl pkg:composer/typo3/cms-core@8.7.51
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.51
1
url pkg:composer/typo3/cms-core@9.5.40
purl pkg:composer/typo3/cms-core@9.5.40
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.40
2
url pkg:composer/typo3/cms-core@10.4.36
purl pkg:composer/typo3/cms-core@10.4.36
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-4t9s-p25a-cfas
2
vulnerability VCID-65ue-7jd9-23gf
3
vulnerability VCID-8d2m-1ffv-jqe1
4
vulnerability VCID-axvk-13qf-tka7
5
vulnerability VCID-g4uc-qeb6-myed
6
vulnerability VCID-gv1b-xtv4-4yg3
7
vulnerability VCID-gyyu-n3b1-zbcj
8
vulnerability VCID-h6y3-7gsq-skh2
9
vulnerability VCID-mud2-s4rc-fuf6
10
vulnerability VCID-n7ng-zkkb-2qaz
11
vulnerability VCID-nubu-f1sc-gbes
12
vulnerability VCID-taj6-zj2n-5kg8
13
vulnerability VCID-xy6y-312d-rygj
14
vulnerability VCID-zn99-ywte-33g6
15
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@10.4.36
3
url pkg:composer/typo3/cms-core@11.5.23
purl pkg:composer/typo3/cms-core@11.5.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-4t9s-p25a-cfas
2
vulnerability VCID-65ue-7jd9-23gf
3
vulnerability VCID-8d2m-1ffv-jqe1
4
vulnerability VCID-axvk-13qf-tka7
5
vulnerability VCID-g4uc-qeb6-myed
6
vulnerability VCID-gv1b-xtv4-4yg3
7
vulnerability VCID-gyyu-n3b1-zbcj
8
vulnerability VCID-h6y3-7gsq-skh2
9
vulnerability VCID-mud2-s4rc-fuf6
10
vulnerability VCID-n7ng-zkkb-2qaz
11
vulnerability VCID-nubu-f1sc-gbes
12
vulnerability VCID-taj6-zj2n-5kg8
13
vulnerability VCID-xy6y-312d-rygj
14
vulnerability VCID-zn99-ywte-33g6
15
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@11.5.23
4
url pkg:composer/typo3/cms-core@12.2.0
purl pkg:composer/typo3/cms-core@12.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-4t9s-p25a-cfas
2
vulnerability VCID-65ue-7jd9-23gf
3
vulnerability VCID-8d2m-1ffv-jqe1
4
vulnerability VCID-axvk-13qf-tka7
5
vulnerability VCID-g4uc-qeb6-myed
6
vulnerability VCID-gv1b-xtv4-4yg3
7
vulnerability VCID-gyyu-n3b1-zbcj
8
vulnerability VCID-h6y3-7gsq-skh2
9
vulnerability VCID-jxw7-skw6-q7bg
10
vulnerability VCID-mud2-s4rc-fuf6
11
vulnerability VCID-n7ng-zkkb-2qaz
12
vulnerability VCID-nubu-f1sc-gbes
13
vulnerability VCID-taj6-zj2n-5kg8
14
vulnerability VCID-xy6y-312d-rygj
15
vulnerability VCID-zn99-ywte-33g6
16
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@12.2.0
aliases CVE-2023-24814, GHSA-r4f8-f93x-5qh3
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-vyvy-y3cw-hbgr
69
url VCID-wea9-egep-h7g5
vulnerability_id VCID-wea9-egep-h7g5
summary Information Disclosure of Installed Extensions.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-001/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-001/
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.23
purl pkg:composer/typo3/cms-core@8.7.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2meq-x4kd-bbdn
1
vulnerability VCID-3n2r-awja-dug9
2
vulnerability VCID-3v4n-fzxa-bfaw
3
vulnerability VCID-4jpa-6fqh-hbfg
4
vulnerability VCID-5jgb-dsyx-hyb4
5
vulnerability VCID-5paq-5frf-43ed
6
vulnerability VCID-5u4q-m66t-wqcj
7
vulnerability VCID-9g62-zd1x-3bdg
8
vulnerability VCID-9gpp-ez8w-rqav
9
vulnerability VCID-9x6r-56xm-n7h7
10
vulnerability VCID-axvk-13qf-tka7
11
vulnerability VCID-b6er-h7dm-3bev
12
vulnerability VCID-bajy-qbwq-fufn
13
vulnerability VCID-cm14-t8uv-k3es
14
vulnerability VCID-dsu7-jjjq-f3e1
15
vulnerability VCID-eajg-ctpd-2bby
16
vulnerability VCID-ekfd-wp8z-d7e1
17
vulnerability VCID-f963-qur3-2qb7
18
vulnerability VCID-g4uc-qeb6-myed
19
vulnerability VCID-gcnj-6qb6-pbgz
20
vulnerability VCID-gv1b-xtv4-4yg3
21
vulnerability VCID-h6y3-7gsq-skh2
22
vulnerability VCID-he5m-6wj4-rbhc
23
vulnerability VCID-hhmn-yz5p-xkap
24
vulnerability VCID-mnz3-rj21-67ad
25
vulnerability VCID-n15v-ta9h-6ffb
26
vulnerability VCID-n7ng-zkkb-2qaz
27
vulnerability VCID-pmzz-9rws-4ud5
28
vulnerability VCID-pss5-as4b-cyf2
29
vulnerability VCID-q8hy-wjd9-nbgp
30
vulnerability VCID-s53a-f91p-huf4
31
vulnerability VCID-s55j-8hbt-akhn
32
vulnerability VCID-s64f-x81f-b7ce
33
vulnerability VCID-stzu-sxe6-5yf5
34
vulnerability VCID-swnc-ke6h-ekew
35
vulnerability VCID-t1n7-eswt-73gw
36
vulnerability VCID-t3jn-vwbx-u7cr
37
vulnerability VCID-taj6-zj2n-5kg8
38
vulnerability VCID-tnjd-pyys-akav
39
vulnerability VCID-vxry-uvph-kbfd
40
vulnerability VCID-vyvy-y3cw-hbgr
41
vulnerability VCID-xa4m-xpa9-v7h8
42
vulnerability VCID-xh7y-56vy-5ud8
43
vulnerability VCID-y32z-2d3f-gkgw
44
vulnerability VCID-zdq2-dhb2-6kaq
45
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.23
1
url pkg:composer/typo3/cms-core@9.5.4
purl pkg:composer/typo3/cms-core@9.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2meq-x4kd-bbdn
1
vulnerability VCID-2mn6-mdmz-4yd9
2
vulnerability VCID-3n2r-awja-dug9
3
vulnerability VCID-3v4n-fzxa-bfaw
4
vulnerability VCID-461j-9hrc-gfbc
5
vulnerability VCID-4jpa-6fqh-hbfg
6
vulnerability VCID-4mkw-tv16-jyca
7
vulnerability VCID-4t9s-p25a-cfas
8
vulnerability VCID-543x-cnbz-1kb9
9
vulnerability VCID-58js-jzm4-4fc7
10
vulnerability VCID-5jgb-dsyx-hyb4
11
vulnerability VCID-5kzs-ex81-bbaj
12
vulnerability VCID-5paq-5frf-43ed
13
vulnerability VCID-5u4q-m66t-wqcj
14
vulnerability VCID-65ue-7jd9-23gf
15
vulnerability VCID-6a9t-8dmn-s3bv
16
vulnerability VCID-8d2m-1ffv-jqe1
17
vulnerability VCID-9g62-zd1x-3bdg
18
vulnerability VCID-9gpp-ez8w-rqav
19
vulnerability VCID-9x6r-56xm-n7h7
20
vulnerability VCID-a49c-fqrj-nbb3
21
vulnerability VCID-axvk-13qf-tka7
22
vulnerability VCID-b6er-h7dm-3bev
23
vulnerability VCID-bajy-qbwq-fufn
24
vulnerability VCID-cm14-t8uv-k3es
25
vulnerability VCID-d8d1-sat6-muhe
26
vulnerability VCID-dmzb-gkdn-6bcm
27
vulnerability VCID-dsu7-jjjq-f3e1
28
vulnerability VCID-e32h-8q61-hbgc
29
vulnerability VCID-eajg-ctpd-2bby
30
vulnerability VCID-ekfd-wp8z-d7e1
31
vulnerability VCID-f963-qur3-2qb7
32
vulnerability VCID-g4uc-qeb6-myed
33
vulnerability VCID-gcnj-6qb6-pbgz
34
vulnerability VCID-gv1b-xtv4-4yg3
35
vulnerability VCID-h6y3-7gsq-skh2
36
vulnerability VCID-he5m-6wj4-rbhc
37
vulnerability VCID-hhmn-yz5p-xkap
38
vulnerability VCID-kj9x-psfz-2ug1
39
vulnerability VCID-mnz3-rj21-67ad
40
vulnerability VCID-mud2-s4rc-fuf6
41
vulnerability VCID-n15v-ta9h-6ffb
42
vulnerability VCID-n7ng-zkkb-2qaz
43
vulnerability VCID-nubu-f1sc-gbes
44
vulnerability VCID-nxq4-m52q-yuh4
45
vulnerability VCID-phgh-sd4m-zbdx
46
vulnerability VCID-pmzz-9rws-4ud5
47
vulnerability VCID-pss5-as4b-cyf2
48
vulnerability VCID-q8hy-wjd9-nbgp
49
vulnerability VCID-raxk-rm9v-hubn
50
vulnerability VCID-remd-55jh-r3g5
51
vulnerability VCID-s53a-f91p-huf4
52
vulnerability VCID-s55j-8hbt-akhn
53
vulnerability VCID-s64f-x81f-b7ce
54
vulnerability VCID-stzu-sxe6-5yf5
55
vulnerability VCID-sw7v-fbjk-13hy
56
vulnerability VCID-swnc-ke6h-ekew
57
vulnerability VCID-t1n7-eswt-73gw
58
vulnerability VCID-t3jn-vwbx-u7cr
59
vulnerability VCID-taj6-zj2n-5kg8
60
vulnerability VCID-tnjd-pyys-akav
61
vulnerability VCID-u9bx-8e86-wbew
62
vulnerability VCID-ve7g-8st5-wffb
63
vulnerability VCID-vxry-uvph-kbfd
64
vulnerability VCID-vyvy-y3cw-hbgr
65
vulnerability VCID-w13x-3rp9-wyej
66
vulnerability VCID-xa4m-xpa9-v7h8
67
vulnerability VCID-xh7y-56vy-5ud8
68
vulnerability VCID-xtdg-uj46-rkcm
69
vulnerability VCID-xy6y-312d-rygj
70
vulnerability VCID-y32z-2d3f-gkgw
71
vulnerability VCID-zdq2-dhb2-6kaq
72
vulnerability VCID-zkea-ge1t-z7gn
73
vulnerability VCID-zn99-ywte-33g6
74
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.4
aliases 2019-01-22-1
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wea9-egep-h7g5
70
url VCID-xa4m-xpa9-v7h8
vulnerability_id VCID-xa4m-xpa9-v7h8
summary 
TYPO3 Insecure Deserialization in Query Generator & Query View
An issue was discovered in TYPO3 before 8.7.30, 9.x before 9.5.12, and 10.x before 10.2.2. It has been discovered that the classes QueryGenerator and QueryView are vulnerable to insecure deserialization. One exploitable scenario requires having the system extension ext:lowlevel (Backend Module: DB Check) installed, with a valid backend user who has administrator privileges. The other exploitable scenario requires having the system extension ext:sys_action installed, with a valid backend user who has limited privileges.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-19849
reference_id
reference_type
scores
0
value 0.00746
scoring_system epss
scoring_elements 0.73111
published_at 2026-04-18T12:55:00Z
1
value 0.00746
scoring_system epss
scoring_elements 0.73005
published_at 2026-04-01T12:55:00Z
2
value 0.00746
scoring_system epss
scoring_elements 0.73015
published_at 2026-04-02T12:55:00Z
3
value 0.00746
scoring_system epss
scoring_elements 0.73036
published_at 2026-04-04T12:55:00Z
4
value 0.00746
scoring_system epss
scoring_elements 0.73011
published_at 2026-04-07T12:55:00Z
5
value 0.00746
scoring_system epss
scoring_elements 0.73048
published_at 2026-04-08T12:55:00Z
6
value 0.00746
scoring_system epss
scoring_elements 0.73061
published_at 2026-04-09T12:55:00Z
7
value 0.00746
scoring_system epss
scoring_elements 0.73085
published_at 2026-04-11T12:55:00Z
8
value 0.00746
scoring_system epss
scoring_elements 0.73065
published_at 2026-04-12T12:55:00Z
9
value 0.00746
scoring_system epss
scoring_elements 0.73058
published_at 2026-04-13T12:55:00Z
10
value 0.00746
scoring_system epss
scoring_elements 0.73101
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-19849
1
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2019-19849.yaml
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2019-19849.yaml
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2019-19849.yaml
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2019-19849.yaml
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-19849
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-19849
4
reference_url https://review.typo3.org/q/%2522Resolves:+%252389005%2522+topic:security
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://review.typo3.org/q/%2522Resolves:+%252389005%2522+topic:security
5
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-026
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2019-026
6
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-026/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-026/
7
reference_url https://github.com/advisories/GHSA-rcgc-4xfc-564v
reference_id GHSA-rcgc-4xfc-564v
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-rcgc-4xfc-564v
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.30
purl pkg:composer/typo3/cms-core@8.7.30
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4jpa-6fqh-hbfg
1
vulnerability VCID-5jgb-dsyx-hyb4
2
vulnerability VCID-5paq-5frf-43ed
3
vulnerability VCID-axvk-13qf-tka7
4
vulnerability VCID-b6er-h7dm-3bev
5
vulnerability VCID-bajy-qbwq-fufn
6
vulnerability VCID-dsu7-jjjq-f3e1
7
vulnerability VCID-ekfd-wp8z-d7e1
8
vulnerability VCID-f963-qur3-2qb7
9
vulnerability VCID-g4uc-qeb6-myed
10
vulnerability VCID-gv1b-xtv4-4yg3
11
vulnerability VCID-h6y3-7gsq-skh2
12
vulnerability VCID-he5m-6wj4-rbhc
13
vulnerability VCID-mnz3-rj21-67ad
14
vulnerability VCID-n15v-ta9h-6ffb
15
vulnerability VCID-n7ng-zkkb-2qaz
16
vulnerability VCID-s55j-8hbt-akhn
17
vulnerability VCID-s64f-x81f-b7ce
18
vulnerability VCID-t1n7-eswt-73gw
19
vulnerability VCID-t3jn-vwbx-u7cr
20
vulnerability VCID-taj6-zj2n-5kg8
21
vulnerability VCID-vyvy-y3cw-hbgr
22
vulnerability VCID-xh7y-56vy-5ud8
23
vulnerability VCID-y32z-2d3f-gkgw
24
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.30
1
url pkg:composer/typo3/cms-core@9.5.12
purl pkg:composer/typo3/cms-core@9.5.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mn6-mdmz-4yd9
1
vulnerability VCID-4jpa-6fqh-hbfg
2
vulnerability VCID-4t9s-p25a-cfas
3
vulnerability VCID-543x-cnbz-1kb9
4
vulnerability VCID-58js-jzm4-4fc7
5
vulnerability VCID-5jgb-dsyx-hyb4
6
vulnerability VCID-5kzs-ex81-bbaj
7
vulnerability VCID-5paq-5frf-43ed
8
vulnerability VCID-65ue-7jd9-23gf
9
vulnerability VCID-6a9t-8dmn-s3bv
10
vulnerability VCID-7kjw-j8st-mqfr
11
vulnerability VCID-8d2m-1ffv-jqe1
12
vulnerability VCID-a49c-fqrj-nbb3
13
vulnerability VCID-axvk-13qf-tka7
14
vulnerability VCID-b6er-h7dm-3bev
15
vulnerability VCID-bajy-qbwq-fufn
16
vulnerability VCID-d8d1-sat6-muhe
17
vulnerability VCID-dsu7-jjjq-f3e1
18
vulnerability VCID-e32h-8q61-hbgc
19
vulnerability VCID-ekfd-wp8z-d7e1
20
vulnerability VCID-f963-qur3-2qb7
21
vulnerability VCID-g4uc-qeb6-myed
22
vulnerability VCID-gv1b-xtv4-4yg3
23
vulnerability VCID-h6y3-7gsq-skh2
24
vulnerability VCID-he5m-6wj4-rbhc
25
vulnerability VCID-mnz3-rj21-67ad
26
vulnerability VCID-mud2-s4rc-fuf6
27
vulnerability VCID-n15v-ta9h-6ffb
28
vulnerability VCID-n7ng-zkkb-2qaz
29
vulnerability VCID-nubu-f1sc-gbes
30
vulnerability VCID-phgh-sd4m-zbdx
31
vulnerability VCID-remd-55jh-r3g5
32
vulnerability VCID-s55j-8hbt-akhn
33
vulnerability VCID-s64f-x81f-b7ce
34
vulnerability VCID-sw7v-fbjk-13hy
35
vulnerability VCID-t1n7-eswt-73gw
36
vulnerability VCID-t3jn-vwbx-u7cr
37
vulnerability VCID-taj6-zj2n-5kg8
38
vulnerability VCID-ve7g-8st5-wffb
39
vulnerability VCID-vyvy-y3cw-hbgr
40
vulnerability VCID-w13x-3rp9-wyej
41
vulnerability VCID-xh7y-56vy-5ud8
42
vulnerability VCID-xy6y-312d-rygj
43
vulnerability VCID-y32z-2d3f-gkgw
44
vulnerability VCID-zdq2-dhb2-6kaq
45
vulnerability VCID-zn99-ywte-33g6
46
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.12
2
url pkg:composer/typo3/cms-core@10.2.1
purl pkg:composer/typo3/cms-core@10.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1yxw-saf5-wue7
1
vulnerability VCID-2mn6-mdmz-4yd9
2
vulnerability VCID-3n2r-awja-dug9
3
vulnerability VCID-4jpa-6fqh-hbfg
4
vulnerability VCID-4t9s-p25a-cfas
5
vulnerability VCID-543x-cnbz-1kb9
6
vulnerability VCID-58js-jzm4-4fc7
7
vulnerability VCID-5jgb-dsyx-hyb4
8
vulnerability VCID-5kzs-ex81-bbaj
9
vulnerability VCID-5paq-5frf-43ed
10
vulnerability VCID-65ue-7jd9-23gf
11
vulnerability VCID-6a9t-8dmn-s3bv
12
vulnerability VCID-7kjw-j8st-mqfr
13
vulnerability VCID-8d2m-1ffv-jqe1
14
vulnerability VCID-8sdd-b1bn-cuhx
15
vulnerability VCID-a49c-fqrj-nbb3
16
vulnerability VCID-a89c-jvwa-6kh5
17
vulnerability VCID-av8u-rvzq-4fc7
18
vulnerability VCID-axvk-13qf-tka7
19
vulnerability VCID-b6er-h7dm-3bev
20
vulnerability VCID-bajy-qbwq-fufn
21
vulnerability VCID-cdjv-fp71-y3dv
22
vulnerability VCID-d8d1-sat6-muhe
23
vulnerability VCID-dhrm-uxuv-zfaj
24
vulnerability VCID-dsu7-jjjq-f3e1
25
vulnerability VCID-e32h-8q61-hbgc
26
vulnerability VCID-ekfd-wp8z-d7e1
27
vulnerability VCID-f963-qur3-2qb7
28
vulnerability VCID-g4uc-qeb6-myed
29
vulnerability VCID-gcnj-6qb6-pbgz
30
vulnerability VCID-gv1b-xtv4-4yg3
31
vulnerability VCID-gyyu-n3b1-zbcj
32
vulnerability VCID-h6y3-7gsq-skh2
33
vulnerability VCID-he5m-6wj4-rbhc
34
vulnerability VCID-mnz3-rj21-67ad
35
vulnerability VCID-mud2-s4rc-fuf6
36
vulnerability VCID-n15v-ta9h-6ffb
37
vulnerability VCID-n7ng-zkkb-2qaz
38
vulnerability VCID-nubu-f1sc-gbes
39
vulnerability VCID-phgh-sd4m-zbdx
40
vulnerability VCID-remd-55jh-r3g5
41
vulnerability VCID-s55j-8hbt-akhn
42
vulnerability VCID-s64f-x81f-b7ce
43
vulnerability VCID-sw7v-fbjk-13hy
44
vulnerability VCID-t1n7-eswt-73gw
45
vulnerability VCID-t3jn-vwbx-u7cr
46
vulnerability VCID-taj6-zj2n-5kg8
47
vulnerability VCID-usmv-r64u-m7cb
48
vulnerability VCID-ve7g-8st5-wffb
49
vulnerability VCID-vwb2-a84s-5qak
50
vulnerability VCID-vyvy-y3cw-hbgr
51
vulnerability VCID-w13x-3rp9-wyej
52
vulnerability VCID-xh7y-56vy-5ud8
53
vulnerability VCID-xy6y-312d-rygj
54
vulnerability VCID-y32z-2d3f-gkgw
55
vulnerability VCID-zdq2-dhb2-6kaq
56
vulnerability VCID-zn99-ywte-33g6
57
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@10.2.1
aliases CVE-2019-19849, GHSA-rcgc-4xfc-564v
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xa4m-xpa9-v7h8
71
url VCID-xh7y-56vy-5ud8
vulnerability_id VCID-xh7y-56vy-5ud8
summary 
Unrestricted File Upload in Form Framework
### Problem
Due to the lack of ensuring file extensions belong to configured allowed mime-types, attackers can upload arbitrary data with arbitrary file extensions - however, default _fileDenyPattern_ successfully blocked files like _.htaccess_ or _malicious.php_.

TYPO3 Extbase extensions, which implement a file upload and do not implement a custom _TypeConverter_ to transform uploaded files into _FileReference_ domain model objects are affected by the vulnerability as well, since the _UploadedFileReferenceConverter_ of _ext:form_ handles the file upload and will accept files of any mime-type which are persisted to the default location.

In any way, uploaded files are placed in the default location _/fileadmin/user_upload/_, in most scenarios keeping the submitted filename - which allows attackers to directly reference files, or even correctly guess filenames used by other individuals, disclosing this information.

No authentication is required to exploit this vulnerability.

### Solution
Update to TYPO3 versions 8.7.40, 9.5.25, 10.4.14, 11.1.1 that fix the problem described.

Type converter _UploadedFileReferenceConverter_ is not registered globally anymore and just handles uploaded files within the scope of the Form Framework. Guessable storage location has changed from _/fileadmin/user_upload/form\_\<random-hash\>/_ to _/fileadmin/form_uploads/<random-40-bit>_. Allowed mime-types must match expected file extensions (e.g. _application/pdf_ must be _.pdf_, and cannot be _.html_).

Extbase extensions, who rely on the global availability of the _UploadedFileReferenceConverter_ must now implement a custom _TypeConverter_ to handle file uploads or explicitly implement the ext:form _UploadedFileReferenceConverter_ with appropriate setting for accepted mime-types.

### Credits
Thanks to Sebastian Michaelsen, Marc Lindemann, Oliver Eglseder, Markus Volkmer, Jakob Kunzmann, Johannes Regner, Richie Lee who reported this issue, and to TYPO3 core & security team members Oliver Hader & Benni Mack, as well as TYPO3 contributor Ralf Zimmermann who fixed the issue.

### References
* [TYPO3-CORE-SA-2021-002](https://typo3.org/security/advisory/typo3-core-sa-2021-002)
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-21355
reference_id
reference_type
scores
0
value 0.00416
scoring_system epss
scoring_elements 0.61782
published_at 2026-04-18T12:55:00Z
1
value 0.00416
scoring_system epss
scoring_elements 0.61606
published_at 2026-04-01T12:55:00Z
2
value 0.00416
scoring_system epss
scoring_elements 0.6168
published_at 2026-04-02T12:55:00Z
3
value 0.00416
scoring_system epss
scoring_elements 0.6171
published_at 2026-04-04T12:55:00Z
4
value 0.00416
scoring_system epss
scoring_elements 0.61682
published_at 2026-04-07T12:55:00Z
5
value 0.00416
scoring_system epss
scoring_elements 0.6173
published_at 2026-04-08T12:55:00Z
6
value 0.00416
scoring_system epss
scoring_elements 0.61746
published_at 2026-04-09T12:55:00Z
7
value 0.00416
scoring_system epss
scoring_elements 0.61767
published_at 2026-04-11T12:55:00Z
8
value 0.00416
scoring_system epss
scoring_elements 0.61755
published_at 2026-04-12T12:55:00Z
9
value 0.00416
scoring_system epss
scoring_elements 0.61736
published_at 2026-04-13T12:55:00Z
10
value 0.00416
scoring_system epss
scoring_elements 0.61777
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-21355
1
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21355.yaml
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L/E:F/RL:O/RC:C
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21355.yaml
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21355.yaml
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L/E:F/RL:O/RC:C
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21355.yaml
3
reference_url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-2r6j-862c-m2v2
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L/E:F/RL:O/RC:C
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-2r6j-862c-m2v2
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-21355
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L/E:F/RL:O/RC:C
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-21355
5
reference_url https://packagist.org/packages/typo3/cms-form
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L/E:F/RL:O/RC:C
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://packagist.org/packages/typo3/cms-form
6
reference_url https://typo3.org/security/advisory/typo3-core-sa-2021-002
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L/E:F/RL:O/RC:C
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2021-002
7
reference_url https://github.com/advisories/GHSA-2r6j-862c-m2v2
reference_id GHSA-2r6j-862c-m2v2
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-2r6j-862c-m2v2
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.40
purl pkg:composer/typo3/cms-core@8.7.40
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ekfd-wp8z-d7e1
1
vulnerability VCID-n15v-ta9h-6ffb
2
vulnerability VCID-s64f-x81f-b7ce
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.40
1
url pkg:composer/typo3/cms-core@9.5.25
purl pkg:composer/typo3/cms-core@9.5.25
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4jpa-6fqh-hbfg
1
vulnerability VCID-4t9s-p25a-cfas
2
vulnerability VCID-5paq-5frf-43ed
3
vulnerability VCID-65ue-7jd9-23gf
4
vulnerability VCID-6a9t-8dmn-s3bv
5
vulnerability VCID-8d2m-1ffv-jqe1
6
vulnerability VCID-axvk-13qf-tka7
7
vulnerability VCID-b6er-h7dm-3bev
8
vulnerability VCID-bajy-qbwq-fufn
9
vulnerability VCID-e32h-8q61-hbgc
10
vulnerability VCID-ekfd-wp8z-d7e1
11
vulnerability VCID-g4uc-qeb6-myed
12
vulnerability VCID-gv1b-xtv4-4yg3
13
vulnerability VCID-h6y3-7gsq-skh2
14
vulnerability VCID-mnz3-rj21-67ad
15
vulnerability VCID-mud2-s4rc-fuf6
16
vulnerability VCID-n15v-ta9h-6ffb
17
vulnerability VCID-n7ng-zkkb-2qaz
18
vulnerability VCID-nubu-f1sc-gbes
19
vulnerability VCID-remd-55jh-r3g5
20
vulnerability VCID-s55j-8hbt-akhn
21
vulnerability VCID-s64f-x81f-b7ce
22
vulnerability VCID-t1n7-eswt-73gw
23
vulnerability VCID-taj6-zj2n-5kg8
24
vulnerability VCID-ve7g-8st5-wffb
25
vulnerability VCID-vyvy-y3cw-hbgr
26
vulnerability VCID-w13x-3rp9-wyej
27
vulnerability VCID-xy6y-312d-rygj
28
vulnerability VCID-y32z-2d3f-gkgw
29
vulnerability VCID-zdq2-dhb2-6kaq
30
vulnerability VCID-zn99-ywte-33g6
31
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.25
2
url pkg:composer/typo3/cms-core@10.4.14
purl pkg:composer/typo3/cms-core@10.4.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-1yxw-saf5-wue7
2
vulnerability VCID-4jpa-6fqh-hbfg
3
vulnerability VCID-4t9s-p25a-cfas
4
vulnerability VCID-5paq-5frf-43ed
5
vulnerability VCID-65ue-7jd9-23gf
6
vulnerability VCID-6a9t-8dmn-s3bv
7
vulnerability VCID-8d2m-1ffv-jqe1
8
vulnerability VCID-8sdd-b1bn-cuhx
9
vulnerability VCID-av8u-rvzq-4fc7
10
vulnerability VCID-axvk-13qf-tka7
11
vulnerability VCID-b6er-h7dm-3bev
12
vulnerability VCID-bajy-qbwq-fufn
13
vulnerability VCID-e32h-8q61-hbgc
14
vulnerability VCID-ekfd-wp8z-d7e1
15
vulnerability VCID-g4uc-qeb6-myed
16
vulnerability VCID-gv1b-xtv4-4yg3
17
vulnerability VCID-gyyu-n3b1-zbcj
18
vulnerability VCID-h6y3-7gsq-skh2
19
vulnerability VCID-mnz3-rj21-67ad
20
vulnerability VCID-mud2-s4rc-fuf6
21
vulnerability VCID-n15v-ta9h-6ffb
22
vulnerability VCID-n7ng-zkkb-2qaz
23
vulnerability VCID-nubu-f1sc-gbes
24
vulnerability VCID-remd-55jh-r3g5
25
vulnerability VCID-s55j-8hbt-akhn
26
vulnerability VCID-s64f-x81f-b7ce
27
vulnerability VCID-t1n7-eswt-73gw
28
vulnerability VCID-taj6-zj2n-5kg8
29
vulnerability VCID-ve7g-8st5-wffb
30
vulnerability VCID-vwb2-a84s-5qak
31
vulnerability VCID-vyvy-y3cw-hbgr
32
vulnerability VCID-w13x-3rp9-wyej
33
vulnerability VCID-xy6y-312d-rygj
34
vulnerability VCID-y32z-2d3f-gkgw
35
vulnerability VCID-zdq2-dhb2-6kaq
36
vulnerability VCID-zn99-ywte-33g6
37
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@10.4.14
3
url pkg:composer/typo3/cms-core@11.1.1
purl pkg:composer/typo3/cms-core@11.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-1yxw-saf5-wue7
2
vulnerability VCID-4jpa-6fqh-hbfg
3
vulnerability VCID-4t9s-p25a-cfas
4
vulnerability VCID-5paq-5frf-43ed
5
vulnerability VCID-65ue-7jd9-23gf
6
vulnerability VCID-6a9t-8dmn-s3bv
7
vulnerability VCID-8d2m-1ffv-jqe1
8
vulnerability VCID-8sdd-b1bn-cuhx
9
vulnerability VCID-av8u-rvzq-4fc7
10
vulnerability VCID-axvk-13qf-tka7
11
vulnerability VCID-b6er-h7dm-3bev
12
vulnerability VCID-bajy-qbwq-fufn
13
vulnerability VCID-e32h-8q61-hbgc
14
vulnerability VCID-ekfd-wp8z-d7e1
15
vulnerability VCID-g4uc-qeb6-myed
16
vulnerability VCID-gv1b-xtv4-4yg3
17
vulnerability VCID-gyyu-n3b1-zbcj
18
vulnerability VCID-h6y3-7gsq-skh2
19
vulnerability VCID-mnz3-rj21-67ad
20
vulnerability VCID-mud2-s4rc-fuf6
21
vulnerability VCID-n15v-ta9h-6ffb
22
vulnerability VCID-n7ng-zkkb-2qaz
23
vulnerability VCID-nubu-f1sc-gbes
24
vulnerability VCID-remd-55jh-r3g5
25
vulnerability VCID-s55j-8hbt-akhn
26
vulnerability VCID-s64f-x81f-b7ce
27
vulnerability VCID-t1n7-eswt-73gw
28
vulnerability VCID-taj6-zj2n-5kg8
29
vulnerability VCID-uyeu-a3xr-fkh4
30
vulnerability VCID-ve7g-8st5-wffb
31
vulnerability VCID-vwb2-a84s-5qak
32
vulnerability VCID-vyvy-y3cw-hbgr
33
vulnerability VCID-w13x-3rp9-wyej
34
vulnerability VCID-xy6y-312d-rygj
35
vulnerability VCID-y32z-2d3f-gkgw
36
vulnerability VCID-zdq2-dhb2-6kaq
37
vulnerability VCID-zn99-ywte-33g6
38
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@11.1.1
aliases CVE-2021-21355, GHSA-2r6j-862c-m2v2
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xh7y-56vy-5ud8
72
url VCID-y32z-2d3f-gkgw
vulnerability_id VCID-y32z-2d3f-gkgw
summary 
Cross-site Scripting
TYPO3 is vulnerable to cross-site scripting. Corresponding rendering instructions via TypoScript functionality HTMLparser does not consider all potentially malicious HTML tag & attribute combinations per default. In default scenarios, a valid backend user account is needed to exploit this vulnerability. In case custom plugins used in the website frontend accept and reflect rich-text content submitted by users, no authentication is required.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-32768
reference_id
reference_type
scores
0
value 0.00284
scoring_system epss
scoring_elements 0.51812
published_at 2026-04-08T12:55:00Z
1
value 0.00284
scoring_system epss
scoring_elements 0.51874
published_at 2026-04-18T12:55:00Z
2
value 0.00284
scoring_system epss
scoring_elements 0.51867
published_at 2026-04-16T12:55:00Z
3
value 0.00284
scoring_system epss
scoring_elements 0.51825
published_at 2026-04-13T12:55:00Z
4
value 0.00284
scoring_system epss
scoring_elements 0.5184
published_at 2026-04-12T12:55:00Z
5
value 0.00284
scoring_system epss
scoring_elements 0.5186
published_at 2026-04-11T12:55:00Z
6
value 0.00284
scoring_system epss
scoring_elements 0.51771
published_at 2026-04-02T12:55:00Z
7
value 0.00284
scoring_system epss
scoring_elements 0.51797
published_at 2026-04-04T12:55:00Z
8
value 0.00284
scoring_system epss
scoring_elements 0.51757
published_at 2026-04-07T12:55:00Z
9
value 0.00284
scoring_system epss
scoring_elements 0.51722
published_at 2026-04-01T12:55:00Z
10
value 0.00284
scoring_system epss
scoring_elements 0.51809
published_at 2026-04-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-32768
1
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-32768.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-32768.yaml
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-32768.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-32768.yaml
3
reference_url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-c5c9-8c6m-727v
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-c5c9-8c6m-727v
4
reference_url https://github.com/TYPO3/typo3/security/advisories/GHSA-c5c9-8c6m-727v
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/security/advisories/GHSA-c5c9-8c6m-727v
5
reference_url https://typo3.org/security/advisory/typo3-core-sa-2021-013
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2021-013
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-32768
reference_id CVE-2021-32768
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-32768
7
reference_url https://github.com/advisories/GHSA-c5c9-8c6m-727v
reference_id GHSA-c5c9-8c6m-727v
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-c5c9-8c6m-727v
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.42
purl pkg:composer/typo3/cms-core@8.7.42
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.42
1
url pkg:composer/typo3/cms-core@9.5.29
purl pkg:composer/typo3/cms-core@9.5.29
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4jpa-6fqh-hbfg
1
vulnerability VCID-4t9s-p25a-cfas
2
vulnerability VCID-5paq-5frf-43ed
3
vulnerability VCID-65ue-7jd9-23gf
4
vulnerability VCID-8d2m-1ffv-jqe1
5
vulnerability VCID-axvk-13qf-tka7
6
vulnerability VCID-b6er-h7dm-3bev
7
vulnerability VCID-bajy-qbwq-fufn
8
vulnerability VCID-e32h-8q61-hbgc
9
vulnerability VCID-g4uc-qeb6-myed
10
vulnerability VCID-gv1b-xtv4-4yg3
11
vulnerability VCID-h6y3-7gsq-skh2
12
vulnerability VCID-mnz3-rj21-67ad
13
vulnerability VCID-mud2-s4rc-fuf6
14
vulnerability VCID-n7ng-zkkb-2qaz
15
vulnerability VCID-nubu-f1sc-gbes
16
vulnerability VCID-remd-55jh-r3g5
17
vulnerability VCID-s55j-8hbt-akhn
18
vulnerability VCID-t1n7-eswt-73gw
19
vulnerability VCID-taj6-zj2n-5kg8
20
vulnerability VCID-ve7g-8st5-wffb
21
vulnerability VCID-vyvy-y3cw-hbgr
22
vulnerability VCID-w13x-3rp9-wyej
23
vulnerability VCID-xy6y-312d-rygj
24
vulnerability VCID-zdq2-dhb2-6kaq
25
vulnerability VCID-zn99-ywte-33g6
26
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.29
2
url pkg:composer/typo3/cms-core@10.4.19
purl pkg:composer/typo3/cms-core@10.4.19
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-1yxw-saf5-wue7
2
vulnerability VCID-4jpa-6fqh-hbfg
3
vulnerability VCID-4t9s-p25a-cfas
4
vulnerability VCID-5paq-5frf-43ed
5
vulnerability VCID-65ue-7jd9-23gf
6
vulnerability VCID-8d2m-1ffv-jqe1
7
vulnerability VCID-8sdd-b1bn-cuhx
8
vulnerability VCID-av8u-rvzq-4fc7
9
vulnerability VCID-axvk-13qf-tka7
10
vulnerability VCID-b6er-h7dm-3bev
11
vulnerability VCID-bajy-qbwq-fufn
12
vulnerability VCID-e32h-8q61-hbgc
13
vulnerability VCID-g4uc-qeb6-myed
14
vulnerability VCID-gv1b-xtv4-4yg3
15
vulnerability VCID-gyyu-n3b1-zbcj
16
vulnerability VCID-h6y3-7gsq-skh2
17
vulnerability VCID-mnz3-rj21-67ad
18
vulnerability VCID-mud2-s4rc-fuf6
19
vulnerability VCID-n7ng-zkkb-2qaz
20
vulnerability VCID-nubu-f1sc-gbes
21
vulnerability VCID-remd-55jh-r3g5
22
vulnerability VCID-s55j-8hbt-akhn
23
vulnerability VCID-t1n7-eswt-73gw
24
vulnerability VCID-taj6-zj2n-5kg8
25
vulnerability VCID-ve7g-8st5-wffb
26
vulnerability VCID-vwb2-a84s-5qak
27
vulnerability VCID-vyvy-y3cw-hbgr
28
vulnerability VCID-w13x-3rp9-wyej
29
vulnerability VCID-xy6y-312d-rygj
30
vulnerability VCID-zdq2-dhb2-6kaq
31
vulnerability VCID-zn99-ywte-33g6
32
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@10.4.19
3
url pkg:composer/typo3/cms-core@11.3.2
purl pkg:composer/typo3/cms-core@11.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-1yxw-saf5-wue7
2
vulnerability VCID-4jpa-6fqh-hbfg
3
vulnerability VCID-4t9s-p25a-cfas
4
vulnerability VCID-5paq-5frf-43ed
5
vulnerability VCID-65ue-7jd9-23gf
6
vulnerability VCID-8d2m-1ffv-jqe1
7
vulnerability VCID-8sdd-b1bn-cuhx
8
vulnerability VCID-av8u-rvzq-4fc7
9
vulnerability VCID-axvk-13qf-tka7
10
vulnerability VCID-b6er-h7dm-3bev
11
vulnerability VCID-bajy-qbwq-fufn
12
vulnerability VCID-e32h-8q61-hbgc
13
vulnerability VCID-g4uc-qeb6-myed
14
vulnerability VCID-gv1b-xtv4-4yg3
15
vulnerability VCID-gyyu-n3b1-zbcj
16
vulnerability VCID-h6y3-7gsq-skh2
17
vulnerability VCID-jjbn-6efk-nud2
18
vulnerability VCID-mnz3-rj21-67ad
19
vulnerability VCID-mud2-s4rc-fuf6
20
vulnerability VCID-n7ng-zkkb-2qaz
21
vulnerability VCID-nubu-f1sc-gbes
22
vulnerability VCID-remd-55jh-r3g5
23
vulnerability VCID-s55j-8hbt-akhn
24
vulnerability VCID-t1n7-eswt-73gw
25
vulnerability VCID-taj6-zj2n-5kg8
26
vulnerability VCID-uyeu-a3xr-fkh4
27
vulnerability VCID-ve7g-8st5-wffb
28
vulnerability VCID-vwb2-a84s-5qak
29
vulnerability VCID-vyvy-y3cw-hbgr
30
vulnerability VCID-w13x-3rp9-wyej
31
vulnerability VCID-xy6y-312d-rygj
32
vulnerability VCID-zdq2-dhb2-6kaq
33
vulnerability VCID-zn99-ywte-33g6
34
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@11.3.2
aliases CVE-2021-32768, GHSA-c5c9-8c6m-727v
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-y32z-2d3f-gkgw
73
url VCID-zdq2-dhb2-6kaq
vulnerability_id VCID-zdq2-dhb2-6kaq
summary 
TYPO3 CMS vulnerable to Weak Authentication in Frontend Login
### Problem
Restricting frontend login to specific users, organized in different storage folders (partitions), can be bypassed. A potential attacker might use this ambiguity in usernames to get access to a different account - however, credentials must be known to the adversary.

### Solution
Update to TYPO3 versions 8.7.49 ELTS, 9.5.38 ELTS, 10.4.33, 11.5.20, 12.1.1 that fix the problem described above.

### References
* [TYPO3-CORE-SA-2022-013](https://typo3.org/security/advisory/typo3-core-sa-2022-013)
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-23501
reference_id
reference_type
scores
0
value 0.00229
scoring_system epss
scoring_elements 0.45749
published_at 2026-04-08T12:55:00Z
1
value 0.00229
scoring_system epss
scoring_elements 0.4579
published_at 2026-04-18T12:55:00Z
2
value 0.00229
scoring_system epss
scoring_elements 0.45795
published_at 2026-04-16T12:55:00Z
3
value 0.00229
scoring_system epss
scoring_elements 0.45746
published_at 2026-04-13T12:55:00Z
4
value 0.00229
scoring_system epss
scoring_elements 0.45738
published_at 2026-04-12T12:55:00Z
5
value 0.00229
scoring_system epss
scoring_elements 0.45768
published_at 2026-04-11T12:55:00Z
6
value 0.00229
scoring_system epss
scoring_elements 0.45745
published_at 2026-04-09T12:55:00Z
7
value 0.00229
scoring_system epss
scoring_elements 0.45724
published_at 2026-04-02T12:55:00Z
8
value 0.00229
scoring_system epss
scoring_elements 0.45744
published_at 2026-04-04T12:55:00Z
9
value 0.00229
scoring_system epss
scoring_elements 0.45693
published_at 2026-04-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-23501
1
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2022-23501.yaml
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2022-23501.yaml
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2022-23501.yaml
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2022-23501.yaml
3
reference_url https://github.com/TYPO3/typo3
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3
4
reference_url https://github.com/TYPO3/typo3/commit/28be9cdb3fed02ce4cfc6fa2d39f7d8e2266eced
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/28be9cdb3fed02ce4cfc6fa2d39f7d8e2266eced
5
reference_url https://github.com/TYPO3/typo3/security/advisories/GHSA-jfp7-79g7-89rf
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-21T18:48:00Z/
url https://github.com/TYPO3/typo3/security/advisories/GHSA-jfp7-79g7-89rf
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-23501
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-23501
7
reference_url https://typo3.org/security/advisory/typo3-core-sa-2022-013
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2022-013
8
reference_url https://github.com/advisories/GHSA-jfp7-79g7-89rf
reference_id GHSA-jfp7-79g7-89rf
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-jfp7-79g7-89rf
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.49
purl pkg:composer/typo3/cms-core@8.7.49
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.49
1
url pkg:composer/typo3/cms-core@9.5.38
purl pkg:composer/typo3/cms-core@9.5.38
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.38
2
url pkg:composer/typo3/cms-core@10.4.33
purl pkg:composer/typo3/cms-core@10.4.33
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-4t9s-p25a-cfas
2
vulnerability VCID-65ue-7jd9-23gf
3
vulnerability VCID-8d2m-1ffv-jqe1
4
vulnerability VCID-axvk-13qf-tka7
5
vulnerability VCID-g4uc-qeb6-myed
6
vulnerability VCID-gv1b-xtv4-4yg3
7
vulnerability VCID-gyyu-n3b1-zbcj
8
vulnerability VCID-h6y3-7gsq-skh2
9
vulnerability VCID-mud2-s4rc-fuf6
10
vulnerability VCID-n7ng-zkkb-2qaz
11
vulnerability VCID-nubu-f1sc-gbes
12
vulnerability VCID-taj6-zj2n-5kg8
13
vulnerability VCID-vyvy-y3cw-hbgr
14
vulnerability VCID-xy6y-312d-rygj
15
vulnerability VCID-zn99-ywte-33g6
16
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@10.4.33
3
url pkg:composer/typo3/cms-core@11.5.20
purl pkg:composer/typo3/cms-core@11.5.20
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-4t9s-p25a-cfas
2
vulnerability VCID-65ue-7jd9-23gf
3
vulnerability VCID-8d2m-1ffv-jqe1
4
vulnerability VCID-axvk-13qf-tka7
5
vulnerability VCID-g4uc-qeb6-myed
6
vulnerability VCID-gv1b-xtv4-4yg3
7
vulnerability VCID-gyyu-n3b1-zbcj
8
vulnerability VCID-h6y3-7gsq-skh2
9
vulnerability VCID-mud2-s4rc-fuf6
10
vulnerability VCID-n7ng-zkkb-2qaz
11
vulnerability VCID-nubu-f1sc-gbes
12
vulnerability VCID-taj6-zj2n-5kg8
13
vulnerability VCID-vyvy-y3cw-hbgr
14
vulnerability VCID-xy6y-312d-rygj
15
vulnerability VCID-zn99-ywte-33g6
16
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@11.5.20
4
url pkg:composer/typo3/cms-core@12.1.1
purl pkg:composer/typo3/cms-core@12.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1r9g-c5rn-ukgb
1
vulnerability VCID-4t9s-p25a-cfas
2
vulnerability VCID-65ue-7jd9-23gf
3
vulnerability VCID-8d2m-1ffv-jqe1
4
vulnerability VCID-axvk-13qf-tka7
5
vulnerability VCID-g4uc-qeb6-myed
6
vulnerability VCID-gv1b-xtv4-4yg3
7
vulnerability VCID-gyyu-n3b1-zbcj
8
vulnerability VCID-h6y3-7gsq-skh2
9
vulnerability VCID-jxw7-skw6-q7bg
10
vulnerability VCID-mud2-s4rc-fuf6
11
vulnerability VCID-n7ng-zkkb-2qaz
12
vulnerability VCID-nubu-f1sc-gbes
13
vulnerability VCID-taj6-zj2n-5kg8
14
vulnerability VCID-vyvy-y3cw-hbgr
15
vulnerability VCID-xy6y-312d-rygj
16
vulnerability VCID-zn99-ywte-33g6
17
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@12.1.1
aliases CVE-2022-23501, GHSA-jfp7-79g7-89rf, GMS-2022-8134
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zdq2-dhb2-6kaq
74
url VCID-zkea-ge1t-z7gn
vulnerability_id VCID-zkea-ge1t-z7gn
summary 
Cross-site Scripting
TYPO3 allows XSS.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-12748
reference_id
reference_type
scores
0
value 0.00301
scoring_system epss
scoring_elements 0.53353
published_at 2026-04-01T12:55:00Z
1
value 0.00301
scoring_system epss
scoring_elements 0.53478
published_at 2026-04-18T12:55:00Z
2
value 0.00301
scoring_system epss
scoring_elements 0.53473
published_at 2026-04-16T12:55:00Z
3
value 0.00301
scoring_system epss
scoring_elements 0.53435
published_at 2026-04-13T12:55:00Z
4
value 0.00301
scoring_system epss
scoring_elements 0.53452
published_at 2026-04-12T12:55:00Z
5
value 0.00301
scoring_system epss
scoring_elements 0.53468
published_at 2026-04-11T12:55:00Z
6
value 0.00301
scoring_system epss
scoring_elements 0.53418
published_at 2026-04-09T12:55:00Z
7
value 0.00301
scoring_system epss
scoring_elements 0.53423
published_at 2026-04-08T12:55:00Z
8
value 0.00301
scoring_system epss
scoring_elements 0.53371
published_at 2026-04-07T12:55:00Z
9
value 0.00301
scoring_system epss
scoring_elements 0.53402
published_at 2026-04-04T12:55:00Z
10
value 0.00301
scoring_system epss
scoring_elements 0.53376
published_at 2026-04-02T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-12748
1
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2019-12748.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2019-12748.yaml
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2019-12748.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2019-12748.yaml
3
reference_url https://github.com/TYPO3-CMS/core
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core
4
reference_url https://typo3.org/cms/release-news/typo3-8-release-notes
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/cms/release-news/typo3-8-release-notes
5
reference_url https://typo3.org/cms/release-news/typo3-8-release-notes/
reference_id
reference_type
scores
url https://typo3.org/cms/release-news/typo3-8-release-notes/
6
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-015
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2019-015
7
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-015/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-015/
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-12748
reference_id CVE-2019-12748
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-12748
9
reference_url https://github.com/advisories/GHSA-r6fv-56gp-j3r4
reference_id GHSA-r6fv-56gp-j3r4
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-r6fv-56gp-j3r4
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.27
purl pkg:composer/typo3/cms-core@8.7.27
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3n2r-awja-dug9
1
vulnerability VCID-4jpa-6fqh-hbfg
2
vulnerability VCID-5jgb-dsyx-hyb4
3
vulnerability VCID-5paq-5frf-43ed
4
vulnerability VCID-5u4q-m66t-wqcj
5
vulnerability VCID-axvk-13qf-tka7
6
vulnerability VCID-b6er-h7dm-3bev
7
vulnerability VCID-bajy-qbwq-fufn
8
vulnerability VCID-dsu7-jjjq-f3e1
9
vulnerability VCID-ekfd-wp8z-d7e1
10
vulnerability VCID-f963-qur3-2qb7
11
vulnerability VCID-g4uc-qeb6-myed
12
vulnerability VCID-gcnj-6qb6-pbgz
13
vulnerability VCID-gv1b-xtv4-4yg3
14
vulnerability VCID-h6y3-7gsq-skh2
15
vulnerability VCID-he5m-6wj4-rbhc
16
vulnerability VCID-hhmn-yz5p-xkap
17
vulnerability VCID-mnz3-rj21-67ad
18
vulnerability VCID-n15v-ta9h-6ffb
19
vulnerability VCID-n7ng-zkkb-2qaz
20
vulnerability VCID-s55j-8hbt-akhn
21
vulnerability VCID-s64f-x81f-b7ce
22
vulnerability VCID-swnc-ke6h-ekew
23
vulnerability VCID-t1n7-eswt-73gw
24
vulnerability VCID-t3jn-vwbx-u7cr
25
vulnerability VCID-taj6-zj2n-5kg8
26
vulnerability VCID-tnjd-pyys-akav
27
vulnerability VCID-vyvy-y3cw-hbgr
28
vulnerability VCID-xa4m-xpa9-v7h8
29
vulnerability VCID-xh7y-56vy-5ud8
30
vulnerability VCID-y32z-2d3f-gkgw
31
vulnerability VCID-zdq2-dhb2-6kaq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.27
1
url pkg:composer/typo3/cms-core@9.5.8
purl pkg:composer/typo3/cms-core@9.5.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2mn6-mdmz-4yd9
1
vulnerability VCID-3n2r-awja-dug9
2
vulnerability VCID-4jpa-6fqh-hbfg
3
vulnerability VCID-4t9s-p25a-cfas
4
vulnerability VCID-543x-cnbz-1kb9
5
vulnerability VCID-58js-jzm4-4fc7
6
vulnerability VCID-5jgb-dsyx-hyb4
7
vulnerability VCID-5kzs-ex81-bbaj
8
vulnerability VCID-5paq-5frf-43ed
9
vulnerability VCID-5u4q-m66t-wqcj
10
vulnerability VCID-65ue-7jd9-23gf
11
vulnerability VCID-6a9t-8dmn-s3bv
12
vulnerability VCID-8d2m-1ffv-jqe1
13
vulnerability VCID-a49c-fqrj-nbb3
14
vulnerability VCID-axvk-13qf-tka7
15
vulnerability VCID-b6er-h7dm-3bev
16
vulnerability VCID-bajy-qbwq-fufn
17
vulnerability VCID-d8d1-sat6-muhe
18
vulnerability VCID-dsu7-jjjq-f3e1
19
vulnerability VCID-e32h-8q61-hbgc
20
vulnerability VCID-ekfd-wp8z-d7e1
21
vulnerability VCID-f963-qur3-2qb7
22
vulnerability VCID-g4uc-qeb6-myed
23
vulnerability VCID-gcnj-6qb6-pbgz
24
vulnerability VCID-gv1b-xtv4-4yg3
25
vulnerability VCID-h6y3-7gsq-skh2
26
vulnerability VCID-he5m-6wj4-rbhc
27
vulnerability VCID-hhmn-yz5p-xkap
28
vulnerability VCID-mnz3-rj21-67ad
29
vulnerability VCID-mud2-s4rc-fuf6
30
vulnerability VCID-n15v-ta9h-6ffb
31
vulnerability VCID-n7ng-zkkb-2qaz
32
vulnerability VCID-nubu-f1sc-gbes
33
vulnerability VCID-phgh-sd4m-zbdx
34
vulnerability VCID-remd-55jh-r3g5
35
vulnerability VCID-s55j-8hbt-akhn
36
vulnerability VCID-s64f-x81f-b7ce
37
vulnerability VCID-sw7v-fbjk-13hy
38
vulnerability VCID-swnc-ke6h-ekew
39
vulnerability VCID-t1n7-eswt-73gw
40
vulnerability VCID-t3jn-vwbx-u7cr
41
vulnerability VCID-taj6-zj2n-5kg8
42
vulnerability VCID-tnjd-pyys-akav
43
vulnerability VCID-ve7g-8st5-wffb
44
vulnerability VCID-vyvy-y3cw-hbgr
45
vulnerability VCID-w13x-3rp9-wyej
46
vulnerability VCID-xa4m-xpa9-v7h8
47
vulnerability VCID-xh7y-56vy-5ud8
48
vulnerability VCID-xy6y-312d-rygj
49
vulnerability VCID-y32z-2d3f-gkgw
50
vulnerability VCID-zdq2-dhb2-6kaq
51
vulnerability VCID-zn99-ywte-33g6
52
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.8
aliases CVE-2019-12748, GHSA-r6fv-56gp-j3r4
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zkea-ge1t-z7gn
75
url VCID-zspb-bd6j-wyd2
vulnerability_id VCID-zspb-bd6j-wyd2
summary Security Misconfiguration in Install Tool Cookie.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-009/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2018-009/
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.21
purl pkg:composer/typo3/cms-core@8.7.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21e8-x7mp-hugk
1
vulnerability VCID-2meq-x4kd-bbdn
2
vulnerability VCID-3n2r-awja-dug9
3
vulnerability VCID-3v4n-fzxa-bfaw
4
vulnerability VCID-4jpa-6fqh-hbfg
5
vulnerability VCID-551q-gpyd-ffe8
6
vulnerability VCID-5jgb-dsyx-hyb4
7
vulnerability VCID-5mxm-88r9-hfey
8
vulnerability VCID-5paq-5frf-43ed
9
vulnerability VCID-5u4q-m66t-wqcj
10
vulnerability VCID-9g62-zd1x-3bdg
11
vulnerability VCID-9gpp-ez8w-rqav
12
vulnerability VCID-9x6r-56xm-n7h7
13
vulnerability VCID-9zqs-hjay-fkev
14
vulnerability VCID-axaf-45kr-kbfe
15
vulnerability VCID-axvk-13qf-tka7
16
vulnerability VCID-b6er-h7dm-3bev
17
vulnerability VCID-bajy-qbwq-fufn
18
vulnerability VCID-cm14-t8uv-k3es
19
vulnerability VCID-d99v-v9cj-zfh2
20
vulnerability VCID-dj88-f3p8-cfbn
21
vulnerability VCID-dsu7-jjjq-f3e1
22
vulnerability VCID-eajg-ctpd-2bby
23
vulnerability VCID-ekfd-wp8z-d7e1
24
vulnerability VCID-f4bv-pzdy-dfcb
25
vulnerability VCID-f963-qur3-2qb7
26
vulnerability VCID-g4uc-qeb6-myed
27
vulnerability VCID-gcnj-6qb6-pbgz
28
vulnerability VCID-gv1b-xtv4-4yg3
29
vulnerability VCID-h6y3-7gsq-skh2
30
vulnerability VCID-he5m-6wj4-rbhc
31
vulnerability VCID-hhmn-yz5p-xkap
32
vulnerability VCID-j77k-hjgx-5kc5
33
vulnerability VCID-k8af-cg9k-87a9
34
vulnerability VCID-mh4f-vtfj-hbb1
35
vulnerability VCID-mnz3-rj21-67ad
36
vulnerability VCID-n15v-ta9h-6ffb
37
vulnerability VCID-n7ng-zkkb-2qaz
38
vulnerability VCID-pmzz-9rws-4ud5
39
vulnerability VCID-pss5-as4b-cyf2
40
vulnerability VCID-px44-19tj-h7aa
41
vulnerability VCID-q8hy-wjd9-nbgp
42
vulnerability VCID-s53a-f91p-huf4
43
vulnerability VCID-s55j-8hbt-akhn
44
vulnerability VCID-s64f-x81f-b7ce
45
vulnerability VCID-stzu-sxe6-5yf5
46
vulnerability VCID-swnc-ke6h-ekew
47
vulnerability VCID-t1n7-eswt-73gw
48
vulnerability VCID-t3jn-vwbx-u7cr
49
vulnerability VCID-taj6-zj2n-5kg8
50
vulnerability VCID-tnjd-pyys-akav
51
vulnerability VCID-vxry-uvph-kbfd
52
vulnerability VCID-vyvy-y3cw-hbgr
53
vulnerability VCID-wea9-egep-h7g5
54
vulnerability VCID-xa4m-xpa9-v7h8
55
vulnerability VCID-xh7y-56vy-5ud8
56
vulnerability VCID-y32z-2d3f-gkgw
57
vulnerability VCID-zdq2-dhb2-6kaq
58
vulnerability VCID-zkea-ge1t-z7gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.21
1
url pkg:composer/typo3/cms-core@9.5.2
purl pkg:composer/typo3/cms-core@9.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21e8-x7mp-hugk
1
vulnerability VCID-2meq-x4kd-bbdn
2
vulnerability VCID-2mn6-mdmz-4yd9
3
vulnerability VCID-3n2r-awja-dug9
4
vulnerability VCID-3v4n-fzxa-bfaw
5
vulnerability VCID-461j-9hrc-gfbc
6
vulnerability VCID-4jpa-6fqh-hbfg
7
vulnerability VCID-4mkw-tv16-jyca
8
vulnerability VCID-4t9s-p25a-cfas
9
vulnerability VCID-543x-cnbz-1kb9
10
vulnerability VCID-551q-gpyd-ffe8
11
vulnerability VCID-58js-jzm4-4fc7
12
vulnerability VCID-5jgb-dsyx-hyb4
13
vulnerability VCID-5kzs-ex81-bbaj
14
vulnerability VCID-5paq-5frf-43ed
15
vulnerability VCID-5u4q-m66t-wqcj
16
vulnerability VCID-65ue-7jd9-23gf
17
vulnerability VCID-6a9t-8dmn-s3bv
18
vulnerability VCID-8d2m-1ffv-jqe1
19
vulnerability VCID-9g62-zd1x-3bdg
20
vulnerability VCID-9gpp-ez8w-rqav
21
vulnerability VCID-9x6r-56xm-n7h7
22
vulnerability VCID-9zqs-hjay-fkev
23
vulnerability VCID-a49c-fqrj-nbb3
24
vulnerability VCID-axaf-45kr-kbfe
25
vulnerability VCID-axvk-13qf-tka7
26
vulnerability VCID-b6er-h7dm-3bev
27
vulnerability VCID-bajy-qbwq-fufn
28
vulnerability VCID-cm14-t8uv-k3es
29
vulnerability VCID-d8d1-sat6-muhe
30
vulnerability VCID-d99v-v9cj-zfh2
31
vulnerability VCID-dj88-f3p8-cfbn
32
vulnerability VCID-dmzb-gkdn-6bcm
33
vulnerability VCID-dsu7-jjjq-f3e1
34
vulnerability VCID-e32h-8q61-hbgc
35
vulnerability VCID-eajg-ctpd-2bby
36
vulnerability VCID-ekfd-wp8z-d7e1
37
vulnerability VCID-f4bv-pzdy-dfcb
38
vulnerability VCID-f963-qur3-2qb7
39
vulnerability VCID-g4uc-qeb6-myed
40
vulnerability VCID-gcnj-6qb6-pbgz
41
vulnerability VCID-gv1b-xtv4-4yg3
42
vulnerability VCID-h6y3-7gsq-skh2
43
vulnerability VCID-he5m-6wj4-rbhc
44
vulnerability VCID-hhmn-yz5p-xkap
45
vulnerability VCID-k8af-cg9k-87a9
46
vulnerability VCID-kj9x-psfz-2ug1
47
vulnerability VCID-mh4f-vtfj-hbb1
48
vulnerability VCID-mnz3-rj21-67ad
49
vulnerability VCID-mud2-s4rc-fuf6
50
vulnerability VCID-n15v-ta9h-6ffb
51
vulnerability VCID-n7ng-zkkb-2qaz
52
vulnerability VCID-nubu-f1sc-gbes
53
vulnerability VCID-nxq4-m52q-yuh4
54
vulnerability VCID-p715-yexd-jfgc
55
vulnerability VCID-phgh-sd4m-zbdx
56
vulnerability VCID-pmzz-9rws-4ud5
57
vulnerability VCID-pss5-as4b-cyf2
58
vulnerability VCID-px44-19tj-h7aa
59
vulnerability VCID-q8hy-wjd9-nbgp
60
vulnerability VCID-raxk-rm9v-hubn
61
vulnerability VCID-remd-55jh-r3g5
62
vulnerability VCID-s53a-f91p-huf4
63
vulnerability VCID-s55j-8hbt-akhn
64
vulnerability VCID-s64f-x81f-b7ce
65
vulnerability VCID-stzu-sxe6-5yf5
66
vulnerability VCID-sw7v-fbjk-13hy
67
vulnerability VCID-swnc-ke6h-ekew
68
vulnerability VCID-t1n7-eswt-73gw
69
vulnerability VCID-t3jn-vwbx-u7cr
70
vulnerability VCID-taj6-zj2n-5kg8
71
vulnerability VCID-tnjd-pyys-akav
72
vulnerability VCID-u9bx-8e86-wbew
73
vulnerability VCID-ve7g-8st5-wffb
74
vulnerability VCID-vxry-uvph-kbfd
75
vulnerability VCID-vyvy-y3cw-hbgr
76
vulnerability VCID-w13x-3rp9-wyej
77
vulnerability VCID-wea9-egep-h7g5
78
vulnerability VCID-xa4m-xpa9-v7h8
79
vulnerability VCID-xh7y-56vy-5ud8
80
vulnerability VCID-xtdg-uj46-rkcm
81
vulnerability VCID-xy6y-312d-rygj
82
vulnerability VCID-y32z-2d3f-gkgw
83
vulnerability VCID-yzx1-4psv-7bhr
84
vulnerability VCID-zdq2-dhb2-6kaq
85
vulnerability VCID-zkea-ge1t-z7gn
86
vulnerability VCID-zn99-ywte-33g6
87
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.2
aliases 2018-12-11-4
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zspb-bd6j-wyd2
Fixing_vulnerabilities
0
url VCID-12y5-7b81-wkfu
vulnerability_id VCID-12y5-7b81-wkfu
summary 
TYPO3 CMS Authentication Bypass vulnerability
It has been discovered that TYPO3’s Salted Password system extension (which is a mandatory system component) is vulnerable to Authentication Bypass when using hashing methods which are related by PHP class inheritance. In standard TYPO3 core distributions stored passwords using the blowfish hashing algorithm can be overridden when using MD5 as the default hashing algorithm by just knowing a valid username. Per default the Portable PHP hashing algorithm (PHPass) is used which is not vulnerable.
references
0
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2018-07-12-1.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2018-07-12-1.yaml
1
reference_url https://github.com/TYPO3-CMS/core
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core
2
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-001
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2018-001
3
reference_url https://github.com/advisories/GHSA-x4rj-f7m6-42c3
reference_id GHSA-x4rj-f7m6-42c3
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-x4rj-f7m6-42c3
fixed_packages
0
url pkg:composer/typo3/cms-core@7.6.30
purl pkg:composer/typo3/cms-core@7.6.30
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@7.6.30
1
url pkg:composer/typo3/cms-core@8.7.17
purl pkg:composer/typo3/cms-core@8.7.17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21e8-x7mp-hugk
1
vulnerability VCID-2meq-x4kd-bbdn
2
vulnerability VCID-3gg5-1921-rbfs
3
vulnerability VCID-3n2r-awja-dug9
4
vulnerability VCID-3v4n-fzxa-bfaw
5
vulnerability VCID-4btk-jt5n-2ugf
6
vulnerability VCID-4jpa-6fqh-hbfg
7
vulnerability VCID-551q-gpyd-ffe8
8
vulnerability VCID-5jgb-dsyx-hyb4
9
vulnerability VCID-5mxm-88r9-hfey
10
vulnerability VCID-5paq-5frf-43ed
11
vulnerability VCID-5u4q-m66t-wqcj
12
vulnerability VCID-5z59-dn7p-xbc5
13
vulnerability VCID-6xmj-wbea-r7ex
14
vulnerability VCID-9g62-zd1x-3bdg
15
vulnerability VCID-9gpp-ez8w-rqav
16
vulnerability VCID-9x6r-56xm-n7h7
17
vulnerability VCID-9zqs-hjay-fkev
18
vulnerability VCID-a563-vtwa-hkbr
19
vulnerability VCID-axaf-45kr-kbfe
20
vulnerability VCID-axvk-13qf-tka7
21
vulnerability VCID-b6er-h7dm-3bev
22
vulnerability VCID-b81w-n2ne-z3ee
23
vulnerability VCID-bajy-qbwq-fufn
24
vulnerability VCID-bnne-7p2q-eqd2
25
vulnerability VCID-cm14-t8uv-k3es
26
vulnerability VCID-d99v-v9cj-zfh2
27
vulnerability VCID-dj88-f3p8-cfbn
28
vulnerability VCID-dm97-51uu-r7gw
29
vulnerability VCID-dsu7-jjjq-f3e1
30
vulnerability VCID-e268-wagv-sbex
31
vulnerability VCID-eajg-ctpd-2bby
32
vulnerability VCID-ehzg-bzrd-kbcc
33
vulnerability VCID-ekfd-wp8z-d7e1
34
vulnerability VCID-f4bv-pzdy-dfcb
35
vulnerability VCID-f963-qur3-2qb7
36
vulnerability VCID-g4uc-qeb6-myed
37
vulnerability VCID-gcnj-6qb6-pbgz
38
vulnerability VCID-gv1b-xtv4-4yg3
39
vulnerability VCID-h6y3-7gsq-skh2
40
vulnerability VCID-he5m-6wj4-rbhc
41
vulnerability VCID-hhmn-yz5p-xkap
42
vulnerability VCID-j77k-hjgx-5kc5
43
vulnerability VCID-k8af-cg9k-87a9
44
vulnerability VCID-mh4f-vtfj-hbb1
45
vulnerability VCID-mnz3-rj21-67ad
46
vulnerability VCID-n15v-ta9h-6ffb
47
vulnerability VCID-n1cb-8py6-bbhu
48
vulnerability VCID-n78p-x7hh-gqcf
49
vulnerability VCID-n7ng-zkkb-2qaz
50
vulnerability VCID-pmzz-9rws-4ud5
51
vulnerability VCID-pss5-as4b-cyf2
52
vulnerability VCID-px44-19tj-h7aa
53
vulnerability VCID-q8hy-wjd9-nbgp
54
vulnerability VCID-qb4j-9tz7-m7a2
55
vulnerability VCID-rdrs-mhaw-b3ge
56
vulnerability VCID-rwqs-3ktq-qqbd
57
vulnerability VCID-s53a-f91p-huf4
58
vulnerability VCID-s55j-8hbt-akhn
59
vulnerability VCID-s64f-x81f-b7ce
60
vulnerability VCID-stzu-sxe6-5yf5
61
vulnerability VCID-swnc-ke6h-ekew
62
vulnerability VCID-t1n7-eswt-73gw
63
vulnerability VCID-t3jn-vwbx-u7cr
64
vulnerability VCID-taj6-zj2n-5kg8
65
vulnerability VCID-tnjd-pyys-akav
66
vulnerability VCID-tw1y-t4qj-j3d1
67
vulnerability VCID-vxry-uvph-kbfd
68
vulnerability VCID-vyvy-y3cw-hbgr
69
vulnerability VCID-wea9-egep-h7g5
70
vulnerability VCID-xa4m-xpa9-v7h8
71
vulnerability VCID-xh7y-56vy-5ud8
72
vulnerability VCID-y32z-2d3f-gkgw
73
vulnerability VCID-zdq2-dhb2-6kaq
74
vulnerability VCID-zkea-ge1t-z7gn
75
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.17
2
url pkg:composer/typo3/cms-core@9.3.2
purl pkg:composer/typo3/cms-core@9.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21e8-x7mp-hugk
1
vulnerability VCID-2meq-x4kd-bbdn
2
vulnerability VCID-2mn6-mdmz-4yd9
3
vulnerability VCID-3gg5-1921-rbfs
4
vulnerability VCID-3n2r-awja-dug9
5
vulnerability VCID-3v4n-fzxa-bfaw
6
vulnerability VCID-461j-9hrc-gfbc
7
vulnerability VCID-4btk-jt5n-2ugf
8
vulnerability VCID-4jpa-6fqh-hbfg
9
vulnerability VCID-4mkw-tv16-jyca
10
vulnerability VCID-4t9s-p25a-cfas
11
vulnerability VCID-543x-cnbz-1kb9
12
vulnerability VCID-551q-gpyd-ffe8
13
vulnerability VCID-58js-jzm4-4fc7
14
vulnerability VCID-5jgb-dsyx-hyb4
15
vulnerability VCID-5kzs-ex81-bbaj
16
vulnerability VCID-5paq-5frf-43ed
17
vulnerability VCID-5u4q-m66t-wqcj
18
vulnerability VCID-5z59-dn7p-xbc5
19
vulnerability VCID-65ue-7jd9-23gf
20
vulnerability VCID-6a9t-8dmn-s3bv
21
vulnerability VCID-6xmj-wbea-r7ex
22
vulnerability VCID-8d2m-1ffv-jqe1
23
vulnerability VCID-9g62-zd1x-3bdg
24
vulnerability VCID-9gpp-ez8w-rqav
25
vulnerability VCID-9x6r-56xm-n7h7
26
vulnerability VCID-9zqs-hjay-fkev
27
vulnerability VCID-a49c-fqrj-nbb3
28
vulnerability VCID-a563-vtwa-hkbr
29
vulnerability VCID-axaf-45kr-kbfe
30
vulnerability VCID-axvk-13qf-tka7
31
vulnerability VCID-b6er-h7dm-3bev
32
vulnerability VCID-bajy-qbwq-fufn
33
vulnerability VCID-bnne-7p2q-eqd2
34
vulnerability VCID-cm14-t8uv-k3es
35
vulnerability VCID-d8d1-sat6-muhe
36
vulnerability VCID-d99v-v9cj-zfh2
37
vulnerability VCID-dj88-f3p8-cfbn
38
vulnerability VCID-dm97-51uu-r7gw
39
vulnerability VCID-dmzb-gkdn-6bcm
40
vulnerability VCID-dsu7-jjjq-f3e1
41
vulnerability VCID-e268-wagv-sbex
42
vulnerability VCID-e32h-8q61-hbgc
43
vulnerability VCID-eajg-ctpd-2bby
44
vulnerability VCID-ekfd-wp8z-d7e1
45
vulnerability VCID-f4bv-pzdy-dfcb
46
vulnerability VCID-f963-qur3-2qb7
47
vulnerability VCID-g4uc-qeb6-myed
48
vulnerability VCID-gcnj-6qb6-pbgz
49
vulnerability VCID-gv1b-xtv4-4yg3
50
vulnerability VCID-h6y3-7gsq-skh2
51
vulnerability VCID-he5m-6wj4-rbhc
52
vulnerability VCID-hhmn-yz5p-xkap
53
vulnerability VCID-k8af-cg9k-87a9
54
vulnerability VCID-kj9x-psfz-2ug1
55
vulnerability VCID-mh4f-vtfj-hbb1
56
vulnerability VCID-mnz3-rj21-67ad
57
vulnerability VCID-mud2-s4rc-fuf6
58
vulnerability VCID-n15v-ta9h-6ffb
59
vulnerability VCID-n1cb-8py6-bbhu
60
vulnerability VCID-n78p-x7hh-gqcf
61
vulnerability VCID-n7ng-zkkb-2qaz
62
vulnerability VCID-nubu-f1sc-gbes
63
vulnerability VCID-nxq4-m52q-yuh4
64
vulnerability VCID-p715-yexd-jfgc
65
vulnerability VCID-phgh-sd4m-zbdx
66
vulnerability VCID-pmzz-9rws-4ud5
67
vulnerability VCID-pss5-as4b-cyf2
68
vulnerability VCID-px44-19tj-h7aa
69
vulnerability VCID-q8hy-wjd9-nbgp
70
vulnerability VCID-qb4j-9tz7-m7a2
71
vulnerability VCID-raxk-rm9v-hubn
72
vulnerability VCID-rdrs-mhaw-b3ge
73
vulnerability VCID-remd-55jh-r3g5
74
vulnerability VCID-rwqs-3ktq-qqbd
75
vulnerability VCID-s53a-f91p-huf4
76
vulnerability VCID-s55j-8hbt-akhn
77
vulnerability VCID-s64f-x81f-b7ce
78
vulnerability VCID-stzu-sxe6-5yf5
79
vulnerability VCID-sw7v-fbjk-13hy
80
vulnerability VCID-swnc-ke6h-ekew
81
vulnerability VCID-t1n7-eswt-73gw
82
vulnerability VCID-t3jn-vwbx-u7cr
83
vulnerability VCID-taj6-zj2n-5kg8
84
vulnerability VCID-tnjd-pyys-akav
85
vulnerability VCID-tw1y-t4qj-j3d1
86
vulnerability VCID-u9bx-8e86-wbew
87
vulnerability VCID-ve7g-8st5-wffb
88
vulnerability VCID-vxry-uvph-kbfd
89
vulnerability VCID-vyvy-y3cw-hbgr
90
vulnerability VCID-w13x-3rp9-wyej
91
vulnerability VCID-wea9-egep-h7g5
92
vulnerability VCID-xa4m-xpa9-v7h8
93
vulnerability VCID-xh7y-56vy-5ud8
94
vulnerability VCID-xtdg-uj46-rkcm
95
vulnerability VCID-xy6y-312d-rygj
96
vulnerability VCID-y32z-2d3f-gkgw
97
vulnerability VCID-yzx1-4psv-7bhr
98
vulnerability VCID-zdq2-dhb2-6kaq
99
vulnerability VCID-zkea-ge1t-z7gn
100
vulnerability VCID-zspb-bd6j-wyd2
101
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.3.2
aliases GHSA-x4rj-f7m6-42c3
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-12y5-7b81-wkfu
1
url VCID-28bf-jvah-zkhw
vulnerability_id VCID-28bf-jvah-zkhw
summary 
Improper Authentication
Authentication Bypass in TYPO3 CMS.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-001/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2018-001/
fixed_packages
0
url pkg:composer/typo3/cms-core@7.6.30
purl pkg:composer/typo3/cms-core@7.6.30
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@7.6.30
1
url pkg:composer/typo3/cms-core@8.7.17
purl pkg:composer/typo3/cms-core@8.7.17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21e8-x7mp-hugk
1
vulnerability VCID-2meq-x4kd-bbdn
2
vulnerability VCID-3gg5-1921-rbfs
3
vulnerability VCID-3n2r-awja-dug9
4
vulnerability VCID-3v4n-fzxa-bfaw
5
vulnerability VCID-4btk-jt5n-2ugf
6
vulnerability VCID-4jpa-6fqh-hbfg
7
vulnerability VCID-551q-gpyd-ffe8
8
vulnerability VCID-5jgb-dsyx-hyb4
9
vulnerability VCID-5mxm-88r9-hfey
10
vulnerability VCID-5paq-5frf-43ed
11
vulnerability VCID-5u4q-m66t-wqcj
12
vulnerability VCID-5z59-dn7p-xbc5
13
vulnerability VCID-6xmj-wbea-r7ex
14
vulnerability VCID-9g62-zd1x-3bdg
15
vulnerability VCID-9gpp-ez8w-rqav
16
vulnerability VCID-9x6r-56xm-n7h7
17
vulnerability VCID-9zqs-hjay-fkev
18
vulnerability VCID-a563-vtwa-hkbr
19
vulnerability VCID-axaf-45kr-kbfe
20
vulnerability VCID-axvk-13qf-tka7
21
vulnerability VCID-b6er-h7dm-3bev
22
vulnerability VCID-b81w-n2ne-z3ee
23
vulnerability VCID-bajy-qbwq-fufn
24
vulnerability VCID-bnne-7p2q-eqd2
25
vulnerability VCID-cm14-t8uv-k3es
26
vulnerability VCID-d99v-v9cj-zfh2
27
vulnerability VCID-dj88-f3p8-cfbn
28
vulnerability VCID-dm97-51uu-r7gw
29
vulnerability VCID-dsu7-jjjq-f3e1
30
vulnerability VCID-e268-wagv-sbex
31
vulnerability VCID-eajg-ctpd-2bby
32
vulnerability VCID-ehzg-bzrd-kbcc
33
vulnerability VCID-ekfd-wp8z-d7e1
34
vulnerability VCID-f4bv-pzdy-dfcb
35
vulnerability VCID-f963-qur3-2qb7
36
vulnerability VCID-g4uc-qeb6-myed
37
vulnerability VCID-gcnj-6qb6-pbgz
38
vulnerability VCID-gv1b-xtv4-4yg3
39
vulnerability VCID-h6y3-7gsq-skh2
40
vulnerability VCID-he5m-6wj4-rbhc
41
vulnerability VCID-hhmn-yz5p-xkap
42
vulnerability VCID-j77k-hjgx-5kc5
43
vulnerability VCID-k8af-cg9k-87a9
44
vulnerability VCID-mh4f-vtfj-hbb1
45
vulnerability VCID-mnz3-rj21-67ad
46
vulnerability VCID-n15v-ta9h-6ffb
47
vulnerability VCID-n1cb-8py6-bbhu
48
vulnerability VCID-n78p-x7hh-gqcf
49
vulnerability VCID-n7ng-zkkb-2qaz
50
vulnerability VCID-pmzz-9rws-4ud5
51
vulnerability VCID-pss5-as4b-cyf2
52
vulnerability VCID-px44-19tj-h7aa
53
vulnerability VCID-q8hy-wjd9-nbgp
54
vulnerability VCID-qb4j-9tz7-m7a2
55
vulnerability VCID-rdrs-mhaw-b3ge
56
vulnerability VCID-rwqs-3ktq-qqbd
57
vulnerability VCID-s53a-f91p-huf4
58
vulnerability VCID-s55j-8hbt-akhn
59
vulnerability VCID-s64f-x81f-b7ce
60
vulnerability VCID-stzu-sxe6-5yf5
61
vulnerability VCID-swnc-ke6h-ekew
62
vulnerability VCID-t1n7-eswt-73gw
63
vulnerability VCID-t3jn-vwbx-u7cr
64
vulnerability VCID-taj6-zj2n-5kg8
65
vulnerability VCID-tnjd-pyys-akav
66
vulnerability VCID-tw1y-t4qj-j3d1
67
vulnerability VCID-vxry-uvph-kbfd
68
vulnerability VCID-vyvy-y3cw-hbgr
69
vulnerability VCID-wea9-egep-h7g5
70
vulnerability VCID-xa4m-xpa9-v7h8
71
vulnerability VCID-xh7y-56vy-5ud8
72
vulnerability VCID-y32z-2d3f-gkgw
73
vulnerability VCID-zdq2-dhb2-6kaq
74
vulnerability VCID-zkea-ge1t-z7gn
75
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.17
2
url pkg:composer/typo3/cms-core@9.3.2
purl pkg:composer/typo3/cms-core@9.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21e8-x7mp-hugk
1
vulnerability VCID-2meq-x4kd-bbdn
2
vulnerability VCID-2mn6-mdmz-4yd9
3
vulnerability VCID-3gg5-1921-rbfs
4
vulnerability VCID-3n2r-awja-dug9
5
vulnerability VCID-3v4n-fzxa-bfaw
6
vulnerability VCID-461j-9hrc-gfbc
7
vulnerability VCID-4btk-jt5n-2ugf
8
vulnerability VCID-4jpa-6fqh-hbfg
9
vulnerability VCID-4mkw-tv16-jyca
10
vulnerability VCID-4t9s-p25a-cfas
11
vulnerability VCID-543x-cnbz-1kb9
12
vulnerability VCID-551q-gpyd-ffe8
13
vulnerability VCID-58js-jzm4-4fc7
14
vulnerability VCID-5jgb-dsyx-hyb4
15
vulnerability VCID-5kzs-ex81-bbaj
16
vulnerability VCID-5paq-5frf-43ed
17
vulnerability VCID-5u4q-m66t-wqcj
18
vulnerability VCID-5z59-dn7p-xbc5
19
vulnerability VCID-65ue-7jd9-23gf
20
vulnerability VCID-6a9t-8dmn-s3bv
21
vulnerability VCID-6xmj-wbea-r7ex
22
vulnerability VCID-8d2m-1ffv-jqe1
23
vulnerability VCID-9g62-zd1x-3bdg
24
vulnerability VCID-9gpp-ez8w-rqav
25
vulnerability VCID-9x6r-56xm-n7h7
26
vulnerability VCID-9zqs-hjay-fkev
27
vulnerability VCID-a49c-fqrj-nbb3
28
vulnerability VCID-a563-vtwa-hkbr
29
vulnerability VCID-axaf-45kr-kbfe
30
vulnerability VCID-axvk-13qf-tka7
31
vulnerability VCID-b6er-h7dm-3bev
32
vulnerability VCID-bajy-qbwq-fufn
33
vulnerability VCID-bnne-7p2q-eqd2
34
vulnerability VCID-cm14-t8uv-k3es
35
vulnerability VCID-d8d1-sat6-muhe
36
vulnerability VCID-d99v-v9cj-zfh2
37
vulnerability VCID-dj88-f3p8-cfbn
38
vulnerability VCID-dm97-51uu-r7gw
39
vulnerability VCID-dmzb-gkdn-6bcm
40
vulnerability VCID-dsu7-jjjq-f3e1
41
vulnerability VCID-e268-wagv-sbex
42
vulnerability VCID-e32h-8q61-hbgc
43
vulnerability VCID-eajg-ctpd-2bby
44
vulnerability VCID-ekfd-wp8z-d7e1
45
vulnerability VCID-f4bv-pzdy-dfcb
46
vulnerability VCID-f963-qur3-2qb7
47
vulnerability VCID-g4uc-qeb6-myed
48
vulnerability VCID-gcnj-6qb6-pbgz
49
vulnerability VCID-gv1b-xtv4-4yg3
50
vulnerability VCID-h6y3-7gsq-skh2
51
vulnerability VCID-he5m-6wj4-rbhc
52
vulnerability VCID-hhmn-yz5p-xkap
53
vulnerability VCID-k8af-cg9k-87a9
54
vulnerability VCID-kj9x-psfz-2ug1
55
vulnerability VCID-mh4f-vtfj-hbb1
56
vulnerability VCID-mnz3-rj21-67ad
57
vulnerability VCID-mud2-s4rc-fuf6
58
vulnerability VCID-n15v-ta9h-6ffb
59
vulnerability VCID-n1cb-8py6-bbhu
60
vulnerability VCID-n78p-x7hh-gqcf
61
vulnerability VCID-n7ng-zkkb-2qaz
62
vulnerability VCID-nubu-f1sc-gbes
63
vulnerability VCID-nxq4-m52q-yuh4
64
vulnerability VCID-p715-yexd-jfgc
65
vulnerability VCID-phgh-sd4m-zbdx
66
vulnerability VCID-pmzz-9rws-4ud5
67
vulnerability VCID-pss5-as4b-cyf2
68
vulnerability VCID-px44-19tj-h7aa
69
vulnerability VCID-q8hy-wjd9-nbgp
70
vulnerability VCID-qb4j-9tz7-m7a2
71
vulnerability VCID-raxk-rm9v-hubn
72
vulnerability VCID-rdrs-mhaw-b3ge
73
vulnerability VCID-remd-55jh-r3g5
74
vulnerability VCID-rwqs-3ktq-qqbd
75
vulnerability VCID-s53a-f91p-huf4
76
vulnerability VCID-s55j-8hbt-akhn
77
vulnerability VCID-s64f-x81f-b7ce
78
vulnerability VCID-stzu-sxe6-5yf5
79
vulnerability VCID-sw7v-fbjk-13hy
80
vulnerability VCID-swnc-ke6h-ekew
81
vulnerability VCID-t1n7-eswt-73gw
82
vulnerability VCID-t3jn-vwbx-u7cr
83
vulnerability VCID-taj6-zj2n-5kg8
84
vulnerability VCID-tnjd-pyys-akav
85
vulnerability VCID-tw1y-t4qj-j3d1
86
vulnerability VCID-u9bx-8e86-wbew
87
vulnerability VCID-ve7g-8st5-wffb
88
vulnerability VCID-vxry-uvph-kbfd
89
vulnerability VCID-vyvy-y3cw-hbgr
90
vulnerability VCID-w13x-3rp9-wyej
91
vulnerability VCID-wea9-egep-h7g5
92
vulnerability VCID-xa4m-xpa9-v7h8
93
vulnerability VCID-xh7y-56vy-5ud8
94
vulnerability VCID-xtdg-uj46-rkcm
95
vulnerability VCID-xy6y-312d-rygj
96
vulnerability VCID-y32z-2d3f-gkgw
97
vulnerability VCID-yzx1-4psv-7bhr
98
vulnerability VCID-zdq2-dhb2-6kaq
99
vulnerability VCID-zkea-ge1t-z7gn
100
vulnerability VCID-zspb-bd6j-wyd2
101
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.3.2
aliases 2018-07-12-1
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-28bf-jvah-zkhw
2
url VCID-9jj4-ec9n-qbhs
vulnerability_id VCID-9jj4-ec9n-qbhs
summary Insecure Deserialization in TYPO3 CMS.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-004/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2018-004/
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.17
purl pkg:composer/typo3/cms-core@8.7.17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21e8-x7mp-hugk
1
vulnerability VCID-2meq-x4kd-bbdn
2
vulnerability VCID-3gg5-1921-rbfs
3
vulnerability VCID-3n2r-awja-dug9
4
vulnerability VCID-3v4n-fzxa-bfaw
5
vulnerability VCID-4btk-jt5n-2ugf
6
vulnerability VCID-4jpa-6fqh-hbfg
7
vulnerability VCID-551q-gpyd-ffe8
8
vulnerability VCID-5jgb-dsyx-hyb4
9
vulnerability VCID-5mxm-88r9-hfey
10
vulnerability VCID-5paq-5frf-43ed
11
vulnerability VCID-5u4q-m66t-wqcj
12
vulnerability VCID-5z59-dn7p-xbc5
13
vulnerability VCID-6xmj-wbea-r7ex
14
vulnerability VCID-9g62-zd1x-3bdg
15
vulnerability VCID-9gpp-ez8w-rqav
16
vulnerability VCID-9x6r-56xm-n7h7
17
vulnerability VCID-9zqs-hjay-fkev
18
vulnerability VCID-a563-vtwa-hkbr
19
vulnerability VCID-axaf-45kr-kbfe
20
vulnerability VCID-axvk-13qf-tka7
21
vulnerability VCID-b6er-h7dm-3bev
22
vulnerability VCID-b81w-n2ne-z3ee
23
vulnerability VCID-bajy-qbwq-fufn
24
vulnerability VCID-bnne-7p2q-eqd2
25
vulnerability VCID-cm14-t8uv-k3es
26
vulnerability VCID-d99v-v9cj-zfh2
27
vulnerability VCID-dj88-f3p8-cfbn
28
vulnerability VCID-dm97-51uu-r7gw
29
vulnerability VCID-dsu7-jjjq-f3e1
30
vulnerability VCID-e268-wagv-sbex
31
vulnerability VCID-eajg-ctpd-2bby
32
vulnerability VCID-ehzg-bzrd-kbcc
33
vulnerability VCID-ekfd-wp8z-d7e1
34
vulnerability VCID-f4bv-pzdy-dfcb
35
vulnerability VCID-f963-qur3-2qb7
36
vulnerability VCID-g4uc-qeb6-myed
37
vulnerability VCID-gcnj-6qb6-pbgz
38
vulnerability VCID-gv1b-xtv4-4yg3
39
vulnerability VCID-h6y3-7gsq-skh2
40
vulnerability VCID-he5m-6wj4-rbhc
41
vulnerability VCID-hhmn-yz5p-xkap
42
vulnerability VCID-j77k-hjgx-5kc5
43
vulnerability VCID-k8af-cg9k-87a9
44
vulnerability VCID-mh4f-vtfj-hbb1
45
vulnerability VCID-mnz3-rj21-67ad
46
vulnerability VCID-n15v-ta9h-6ffb
47
vulnerability VCID-n1cb-8py6-bbhu
48
vulnerability VCID-n78p-x7hh-gqcf
49
vulnerability VCID-n7ng-zkkb-2qaz
50
vulnerability VCID-pmzz-9rws-4ud5
51
vulnerability VCID-pss5-as4b-cyf2
52
vulnerability VCID-px44-19tj-h7aa
53
vulnerability VCID-q8hy-wjd9-nbgp
54
vulnerability VCID-qb4j-9tz7-m7a2
55
vulnerability VCID-rdrs-mhaw-b3ge
56
vulnerability VCID-rwqs-3ktq-qqbd
57
vulnerability VCID-s53a-f91p-huf4
58
vulnerability VCID-s55j-8hbt-akhn
59
vulnerability VCID-s64f-x81f-b7ce
60
vulnerability VCID-stzu-sxe6-5yf5
61
vulnerability VCID-swnc-ke6h-ekew
62
vulnerability VCID-t1n7-eswt-73gw
63
vulnerability VCID-t3jn-vwbx-u7cr
64
vulnerability VCID-taj6-zj2n-5kg8
65
vulnerability VCID-tnjd-pyys-akav
66
vulnerability VCID-tw1y-t4qj-j3d1
67
vulnerability VCID-vxry-uvph-kbfd
68
vulnerability VCID-vyvy-y3cw-hbgr
69
vulnerability VCID-wea9-egep-h7g5
70
vulnerability VCID-xa4m-xpa9-v7h8
71
vulnerability VCID-xh7y-56vy-5ud8
72
vulnerability VCID-y32z-2d3f-gkgw
73
vulnerability VCID-zdq2-dhb2-6kaq
74
vulnerability VCID-zkea-ge1t-z7gn
75
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.17
1
url pkg:composer/typo3/cms-core@9.3.2
purl pkg:composer/typo3/cms-core@9.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21e8-x7mp-hugk
1
vulnerability VCID-2meq-x4kd-bbdn
2
vulnerability VCID-2mn6-mdmz-4yd9
3
vulnerability VCID-3gg5-1921-rbfs
4
vulnerability VCID-3n2r-awja-dug9
5
vulnerability VCID-3v4n-fzxa-bfaw
6
vulnerability VCID-461j-9hrc-gfbc
7
vulnerability VCID-4btk-jt5n-2ugf
8
vulnerability VCID-4jpa-6fqh-hbfg
9
vulnerability VCID-4mkw-tv16-jyca
10
vulnerability VCID-4t9s-p25a-cfas
11
vulnerability VCID-543x-cnbz-1kb9
12
vulnerability VCID-551q-gpyd-ffe8
13
vulnerability VCID-58js-jzm4-4fc7
14
vulnerability VCID-5jgb-dsyx-hyb4
15
vulnerability VCID-5kzs-ex81-bbaj
16
vulnerability VCID-5paq-5frf-43ed
17
vulnerability VCID-5u4q-m66t-wqcj
18
vulnerability VCID-5z59-dn7p-xbc5
19
vulnerability VCID-65ue-7jd9-23gf
20
vulnerability VCID-6a9t-8dmn-s3bv
21
vulnerability VCID-6xmj-wbea-r7ex
22
vulnerability VCID-8d2m-1ffv-jqe1
23
vulnerability VCID-9g62-zd1x-3bdg
24
vulnerability VCID-9gpp-ez8w-rqav
25
vulnerability VCID-9x6r-56xm-n7h7
26
vulnerability VCID-9zqs-hjay-fkev
27
vulnerability VCID-a49c-fqrj-nbb3
28
vulnerability VCID-a563-vtwa-hkbr
29
vulnerability VCID-axaf-45kr-kbfe
30
vulnerability VCID-axvk-13qf-tka7
31
vulnerability VCID-b6er-h7dm-3bev
32
vulnerability VCID-bajy-qbwq-fufn
33
vulnerability VCID-bnne-7p2q-eqd2
34
vulnerability VCID-cm14-t8uv-k3es
35
vulnerability VCID-d8d1-sat6-muhe
36
vulnerability VCID-d99v-v9cj-zfh2
37
vulnerability VCID-dj88-f3p8-cfbn
38
vulnerability VCID-dm97-51uu-r7gw
39
vulnerability VCID-dmzb-gkdn-6bcm
40
vulnerability VCID-dsu7-jjjq-f3e1
41
vulnerability VCID-e268-wagv-sbex
42
vulnerability VCID-e32h-8q61-hbgc
43
vulnerability VCID-eajg-ctpd-2bby
44
vulnerability VCID-ekfd-wp8z-d7e1
45
vulnerability VCID-f4bv-pzdy-dfcb
46
vulnerability VCID-f963-qur3-2qb7
47
vulnerability VCID-g4uc-qeb6-myed
48
vulnerability VCID-gcnj-6qb6-pbgz
49
vulnerability VCID-gv1b-xtv4-4yg3
50
vulnerability VCID-h6y3-7gsq-skh2
51
vulnerability VCID-he5m-6wj4-rbhc
52
vulnerability VCID-hhmn-yz5p-xkap
53
vulnerability VCID-k8af-cg9k-87a9
54
vulnerability VCID-kj9x-psfz-2ug1
55
vulnerability VCID-mh4f-vtfj-hbb1
56
vulnerability VCID-mnz3-rj21-67ad
57
vulnerability VCID-mud2-s4rc-fuf6
58
vulnerability VCID-n15v-ta9h-6ffb
59
vulnerability VCID-n1cb-8py6-bbhu
60
vulnerability VCID-n78p-x7hh-gqcf
61
vulnerability VCID-n7ng-zkkb-2qaz
62
vulnerability VCID-nubu-f1sc-gbes
63
vulnerability VCID-nxq4-m52q-yuh4
64
vulnerability VCID-p715-yexd-jfgc
65
vulnerability VCID-phgh-sd4m-zbdx
66
vulnerability VCID-pmzz-9rws-4ud5
67
vulnerability VCID-pss5-as4b-cyf2
68
vulnerability VCID-px44-19tj-h7aa
69
vulnerability VCID-q8hy-wjd9-nbgp
70
vulnerability VCID-qb4j-9tz7-m7a2
71
vulnerability VCID-raxk-rm9v-hubn
72
vulnerability VCID-rdrs-mhaw-b3ge
73
vulnerability VCID-remd-55jh-r3g5
74
vulnerability VCID-rwqs-3ktq-qqbd
75
vulnerability VCID-s53a-f91p-huf4
76
vulnerability VCID-s55j-8hbt-akhn
77
vulnerability VCID-s64f-x81f-b7ce
78
vulnerability VCID-stzu-sxe6-5yf5
79
vulnerability VCID-sw7v-fbjk-13hy
80
vulnerability VCID-swnc-ke6h-ekew
81
vulnerability VCID-t1n7-eswt-73gw
82
vulnerability VCID-t3jn-vwbx-u7cr
83
vulnerability VCID-taj6-zj2n-5kg8
84
vulnerability VCID-tnjd-pyys-akav
85
vulnerability VCID-tw1y-t4qj-j3d1
86
vulnerability VCID-u9bx-8e86-wbew
87
vulnerability VCID-ve7g-8st5-wffb
88
vulnerability VCID-vxry-uvph-kbfd
89
vulnerability VCID-vyvy-y3cw-hbgr
90
vulnerability VCID-w13x-3rp9-wyej
91
vulnerability VCID-wea9-egep-h7g5
92
vulnerability VCID-xa4m-xpa9-v7h8
93
vulnerability VCID-xh7y-56vy-5ud8
94
vulnerability VCID-xtdg-uj46-rkcm
95
vulnerability VCID-xy6y-312d-rygj
96
vulnerability VCID-y32z-2d3f-gkgw
97
vulnerability VCID-yzx1-4psv-7bhr
98
vulnerability VCID-zdq2-dhb2-6kaq
99
vulnerability VCID-zkea-ge1t-z7gn
100
vulnerability VCID-zspb-bd6j-wyd2
101
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.3.2
aliases 2018-07-12-4
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-9jj4-ec9n-qbhs
3
url VCID-ayw6-8pn4-17eb
vulnerability_id VCID-ayw6-8pn4-17eb
summary 
TYPO3 CMS Insecure Deserialization
It has been discovered that the Form Framework (system extension `form`) is vulnerable to Insecure Deserialization when being used with the additional PHP PECL package `yaml`, which is capable of unserializing YAML contents to PHP objects. A valid backend user account as well as having PHP setting `yaml.decode_php` enabled is needed to exploit this vulnerability (which is the default value according to PHP documentation).
references
0
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2018-07-12-4.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2018-07-12-4.yaml
1
reference_url https://github.com/TYPO3-CMS/core
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core
2
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-004
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2018-004
3
reference_url https://github.com/advisories/GHSA-96jg-pmc4-cx39
reference_id GHSA-96jg-pmc4-cx39
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-96jg-pmc4-cx39
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.17
purl pkg:composer/typo3/cms-core@8.7.17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21e8-x7mp-hugk
1
vulnerability VCID-2meq-x4kd-bbdn
2
vulnerability VCID-3gg5-1921-rbfs
3
vulnerability VCID-3n2r-awja-dug9
4
vulnerability VCID-3v4n-fzxa-bfaw
5
vulnerability VCID-4btk-jt5n-2ugf
6
vulnerability VCID-4jpa-6fqh-hbfg
7
vulnerability VCID-551q-gpyd-ffe8
8
vulnerability VCID-5jgb-dsyx-hyb4
9
vulnerability VCID-5mxm-88r9-hfey
10
vulnerability VCID-5paq-5frf-43ed
11
vulnerability VCID-5u4q-m66t-wqcj
12
vulnerability VCID-5z59-dn7p-xbc5
13
vulnerability VCID-6xmj-wbea-r7ex
14
vulnerability VCID-9g62-zd1x-3bdg
15
vulnerability VCID-9gpp-ez8w-rqav
16
vulnerability VCID-9x6r-56xm-n7h7
17
vulnerability VCID-9zqs-hjay-fkev
18
vulnerability VCID-a563-vtwa-hkbr
19
vulnerability VCID-axaf-45kr-kbfe
20
vulnerability VCID-axvk-13qf-tka7
21
vulnerability VCID-b6er-h7dm-3bev
22
vulnerability VCID-b81w-n2ne-z3ee
23
vulnerability VCID-bajy-qbwq-fufn
24
vulnerability VCID-bnne-7p2q-eqd2
25
vulnerability VCID-cm14-t8uv-k3es
26
vulnerability VCID-d99v-v9cj-zfh2
27
vulnerability VCID-dj88-f3p8-cfbn
28
vulnerability VCID-dm97-51uu-r7gw
29
vulnerability VCID-dsu7-jjjq-f3e1
30
vulnerability VCID-e268-wagv-sbex
31
vulnerability VCID-eajg-ctpd-2bby
32
vulnerability VCID-ehzg-bzrd-kbcc
33
vulnerability VCID-ekfd-wp8z-d7e1
34
vulnerability VCID-f4bv-pzdy-dfcb
35
vulnerability VCID-f963-qur3-2qb7
36
vulnerability VCID-g4uc-qeb6-myed
37
vulnerability VCID-gcnj-6qb6-pbgz
38
vulnerability VCID-gv1b-xtv4-4yg3
39
vulnerability VCID-h6y3-7gsq-skh2
40
vulnerability VCID-he5m-6wj4-rbhc
41
vulnerability VCID-hhmn-yz5p-xkap
42
vulnerability VCID-j77k-hjgx-5kc5
43
vulnerability VCID-k8af-cg9k-87a9
44
vulnerability VCID-mh4f-vtfj-hbb1
45
vulnerability VCID-mnz3-rj21-67ad
46
vulnerability VCID-n15v-ta9h-6ffb
47
vulnerability VCID-n1cb-8py6-bbhu
48
vulnerability VCID-n78p-x7hh-gqcf
49
vulnerability VCID-n7ng-zkkb-2qaz
50
vulnerability VCID-pmzz-9rws-4ud5
51
vulnerability VCID-pss5-as4b-cyf2
52
vulnerability VCID-px44-19tj-h7aa
53
vulnerability VCID-q8hy-wjd9-nbgp
54
vulnerability VCID-qb4j-9tz7-m7a2
55
vulnerability VCID-rdrs-mhaw-b3ge
56
vulnerability VCID-rwqs-3ktq-qqbd
57
vulnerability VCID-s53a-f91p-huf4
58
vulnerability VCID-s55j-8hbt-akhn
59
vulnerability VCID-s64f-x81f-b7ce
60
vulnerability VCID-stzu-sxe6-5yf5
61
vulnerability VCID-swnc-ke6h-ekew
62
vulnerability VCID-t1n7-eswt-73gw
63
vulnerability VCID-t3jn-vwbx-u7cr
64
vulnerability VCID-taj6-zj2n-5kg8
65
vulnerability VCID-tnjd-pyys-akav
66
vulnerability VCID-tw1y-t4qj-j3d1
67
vulnerability VCID-vxry-uvph-kbfd
68
vulnerability VCID-vyvy-y3cw-hbgr
69
vulnerability VCID-wea9-egep-h7g5
70
vulnerability VCID-xa4m-xpa9-v7h8
71
vulnerability VCID-xh7y-56vy-5ud8
72
vulnerability VCID-y32z-2d3f-gkgw
73
vulnerability VCID-zdq2-dhb2-6kaq
74
vulnerability VCID-zkea-ge1t-z7gn
75
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.17
1
url pkg:composer/typo3/cms-core@9.3.1
purl pkg:composer/typo3/cms-core@9.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12y5-7b81-wkfu
1
vulnerability VCID-21e8-x7mp-hugk
2
vulnerability VCID-2meq-x4kd-bbdn
3
vulnerability VCID-2mn6-mdmz-4yd9
4
vulnerability VCID-3gg5-1921-rbfs
5
vulnerability VCID-3n2r-awja-dug9
6
vulnerability VCID-3v4n-fzxa-bfaw
7
vulnerability VCID-461j-9hrc-gfbc
8
vulnerability VCID-4btk-jt5n-2ugf
9
vulnerability VCID-4jpa-6fqh-hbfg
10
vulnerability VCID-4mkw-tv16-jyca
11
vulnerability VCID-4t9s-p25a-cfas
12
vulnerability VCID-543x-cnbz-1kb9
13
vulnerability VCID-551q-gpyd-ffe8
14
vulnerability VCID-58js-jzm4-4fc7
15
vulnerability VCID-5jgb-dsyx-hyb4
16
vulnerability VCID-5kzs-ex81-bbaj
17
vulnerability VCID-5paq-5frf-43ed
18
vulnerability VCID-5u4q-m66t-wqcj
19
vulnerability VCID-5z59-dn7p-xbc5
20
vulnerability VCID-65ue-7jd9-23gf
21
vulnerability VCID-6a9t-8dmn-s3bv
22
vulnerability VCID-6xmj-wbea-r7ex
23
vulnerability VCID-8d2m-1ffv-jqe1
24
vulnerability VCID-9g62-zd1x-3bdg
25
vulnerability VCID-9gpp-ez8w-rqav
26
vulnerability VCID-9x6r-56xm-n7h7
27
vulnerability VCID-9zqs-hjay-fkev
28
vulnerability VCID-a49c-fqrj-nbb3
29
vulnerability VCID-a563-vtwa-hkbr
30
vulnerability VCID-axaf-45kr-kbfe
31
vulnerability VCID-axvk-13qf-tka7
32
vulnerability VCID-b6er-h7dm-3bev
33
vulnerability VCID-bajy-qbwq-fufn
34
vulnerability VCID-bnne-7p2q-eqd2
35
vulnerability VCID-cm14-t8uv-k3es
36
vulnerability VCID-d8d1-sat6-muhe
37
vulnerability VCID-d99v-v9cj-zfh2
38
vulnerability VCID-dj88-f3p8-cfbn
39
vulnerability VCID-dm97-51uu-r7gw
40
vulnerability VCID-dmzb-gkdn-6bcm
41
vulnerability VCID-dsu7-jjjq-f3e1
42
vulnerability VCID-e268-wagv-sbex
43
vulnerability VCID-e32h-8q61-hbgc
44
vulnerability VCID-eajg-ctpd-2bby
45
vulnerability VCID-ebpa-58em-wqam
46
vulnerability VCID-ekfd-wp8z-d7e1
47
vulnerability VCID-f4bv-pzdy-dfcb
48
vulnerability VCID-f963-qur3-2qb7
49
vulnerability VCID-g4uc-qeb6-myed
50
vulnerability VCID-gcnj-6qb6-pbgz
51
vulnerability VCID-gv1b-xtv4-4yg3
52
vulnerability VCID-h6y3-7gsq-skh2
53
vulnerability VCID-he5m-6wj4-rbhc
54
vulnerability VCID-hhmn-yz5p-xkap
55
vulnerability VCID-k8af-cg9k-87a9
56
vulnerability VCID-kj9x-psfz-2ug1
57
vulnerability VCID-mh4f-vtfj-hbb1
58
vulnerability VCID-mnz3-rj21-67ad
59
vulnerability VCID-mud2-s4rc-fuf6
60
vulnerability VCID-n15v-ta9h-6ffb
61
vulnerability VCID-n1cb-8py6-bbhu
62
vulnerability VCID-n78p-x7hh-gqcf
63
vulnerability VCID-n7ng-zkkb-2qaz
64
vulnerability VCID-nubu-f1sc-gbes
65
vulnerability VCID-nxq4-m52q-yuh4
66
vulnerability VCID-p715-yexd-jfgc
67
vulnerability VCID-phgh-sd4m-zbdx
68
vulnerability VCID-pmzz-9rws-4ud5
69
vulnerability VCID-pss5-as4b-cyf2
70
vulnerability VCID-px44-19tj-h7aa
71
vulnerability VCID-q8hy-wjd9-nbgp
72
vulnerability VCID-qb4j-9tz7-m7a2
73
vulnerability VCID-raxk-rm9v-hubn
74
vulnerability VCID-rdrs-mhaw-b3ge
75
vulnerability VCID-remd-55jh-r3g5
76
vulnerability VCID-rwqs-3ktq-qqbd
77
vulnerability VCID-s53a-f91p-huf4
78
vulnerability VCID-s55j-8hbt-akhn
79
vulnerability VCID-s64f-x81f-b7ce
80
vulnerability VCID-stzu-sxe6-5yf5
81
vulnerability VCID-sw7v-fbjk-13hy
82
vulnerability VCID-swnc-ke6h-ekew
83
vulnerability VCID-t1n7-eswt-73gw
84
vulnerability VCID-t3jn-vwbx-u7cr
85
vulnerability VCID-taj6-zj2n-5kg8
86
vulnerability VCID-tnjd-pyys-akav
87
vulnerability VCID-tw1y-t4qj-j3d1
88
vulnerability VCID-u9bx-8e86-wbew
89
vulnerability VCID-ve7g-8st5-wffb
90
vulnerability VCID-vxry-uvph-kbfd
91
vulnerability VCID-vyvy-y3cw-hbgr
92
vulnerability VCID-w13x-3rp9-wyej
93
vulnerability VCID-wea9-egep-h7g5
94
vulnerability VCID-xa4m-xpa9-v7h8
95
vulnerability VCID-xh7y-56vy-5ud8
96
vulnerability VCID-xtdg-uj46-rkcm
97
vulnerability VCID-xy6y-312d-rygj
98
vulnerability VCID-y32z-2d3f-gkgw
99
vulnerability VCID-yzx1-4psv-7bhr
100
vulnerability VCID-zdq2-dhb2-6kaq
101
vulnerability VCID-zkea-ge1t-z7gn
102
vulnerability VCID-zspb-bd6j-wyd2
103
vulnerability VCID-zw9b-6vkf-3fc6
104
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.3.1
aliases GHSA-96jg-pmc4-cx39
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ayw6-8pn4-17eb
4
url VCID-ebpa-58em-wqam
vulnerability_id VCID-ebpa-58em-wqam
summary 
TYPO3 CMS Insecure Deserialization & Arbitrary Code Execution
Phar files (formerly known as "PHP archives") can act als self extracting archives which leads to the fact that source code is executed when Phar files are invoked. The Phar file format is not limited to be stored with a dedicated file extension - "bundle.phar" would be valid as well as "bundle.txt" would be. This way, Phar files can be obfuscated as image or text file which would not be denied from being uploaded and persisted to a TYPO3 installation. Due to a missing sanitization of user input, those Phar files can be invoked by manipulated URLs in TYPO3 backend forms. A valid backend user account is needed to exploit this vulnerability. In theory the attack vector would be possible in the TYPO3 frontend as well, however no functional exploit has been identified so far.
references
0
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2018-07-12-2.yaml
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2018-07-12-2.yaml
1
reference_url https://github.com/TYPO3-CMS/core
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core
2
reference_url https://github.com/TYPO3-CMS/core/commit/81c6e9e6e49ee4f924bd340fb007d271fa44aa16
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core/commit/81c6e9e6e49ee4f924bd340fb007d271fa44aa16
3
reference_url https://github.com/TYPO3-CMS/core/commit/854d03841b42123ab744c2591199b76ce65a8e45
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core/commit/854d03841b42123ab744c2591199b76ce65a8e45
4
reference_url https://github.com/TYPO3-CMS/core/commit/aa4e270d04313fe7d8ea508a9c694db83875e981
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core/commit/aa4e270d04313fe7d8ea508a9c694db83875e981
5
reference_url https://github.com/TYPO3-CMS/core/commit/dd0487bd8b4ec7204dbfff2b5812d797102a1778
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core/commit/dd0487bd8b4ec7204dbfff2b5812d797102a1778
6
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-002
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2018-002
7
reference_url https://github.com/advisories/GHSA-cc97-g92w-jm65
reference_id GHSA-cc97-g92w-jm65
reference_type
scores
0
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-cc97-g92w-jm65
fixed_packages
0
url pkg:composer/typo3/cms-core@7.6.30
purl pkg:composer/typo3/cms-core@7.6.30
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@7.6.30
1
url pkg:composer/typo3/cms-core@8.7.17
purl pkg:composer/typo3/cms-core@8.7.17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21e8-x7mp-hugk
1
vulnerability VCID-2meq-x4kd-bbdn
2
vulnerability VCID-3gg5-1921-rbfs
3
vulnerability VCID-3n2r-awja-dug9
4
vulnerability VCID-3v4n-fzxa-bfaw
5
vulnerability VCID-4btk-jt5n-2ugf
6
vulnerability VCID-4jpa-6fqh-hbfg
7
vulnerability VCID-551q-gpyd-ffe8
8
vulnerability VCID-5jgb-dsyx-hyb4
9
vulnerability VCID-5mxm-88r9-hfey
10
vulnerability VCID-5paq-5frf-43ed
11
vulnerability VCID-5u4q-m66t-wqcj
12
vulnerability VCID-5z59-dn7p-xbc5
13
vulnerability VCID-6xmj-wbea-r7ex
14
vulnerability VCID-9g62-zd1x-3bdg
15
vulnerability VCID-9gpp-ez8w-rqav
16
vulnerability VCID-9x6r-56xm-n7h7
17
vulnerability VCID-9zqs-hjay-fkev
18
vulnerability VCID-a563-vtwa-hkbr
19
vulnerability VCID-axaf-45kr-kbfe
20
vulnerability VCID-axvk-13qf-tka7
21
vulnerability VCID-b6er-h7dm-3bev
22
vulnerability VCID-b81w-n2ne-z3ee
23
vulnerability VCID-bajy-qbwq-fufn
24
vulnerability VCID-bnne-7p2q-eqd2
25
vulnerability VCID-cm14-t8uv-k3es
26
vulnerability VCID-d99v-v9cj-zfh2
27
vulnerability VCID-dj88-f3p8-cfbn
28
vulnerability VCID-dm97-51uu-r7gw
29
vulnerability VCID-dsu7-jjjq-f3e1
30
vulnerability VCID-e268-wagv-sbex
31
vulnerability VCID-eajg-ctpd-2bby
32
vulnerability VCID-ehzg-bzrd-kbcc
33
vulnerability VCID-ekfd-wp8z-d7e1
34
vulnerability VCID-f4bv-pzdy-dfcb
35
vulnerability VCID-f963-qur3-2qb7
36
vulnerability VCID-g4uc-qeb6-myed
37
vulnerability VCID-gcnj-6qb6-pbgz
38
vulnerability VCID-gv1b-xtv4-4yg3
39
vulnerability VCID-h6y3-7gsq-skh2
40
vulnerability VCID-he5m-6wj4-rbhc
41
vulnerability VCID-hhmn-yz5p-xkap
42
vulnerability VCID-j77k-hjgx-5kc5
43
vulnerability VCID-k8af-cg9k-87a9
44
vulnerability VCID-mh4f-vtfj-hbb1
45
vulnerability VCID-mnz3-rj21-67ad
46
vulnerability VCID-n15v-ta9h-6ffb
47
vulnerability VCID-n1cb-8py6-bbhu
48
vulnerability VCID-n78p-x7hh-gqcf
49
vulnerability VCID-n7ng-zkkb-2qaz
50
vulnerability VCID-pmzz-9rws-4ud5
51
vulnerability VCID-pss5-as4b-cyf2
52
vulnerability VCID-px44-19tj-h7aa
53
vulnerability VCID-q8hy-wjd9-nbgp
54
vulnerability VCID-qb4j-9tz7-m7a2
55
vulnerability VCID-rdrs-mhaw-b3ge
56
vulnerability VCID-rwqs-3ktq-qqbd
57
vulnerability VCID-s53a-f91p-huf4
58
vulnerability VCID-s55j-8hbt-akhn
59
vulnerability VCID-s64f-x81f-b7ce
60
vulnerability VCID-stzu-sxe6-5yf5
61
vulnerability VCID-swnc-ke6h-ekew
62
vulnerability VCID-t1n7-eswt-73gw
63
vulnerability VCID-t3jn-vwbx-u7cr
64
vulnerability VCID-taj6-zj2n-5kg8
65
vulnerability VCID-tnjd-pyys-akav
66
vulnerability VCID-tw1y-t4qj-j3d1
67
vulnerability VCID-vxry-uvph-kbfd
68
vulnerability VCID-vyvy-y3cw-hbgr
69
vulnerability VCID-wea9-egep-h7g5
70
vulnerability VCID-xa4m-xpa9-v7h8
71
vulnerability VCID-xh7y-56vy-5ud8
72
vulnerability VCID-y32z-2d3f-gkgw
73
vulnerability VCID-zdq2-dhb2-6kaq
74
vulnerability VCID-zkea-ge1t-z7gn
75
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.17
2
url pkg:composer/typo3/cms-core@9.3.2
purl pkg:composer/typo3/cms-core@9.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21e8-x7mp-hugk
1
vulnerability VCID-2meq-x4kd-bbdn
2
vulnerability VCID-2mn6-mdmz-4yd9
3
vulnerability VCID-3gg5-1921-rbfs
4
vulnerability VCID-3n2r-awja-dug9
5
vulnerability VCID-3v4n-fzxa-bfaw
6
vulnerability VCID-461j-9hrc-gfbc
7
vulnerability VCID-4btk-jt5n-2ugf
8
vulnerability VCID-4jpa-6fqh-hbfg
9
vulnerability VCID-4mkw-tv16-jyca
10
vulnerability VCID-4t9s-p25a-cfas
11
vulnerability VCID-543x-cnbz-1kb9
12
vulnerability VCID-551q-gpyd-ffe8
13
vulnerability VCID-58js-jzm4-4fc7
14
vulnerability VCID-5jgb-dsyx-hyb4
15
vulnerability VCID-5kzs-ex81-bbaj
16
vulnerability VCID-5paq-5frf-43ed
17
vulnerability VCID-5u4q-m66t-wqcj
18
vulnerability VCID-5z59-dn7p-xbc5
19
vulnerability VCID-65ue-7jd9-23gf
20
vulnerability VCID-6a9t-8dmn-s3bv
21
vulnerability VCID-6xmj-wbea-r7ex
22
vulnerability VCID-8d2m-1ffv-jqe1
23
vulnerability VCID-9g62-zd1x-3bdg
24
vulnerability VCID-9gpp-ez8w-rqav
25
vulnerability VCID-9x6r-56xm-n7h7
26
vulnerability VCID-9zqs-hjay-fkev
27
vulnerability VCID-a49c-fqrj-nbb3
28
vulnerability VCID-a563-vtwa-hkbr
29
vulnerability VCID-axaf-45kr-kbfe
30
vulnerability VCID-axvk-13qf-tka7
31
vulnerability VCID-b6er-h7dm-3bev
32
vulnerability VCID-bajy-qbwq-fufn
33
vulnerability VCID-bnne-7p2q-eqd2
34
vulnerability VCID-cm14-t8uv-k3es
35
vulnerability VCID-d8d1-sat6-muhe
36
vulnerability VCID-d99v-v9cj-zfh2
37
vulnerability VCID-dj88-f3p8-cfbn
38
vulnerability VCID-dm97-51uu-r7gw
39
vulnerability VCID-dmzb-gkdn-6bcm
40
vulnerability VCID-dsu7-jjjq-f3e1
41
vulnerability VCID-e268-wagv-sbex
42
vulnerability VCID-e32h-8q61-hbgc
43
vulnerability VCID-eajg-ctpd-2bby
44
vulnerability VCID-ekfd-wp8z-d7e1
45
vulnerability VCID-f4bv-pzdy-dfcb
46
vulnerability VCID-f963-qur3-2qb7
47
vulnerability VCID-g4uc-qeb6-myed
48
vulnerability VCID-gcnj-6qb6-pbgz
49
vulnerability VCID-gv1b-xtv4-4yg3
50
vulnerability VCID-h6y3-7gsq-skh2
51
vulnerability VCID-he5m-6wj4-rbhc
52
vulnerability VCID-hhmn-yz5p-xkap
53
vulnerability VCID-k8af-cg9k-87a9
54
vulnerability VCID-kj9x-psfz-2ug1
55
vulnerability VCID-mh4f-vtfj-hbb1
56
vulnerability VCID-mnz3-rj21-67ad
57
vulnerability VCID-mud2-s4rc-fuf6
58
vulnerability VCID-n15v-ta9h-6ffb
59
vulnerability VCID-n1cb-8py6-bbhu
60
vulnerability VCID-n78p-x7hh-gqcf
61
vulnerability VCID-n7ng-zkkb-2qaz
62
vulnerability VCID-nubu-f1sc-gbes
63
vulnerability VCID-nxq4-m52q-yuh4
64
vulnerability VCID-p715-yexd-jfgc
65
vulnerability VCID-phgh-sd4m-zbdx
66
vulnerability VCID-pmzz-9rws-4ud5
67
vulnerability VCID-pss5-as4b-cyf2
68
vulnerability VCID-px44-19tj-h7aa
69
vulnerability VCID-q8hy-wjd9-nbgp
70
vulnerability VCID-qb4j-9tz7-m7a2
71
vulnerability VCID-raxk-rm9v-hubn
72
vulnerability VCID-rdrs-mhaw-b3ge
73
vulnerability VCID-remd-55jh-r3g5
74
vulnerability VCID-rwqs-3ktq-qqbd
75
vulnerability VCID-s53a-f91p-huf4
76
vulnerability VCID-s55j-8hbt-akhn
77
vulnerability VCID-s64f-x81f-b7ce
78
vulnerability VCID-stzu-sxe6-5yf5
79
vulnerability VCID-sw7v-fbjk-13hy
80
vulnerability VCID-swnc-ke6h-ekew
81
vulnerability VCID-t1n7-eswt-73gw
82
vulnerability VCID-t3jn-vwbx-u7cr
83
vulnerability VCID-taj6-zj2n-5kg8
84
vulnerability VCID-tnjd-pyys-akav
85
vulnerability VCID-tw1y-t4qj-j3d1
86
vulnerability VCID-u9bx-8e86-wbew
87
vulnerability VCID-ve7g-8st5-wffb
88
vulnerability VCID-vxry-uvph-kbfd
89
vulnerability VCID-vyvy-y3cw-hbgr
90
vulnerability VCID-w13x-3rp9-wyej
91
vulnerability VCID-wea9-egep-h7g5
92
vulnerability VCID-xa4m-xpa9-v7h8
93
vulnerability VCID-xh7y-56vy-5ud8
94
vulnerability VCID-xtdg-uj46-rkcm
95
vulnerability VCID-xy6y-312d-rygj
96
vulnerability VCID-y32z-2d3f-gkgw
97
vulnerability VCID-yzx1-4psv-7bhr
98
vulnerability VCID-zdq2-dhb2-6kaq
99
vulnerability VCID-zkea-ge1t-z7gn
100
vulnerability VCID-zspb-bd6j-wyd2
101
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.3.2
aliases GHSA-cc97-g92w-jm65
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ebpa-58em-wqam
5
url VCID-sr3p-pdxy-4yhu
vulnerability_id VCID-sr3p-pdxy-4yhu
summary Insecure Deserialization & Arbitrary Code Execution in TYPO3 CMS.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-002/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2018-002/
fixed_packages
0
url pkg:composer/typo3/cms-core@7.6.30
purl pkg:composer/typo3/cms-core@7.6.30
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@7.6.30
1
url pkg:composer/typo3/cms-core@8.7.17
purl pkg:composer/typo3/cms-core@8.7.17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21e8-x7mp-hugk
1
vulnerability VCID-2meq-x4kd-bbdn
2
vulnerability VCID-3gg5-1921-rbfs
3
vulnerability VCID-3n2r-awja-dug9
4
vulnerability VCID-3v4n-fzxa-bfaw
5
vulnerability VCID-4btk-jt5n-2ugf
6
vulnerability VCID-4jpa-6fqh-hbfg
7
vulnerability VCID-551q-gpyd-ffe8
8
vulnerability VCID-5jgb-dsyx-hyb4
9
vulnerability VCID-5mxm-88r9-hfey
10
vulnerability VCID-5paq-5frf-43ed
11
vulnerability VCID-5u4q-m66t-wqcj
12
vulnerability VCID-5z59-dn7p-xbc5
13
vulnerability VCID-6xmj-wbea-r7ex
14
vulnerability VCID-9g62-zd1x-3bdg
15
vulnerability VCID-9gpp-ez8w-rqav
16
vulnerability VCID-9x6r-56xm-n7h7
17
vulnerability VCID-9zqs-hjay-fkev
18
vulnerability VCID-a563-vtwa-hkbr
19
vulnerability VCID-axaf-45kr-kbfe
20
vulnerability VCID-axvk-13qf-tka7
21
vulnerability VCID-b6er-h7dm-3bev
22
vulnerability VCID-b81w-n2ne-z3ee
23
vulnerability VCID-bajy-qbwq-fufn
24
vulnerability VCID-bnne-7p2q-eqd2
25
vulnerability VCID-cm14-t8uv-k3es
26
vulnerability VCID-d99v-v9cj-zfh2
27
vulnerability VCID-dj88-f3p8-cfbn
28
vulnerability VCID-dm97-51uu-r7gw
29
vulnerability VCID-dsu7-jjjq-f3e1
30
vulnerability VCID-e268-wagv-sbex
31
vulnerability VCID-eajg-ctpd-2bby
32
vulnerability VCID-ehzg-bzrd-kbcc
33
vulnerability VCID-ekfd-wp8z-d7e1
34
vulnerability VCID-f4bv-pzdy-dfcb
35
vulnerability VCID-f963-qur3-2qb7
36
vulnerability VCID-g4uc-qeb6-myed
37
vulnerability VCID-gcnj-6qb6-pbgz
38
vulnerability VCID-gv1b-xtv4-4yg3
39
vulnerability VCID-h6y3-7gsq-skh2
40
vulnerability VCID-he5m-6wj4-rbhc
41
vulnerability VCID-hhmn-yz5p-xkap
42
vulnerability VCID-j77k-hjgx-5kc5
43
vulnerability VCID-k8af-cg9k-87a9
44
vulnerability VCID-mh4f-vtfj-hbb1
45
vulnerability VCID-mnz3-rj21-67ad
46
vulnerability VCID-n15v-ta9h-6ffb
47
vulnerability VCID-n1cb-8py6-bbhu
48
vulnerability VCID-n78p-x7hh-gqcf
49
vulnerability VCID-n7ng-zkkb-2qaz
50
vulnerability VCID-pmzz-9rws-4ud5
51
vulnerability VCID-pss5-as4b-cyf2
52
vulnerability VCID-px44-19tj-h7aa
53
vulnerability VCID-q8hy-wjd9-nbgp
54
vulnerability VCID-qb4j-9tz7-m7a2
55
vulnerability VCID-rdrs-mhaw-b3ge
56
vulnerability VCID-rwqs-3ktq-qqbd
57
vulnerability VCID-s53a-f91p-huf4
58
vulnerability VCID-s55j-8hbt-akhn
59
vulnerability VCID-s64f-x81f-b7ce
60
vulnerability VCID-stzu-sxe6-5yf5
61
vulnerability VCID-swnc-ke6h-ekew
62
vulnerability VCID-t1n7-eswt-73gw
63
vulnerability VCID-t3jn-vwbx-u7cr
64
vulnerability VCID-taj6-zj2n-5kg8
65
vulnerability VCID-tnjd-pyys-akav
66
vulnerability VCID-tw1y-t4qj-j3d1
67
vulnerability VCID-vxry-uvph-kbfd
68
vulnerability VCID-vyvy-y3cw-hbgr
69
vulnerability VCID-wea9-egep-h7g5
70
vulnerability VCID-xa4m-xpa9-v7h8
71
vulnerability VCID-xh7y-56vy-5ud8
72
vulnerability VCID-y32z-2d3f-gkgw
73
vulnerability VCID-zdq2-dhb2-6kaq
74
vulnerability VCID-zkea-ge1t-z7gn
75
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.17
2
url pkg:composer/typo3/cms-core@9.3.2
purl pkg:composer/typo3/cms-core@9.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21e8-x7mp-hugk
1
vulnerability VCID-2meq-x4kd-bbdn
2
vulnerability VCID-2mn6-mdmz-4yd9
3
vulnerability VCID-3gg5-1921-rbfs
4
vulnerability VCID-3n2r-awja-dug9
5
vulnerability VCID-3v4n-fzxa-bfaw
6
vulnerability VCID-461j-9hrc-gfbc
7
vulnerability VCID-4btk-jt5n-2ugf
8
vulnerability VCID-4jpa-6fqh-hbfg
9
vulnerability VCID-4mkw-tv16-jyca
10
vulnerability VCID-4t9s-p25a-cfas
11
vulnerability VCID-543x-cnbz-1kb9
12
vulnerability VCID-551q-gpyd-ffe8
13
vulnerability VCID-58js-jzm4-4fc7
14
vulnerability VCID-5jgb-dsyx-hyb4
15
vulnerability VCID-5kzs-ex81-bbaj
16
vulnerability VCID-5paq-5frf-43ed
17
vulnerability VCID-5u4q-m66t-wqcj
18
vulnerability VCID-5z59-dn7p-xbc5
19
vulnerability VCID-65ue-7jd9-23gf
20
vulnerability VCID-6a9t-8dmn-s3bv
21
vulnerability VCID-6xmj-wbea-r7ex
22
vulnerability VCID-8d2m-1ffv-jqe1
23
vulnerability VCID-9g62-zd1x-3bdg
24
vulnerability VCID-9gpp-ez8w-rqav
25
vulnerability VCID-9x6r-56xm-n7h7
26
vulnerability VCID-9zqs-hjay-fkev
27
vulnerability VCID-a49c-fqrj-nbb3
28
vulnerability VCID-a563-vtwa-hkbr
29
vulnerability VCID-axaf-45kr-kbfe
30
vulnerability VCID-axvk-13qf-tka7
31
vulnerability VCID-b6er-h7dm-3bev
32
vulnerability VCID-bajy-qbwq-fufn
33
vulnerability VCID-bnne-7p2q-eqd2
34
vulnerability VCID-cm14-t8uv-k3es
35
vulnerability VCID-d8d1-sat6-muhe
36
vulnerability VCID-d99v-v9cj-zfh2
37
vulnerability VCID-dj88-f3p8-cfbn
38
vulnerability VCID-dm97-51uu-r7gw
39
vulnerability VCID-dmzb-gkdn-6bcm
40
vulnerability VCID-dsu7-jjjq-f3e1
41
vulnerability VCID-e268-wagv-sbex
42
vulnerability VCID-e32h-8q61-hbgc
43
vulnerability VCID-eajg-ctpd-2bby
44
vulnerability VCID-ekfd-wp8z-d7e1
45
vulnerability VCID-f4bv-pzdy-dfcb
46
vulnerability VCID-f963-qur3-2qb7
47
vulnerability VCID-g4uc-qeb6-myed
48
vulnerability VCID-gcnj-6qb6-pbgz
49
vulnerability VCID-gv1b-xtv4-4yg3
50
vulnerability VCID-h6y3-7gsq-skh2
51
vulnerability VCID-he5m-6wj4-rbhc
52
vulnerability VCID-hhmn-yz5p-xkap
53
vulnerability VCID-k8af-cg9k-87a9
54
vulnerability VCID-kj9x-psfz-2ug1
55
vulnerability VCID-mh4f-vtfj-hbb1
56
vulnerability VCID-mnz3-rj21-67ad
57
vulnerability VCID-mud2-s4rc-fuf6
58
vulnerability VCID-n15v-ta9h-6ffb
59
vulnerability VCID-n1cb-8py6-bbhu
60
vulnerability VCID-n78p-x7hh-gqcf
61
vulnerability VCID-n7ng-zkkb-2qaz
62
vulnerability VCID-nubu-f1sc-gbes
63
vulnerability VCID-nxq4-m52q-yuh4
64
vulnerability VCID-p715-yexd-jfgc
65
vulnerability VCID-phgh-sd4m-zbdx
66
vulnerability VCID-pmzz-9rws-4ud5
67
vulnerability VCID-pss5-as4b-cyf2
68
vulnerability VCID-px44-19tj-h7aa
69
vulnerability VCID-q8hy-wjd9-nbgp
70
vulnerability VCID-qb4j-9tz7-m7a2
71
vulnerability VCID-raxk-rm9v-hubn
72
vulnerability VCID-rdrs-mhaw-b3ge
73
vulnerability VCID-remd-55jh-r3g5
74
vulnerability VCID-rwqs-3ktq-qqbd
75
vulnerability VCID-s53a-f91p-huf4
76
vulnerability VCID-s55j-8hbt-akhn
77
vulnerability VCID-s64f-x81f-b7ce
78
vulnerability VCID-stzu-sxe6-5yf5
79
vulnerability VCID-sw7v-fbjk-13hy
80
vulnerability VCID-swnc-ke6h-ekew
81
vulnerability VCID-t1n7-eswt-73gw
82
vulnerability VCID-t3jn-vwbx-u7cr
83
vulnerability VCID-taj6-zj2n-5kg8
84
vulnerability VCID-tnjd-pyys-akav
85
vulnerability VCID-tw1y-t4qj-j3d1
86
vulnerability VCID-u9bx-8e86-wbew
87
vulnerability VCID-ve7g-8st5-wffb
88
vulnerability VCID-vxry-uvph-kbfd
89
vulnerability VCID-vyvy-y3cw-hbgr
90
vulnerability VCID-w13x-3rp9-wyej
91
vulnerability VCID-wea9-egep-h7g5
92
vulnerability VCID-xa4m-xpa9-v7h8
93
vulnerability VCID-xh7y-56vy-5ud8
94
vulnerability VCID-xtdg-uj46-rkcm
95
vulnerability VCID-xy6y-312d-rygj
96
vulnerability VCID-y32z-2d3f-gkgw
97
vulnerability VCID-yzx1-4psv-7bhr
98
vulnerability VCID-zdq2-dhb2-6kaq
99
vulnerability VCID-zkea-ge1t-z7gn
100
vulnerability VCID-zspb-bd6j-wyd2
101
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.3.2
aliases 2018-07-12-2
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-sr3p-pdxy-4yhu
6
url VCID-wkm6-cgc8-bfa8
vulnerability_id VCID-wkm6-cgc8-bfa8
summary Privilege Escalation & SQL Injection in TYPO3 CMS.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-003/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2018-003/
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.17
purl pkg:composer/typo3/cms-core@8.7.17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21e8-x7mp-hugk
1
vulnerability VCID-2meq-x4kd-bbdn
2
vulnerability VCID-3gg5-1921-rbfs
3
vulnerability VCID-3n2r-awja-dug9
4
vulnerability VCID-3v4n-fzxa-bfaw
5
vulnerability VCID-4btk-jt5n-2ugf
6
vulnerability VCID-4jpa-6fqh-hbfg
7
vulnerability VCID-551q-gpyd-ffe8
8
vulnerability VCID-5jgb-dsyx-hyb4
9
vulnerability VCID-5mxm-88r9-hfey
10
vulnerability VCID-5paq-5frf-43ed
11
vulnerability VCID-5u4q-m66t-wqcj
12
vulnerability VCID-5z59-dn7p-xbc5
13
vulnerability VCID-6xmj-wbea-r7ex
14
vulnerability VCID-9g62-zd1x-3bdg
15
vulnerability VCID-9gpp-ez8w-rqav
16
vulnerability VCID-9x6r-56xm-n7h7
17
vulnerability VCID-9zqs-hjay-fkev
18
vulnerability VCID-a563-vtwa-hkbr
19
vulnerability VCID-axaf-45kr-kbfe
20
vulnerability VCID-axvk-13qf-tka7
21
vulnerability VCID-b6er-h7dm-3bev
22
vulnerability VCID-b81w-n2ne-z3ee
23
vulnerability VCID-bajy-qbwq-fufn
24
vulnerability VCID-bnne-7p2q-eqd2
25
vulnerability VCID-cm14-t8uv-k3es
26
vulnerability VCID-d99v-v9cj-zfh2
27
vulnerability VCID-dj88-f3p8-cfbn
28
vulnerability VCID-dm97-51uu-r7gw
29
vulnerability VCID-dsu7-jjjq-f3e1
30
vulnerability VCID-e268-wagv-sbex
31
vulnerability VCID-eajg-ctpd-2bby
32
vulnerability VCID-ehzg-bzrd-kbcc
33
vulnerability VCID-ekfd-wp8z-d7e1
34
vulnerability VCID-f4bv-pzdy-dfcb
35
vulnerability VCID-f963-qur3-2qb7
36
vulnerability VCID-g4uc-qeb6-myed
37
vulnerability VCID-gcnj-6qb6-pbgz
38
vulnerability VCID-gv1b-xtv4-4yg3
39
vulnerability VCID-h6y3-7gsq-skh2
40
vulnerability VCID-he5m-6wj4-rbhc
41
vulnerability VCID-hhmn-yz5p-xkap
42
vulnerability VCID-j77k-hjgx-5kc5
43
vulnerability VCID-k8af-cg9k-87a9
44
vulnerability VCID-mh4f-vtfj-hbb1
45
vulnerability VCID-mnz3-rj21-67ad
46
vulnerability VCID-n15v-ta9h-6ffb
47
vulnerability VCID-n1cb-8py6-bbhu
48
vulnerability VCID-n78p-x7hh-gqcf
49
vulnerability VCID-n7ng-zkkb-2qaz
50
vulnerability VCID-pmzz-9rws-4ud5
51
vulnerability VCID-pss5-as4b-cyf2
52
vulnerability VCID-px44-19tj-h7aa
53
vulnerability VCID-q8hy-wjd9-nbgp
54
vulnerability VCID-qb4j-9tz7-m7a2
55
vulnerability VCID-rdrs-mhaw-b3ge
56
vulnerability VCID-rwqs-3ktq-qqbd
57
vulnerability VCID-s53a-f91p-huf4
58
vulnerability VCID-s55j-8hbt-akhn
59
vulnerability VCID-s64f-x81f-b7ce
60
vulnerability VCID-stzu-sxe6-5yf5
61
vulnerability VCID-swnc-ke6h-ekew
62
vulnerability VCID-t1n7-eswt-73gw
63
vulnerability VCID-t3jn-vwbx-u7cr
64
vulnerability VCID-taj6-zj2n-5kg8
65
vulnerability VCID-tnjd-pyys-akav
66
vulnerability VCID-tw1y-t4qj-j3d1
67
vulnerability VCID-vxry-uvph-kbfd
68
vulnerability VCID-vyvy-y3cw-hbgr
69
vulnerability VCID-wea9-egep-h7g5
70
vulnerability VCID-xa4m-xpa9-v7h8
71
vulnerability VCID-xh7y-56vy-5ud8
72
vulnerability VCID-y32z-2d3f-gkgw
73
vulnerability VCID-zdq2-dhb2-6kaq
74
vulnerability VCID-zkea-ge1t-z7gn
75
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.17
1
url pkg:composer/typo3/cms-core@9.3.2
purl pkg:composer/typo3/cms-core@9.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21e8-x7mp-hugk
1
vulnerability VCID-2meq-x4kd-bbdn
2
vulnerability VCID-2mn6-mdmz-4yd9
3
vulnerability VCID-3gg5-1921-rbfs
4
vulnerability VCID-3n2r-awja-dug9
5
vulnerability VCID-3v4n-fzxa-bfaw
6
vulnerability VCID-461j-9hrc-gfbc
7
vulnerability VCID-4btk-jt5n-2ugf
8
vulnerability VCID-4jpa-6fqh-hbfg
9
vulnerability VCID-4mkw-tv16-jyca
10
vulnerability VCID-4t9s-p25a-cfas
11
vulnerability VCID-543x-cnbz-1kb9
12
vulnerability VCID-551q-gpyd-ffe8
13
vulnerability VCID-58js-jzm4-4fc7
14
vulnerability VCID-5jgb-dsyx-hyb4
15
vulnerability VCID-5kzs-ex81-bbaj
16
vulnerability VCID-5paq-5frf-43ed
17
vulnerability VCID-5u4q-m66t-wqcj
18
vulnerability VCID-5z59-dn7p-xbc5
19
vulnerability VCID-65ue-7jd9-23gf
20
vulnerability VCID-6a9t-8dmn-s3bv
21
vulnerability VCID-6xmj-wbea-r7ex
22
vulnerability VCID-8d2m-1ffv-jqe1
23
vulnerability VCID-9g62-zd1x-3bdg
24
vulnerability VCID-9gpp-ez8w-rqav
25
vulnerability VCID-9x6r-56xm-n7h7
26
vulnerability VCID-9zqs-hjay-fkev
27
vulnerability VCID-a49c-fqrj-nbb3
28
vulnerability VCID-a563-vtwa-hkbr
29
vulnerability VCID-axaf-45kr-kbfe
30
vulnerability VCID-axvk-13qf-tka7
31
vulnerability VCID-b6er-h7dm-3bev
32
vulnerability VCID-bajy-qbwq-fufn
33
vulnerability VCID-bnne-7p2q-eqd2
34
vulnerability VCID-cm14-t8uv-k3es
35
vulnerability VCID-d8d1-sat6-muhe
36
vulnerability VCID-d99v-v9cj-zfh2
37
vulnerability VCID-dj88-f3p8-cfbn
38
vulnerability VCID-dm97-51uu-r7gw
39
vulnerability VCID-dmzb-gkdn-6bcm
40
vulnerability VCID-dsu7-jjjq-f3e1
41
vulnerability VCID-e268-wagv-sbex
42
vulnerability VCID-e32h-8q61-hbgc
43
vulnerability VCID-eajg-ctpd-2bby
44
vulnerability VCID-ekfd-wp8z-d7e1
45
vulnerability VCID-f4bv-pzdy-dfcb
46
vulnerability VCID-f963-qur3-2qb7
47
vulnerability VCID-g4uc-qeb6-myed
48
vulnerability VCID-gcnj-6qb6-pbgz
49
vulnerability VCID-gv1b-xtv4-4yg3
50
vulnerability VCID-h6y3-7gsq-skh2
51
vulnerability VCID-he5m-6wj4-rbhc
52
vulnerability VCID-hhmn-yz5p-xkap
53
vulnerability VCID-k8af-cg9k-87a9
54
vulnerability VCID-kj9x-psfz-2ug1
55
vulnerability VCID-mh4f-vtfj-hbb1
56
vulnerability VCID-mnz3-rj21-67ad
57
vulnerability VCID-mud2-s4rc-fuf6
58
vulnerability VCID-n15v-ta9h-6ffb
59
vulnerability VCID-n1cb-8py6-bbhu
60
vulnerability VCID-n78p-x7hh-gqcf
61
vulnerability VCID-n7ng-zkkb-2qaz
62
vulnerability VCID-nubu-f1sc-gbes
63
vulnerability VCID-nxq4-m52q-yuh4
64
vulnerability VCID-p715-yexd-jfgc
65
vulnerability VCID-phgh-sd4m-zbdx
66
vulnerability VCID-pmzz-9rws-4ud5
67
vulnerability VCID-pss5-as4b-cyf2
68
vulnerability VCID-px44-19tj-h7aa
69
vulnerability VCID-q8hy-wjd9-nbgp
70
vulnerability VCID-qb4j-9tz7-m7a2
71
vulnerability VCID-raxk-rm9v-hubn
72
vulnerability VCID-rdrs-mhaw-b3ge
73
vulnerability VCID-remd-55jh-r3g5
74
vulnerability VCID-rwqs-3ktq-qqbd
75
vulnerability VCID-s53a-f91p-huf4
76
vulnerability VCID-s55j-8hbt-akhn
77
vulnerability VCID-s64f-x81f-b7ce
78
vulnerability VCID-stzu-sxe6-5yf5
79
vulnerability VCID-sw7v-fbjk-13hy
80
vulnerability VCID-swnc-ke6h-ekew
81
vulnerability VCID-t1n7-eswt-73gw
82
vulnerability VCID-t3jn-vwbx-u7cr
83
vulnerability VCID-taj6-zj2n-5kg8
84
vulnerability VCID-tnjd-pyys-akav
85
vulnerability VCID-tw1y-t4qj-j3d1
86
vulnerability VCID-u9bx-8e86-wbew
87
vulnerability VCID-ve7g-8st5-wffb
88
vulnerability VCID-vxry-uvph-kbfd
89
vulnerability VCID-vyvy-y3cw-hbgr
90
vulnerability VCID-w13x-3rp9-wyej
91
vulnerability VCID-wea9-egep-h7g5
92
vulnerability VCID-xa4m-xpa9-v7h8
93
vulnerability VCID-xh7y-56vy-5ud8
94
vulnerability VCID-xtdg-uj46-rkcm
95
vulnerability VCID-xy6y-312d-rygj
96
vulnerability VCID-y32z-2d3f-gkgw
97
vulnerability VCID-yzx1-4psv-7bhr
98
vulnerability VCID-zdq2-dhb2-6kaq
99
vulnerability VCID-zkea-ge1t-z7gn
100
vulnerability VCID-zspb-bd6j-wyd2
101
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.3.2
aliases 2018-07-12-3
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wkm6-cgc8-bfa8
7
url VCID-zw9b-6vkf-3fc6
vulnerability_id VCID-zw9b-6vkf-3fc6
summary 
TYPO3 CMS Privilege Escalation and SQL Injection
Failing to properly dissociate system related configuration from user generated configuration, the Form Framework (system extension "form") is vulnerable to SQL injection and Privilege Escalation. Basically instructions can be persisted to a form definition file that were not configured to be modified - this applies to definitions managed using the form editor module as well as direct file upload using the regular file list module. A valid backend user account as well as having system extension form activated are needed in order to exploit this vulnerability.
references
0
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2018-07-12-3.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2018-07-12-3.yaml
1
reference_url https://github.com/TYPO3-CMS/core
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core
2
reference_url https://github.com/TYPO3-CMS/core/commit/5e3ed52854ea8192f1c0e2ef30f434e74ba6d253
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core/commit/5e3ed52854ea8192f1c0e2ef30f434e74ba6d253
3
reference_url https://github.com/TYPO3-CMS/core/commit/a0a6271dc8f715b5b6859771333d57925dfb63bc
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core/commit/a0a6271dc8f715b5b6859771333d57925dfb63bc
4
reference_url https://github.com/TYPO3-CMS/core/commit/e70d7c66110a0919b39bccdfdc73cbfd7f504dfc
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core/commit/e70d7c66110a0919b39bccdfdc73cbfd7f504dfc
5
reference_url https://github.com/TYPO3-CMS/core/commit/eddc7635fb3447f0fb69831855f4095de8e12350
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core/commit/eddc7635fb3447f0fb69831855f4095de8e12350
6
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-003
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2018-003
7
reference_url https://github.com/advisories/GHSA-45wj-jv2h-jwrf
reference_id GHSA-45wj-jv2h-jwrf
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-45wj-jv2h-jwrf
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.17
purl pkg:composer/typo3/cms-core@8.7.17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21e8-x7mp-hugk
1
vulnerability VCID-2meq-x4kd-bbdn
2
vulnerability VCID-3gg5-1921-rbfs
3
vulnerability VCID-3n2r-awja-dug9
4
vulnerability VCID-3v4n-fzxa-bfaw
5
vulnerability VCID-4btk-jt5n-2ugf
6
vulnerability VCID-4jpa-6fqh-hbfg
7
vulnerability VCID-551q-gpyd-ffe8
8
vulnerability VCID-5jgb-dsyx-hyb4
9
vulnerability VCID-5mxm-88r9-hfey
10
vulnerability VCID-5paq-5frf-43ed
11
vulnerability VCID-5u4q-m66t-wqcj
12
vulnerability VCID-5z59-dn7p-xbc5
13
vulnerability VCID-6xmj-wbea-r7ex
14
vulnerability VCID-9g62-zd1x-3bdg
15
vulnerability VCID-9gpp-ez8w-rqav
16
vulnerability VCID-9x6r-56xm-n7h7
17
vulnerability VCID-9zqs-hjay-fkev
18
vulnerability VCID-a563-vtwa-hkbr
19
vulnerability VCID-axaf-45kr-kbfe
20
vulnerability VCID-axvk-13qf-tka7
21
vulnerability VCID-b6er-h7dm-3bev
22
vulnerability VCID-b81w-n2ne-z3ee
23
vulnerability VCID-bajy-qbwq-fufn
24
vulnerability VCID-bnne-7p2q-eqd2
25
vulnerability VCID-cm14-t8uv-k3es
26
vulnerability VCID-d99v-v9cj-zfh2
27
vulnerability VCID-dj88-f3p8-cfbn
28
vulnerability VCID-dm97-51uu-r7gw
29
vulnerability VCID-dsu7-jjjq-f3e1
30
vulnerability VCID-e268-wagv-sbex
31
vulnerability VCID-eajg-ctpd-2bby
32
vulnerability VCID-ehzg-bzrd-kbcc
33
vulnerability VCID-ekfd-wp8z-d7e1
34
vulnerability VCID-f4bv-pzdy-dfcb
35
vulnerability VCID-f963-qur3-2qb7
36
vulnerability VCID-g4uc-qeb6-myed
37
vulnerability VCID-gcnj-6qb6-pbgz
38
vulnerability VCID-gv1b-xtv4-4yg3
39
vulnerability VCID-h6y3-7gsq-skh2
40
vulnerability VCID-he5m-6wj4-rbhc
41
vulnerability VCID-hhmn-yz5p-xkap
42
vulnerability VCID-j77k-hjgx-5kc5
43
vulnerability VCID-k8af-cg9k-87a9
44
vulnerability VCID-mh4f-vtfj-hbb1
45
vulnerability VCID-mnz3-rj21-67ad
46
vulnerability VCID-n15v-ta9h-6ffb
47
vulnerability VCID-n1cb-8py6-bbhu
48
vulnerability VCID-n78p-x7hh-gqcf
49
vulnerability VCID-n7ng-zkkb-2qaz
50
vulnerability VCID-pmzz-9rws-4ud5
51
vulnerability VCID-pss5-as4b-cyf2
52
vulnerability VCID-px44-19tj-h7aa
53
vulnerability VCID-q8hy-wjd9-nbgp
54
vulnerability VCID-qb4j-9tz7-m7a2
55
vulnerability VCID-rdrs-mhaw-b3ge
56
vulnerability VCID-rwqs-3ktq-qqbd
57
vulnerability VCID-s53a-f91p-huf4
58
vulnerability VCID-s55j-8hbt-akhn
59
vulnerability VCID-s64f-x81f-b7ce
60
vulnerability VCID-stzu-sxe6-5yf5
61
vulnerability VCID-swnc-ke6h-ekew
62
vulnerability VCID-t1n7-eswt-73gw
63
vulnerability VCID-t3jn-vwbx-u7cr
64
vulnerability VCID-taj6-zj2n-5kg8
65
vulnerability VCID-tnjd-pyys-akav
66
vulnerability VCID-tw1y-t4qj-j3d1
67
vulnerability VCID-vxry-uvph-kbfd
68
vulnerability VCID-vyvy-y3cw-hbgr
69
vulnerability VCID-wea9-egep-h7g5
70
vulnerability VCID-xa4m-xpa9-v7h8
71
vulnerability VCID-xh7y-56vy-5ud8
72
vulnerability VCID-y32z-2d3f-gkgw
73
vulnerability VCID-zdq2-dhb2-6kaq
74
vulnerability VCID-zkea-ge1t-z7gn
75
vulnerability VCID-zspb-bd6j-wyd2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.17
1
url pkg:composer/typo3/cms-core@9.3.2
purl pkg:composer/typo3/cms-core@9.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-21e8-x7mp-hugk
1
vulnerability VCID-2meq-x4kd-bbdn
2
vulnerability VCID-2mn6-mdmz-4yd9
3
vulnerability VCID-3gg5-1921-rbfs
4
vulnerability VCID-3n2r-awja-dug9
5
vulnerability VCID-3v4n-fzxa-bfaw
6
vulnerability VCID-461j-9hrc-gfbc
7
vulnerability VCID-4btk-jt5n-2ugf
8
vulnerability VCID-4jpa-6fqh-hbfg
9
vulnerability VCID-4mkw-tv16-jyca
10
vulnerability VCID-4t9s-p25a-cfas
11
vulnerability VCID-543x-cnbz-1kb9
12
vulnerability VCID-551q-gpyd-ffe8
13
vulnerability VCID-58js-jzm4-4fc7
14
vulnerability VCID-5jgb-dsyx-hyb4
15
vulnerability VCID-5kzs-ex81-bbaj
16
vulnerability VCID-5paq-5frf-43ed
17
vulnerability VCID-5u4q-m66t-wqcj
18
vulnerability VCID-5z59-dn7p-xbc5
19
vulnerability VCID-65ue-7jd9-23gf
20
vulnerability VCID-6a9t-8dmn-s3bv
21
vulnerability VCID-6xmj-wbea-r7ex
22
vulnerability VCID-8d2m-1ffv-jqe1
23
vulnerability VCID-9g62-zd1x-3bdg
24
vulnerability VCID-9gpp-ez8w-rqav
25
vulnerability VCID-9x6r-56xm-n7h7
26
vulnerability VCID-9zqs-hjay-fkev
27
vulnerability VCID-a49c-fqrj-nbb3
28
vulnerability VCID-a563-vtwa-hkbr
29
vulnerability VCID-axaf-45kr-kbfe
30
vulnerability VCID-axvk-13qf-tka7
31
vulnerability VCID-b6er-h7dm-3bev
32
vulnerability VCID-bajy-qbwq-fufn
33
vulnerability VCID-bnne-7p2q-eqd2
34
vulnerability VCID-cm14-t8uv-k3es
35
vulnerability VCID-d8d1-sat6-muhe
36
vulnerability VCID-d99v-v9cj-zfh2
37
vulnerability VCID-dj88-f3p8-cfbn
38
vulnerability VCID-dm97-51uu-r7gw
39
vulnerability VCID-dmzb-gkdn-6bcm
40
vulnerability VCID-dsu7-jjjq-f3e1
41
vulnerability VCID-e268-wagv-sbex
42
vulnerability VCID-e32h-8q61-hbgc
43
vulnerability VCID-eajg-ctpd-2bby
44
vulnerability VCID-ekfd-wp8z-d7e1
45
vulnerability VCID-f4bv-pzdy-dfcb
46
vulnerability VCID-f963-qur3-2qb7
47
vulnerability VCID-g4uc-qeb6-myed
48
vulnerability VCID-gcnj-6qb6-pbgz
49
vulnerability VCID-gv1b-xtv4-4yg3
50
vulnerability VCID-h6y3-7gsq-skh2
51
vulnerability VCID-he5m-6wj4-rbhc
52
vulnerability VCID-hhmn-yz5p-xkap
53
vulnerability VCID-k8af-cg9k-87a9
54
vulnerability VCID-kj9x-psfz-2ug1
55
vulnerability VCID-mh4f-vtfj-hbb1
56
vulnerability VCID-mnz3-rj21-67ad
57
vulnerability VCID-mud2-s4rc-fuf6
58
vulnerability VCID-n15v-ta9h-6ffb
59
vulnerability VCID-n1cb-8py6-bbhu
60
vulnerability VCID-n78p-x7hh-gqcf
61
vulnerability VCID-n7ng-zkkb-2qaz
62
vulnerability VCID-nubu-f1sc-gbes
63
vulnerability VCID-nxq4-m52q-yuh4
64
vulnerability VCID-p715-yexd-jfgc
65
vulnerability VCID-phgh-sd4m-zbdx
66
vulnerability VCID-pmzz-9rws-4ud5
67
vulnerability VCID-pss5-as4b-cyf2
68
vulnerability VCID-px44-19tj-h7aa
69
vulnerability VCID-q8hy-wjd9-nbgp
70
vulnerability VCID-qb4j-9tz7-m7a2
71
vulnerability VCID-raxk-rm9v-hubn
72
vulnerability VCID-rdrs-mhaw-b3ge
73
vulnerability VCID-remd-55jh-r3g5
74
vulnerability VCID-rwqs-3ktq-qqbd
75
vulnerability VCID-s53a-f91p-huf4
76
vulnerability VCID-s55j-8hbt-akhn
77
vulnerability VCID-s64f-x81f-b7ce
78
vulnerability VCID-stzu-sxe6-5yf5
79
vulnerability VCID-sw7v-fbjk-13hy
80
vulnerability VCID-swnc-ke6h-ekew
81
vulnerability VCID-t1n7-eswt-73gw
82
vulnerability VCID-t3jn-vwbx-u7cr
83
vulnerability VCID-taj6-zj2n-5kg8
84
vulnerability VCID-tnjd-pyys-akav
85
vulnerability VCID-tw1y-t4qj-j3d1
86
vulnerability VCID-u9bx-8e86-wbew
87
vulnerability VCID-ve7g-8st5-wffb
88
vulnerability VCID-vxry-uvph-kbfd
89
vulnerability VCID-vyvy-y3cw-hbgr
90
vulnerability VCID-w13x-3rp9-wyej
91
vulnerability VCID-wea9-egep-h7g5
92
vulnerability VCID-xa4m-xpa9-v7h8
93
vulnerability VCID-xh7y-56vy-5ud8
94
vulnerability VCID-xtdg-uj46-rkcm
95
vulnerability VCID-xy6y-312d-rygj
96
vulnerability VCID-y32z-2d3f-gkgw
97
vulnerability VCID-yzx1-4psv-7bhr
98
vulnerability VCID-zdq2-dhb2-6kaq
99
vulnerability VCID-zkea-ge1t-z7gn
100
vulnerability VCID-zspb-bd6j-wyd2
101
vulnerability VCID-zwgt-rm1f-6bf2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.3.2
aliases GHSA-45wj-jv2h-jwrf
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zw9b-6vkf-3fc6
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.17