Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:composer/typo3/cms@8.3.0
Typecomposer
Namespacetypo3
Namecms
Version8.3.0
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version9.5.25
Latest_non_vulnerable_version12.2.0
Affected_by_vulnerabilities
0
url VCID-1ffs-9vj5-27hk
vulnerability_id VCID-1ffs-9vj5-27hk
summary 
Path Traversal
Due to improper input validation, attackers can by-pass restrictions of predefined options and submit arbitrary data in the Form Designer backend module of the Form Framework. In the default configuration of the Form Framework this allows attackers to explicitly allow arbitrary mime-types for file uploads - however, default `_fileDenyPattern_` successfully blocked files like `_.htaccess_` or `_malicious.php_`. Besides that, attackers can persist those files in any writable directory of the corresponding TYPO3 installation. A valid backend user account with access to the form module is needed to exploit this vulnerability.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-21357
reference_id
reference_type
scores
0
value 0.01121
scoring_system epss
scoring_elements 0.78584
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-21357
1
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21357.yaml
reference_id
reference_type
scores
0
value 8.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H/E:H/RL:O/RC:C
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21357.yaml
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21357.yaml
reference_id
reference_type
scores
0
value 8.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H/E:H/RL:O/RC:C
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21357.yaml
3
reference_url https://packagist.org/packages/typo3/cms-form
reference_id
reference_type
scores
0
value 8.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H/E:H/RL:O/RC:C
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://packagist.org/packages/typo3/cms-form
4
reference_url https://typo3.org/security/advisory/typo3-core-sa-2021-003
reference_id
reference_type
scores
0
value 8.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H/E:H/RL:O/RC:C
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2021-003
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-21357
reference_id CVE-2021-21357
reference_type
scores
0
value 8.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H/E:H/RL:O/RC:C
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-21357
6
reference_url https://github.com/advisories/GHSA-3vg7-jw9m-pc3f
reference_id GHSA-3vg7-jw9m-pc3f
reference_type
scores
url https://github.com/advisories/GHSA-3vg7-jw9m-pc3f
7
reference_url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-3vg7-jw9m-pc3f
reference_id GHSA-3vg7-jw9m-pc3f
reference_type
scores
0
value 8.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H/E:H/RL:O/RC:C
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-3vg7-jw9m-pc3f
fixed_packages
0
url pkg:composer/typo3/cms@8.7.40
purl pkg:composer/typo3/cms@8.7.40
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-j8hk-bqnb-gycp
1
vulnerability VCID-sdjb-gp4t-vbgt
2
vulnerability VCID-uq77-aax5-k7d8
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.40
1
url pkg:composer/typo3/cms@9.5.25
purl pkg:composer/typo3/cms@9.5.25
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.25
2
url pkg:composer/typo3/cms@10.4.14
purl pkg:composer/typo3/cms@10.4.14
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@10.4.14
3
url pkg:composer/typo3/cms@11.1.1
purl pkg:composer/typo3/cms@11.1.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@11.1.1
aliases CVE-2021-21357, GHSA-3vg7-jw9m-pc3f
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1ffs-9vj5-27hk
1
url VCID-3ugj-6m1e-e3hr
vulnerability_id VCID-3ugj-6m1e-e3hr
summary 
Cross-site Scripting
Cross-Site Scripting in Online Media Asset Rendering.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-006/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2018-006/
fixed_packages
0
url pkg:composer/typo3/cms@8.7.21
purl pkg:composer/typo3/cms@8.7.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-4eym-e6vt-8fbs
2
vulnerability VCID-7m6u-k5tp-gkhy
3
vulnerability VCID-848u-w88s-5bbe
4
vulnerability VCID-am6s-67bm-77dr
5
vulnerability VCID-bn3p-39sv-6fdg
6
vulnerability VCID-ev4k-5k1d-2bhu
7
vulnerability VCID-fqkx-v8t5-q3h6
8
vulnerability VCID-fut7-bb1f-37g7
9
vulnerability VCID-jp1p-rfxa-hyd9
10
vulnerability VCID-k5t3-28es-h3ez
11
vulnerability VCID-khpm-e1xb-hydb
12
vulnerability VCID-nney-azbc-pucg
13
vulnerability VCID-p7gd-anw2-1qbz
14
vulnerability VCID-pmvp-twk2-jqe4
15
vulnerability VCID-qv14-m93d-jyd9
16
vulnerability VCID-rqrw-t2kj-mud8
17
vulnerability VCID-ru6w-m6q6-27gn
18
vulnerability VCID-sdsa-mh76-kqch
19
vulnerability VCID-tgyt-axv1-c7ag
20
vulnerability VCID-u259-2sxq-tbct
21
vulnerability VCID-vw2r-g8yy-eyf4
22
vulnerability VCID-x5x1-w7yv-eye9
23
vulnerability VCID-xw1s-93bu-wuh9
24
vulnerability VCID-y7ds-p5r2-yuhq
25
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.21
1
url pkg:composer/typo3/cms@9.5.2
purl pkg:composer/typo3/cms@9.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1sfk-z8py-ykb8
2
vulnerability VCID-3ye6-vqje-abh4
3
vulnerability VCID-4an7-9ph4-mkd4
4
vulnerability VCID-4eym-e6vt-8fbs
5
vulnerability VCID-4jck-w9ct-budk
6
vulnerability VCID-6mnf-2fcw-dqgp
7
vulnerability VCID-7m6u-k5tp-gkhy
8
vulnerability VCID-7xv1-78u7-xufp
9
vulnerability VCID-848u-w88s-5bbe
10
vulnerability VCID-8w4e-d49b-nbg8
11
vulnerability VCID-9adx-p876-kyb5
12
vulnerability VCID-am6s-67bm-77dr
13
vulnerability VCID-bbh5-rss8-bfct
14
vulnerability VCID-cvk2-93hm-gkhx
15
vulnerability VCID-e6zr-4bgg-kkh5
16
vulnerability VCID-ev4k-5k1d-2bhu
17
vulnerability VCID-fqkx-v8t5-q3h6
18
vulnerability VCID-fut7-bb1f-37g7
19
vulnerability VCID-jp1p-rfxa-hyd9
20
vulnerability VCID-k5t3-28es-h3ez
21
vulnerability VCID-khpm-e1xb-hydb
22
vulnerability VCID-n1gz-y615-cbbk
23
vulnerability VCID-nney-azbc-pucg
24
vulnerability VCID-p7gd-anw2-1qbz
25
vulnerability VCID-pmvp-twk2-jqe4
26
vulnerability VCID-qv14-m93d-jyd9
27
vulnerability VCID-rqrw-t2kj-mud8
28
vulnerability VCID-ru6w-m6q6-27gn
29
vulnerability VCID-sdsa-mh76-kqch
30
vulnerability VCID-tgyt-axv1-c7ag
31
vulnerability VCID-u259-2sxq-tbct
32
vulnerability VCID-vw2r-g8yy-eyf4
33
vulnerability VCID-x5x1-w7yv-eye9
34
vulnerability VCID-xw1s-93bu-wuh9
35
vulnerability VCID-y7ds-p5r2-yuhq
36
vulnerability VCID-zeut-9wfp-q7et
37
vulnerability VCID-zkvq-bms4-gfcv
38
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.2
aliases GMS-2018-97
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3ugj-6m1e-e3hr
2
url VCID-4eym-e6vt-8fbs
vulnerability_id VCID-4eym-e6vt-8fbs
summary 
Code Injection
Arbitrary Code Execution and Cross-Site Scripting in Backend API.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-019/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-019/
fixed_packages
0
url pkg:composer/typo3/cms@8.7.27
purl pkg:composer/typo3/cms@8.7.27
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-848u-w88s-5bbe
2
vulnerability VCID-ev4k-5k1d-2bhu
3
vulnerability VCID-fqkx-v8t5-q3h6
4
vulnerability VCID-jp1p-rfxa-hyd9
5
vulnerability VCID-p7gd-anw2-1qbz
6
vulnerability VCID-rqrw-t2kj-mud8
7
vulnerability VCID-tgyt-axv1-c7ag
8
vulnerability VCID-xw1s-93bu-wuh9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.27
1
url pkg:composer/typo3/cms@9.5.8
purl pkg:composer/typo3/cms@9.5.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1sfk-z8py-ykb8
2
vulnerability VCID-4an7-9ph4-mkd4
3
vulnerability VCID-6mnf-2fcw-dqgp
4
vulnerability VCID-848u-w88s-5bbe
5
vulnerability VCID-8w4e-d49b-nbg8
6
vulnerability VCID-bbh5-rss8-bfct
7
vulnerability VCID-e6zr-4bgg-kkh5
8
vulnerability VCID-ev4k-5k1d-2bhu
9
vulnerability VCID-fqkx-v8t5-q3h6
10
vulnerability VCID-jp1p-rfxa-hyd9
11
vulnerability VCID-n1gz-y615-cbbk
12
vulnerability VCID-p7gd-anw2-1qbz
13
vulnerability VCID-rqrw-t2kj-mud8
14
vulnerability VCID-tgyt-axv1-c7ag
15
vulnerability VCID-xw1s-93bu-wuh9
16
vulnerability VCID-zkvq-bms4-gfcv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.8
aliases GMS-2019-188
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-4eym-e6vt-8fbs
3
url VCID-5dxs-cdht-27hw
vulnerability_id VCID-5dxs-cdht-27hw
summary 
Insecure Deserialization
Insecure Unserialize in TYPO3 Backend.
references
0
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2016-023/
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2016-023/
fixed_packages
0
url pkg:composer/typo3/cms@8.4.1
purl pkg:composer/typo3/cms@8.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-3ugj-6m1e-e3hr
2
vulnerability VCID-4eym-e6vt-8fbs
3
vulnerability VCID-66ru-n2df-b3ay
4
vulnerability VCID-7ch1-q9f4-a7bt
5
vulnerability VCID-7m6u-k5tp-gkhy
6
vulnerability VCID-848u-w88s-5bbe
7
vulnerability VCID-953t-q1cr-zyd6
8
vulnerability VCID-9saf-w56y-pugz
9
vulnerability VCID-abjx-8v46-d7d8
10
vulnerability VCID-am6s-67bm-77dr
11
vulnerability VCID-bn3p-39sv-6fdg
12
vulnerability VCID-d6c2-upx1-e7cd
13
vulnerability VCID-dsqm-9q3e-dudw
14
vulnerability VCID-e564-zdku-9fc6
15
vulnerability VCID-emqq-kwjg-3kfk
16
vulnerability VCID-ev4k-5k1d-2bhu
17
vulnerability VCID-fdnw-2tz5-4fdr
18
vulnerability VCID-fqkx-v8t5-q3h6
19
vulnerability VCID-fut7-bb1f-37g7
20
vulnerability VCID-h7cg-64er-uya9
21
vulnerability VCID-h7hf-sf2q-73ay
22
vulnerability VCID-hg2n-xera-jkdh
23
vulnerability VCID-hp99-ncuh-6ugv
24
vulnerability VCID-jp1p-rfxa-hyd9
25
vulnerability VCID-jq5y-7h9g-mufa
26
vulnerability VCID-jqe4-8hzb-mfea
27
vulnerability VCID-k5t3-28es-h3ez
28
vulnerability VCID-khpm-e1xb-hydb
29
vulnerability VCID-mctp-nf36-7qdn
30
vulnerability VCID-njsj-bwjq-fyap
31
vulnerability VCID-nney-azbc-pucg
32
vulnerability VCID-p7gd-anw2-1qbz
33
vulnerability VCID-pmvp-twk2-jqe4
34
vulnerability VCID-q52p-xfj8-gygd
35
vulnerability VCID-qv14-m93d-jyd9
36
vulnerability VCID-qxab-9uwr-yqhv
37
vulnerability VCID-rqrw-t2kj-mud8
38
vulnerability VCID-ru6w-m6q6-27gn
39
vulnerability VCID-sdsa-mh76-kqch
40
vulnerability VCID-sy7r-d6pv-yba9
41
vulnerability VCID-u259-2sxq-tbct
42
vulnerability VCID-vq15-t92r-5bhx
43
vulnerability VCID-vw2r-g8yy-eyf4
44
vulnerability VCID-wy45-2gmr-fkfg
45
vulnerability VCID-x5x1-w7yv-eye9
46
vulnerability VCID-xh68-defe-f7ce
47
vulnerability VCID-xw1s-93bu-wuh9
48
vulnerability VCID-y7ds-p5r2-yuhq
49
vulnerability VCID-ygw4-jdqu-4fbt
50
vulnerability VCID-yz6t-ge1y-qfgr
51
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.4.1
aliases GMS-2016-157
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5dxs-cdht-27hw
4
url VCID-5hm4-ms5p-uuae
vulnerability_id VCID-5hm4-ms5p-uuae
summary Failing to properly encode user input, the page module is vulnerable to Cross-Site Scripting. A valid backend user account with permissions to edit plugins is needed to exploit this vulnerability.
references
0
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2016-021
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2016-021
fixed_packages
0
url pkg:composer/typo3/cms@8.3.1
purl pkg:composer/typo3/cms@8.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-3ugj-6m1e-e3hr
2
vulnerability VCID-4eym-e6vt-8fbs
3
vulnerability VCID-5dxs-cdht-27hw
4
vulnerability VCID-66ru-n2df-b3ay
5
vulnerability VCID-727q-h3ey-6yc9
6
vulnerability VCID-7ch1-q9f4-a7bt
7
vulnerability VCID-7m6u-k5tp-gkhy
8
vulnerability VCID-848u-w88s-5bbe
9
vulnerability VCID-953t-q1cr-zyd6
10
vulnerability VCID-9saf-w56y-pugz
11
vulnerability VCID-abjx-8v46-d7d8
12
vulnerability VCID-am6s-67bm-77dr
13
vulnerability VCID-bn3p-39sv-6fdg
14
vulnerability VCID-d6c2-upx1-e7cd
15
vulnerability VCID-dsqm-9q3e-dudw
16
vulnerability VCID-e564-zdku-9fc6
17
vulnerability VCID-emqq-kwjg-3kfk
18
vulnerability VCID-eutz-mj58-audb
19
vulnerability VCID-ev4k-5k1d-2bhu
20
vulnerability VCID-fdnw-2tz5-4fdr
21
vulnerability VCID-fqkx-v8t5-q3h6
22
vulnerability VCID-fut7-bb1f-37g7
23
vulnerability VCID-h217-xe8x-nua3
24
vulnerability VCID-h7cg-64er-uya9
25
vulnerability VCID-h7hf-sf2q-73ay
26
vulnerability VCID-hg2n-xera-jkdh
27
vulnerability VCID-hp99-ncuh-6ugv
28
vulnerability VCID-jp1p-rfxa-hyd9
29
vulnerability VCID-jq5y-7h9g-mufa
30
vulnerability VCID-jqe4-8hzb-mfea
31
vulnerability VCID-k5t3-28es-h3ez
32
vulnerability VCID-khpm-e1xb-hydb
33
vulnerability VCID-mctp-nf36-7qdn
34
vulnerability VCID-njsj-bwjq-fyap
35
vulnerability VCID-nney-azbc-pucg
36
vulnerability VCID-p7gd-anw2-1qbz
37
vulnerability VCID-pmvp-twk2-jqe4
38
vulnerability VCID-q52p-xfj8-gygd
39
vulnerability VCID-qv14-m93d-jyd9
40
vulnerability VCID-qxab-9uwr-yqhv
41
vulnerability VCID-rqrw-t2kj-mud8
42
vulnerability VCID-ru6w-m6q6-27gn
43
vulnerability VCID-sdsa-mh76-kqch
44
vulnerability VCID-sy7r-d6pv-yba9
45
vulnerability VCID-u259-2sxq-tbct
46
vulnerability VCID-vq15-t92r-5bhx
47
vulnerability VCID-vw2r-g8yy-eyf4
48
vulnerability VCID-wy45-2gmr-fkfg
49
vulnerability VCID-x5x1-w7yv-eye9
50
vulnerability VCID-xh68-defe-f7ce
51
vulnerability VCID-xw1s-93bu-wuh9
52
vulnerability VCID-y7ds-p5r2-yuhq
53
vulnerability VCID-ygw4-jdqu-4fbt
54
vulnerability VCID-yz6t-ge1y-qfgr
55
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.3.1
aliases TYPO3-CORE-SA-2016-021
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5hm4-ms5p-uuae
5
url VCID-66ru-n2df-b3ay
vulnerability_id VCID-66ru-n2df-b3ay
summary 
Cross-site Scripting
XSS in TYPO3 CMS.
references
0
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-003/
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-003/
fixed_packages
0
url pkg:composer/typo3/cms@8.6.1
purl pkg:composer/typo3/cms@8.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-3ugj-6m1e-e3hr
2
vulnerability VCID-4eym-e6vt-8fbs
3
vulnerability VCID-7ch1-q9f4-a7bt
4
vulnerability VCID-7m6u-k5tp-gkhy
5
vulnerability VCID-848u-w88s-5bbe
6
vulnerability VCID-953t-q1cr-zyd6
7
vulnerability VCID-9saf-w56y-pugz
8
vulnerability VCID-abjx-8v46-d7d8
9
vulnerability VCID-am6s-67bm-77dr
10
vulnerability VCID-bn3p-39sv-6fdg
11
vulnerability VCID-dsqm-9q3e-dudw
12
vulnerability VCID-e564-zdku-9fc6
13
vulnerability VCID-emqq-kwjg-3kfk
14
vulnerability VCID-ev4k-5k1d-2bhu
15
vulnerability VCID-fdnw-2tz5-4fdr
16
vulnerability VCID-fqkx-v8t5-q3h6
17
vulnerability VCID-fut7-bb1f-37g7
18
vulnerability VCID-h7cg-64er-uya9
19
vulnerability VCID-hp99-ncuh-6ugv
20
vulnerability VCID-je4q-svfw-hqda
21
vulnerability VCID-jp1p-rfxa-hyd9
22
vulnerability VCID-jq5y-7h9g-mufa
23
vulnerability VCID-jqe4-8hzb-mfea
24
vulnerability VCID-k5t3-28es-h3ez
25
vulnerability VCID-khpm-e1xb-hydb
26
vulnerability VCID-mctp-nf36-7qdn
27
vulnerability VCID-njsj-bwjq-fyap
28
vulnerability VCID-nney-azbc-pucg
29
vulnerability VCID-p7gd-anw2-1qbz
30
vulnerability VCID-pmvp-twk2-jqe4
31
vulnerability VCID-q52p-xfj8-gygd
32
vulnerability VCID-qv14-m93d-jyd9
33
vulnerability VCID-qxab-9uwr-yqhv
34
vulnerability VCID-rqrw-t2kj-mud8
35
vulnerability VCID-ru6w-m6q6-27gn
36
vulnerability VCID-sdsa-mh76-kqch
37
vulnerability VCID-sy7r-d6pv-yba9
38
vulnerability VCID-u259-2sxq-tbct
39
vulnerability VCID-vq15-t92r-5bhx
40
vulnerability VCID-vw2r-g8yy-eyf4
41
vulnerability VCID-w1wb-mq2y-dfca
42
vulnerability VCID-wy45-2gmr-fkfg
43
vulnerability VCID-x5x1-w7yv-eye9
44
vulnerability VCID-xw1s-93bu-wuh9
45
vulnerability VCID-y7ds-p5r2-yuhq
46
vulnerability VCID-ygw4-jdqu-4fbt
47
vulnerability VCID-yz6t-ge1y-qfgr
48
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.6.1
aliases GMS-2017-349
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-66ru-n2df-b3ay
6
url VCID-727q-h3ey-6yc9
vulnerability_id VCID-727q-h3ey-6yc9
summary Path Traversal in TYPO3 Core.
references
0
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2016-024/
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2016-024/
fixed_packages
0
url pkg:composer/typo3/cms@8.4.1
purl pkg:composer/typo3/cms@8.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-3ugj-6m1e-e3hr
2
vulnerability VCID-4eym-e6vt-8fbs
3
vulnerability VCID-66ru-n2df-b3ay
4
vulnerability VCID-7ch1-q9f4-a7bt
5
vulnerability VCID-7m6u-k5tp-gkhy
6
vulnerability VCID-848u-w88s-5bbe
7
vulnerability VCID-953t-q1cr-zyd6
8
vulnerability VCID-9saf-w56y-pugz
9
vulnerability VCID-abjx-8v46-d7d8
10
vulnerability VCID-am6s-67bm-77dr
11
vulnerability VCID-bn3p-39sv-6fdg
12
vulnerability VCID-d6c2-upx1-e7cd
13
vulnerability VCID-dsqm-9q3e-dudw
14
vulnerability VCID-e564-zdku-9fc6
15
vulnerability VCID-emqq-kwjg-3kfk
16
vulnerability VCID-ev4k-5k1d-2bhu
17
vulnerability VCID-fdnw-2tz5-4fdr
18
vulnerability VCID-fqkx-v8t5-q3h6
19
vulnerability VCID-fut7-bb1f-37g7
20
vulnerability VCID-h7cg-64er-uya9
21
vulnerability VCID-h7hf-sf2q-73ay
22
vulnerability VCID-hg2n-xera-jkdh
23
vulnerability VCID-hp99-ncuh-6ugv
24
vulnerability VCID-jp1p-rfxa-hyd9
25
vulnerability VCID-jq5y-7h9g-mufa
26
vulnerability VCID-jqe4-8hzb-mfea
27
vulnerability VCID-k5t3-28es-h3ez
28
vulnerability VCID-khpm-e1xb-hydb
29
vulnerability VCID-mctp-nf36-7qdn
30
vulnerability VCID-njsj-bwjq-fyap
31
vulnerability VCID-nney-azbc-pucg
32
vulnerability VCID-p7gd-anw2-1qbz
33
vulnerability VCID-pmvp-twk2-jqe4
34
vulnerability VCID-q52p-xfj8-gygd
35
vulnerability VCID-qv14-m93d-jyd9
36
vulnerability VCID-qxab-9uwr-yqhv
37
vulnerability VCID-rqrw-t2kj-mud8
38
vulnerability VCID-ru6w-m6q6-27gn
39
vulnerability VCID-sdsa-mh76-kqch
40
vulnerability VCID-sy7r-d6pv-yba9
41
vulnerability VCID-u259-2sxq-tbct
42
vulnerability VCID-vq15-t92r-5bhx
43
vulnerability VCID-vw2r-g8yy-eyf4
44
vulnerability VCID-wy45-2gmr-fkfg
45
vulnerability VCID-x5x1-w7yv-eye9
46
vulnerability VCID-xh68-defe-f7ce
47
vulnerability VCID-xw1s-93bu-wuh9
48
vulnerability VCID-y7ds-p5r2-yuhq
49
vulnerability VCID-ygw4-jdqu-4fbt
50
vulnerability VCID-yz6t-ge1y-qfgr
51
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.4.1
aliases GMS-2016-158
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-727q-h3ey-6yc9
7
url VCID-7ch1-q9f4-a7bt
vulnerability_id VCID-7ch1-q9f4-a7bt
summary 
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
In Bootstrap, XSS is possible in the data-target property of scrollspy.
references
0
reference_url http://packetstormsecurity.com/files/152787/dotCMS-5.1.1-Vulnerable-Dependencies.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://packetstormsecurity.com/files/152787/dotCMS-5.1.1-Vulnerable-Dependencies.html
1
reference_url http://packetstormsecurity.com/files/156743/OctoberCMS-Insecure-Dependencies.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://packetstormsecurity.com/files/156743/OctoberCMS-Insecure-Dependencies.html
2
reference_url https://access.redhat.com/errata/RHSA-2019:1456
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2019:1456
3
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14041.json
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14041.json
4
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-14041
reference_id
reference_type
scores
0
value 0.07723
scoring_system epss
scoring_elements 0.92076
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-14041
5
reference_url https://blog.getbootstrap.com/2018/07/12/bootstrap-4-1-2
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3
scoring_elements
1
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://blog.getbootstrap.com/2018/07/12/bootstrap-4-1-2
6
reference_url http://seclists.org/fulldisclosure/2019/May/10
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://seclists.org/fulldisclosure/2019/May/10
7
reference_url http://seclists.org/fulldisclosure/2019/May/11
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://seclists.org/fulldisclosure/2019/May/11
8
reference_url http://seclists.org/fulldisclosure/2019/May/13
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://seclists.org/fulldisclosure/2019/May/13
9
reference_url https://github.com/twbs/bootstrap
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/twbs/bootstrap
10
reference_url https://github.com/twbs/bootstrap/issues/26423
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/twbs/bootstrap/issues/26423
11
reference_url https://github.com/twbs/bootstrap/issues/26627
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/twbs/bootstrap/issues/26627
12
reference_url https://github.com/twbs/bootstrap/pull/26630
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/twbs/bootstrap/pull/26630
13
reference_url https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E
14
reference_url https://lists.apache.org/thread.html/52e0e6b5df827ee7f1e68f7cc3babe61af3b2160f5d74a85469b7b0e@%3Cdev.superset.apache.org%3E
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/52e0e6b5df827ee7f1e68f7cc3babe61af3b2160f5d74a85469b7b0e@%3Cdev.superset.apache.org%3E
15
reference_url https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E
16
reference_url https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E
17
reference_url https://lists.apache.org/thread.html/r3dc0cac8d856bca02bd6997355d7ff83027dcfc82f8646a29b89b714@%3Cissues.hbase.apache.org%3E
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r3dc0cac8d856bca02bd6997355d7ff83027dcfc82f8646a29b89b714@%3Cissues.hbase.apache.org%3E
18
reference_url https://seclists.org/bugtraq/2019/May/18
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://seclists.org/bugtraq/2019/May/18
19
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-006
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2019-006
20
reference_url https://www.oracle.com/security-alerts/cpuApr2021.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.oracle.com/security-alerts/cpuApr2021.html
21
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1601616
reference_id 1601616
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1601616
22
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-14041
reference_id CVE-2018-14041
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-14041
23
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2018-14041.yaml
reference_id CVE-2018-14041.YAML
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2018-14041.yaml
24
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2018-14041.yaml
reference_id CVE-2018-14041.YAML
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2018-14041.yaml
25
reference_url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/bootstrap/CVE-2018-14041.yml
reference_id CVE-2018-14041.YML
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/bootstrap/CVE-2018-14041.yml
26
reference_url https://github.com/advisories/GHSA-pj7m-g53m-7638
reference_id GHSA-pj7m-g53m-7638
reference_type
scores
url https://github.com/advisories/GHSA-pj7m-g53m-7638
27
reference_url https://access.redhat.com/errata/RHSA-2023:0552
reference_id RHSA-2023:0552
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:0552
28
reference_url https://access.redhat.com/errata/RHSA-2023:0553
reference_id RHSA-2023:0553
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:0553
29
reference_url https://access.redhat.com/errata/RHSA-2023:0554
reference_id RHSA-2023:0554
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:0554
30
reference_url https://access.redhat.com/errata/RHSA-2023:0556
reference_id RHSA-2023:0556
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:0556
31
reference_url https://access.redhat.com/errata/RHSA-2023:5693
reference_id RHSA-2023:5693
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:5693
fixed_packages
0
url pkg:composer/typo3/cms@8.7.23
purl pkg:composer/typo3/cms@8.7.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-4eym-e6vt-8fbs
2
vulnerability VCID-7m6u-k5tp-gkhy
3
vulnerability VCID-848u-w88s-5bbe
4
vulnerability VCID-ev4k-5k1d-2bhu
5
vulnerability VCID-fqkx-v8t5-q3h6
6
vulnerability VCID-fut7-bb1f-37g7
7
vulnerability VCID-jp1p-rfxa-hyd9
8
vulnerability VCID-k5t3-28es-h3ez
9
vulnerability VCID-nney-azbc-pucg
10
vulnerability VCID-p7gd-anw2-1qbz
11
vulnerability VCID-qv14-m93d-jyd9
12
vulnerability VCID-rqrw-t2kj-mud8
13
vulnerability VCID-ru6w-m6q6-27gn
14
vulnerability VCID-sdsa-mh76-kqch
15
vulnerability VCID-tgyt-axv1-c7ag
16
vulnerability VCID-x5x1-w7yv-eye9
17
vulnerability VCID-xw1s-93bu-wuh9
18
vulnerability VCID-y7ds-p5r2-yuhq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.23
1
url pkg:composer/typo3/cms@9.5.4
purl pkg:composer/typo3/cms@9.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1sfk-z8py-ykb8
2
vulnerability VCID-3ye6-vqje-abh4
3
vulnerability VCID-4an7-9ph4-mkd4
4
vulnerability VCID-4eym-e6vt-8fbs
5
vulnerability VCID-6mnf-2fcw-dqgp
6
vulnerability VCID-7m6u-k5tp-gkhy
7
vulnerability VCID-7xv1-78u7-xufp
8
vulnerability VCID-848u-w88s-5bbe
9
vulnerability VCID-8w4e-d49b-nbg8
10
vulnerability VCID-9adx-p876-kyb5
11
vulnerability VCID-bbh5-rss8-bfct
12
vulnerability VCID-cvk2-93hm-gkhx
13
vulnerability VCID-e6zr-4bgg-kkh5
14
vulnerability VCID-ev4k-5k1d-2bhu
15
vulnerability VCID-fqkx-v8t5-q3h6
16
vulnerability VCID-fut7-bb1f-37g7
17
vulnerability VCID-jp1p-rfxa-hyd9
18
vulnerability VCID-k5t3-28es-h3ez
19
vulnerability VCID-n1gz-y615-cbbk
20
vulnerability VCID-nney-azbc-pucg
21
vulnerability VCID-p7gd-anw2-1qbz
22
vulnerability VCID-qv14-m93d-jyd9
23
vulnerability VCID-rqrw-t2kj-mud8
24
vulnerability VCID-ru6w-m6q6-27gn
25
vulnerability VCID-sdsa-mh76-kqch
26
vulnerability VCID-tgyt-axv1-c7ag
27
vulnerability VCID-x5x1-w7yv-eye9
28
vulnerability VCID-xw1s-93bu-wuh9
29
vulnerability VCID-y7ds-p5r2-yuhq
30
vulnerability VCID-zeut-9wfp-q7et
31
vulnerability VCID-zkvq-bms4-gfcv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.4
aliases CVE-2018-14041, GHSA-pj7m-g53m-7638
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7ch1-q9f4-a7bt
8
url VCID-7m6u-k5tp-gkhy
vulnerability_id VCID-7m6u-k5tp-gkhy
summary Insecure Deserialization in TYPO3 CMS.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-020/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-020/
fixed_packages
0
url pkg:composer/typo3/cms@8.7.27
purl pkg:composer/typo3/cms@8.7.27
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-848u-w88s-5bbe
2
vulnerability VCID-ev4k-5k1d-2bhu
3
vulnerability VCID-fqkx-v8t5-q3h6
4
vulnerability VCID-jp1p-rfxa-hyd9
5
vulnerability VCID-p7gd-anw2-1qbz
6
vulnerability VCID-rqrw-t2kj-mud8
7
vulnerability VCID-tgyt-axv1-c7ag
8
vulnerability VCID-xw1s-93bu-wuh9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.27
1
url pkg:composer/typo3/cms@9.5.8
purl pkg:composer/typo3/cms@9.5.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1sfk-z8py-ykb8
2
vulnerability VCID-4an7-9ph4-mkd4
3
vulnerability VCID-6mnf-2fcw-dqgp
4
vulnerability VCID-848u-w88s-5bbe
5
vulnerability VCID-8w4e-d49b-nbg8
6
vulnerability VCID-bbh5-rss8-bfct
7
vulnerability VCID-e6zr-4bgg-kkh5
8
vulnerability VCID-ev4k-5k1d-2bhu
9
vulnerability VCID-fqkx-v8t5-q3h6
10
vulnerability VCID-jp1p-rfxa-hyd9
11
vulnerability VCID-n1gz-y615-cbbk
12
vulnerability VCID-p7gd-anw2-1qbz
13
vulnerability VCID-rqrw-t2kj-mud8
14
vulnerability VCID-tgyt-axv1-c7ag
15
vulnerability VCID-xw1s-93bu-wuh9
16
vulnerability VCID-zkvq-bms4-gfcv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.8
aliases GMS-2019-189
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7m6u-k5tp-gkhy
9
url VCID-848u-w88s-5bbe
vulnerability_id VCID-848u-w88s-5bbe
summary 
Unrestricted Upload of File with Dangerous Type
Due to the lack of ensuring file extensions belong to configured allowed mime-types, attackers can upload arbitrary data with arbitrary file extensions - however, default `_fileDenyPattern_` successfully blocked files like `_.htaccess_` or `_malicious.php_`. Additionally, `_UploadedFileReferenceConverter_` transforming uploaded files into proper FileReference domain model objects handles possible file uploads for other extensions as well - given those extensions use the Extbase MVC framework, make use of FileReference items in their direct or inherited domain model definitions and did not implement their own type converter. In case this scenario applies, `_UploadedFileReferenceConverter_` accepts any file mime-type and persists files in the default location. In any way, uploaded files are placed in the default location `_/fileadmin/user_upload/_`, in most scenarios keeping the submitted filename - which allows attackers to directly reference files, or even correctly guess filenames used by other individuals, disclosing this information. No authentication is required to exploit this vulnerability.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-21355
reference_id
reference_type
scores
0
value 0.00416
scoring_system epss
scoring_elements 0.62059
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-21355
1
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21355.yaml
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L/E:F/RL:O/RC:C
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21355.yaml
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21355.yaml
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L/E:F/RL:O/RC:C
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21355.yaml
3
reference_url https://packagist.org/packages/typo3/cms-form
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L/E:F/RL:O/RC:C
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://packagist.org/packages/typo3/cms-form
4
reference_url https://typo3.org/security/advisory/typo3-core-sa-2021-002
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L/E:F/RL:O/RC:C
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2021-002
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-21355
reference_id CVE-2021-21355
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L/E:F/RL:O/RC:C
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-21355
6
reference_url https://github.com/advisories/GHSA-2r6j-862c-m2v2
reference_id GHSA-2r6j-862c-m2v2
reference_type
scores
url https://github.com/advisories/GHSA-2r6j-862c-m2v2
7
reference_url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-2r6j-862c-m2v2
reference_id GHSA-2r6j-862c-m2v2
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L/E:F/RL:O/RC:C
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-2r6j-862c-m2v2
fixed_packages
0
url pkg:composer/typo3/cms@8.7.40
purl pkg:composer/typo3/cms@8.7.40
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-j8hk-bqnb-gycp
1
vulnerability VCID-sdjb-gp4t-vbgt
2
vulnerability VCID-uq77-aax5-k7d8
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.40
1
url pkg:composer/typo3/cms@9.5.25
purl pkg:composer/typo3/cms@9.5.25
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.25
2
url pkg:composer/typo3/cms@10.4.14
purl pkg:composer/typo3/cms@10.4.14
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@10.4.14
3
url pkg:composer/typo3/cms@11.1.1
purl pkg:composer/typo3/cms@11.1.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@11.1.1
aliases CVE-2021-21355, GHSA-2r6j-862c-m2v2
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-848u-w88s-5bbe
10
url VCID-8jcy-3kje-fqeh
vulnerability_id VCID-8jcy-3kje-fqeh
summary 
Cache Flooding in Frontend
Links with a valid cHash argument lead to newly generated page cache entries. Because the cHash is not bound to a specific page, attackers could use valid cHash arguments for multiple pages, leading to additional useless page cache entries. Depending on the number of pages in the system and the number of available valid links with a cHash, attackers could add a considerable amount of additional cache entries, which in the end exceed storage limits and thus could lead to the system not responding any more. This means the Cache Flooding attack potentially could lead to a successful Denial of Service (DoS) attack.
references
0
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2016-022
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2016-022
fixed_packages
0
url pkg:composer/typo3/cms@8.3.1
purl pkg:composer/typo3/cms@8.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-3ugj-6m1e-e3hr
2
vulnerability VCID-4eym-e6vt-8fbs
3
vulnerability VCID-5dxs-cdht-27hw
4
vulnerability VCID-66ru-n2df-b3ay
5
vulnerability VCID-727q-h3ey-6yc9
6
vulnerability VCID-7ch1-q9f4-a7bt
7
vulnerability VCID-7m6u-k5tp-gkhy
8
vulnerability VCID-848u-w88s-5bbe
9
vulnerability VCID-953t-q1cr-zyd6
10
vulnerability VCID-9saf-w56y-pugz
11
vulnerability VCID-abjx-8v46-d7d8
12
vulnerability VCID-am6s-67bm-77dr
13
vulnerability VCID-bn3p-39sv-6fdg
14
vulnerability VCID-d6c2-upx1-e7cd
15
vulnerability VCID-dsqm-9q3e-dudw
16
vulnerability VCID-e564-zdku-9fc6
17
vulnerability VCID-emqq-kwjg-3kfk
18
vulnerability VCID-eutz-mj58-audb
19
vulnerability VCID-ev4k-5k1d-2bhu
20
vulnerability VCID-fdnw-2tz5-4fdr
21
vulnerability VCID-fqkx-v8t5-q3h6
22
vulnerability VCID-fut7-bb1f-37g7
23
vulnerability VCID-h217-xe8x-nua3
24
vulnerability VCID-h7cg-64er-uya9
25
vulnerability VCID-h7hf-sf2q-73ay
26
vulnerability VCID-hg2n-xera-jkdh
27
vulnerability VCID-hp99-ncuh-6ugv
28
vulnerability VCID-jp1p-rfxa-hyd9
29
vulnerability VCID-jq5y-7h9g-mufa
30
vulnerability VCID-jqe4-8hzb-mfea
31
vulnerability VCID-k5t3-28es-h3ez
32
vulnerability VCID-khpm-e1xb-hydb
33
vulnerability VCID-mctp-nf36-7qdn
34
vulnerability VCID-njsj-bwjq-fyap
35
vulnerability VCID-nney-azbc-pucg
36
vulnerability VCID-p7gd-anw2-1qbz
37
vulnerability VCID-pmvp-twk2-jqe4
38
vulnerability VCID-q52p-xfj8-gygd
39
vulnerability VCID-qv14-m93d-jyd9
40
vulnerability VCID-qxab-9uwr-yqhv
41
vulnerability VCID-rqrw-t2kj-mud8
42
vulnerability VCID-ru6w-m6q6-27gn
43
vulnerability VCID-sdsa-mh76-kqch
44
vulnerability VCID-sy7r-d6pv-yba9
45
vulnerability VCID-u259-2sxq-tbct
46
vulnerability VCID-vq15-t92r-5bhx
47
vulnerability VCID-vw2r-g8yy-eyf4
48
vulnerability VCID-wy45-2gmr-fkfg
49
vulnerability VCID-x5x1-w7yv-eye9
50
vulnerability VCID-xh68-defe-f7ce
51
vulnerability VCID-xw1s-93bu-wuh9
52
vulnerability VCID-y7ds-p5r2-yuhq
53
vulnerability VCID-ygw4-jdqu-4fbt
54
vulnerability VCID-yz6t-ge1y-qfgr
55
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.3.1
aliases TYPO3-CORE-SA-2016-022
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8jcy-3kje-fqeh
11
url VCID-953t-q1cr-zyd6
vulnerability_id VCID-953t-q1cr-zyd6
summary 
Cross-site Scripting
Cross-Site Scripting in Backend Modal Component.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-007/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2018-007/
fixed_packages
0
url pkg:composer/typo3/cms@8.7.21
purl pkg:composer/typo3/cms@8.7.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-4eym-e6vt-8fbs
2
vulnerability VCID-7m6u-k5tp-gkhy
3
vulnerability VCID-848u-w88s-5bbe
4
vulnerability VCID-am6s-67bm-77dr
5
vulnerability VCID-bn3p-39sv-6fdg
6
vulnerability VCID-ev4k-5k1d-2bhu
7
vulnerability VCID-fqkx-v8t5-q3h6
8
vulnerability VCID-fut7-bb1f-37g7
9
vulnerability VCID-jp1p-rfxa-hyd9
10
vulnerability VCID-k5t3-28es-h3ez
11
vulnerability VCID-khpm-e1xb-hydb
12
vulnerability VCID-nney-azbc-pucg
13
vulnerability VCID-p7gd-anw2-1qbz
14
vulnerability VCID-pmvp-twk2-jqe4
15
vulnerability VCID-qv14-m93d-jyd9
16
vulnerability VCID-rqrw-t2kj-mud8
17
vulnerability VCID-ru6w-m6q6-27gn
18
vulnerability VCID-sdsa-mh76-kqch
19
vulnerability VCID-tgyt-axv1-c7ag
20
vulnerability VCID-u259-2sxq-tbct
21
vulnerability VCID-vw2r-g8yy-eyf4
22
vulnerability VCID-x5x1-w7yv-eye9
23
vulnerability VCID-xw1s-93bu-wuh9
24
vulnerability VCID-y7ds-p5r2-yuhq
25
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.21
1
url pkg:composer/typo3/cms@9.5.2
purl pkg:composer/typo3/cms@9.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1sfk-z8py-ykb8
2
vulnerability VCID-3ye6-vqje-abh4
3
vulnerability VCID-4an7-9ph4-mkd4
4
vulnerability VCID-4eym-e6vt-8fbs
5
vulnerability VCID-4jck-w9ct-budk
6
vulnerability VCID-6mnf-2fcw-dqgp
7
vulnerability VCID-7m6u-k5tp-gkhy
8
vulnerability VCID-7xv1-78u7-xufp
9
vulnerability VCID-848u-w88s-5bbe
10
vulnerability VCID-8w4e-d49b-nbg8
11
vulnerability VCID-9adx-p876-kyb5
12
vulnerability VCID-am6s-67bm-77dr
13
vulnerability VCID-bbh5-rss8-bfct
14
vulnerability VCID-cvk2-93hm-gkhx
15
vulnerability VCID-e6zr-4bgg-kkh5
16
vulnerability VCID-ev4k-5k1d-2bhu
17
vulnerability VCID-fqkx-v8t5-q3h6
18
vulnerability VCID-fut7-bb1f-37g7
19
vulnerability VCID-jp1p-rfxa-hyd9
20
vulnerability VCID-k5t3-28es-h3ez
21
vulnerability VCID-khpm-e1xb-hydb
22
vulnerability VCID-n1gz-y615-cbbk
23
vulnerability VCID-nney-azbc-pucg
24
vulnerability VCID-p7gd-anw2-1qbz
25
vulnerability VCID-pmvp-twk2-jqe4
26
vulnerability VCID-qv14-m93d-jyd9
27
vulnerability VCID-rqrw-t2kj-mud8
28
vulnerability VCID-ru6w-m6q6-27gn
29
vulnerability VCID-sdsa-mh76-kqch
30
vulnerability VCID-tgyt-axv1-c7ag
31
vulnerability VCID-u259-2sxq-tbct
32
vulnerability VCID-vw2r-g8yy-eyf4
33
vulnerability VCID-x5x1-w7yv-eye9
34
vulnerability VCID-xw1s-93bu-wuh9
35
vulnerability VCID-y7ds-p5r2-yuhq
36
vulnerability VCID-zeut-9wfp-q7et
37
vulnerability VCID-zkvq-bms4-gfcv
38
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.2
aliases GMS-2018-98
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-953t-q1cr-zyd6
12
url VCID-9saf-w56y-pugz
vulnerability_id VCID-9saf-w56y-pugz
summary Information Disclosure in TYPO3 CMS.
references
0
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-005/
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-005/
fixed_packages
0
url pkg:composer/typo3/cms@8.7.0
purl pkg:composer/typo3/cms@8.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-3ugj-6m1e-e3hr
2
vulnerability VCID-4eym-e6vt-8fbs
3
vulnerability VCID-6a22-c7x5-sqe2
4
vulnerability VCID-7ch1-q9f4-a7bt
5
vulnerability VCID-7m6u-k5tp-gkhy
6
vulnerability VCID-848u-w88s-5bbe
7
vulnerability VCID-953t-q1cr-zyd6
8
vulnerability VCID-abjx-8v46-d7d8
9
vulnerability VCID-am6s-67bm-77dr
10
vulnerability VCID-bn3p-39sv-6fdg
11
vulnerability VCID-dsqm-9q3e-dudw
12
vulnerability VCID-e564-zdku-9fc6
13
vulnerability VCID-emqq-kwjg-3kfk
14
vulnerability VCID-ev4k-5k1d-2bhu
15
vulnerability VCID-fdnw-2tz5-4fdr
16
vulnerability VCID-fqkx-v8t5-q3h6
17
vulnerability VCID-fut7-bb1f-37g7
18
vulnerability VCID-h7cg-64er-uya9
19
vulnerability VCID-hp99-ncuh-6ugv
20
vulnerability VCID-je4q-svfw-hqda
21
vulnerability VCID-jp1p-rfxa-hyd9
22
vulnerability VCID-jq5y-7h9g-mufa
23
vulnerability VCID-jqe4-8hzb-mfea
24
vulnerability VCID-k5t3-28es-h3ez
25
vulnerability VCID-khpm-e1xb-hydb
26
vulnerability VCID-mctp-nf36-7qdn
27
vulnerability VCID-njsj-bwjq-fyap
28
vulnerability VCID-nney-azbc-pucg
29
vulnerability VCID-p7gd-anw2-1qbz
30
vulnerability VCID-pmvp-twk2-jqe4
31
vulnerability VCID-qv14-m93d-jyd9
32
vulnerability VCID-qxab-9uwr-yqhv
33
vulnerability VCID-rqrw-t2kj-mud8
34
vulnerability VCID-ru6w-m6q6-27gn
35
vulnerability VCID-sdsa-mh76-kqch
36
vulnerability VCID-tgyt-axv1-c7ag
37
vulnerability VCID-u259-2sxq-tbct
38
vulnerability VCID-vq15-t92r-5bhx
39
vulnerability VCID-vw2r-g8yy-eyf4
40
vulnerability VCID-w1wb-mq2y-dfca
41
vulnerability VCID-wy45-2gmr-fkfg
42
vulnerability VCID-x5x1-w7yv-eye9
43
vulnerability VCID-xw1s-93bu-wuh9
44
vulnerability VCID-y7ds-p5r2-yuhq
45
vulnerability VCID-yz6t-ge1y-qfgr
46
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.0
aliases GMS-2017-351
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-9saf-w56y-pugz
13
url VCID-abjx-8v46-d7d8
vulnerability_id VCID-abjx-8v46-d7d8
summary 
Improper Authentication
Authentication Bypass in TYPO3 CMS.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-001/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2018-001/
fixed_packages
0
url pkg:composer/typo3/cms@8.7.17
purl pkg:composer/typo3/cms@8.7.17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-3ugj-6m1e-e3hr
2
vulnerability VCID-4eym-e6vt-8fbs
3
vulnerability VCID-7ch1-q9f4-a7bt
4
vulnerability VCID-7m6u-k5tp-gkhy
5
vulnerability VCID-848u-w88s-5bbe
6
vulnerability VCID-953t-q1cr-zyd6
7
vulnerability VCID-am6s-67bm-77dr
8
vulnerability VCID-bn3p-39sv-6fdg
9
vulnerability VCID-dsqm-9q3e-dudw
10
vulnerability VCID-emqq-kwjg-3kfk
11
vulnerability VCID-ev4k-5k1d-2bhu
12
vulnerability VCID-fdnw-2tz5-4fdr
13
vulnerability VCID-fqkx-v8t5-q3h6
14
vulnerability VCID-fut7-bb1f-37g7
15
vulnerability VCID-hp99-ncuh-6ugv
16
vulnerability VCID-jp1p-rfxa-hyd9
17
vulnerability VCID-jq5y-7h9g-mufa
18
vulnerability VCID-k5t3-28es-h3ez
19
vulnerability VCID-khpm-e1xb-hydb
20
vulnerability VCID-nney-azbc-pucg
21
vulnerability VCID-p7gd-anw2-1qbz
22
vulnerability VCID-pmvp-twk2-jqe4
23
vulnerability VCID-qv14-m93d-jyd9
24
vulnerability VCID-qxab-9uwr-yqhv
25
vulnerability VCID-rqrw-t2kj-mud8
26
vulnerability VCID-ru6w-m6q6-27gn
27
vulnerability VCID-sdsa-mh76-kqch
28
vulnerability VCID-tgyt-axv1-c7ag
29
vulnerability VCID-u259-2sxq-tbct
30
vulnerability VCID-vw2r-g8yy-eyf4
31
vulnerability VCID-x5x1-w7yv-eye9
32
vulnerability VCID-xw1s-93bu-wuh9
33
vulnerability VCID-y7ds-p5r2-yuhq
34
vulnerability VCID-yz6t-ge1y-qfgr
35
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.17
1
url pkg:composer/typo3/cms@9.3.2
purl pkg:composer/typo3/cms@9.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1sfk-z8py-ykb8
2
vulnerability VCID-3ugj-6m1e-e3hr
3
vulnerability VCID-3ye6-vqje-abh4
4
vulnerability VCID-4an7-9ph4-mkd4
5
vulnerability VCID-4eym-e6vt-8fbs
6
vulnerability VCID-4jck-w9ct-budk
7
vulnerability VCID-6mnf-2fcw-dqgp
8
vulnerability VCID-7ch1-q9f4-a7bt
9
vulnerability VCID-7m6u-k5tp-gkhy
10
vulnerability VCID-7xv1-78u7-xufp
11
vulnerability VCID-848u-w88s-5bbe
12
vulnerability VCID-8w4e-d49b-nbg8
13
vulnerability VCID-953t-q1cr-zyd6
14
vulnerability VCID-9adx-p876-kyb5
15
vulnerability VCID-am6s-67bm-77dr
16
vulnerability VCID-bbh5-rss8-bfct
17
vulnerability VCID-cvk2-93hm-gkhx
18
vulnerability VCID-dsqm-9q3e-dudw
19
vulnerability VCID-e6zr-4bgg-kkh5
20
vulnerability VCID-emqq-kwjg-3kfk
21
vulnerability VCID-ev4k-5k1d-2bhu
22
vulnerability VCID-fqkx-v8t5-q3h6
23
vulnerability VCID-fut7-bb1f-37g7
24
vulnerability VCID-hp99-ncuh-6ugv
25
vulnerability VCID-jp1p-rfxa-hyd9
26
vulnerability VCID-jq5y-7h9g-mufa
27
vulnerability VCID-k5t3-28es-h3ez
28
vulnerability VCID-khpm-e1xb-hydb
29
vulnerability VCID-n1gz-y615-cbbk
30
vulnerability VCID-nney-azbc-pucg
31
vulnerability VCID-p7gd-anw2-1qbz
32
vulnerability VCID-pmvp-twk2-jqe4
33
vulnerability VCID-qv14-m93d-jyd9
34
vulnerability VCID-qxab-9uwr-yqhv
35
vulnerability VCID-rqrw-t2kj-mud8
36
vulnerability VCID-ru6w-m6q6-27gn
37
vulnerability VCID-sdsa-mh76-kqch
38
vulnerability VCID-tgyt-axv1-c7ag
39
vulnerability VCID-u259-2sxq-tbct
40
vulnerability VCID-vw2r-g8yy-eyf4
41
vulnerability VCID-x5x1-w7yv-eye9
42
vulnerability VCID-xw1s-93bu-wuh9
43
vulnerability VCID-y7ds-p5r2-yuhq
44
vulnerability VCID-yz6t-ge1y-qfgr
45
vulnerability VCID-zeut-9wfp-q7et
46
vulnerability VCID-zkvq-bms4-gfcv
47
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.3.2
aliases GMS-2018-93
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-abjx-8v46-d7d8
14
url VCID-am6s-67bm-77dr
vulnerability_id VCID-am6s-67bm-77dr
summary 
Cross-site Scripting
Cross-Site Scripting in Bootstrap CSS toolkit.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-006/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-006/
fixed_packages
0
url pkg:composer/typo3/cms@8.7.23
purl pkg:composer/typo3/cms@8.7.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-4eym-e6vt-8fbs
2
vulnerability VCID-7m6u-k5tp-gkhy
3
vulnerability VCID-848u-w88s-5bbe
4
vulnerability VCID-ev4k-5k1d-2bhu
5
vulnerability VCID-fqkx-v8t5-q3h6
6
vulnerability VCID-fut7-bb1f-37g7
7
vulnerability VCID-jp1p-rfxa-hyd9
8
vulnerability VCID-k5t3-28es-h3ez
9
vulnerability VCID-nney-azbc-pucg
10
vulnerability VCID-p7gd-anw2-1qbz
11
vulnerability VCID-qv14-m93d-jyd9
12
vulnerability VCID-rqrw-t2kj-mud8
13
vulnerability VCID-ru6w-m6q6-27gn
14
vulnerability VCID-sdsa-mh76-kqch
15
vulnerability VCID-tgyt-axv1-c7ag
16
vulnerability VCID-x5x1-w7yv-eye9
17
vulnerability VCID-xw1s-93bu-wuh9
18
vulnerability VCID-y7ds-p5r2-yuhq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.23
1
url pkg:composer/typo3/cms@9.5.4
purl pkg:composer/typo3/cms@9.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1sfk-z8py-ykb8
2
vulnerability VCID-3ye6-vqje-abh4
3
vulnerability VCID-4an7-9ph4-mkd4
4
vulnerability VCID-4eym-e6vt-8fbs
5
vulnerability VCID-6mnf-2fcw-dqgp
6
vulnerability VCID-7m6u-k5tp-gkhy
7
vulnerability VCID-7xv1-78u7-xufp
8
vulnerability VCID-848u-w88s-5bbe
9
vulnerability VCID-8w4e-d49b-nbg8
10
vulnerability VCID-9adx-p876-kyb5
11
vulnerability VCID-bbh5-rss8-bfct
12
vulnerability VCID-cvk2-93hm-gkhx
13
vulnerability VCID-e6zr-4bgg-kkh5
14
vulnerability VCID-ev4k-5k1d-2bhu
15
vulnerability VCID-fqkx-v8t5-q3h6
16
vulnerability VCID-fut7-bb1f-37g7
17
vulnerability VCID-jp1p-rfxa-hyd9
18
vulnerability VCID-k5t3-28es-h3ez
19
vulnerability VCID-n1gz-y615-cbbk
20
vulnerability VCID-nney-azbc-pucg
21
vulnerability VCID-p7gd-anw2-1qbz
22
vulnerability VCID-qv14-m93d-jyd9
23
vulnerability VCID-rqrw-t2kj-mud8
24
vulnerability VCID-ru6w-m6q6-27gn
25
vulnerability VCID-sdsa-mh76-kqch
26
vulnerability VCID-tgyt-axv1-c7ag
27
vulnerability VCID-x5x1-w7yv-eye9
28
vulnerability VCID-xw1s-93bu-wuh9
29
vulnerability VCID-y7ds-p5r2-yuhq
30
vulnerability VCID-zeut-9wfp-q7et
31
vulnerability VCID-zkvq-bms4-gfcv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.4
aliases GMS-2019-176
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-am6s-67bm-77dr
15
url VCID-bn3p-39sv-6fdg
vulnerability_id VCID-bn3p-39sv-6fdg
summary 
Improper Access Control
Broken Access Control in Localization Handling.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-003/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-003/
fixed_packages
0
url pkg:composer/typo3/cms@8.7.23
purl pkg:composer/typo3/cms@8.7.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-4eym-e6vt-8fbs
2
vulnerability VCID-7m6u-k5tp-gkhy
3
vulnerability VCID-848u-w88s-5bbe
4
vulnerability VCID-ev4k-5k1d-2bhu
5
vulnerability VCID-fqkx-v8t5-q3h6
6
vulnerability VCID-fut7-bb1f-37g7
7
vulnerability VCID-jp1p-rfxa-hyd9
8
vulnerability VCID-k5t3-28es-h3ez
9
vulnerability VCID-nney-azbc-pucg
10
vulnerability VCID-p7gd-anw2-1qbz
11
vulnerability VCID-qv14-m93d-jyd9
12
vulnerability VCID-rqrw-t2kj-mud8
13
vulnerability VCID-ru6w-m6q6-27gn
14
vulnerability VCID-sdsa-mh76-kqch
15
vulnerability VCID-tgyt-axv1-c7ag
16
vulnerability VCID-x5x1-w7yv-eye9
17
vulnerability VCID-xw1s-93bu-wuh9
18
vulnerability VCID-y7ds-p5r2-yuhq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.23
1
url pkg:composer/typo3/cms@9.0.0
purl pkg:composer/typo3/cms@9.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-11u3-8xzy-jfhh
1
vulnerability VCID-1ffs-9vj5-27hk
2
vulnerability VCID-1sfk-z8py-ykb8
3
vulnerability VCID-28fn-ncj5-2ufk
4
vulnerability VCID-2rhr-8vaz-hqfj
5
vulnerability VCID-39vn-73mc-jqav
6
vulnerability VCID-3k2k-a3gb-n3ba
7
vulnerability VCID-3ugj-6m1e-e3hr
8
vulnerability VCID-3ye6-vqje-abh4
9
vulnerability VCID-4an7-9ph4-mkd4
10
vulnerability VCID-4eym-e6vt-8fbs
11
vulnerability VCID-4jck-w9ct-budk
12
vulnerability VCID-66kh-c1dm-8fbf
13
vulnerability VCID-6mnf-2fcw-dqgp
14
vulnerability VCID-7ch1-q9f4-a7bt
15
vulnerability VCID-7m6u-k5tp-gkhy
16
vulnerability VCID-7xv1-78u7-xufp
17
vulnerability VCID-848u-w88s-5bbe
18
vulnerability VCID-8w4e-d49b-nbg8
19
vulnerability VCID-94r9-hh4g-jkej
20
vulnerability VCID-953t-q1cr-zyd6
21
vulnerability VCID-9adx-p876-kyb5
22
vulnerability VCID-9yu1-z7c2-t3fj
23
vulnerability VCID-a1g9-pyz5-9fca
24
vulnerability VCID-abjx-8v46-d7d8
25
vulnerability VCID-am6s-67bm-77dr
26
vulnerability VCID-bbh5-rss8-bfct
27
vulnerability VCID-buj5-2t53-3kcr
28
vulnerability VCID-cvk2-93hm-gkhx
29
vulnerability VCID-dsqm-9q3e-dudw
30
vulnerability VCID-e6zr-4bgg-kkh5
31
vulnerability VCID-emqq-kwjg-3kfk
32
vulnerability VCID-ev4k-5k1d-2bhu
33
vulnerability VCID-f319-jpf5-hyex
34
vulnerability VCID-f4n7-q72x-3yea
35
vulnerability VCID-fpa2-ffg1-fyaa
36
vulnerability VCID-fqkc-utex-3kav
37
vulnerability VCID-fqkx-v8t5-q3h6
38
vulnerability VCID-fut7-bb1f-37g7
39
vulnerability VCID-gpv4-4tpd-tbaa
40
vulnerability VCID-hknp-f88a-kqec
41
vulnerability VCID-hp99-ncuh-6ugv
42
vulnerability VCID-j8hk-bqnb-gycp
43
vulnerability VCID-je4q-svfw-hqda
44
vulnerability VCID-jp1p-rfxa-hyd9
45
vulnerability VCID-jq5y-7h9g-mufa
46
vulnerability VCID-jwb1-3sbg-kfa5
47
vulnerability VCID-k5t3-28es-h3ez
48
vulnerability VCID-khpm-e1xb-hydb
49
vulnerability VCID-n1gz-y615-cbbk
50
vulnerability VCID-njsj-bwjq-fyap
51
vulnerability VCID-nney-azbc-pucg
52
vulnerability VCID-p576-w7dd-p3h7
53
vulnerability VCID-p7gd-anw2-1qbz
54
vulnerability VCID-pmvp-twk2-jqe4
55
vulnerability VCID-q2t1-kx56-s3c3
56
vulnerability VCID-q7vt-19eb-sqeq
57
vulnerability VCID-qcnh-z4zh-myaw
58
vulnerability VCID-qdxh-arxx-wbcr
59
vulnerability VCID-qv14-m93d-jyd9
60
vulnerability VCID-qxab-9uwr-yqhv
61
vulnerability VCID-rqrw-t2kj-mud8
62
vulnerability VCID-ru6w-m6q6-27gn
63
vulnerability VCID-sdjb-gp4t-vbgt
64
vulnerability VCID-sdsa-mh76-kqch
65
vulnerability VCID-teby-zvvw-zkhv
66
vulnerability VCID-tgyt-axv1-c7ag
67
vulnerability VCID-u259-2sxq-tbct
68
vulnerability VCID-u6as-cwxc-pkhk
69
vulnerability VCID-uq77-aax5-k7d8
70
vulnerability VCID-vq15-t92r-5bhx
71
vulnerability VCID-vw2r-g8yy-eyf4
72
vulnerability VCID-w1wb-mq2y-dfca
73
vulnerability VCID-w7z1-aw31-vugx
74
vulnerability VCID-wat8-4m83-hken
75
vulnerability VCID-x5x1-w7yv-eye9
76
vulnerability VCID-xvyu-2hb8-8ufh
77
vulnerability VCID-xw1s-93bu-wuh9
78
vulnerability VCID-y7ds-p5r2-yuhq
79
vulnerability VCID-yh6b-tc4u-v3bk
80
vulnerability VCID-yz6t-ge1y-qfgr
81
vulnerability VCID-zeut-9wfp-q7et
82
vulnerability VCID-zgfw-pk39-gyg8
83
vulnerability VCID-zkvq-bms4-gfcv
84
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.0.0
aliases GMS-2019-174
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-bn3p-39sv-6fdg
16
url VCID-d6c2-upx1-e7cd
vulnerability_id VCID-d6c2-upx1-e7cd
summary 
Authentication Bypass
Due to late TCA initialization the authentication service fails to restrict frontend user according to the validation rules. Therefore it is possible to authenticate restricted (e.g. disabled) frontend users.
references
0
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-002/
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-002/
fixed_packages
0
url pkg:composer/typo3/cms@8.6.1
purl pkg:composer/typo3/cms@8.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-3ugj-6m1e-e3hr
2
vulnerability VCID-4eym-e6vt-8fbs
3
vulnerability VCID-7ch1-q9f4-a7bt
4
vulnerability VCID-7m6u-k5tp-gkhy
5
vulnerability VCID-848u-w88s-5bbe
6
vulnerability VCID-953t-q1cr-zyd6
7
vulnerability VCID-9saf-w56y-pugz
8
vulnerability VCID-abjx-8v46-d7d8
9
vulnerability VCID-am6s-67bm-77dr
10
vulnerability VCID-bn3p-39sv-6fdg
11
vulnerability VCID-dsqm-9q3e-dudw
12
vulnerability VCID-e564-zdku-9fc6
13
vulnerability VCID-emqq-kwjg-3kfk
14
vulnerability VCID-ev4k-5k1d-2bhu
15
vulnerability VCID-fdnw-2tz5-4fdr
16
vulnerability VCID-fqkx-v8t5-q3h6
17
vulnerability VCID-fut7-bb1f-37g7
18
vulnerability VCID-h7cg-64er-uya9
19
vulnerability VCID-hp99-ncuh-6ugv
20
vulnerability VCID-je4q-svfw-hqda
21
vulnerability VCID-jp1p-rfxa-hyd9
22
vulnerability VCID-jq5y-7h9g-mufa
23
vulnerability VCID-jqe4-8hzb-mfea
24
vulnerability VCID-k5t3-28es-h3ez
25
vulnerability VCID-khpm-e1xb-hydb
26
vulnerability VCID-mctp-nf36-7qdn
27
vulnerability VCID-njsj-bwjq-fyap
28
vulnerability VCID-nney-azbc-pucg
29
vulnerability VCID-p7gd-anw2-1qbz
30
vulnerability VCID-pmvp-twk2-jqe4
31
vulnerability VCID-q52p-xfj8-gygd
32
vulnerability VCID-qv14-m93d-jyd9
33
vulnerability VCID-qxab-9uwr-yqhv
34
vulnerability VCID-rqrw-t2kj-mud8
35
vulnerability VCID-ru6w-m6q6-27gn
36
vulnerability VCID-sdsa-mh76-kqch
37
vulnerability VCID-sy7r-d6pv-yba9
38
vulnerability VCID-u259-2sxq-tbct
39
vulnerability VCID-vq15-t92r-5bhx
40
vulnerability VCID-vw2r-g8yy-eyf4
41
vulnerability VCID-w1wb-mq2y-dfca
42
vulnerability VCID-wy45-2gmr-fkfg
43
vulnerability VCID-x5x1-w7yv-eye9
44
vulnerability VCID-xw1s-93bu-wuh9
45
vulnerability VCID-y7ds-p5r2-yuhq
46
vulnerability VCID-ygw4-jdqu-4fbt
47
vulnerability VCID-yz6t-ge1y-qfgr
48
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.6.1
aliases TYPO3-CORE-SA-2017-002
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-d6c2-upx1-e7cd
17
url VCID-dsqm-9q3e-dudw
vulnerability_id VCID-dsqm-9q3e-dudw
summary 
Uncontrolled Resource Consumption
Denial of Service in Online Media Asset Handling.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-011/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2018-011/
fixed_packages
0
url pkg:composer/typo3/cms@8.7.21
purl pkg:composer/typo3/cms@8.7.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-4eym-e6vt-8fbs
2
vulnerability VCID-7m6u-k5tp-gkhy
3
vulnerability VCID-848u-w88s-5bbe
4
vulnerability VCID-am6s-67bm-77dr
5
vulnerability VCID-bn3p-39sv-6fdg
6
vulnerability VCID-ev4k-5k1d-2bhu
7
vulnerability VCID-fqkx-v8t5-q3h6
8
vulnerability VCID-fut7-bb1f-37g7
9
vulnerability VCID-jp1p-rfxa-hyd9
10
vulnerability VCID-k5t3-28es-h3ez
11
vulnerability VCID-khpm-e1xb-hydb
12
vulnerability VCID-nney-azbc-pucg
13
vulnerability VCID-p7gd-anw2-1qbz
14
vulnerability VCID-pmvp-twk2-jqe4
15
vulnerability VCID-qv14-m93d-jyd9
16
vulnerability VCID-rqrw-t2kj-mud8
17
vulnerability VCID-ru6w-m6q6-27gn
18
vulnerability VCID-sdsa-mh76-kqch
19
vulnerability VCID-tgyt-axv1-c7ag
20
vulnerability VCID-u259-2sxq-tbct
21
vulnerability VCID-vw2r-g8yy-eyf4
22
vulnerability VCID-x5x1-w7yv-eye9
23
vulnerability VCID-xw1s-93bu-wuh9
24
vulnerability VCID-y7ds-p5r2-yuhq
25
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.21
1
url pkg:composer/typo3/cms@9.5.2
purl pkg:composer/typo3/cms@9.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1sfk-z8py-ykb8
2
vulnerability VCID-3ye6-vqje-abh4
3
vulnerability VCID-4an7-9ph4-mkd4
4
vulnerability VCID-4eym-e6vt-8fbs
5
vulnerability VCID-4jck-w9ct-budk
6
vulnerability VCID-6mnf-2fcw-dqgp
7
vulnerability VCID-7m6u-k5tp-gkhy
8
vulnerability VCID-7xv1-78u7-xufp
9
vulnerability VCID-848u-w88s-5bbe
10
vulnerability VCID-8w4e-d49b-nbg8
11
vulnerability VCID-9adx-p876-kyb5
12
vulnerability VCID-am6s-67bm-77dr
13
vulnerability VCID-bbh5-rss8-bfct
14
vulnerability VCID-cvk2-93hm-gkhx
15
vulnerability VCID-e6zr-4bgg-kkh5
16
vulnerability VCID-ev4k-5k1d-2bhu
17
vulnerability VCID-fqkx-v8t5-q3h6
18
vulnerability VCID-fut7-bb1f-37g7
19
vulnerability VCID-jp1p-rfxa-hyd9
20
vulnerability VCID-k5t3-28es-h3ez
21
vulnerability VCID-khpm-e1xb-hydb
22
vulnerability VCID-n1gz-y615-cbbk
23
vulnerability VCID-nney-azbc-pucg
24
vulnerability VCID-p7gd-anw2-1qbz
25
vulnerability VCID-pmvp-twk2-jqe4
26
vulnerability VCID-qv14-m93d-jyd9
27
vulnerability VCID-rqrw-t2kj-mud8
28
vulnerability VCID-ru6w-m6q6-27gn
29
vulnerability VCID-sdsa-mh76-kqch
30
vulnerability VCID-tgyt-axv1-c7ag
31
vulnerability VCID-u259-2sxq-tbct
32
vulnerability VCID-vw2r-g8yy-eyf4
33
vulnerability VCID-x5x1-w7yv-eye9
34
vulnerability VCID-xw1s-93bu-wuh9
35
vulnerability VCID-y7ds-p5r2-yuhq
36
vulnerability VCID-zeut-9wfp-q7et
37
vulnerability VCID-zkvq-bms4-gfcv
38
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.2
aliases GMS-2018-102
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-dsqm-9q3e-dudw
18
url VCID-e564-zdku-9fc6
vulnerability_id VCID-e564-zdku-9fc6
summary 
Information Disclosure
HTTP requests being performed using the TYPO3 API expose the specific TYPO3 version to the called endpoint.
references
0
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-006/
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-006/
fixed_packages
0
url pkg:composer/typo3/cms@8.7.5
purl pkg:composer/typo3/cms@8.7.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-3ugj-6m1e-e3hr
2
vulnerability VCID-4eym-e6vt-8fbs
3
vulnerability VCID-7ch1-q9f4-a7bt
4
vulnerability VCID-7m6u-k5tp-gkhy
5
vulnerability VCID-848u-w88s-5bbe
6
vulnerability VCID-953t-q1cr-zyd6
7
vulnerability VCID-abjx-8v46-d7d8
8
vulnerability VCID-am6s-67bm-77dr
9
vulnerability VCID-bn3p-39sv-6fdg
10
vulnerability VCID-dsqm-9q3e-dudw
11
vulnerability VCID-emqq-kwjg-3kfk
12
vulnerability VCID-ev4k-5k1d-2bhu
13
vulnerability VCID-fdnw-2tz5-4fdr
14
vulnerability VCID-fqkx-v8t5-q3h6
15
vulnerability VCID-fut7-bb1f-37g7
16
vulnerability VCID-hp99-ncuh-6ugv
17
vulnerability VCID-je4q-svfw-hqda
18
vulnerability VCID-jp1p-rfxa-hyd9
19
vulnerability VCID-jq5y-7h9g-mufa
20
vulnerability VCID-k5t3-28es-h3ez
21
vulnerability VCID-khpm-e1xb-hydb
22
vulnerability VCID-njsj-bwjq-fyap
23
vulnerability VCID-nney-azbc-pucg
24
vulnerability VCID-p7gd-anw2-1qbz
25
vulnerability VCID-pmvp-twk2-jqe4
26
vulnerability VCID-qv14-m93d-jyd9
27
vulnerability VCID-qxab-9uwr-yqhv
28
vulnerability VCID-rqrw-t2kj-mud8
29
vulnerability VCID-ru6w-m6q6-27gn
30
vulnerability VCID-sdsa-mh76-kqch
31
vulnerability VCID-tgyt-axv1-c7ag
32
vulnerability VCID-u259-2sxq-tbct
33
vulnerability VCID-vq15-t92r-5bhx
34
vulnerability VCID-vw2r-g8yy-eyf4
35
vulnerability VCID-w1wb-mq2y-dfca
36
vulnerability VCID-x5x1-w7yv-eye9
37
vulnerability VCID-xw1s-93bu-wuh9
38
vulnerability VCID-y7ds-p5r2-yuhq
39
vulnerability VCID-yz6t-ge1y-qfgr
40
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.5
aliases TYPO3-CORE-SA-2017-006
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-e564-zdku-9fc6
19
url VCID-emqq-kwjg-3kfk
vulnerability_id VCID-emqq-kwjg-3kfk
summary 
Cross-site Scripting
Cross-Site Scripting in CKEditor.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-005/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2018-005/
fixed_packages
0
url pkg:composer/typo3/cms@8.7.21
purl pkg:composer/typo3/cms@8.7.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-4eym-e6vt-8fbs
2
vulnerability VCID-7m6u-k5tp-gkhy
3
vulnerability VCID-848u-w88s-5bbe
4
vulnerability VCID-am6s-67bm-77dr
5
vulnerability VCID-bn3p-39sv-6fdg
6
vulnerability VCID-ev4k-5k1d-2bhu
7
vulnerability VCID-fqkx-v8t5-q3h6
8
vulnerability VCID-fut7-bb1f-37g7
9
vulnerability VCID-jp1p-rfxa-hyd9
10
vulnerability VCID-k5t3-28es-h3ez
11
vulnerability VCID-khpm-e1xb-hydb
12
vulnerability VCID-nney-azbc-pucg
13
vulnerability VCID-p7gd-anw2-1qbz
14
vulnerability VCID-pmvp-twk2-jqe4
15
vulnerability VCID-qv14-m93d-jyd9
16
vulnerability VCID-rqrw-t2kj-mud8
17
vulnerability VCID-ru6w-m6q6-27gn
18
vulnerability VCID-sdsa-mh76-kqch
19
vulnerability VCID-tgyt-axv1-c7ag
20
vulnerability VCID-u259-2sxq-tbct
21
vulnerability VCID-vw2r-g8yy-eyf4
22
vulnerability VCID-x5x1-w7yv-eye9
23
vulnerability VCID-xw1s-93bu-wuh9
24
vulnerability VCID-y7ds-p5r2-yuhq
25
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.21
1
url pkg:composer/typo3/cms@9.5.2
purl pkg:composer/typo3/cms@9.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1sfk-z8py-ykb8
2
vulnerability VCID-3ye6-vqje-abh4
3
vulnerability VCID-4an7-9ph4-mkd4
4
vulnerability VCID-4eym-e6vt-8fbs
5
vulnerability VCID-4jck-w9ct-budk
6
vulnerability VCID-6mnf-2fcw-dqgp
7
vulnerability VCID-7m6u-k5tp-gkhy
8
vulnerability VCID-7xv1-78u7-xufp
9
vulnerability VCID-848u-w88s-5bbe
10
vulnerability VCID-8w4e-d49b-nbg8
11
vulnerability VCID-9adx-p876-kyb5
12
vulnerability VCID-am6s-67bm-77dr
13
vulnerability VCID-bbh5-rss8-bfct
14
vulnerability VCID-cvk2-93hm-gkhx
15
vulnerability VCID-e6zr-4bgg-kkh5
16
vulnerability VCID-ev4k-5k1d-2bhu
17
vulnerability VCID-fqkx-v8t5-q3h6
18
vulnerability VCID-fut7-bb1f-37g7
19
vulnerability VCID-jp1p-rfxa-hyd9
20
vulnerability VCID-k5t3-28es-h3ez
21
vulnerability VCID-khpm-e1xb-hydb
22
vulnerability VCID-n1gz-y615-cbbk
23
vulnerability VCID-nney-azbc-pucg
24
vulnerability VCID-p7gd-anw2-1qbz
25
vulnerability VCID-pmvp-twk2-jqe4
26
vulnerability VCID-qv14-m93d-jyd9
27
vulnerability VCID-rqrw-t2kj-mud8
28
vulnerability VCID-ru6w-m6q6-27gn
29
vulnerability VCID-sdsa-mh76-kqch
30
vulnerability VCID-tgyt-axv1-c7ag
31
vulnerability VCID-u259-2sxq-tbct
32
vulnerability VCID-vw2r-g8yy-eyf4
33
vulnerability VCID-x5x1-w7yv-eye9
34
vulnerability VCID-xw1s-93bu-wuh9
35
vulnerability VCID-y7ds-p5r2-yuhq
36
vulnerability VCID-zeut-9wfp-q7et
37
vulnerability VCID-zkvq-bms4-gfcv
38
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.2
aliases GMS-2018-104
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-emqq-kwjg-3kfk
20
url VCID-eutz-mj58-audb
vulnerability_id VCID-eutz-mj58-audb
summary 
Insecure Unserialize in TYPO3 Backend
Failing to properly validate incoming data, the suggest wizard is susceptible to insecure unserialize. To exploit this vulnerability a valid backend user account is needed.
references
0
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2016-023
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2016-023
fixed_packages
0
url pkg:composer/typo3/cms@8.4.1
purl pkg:composer/typo3/cms@8.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-3ugj-6m1e-e3hr
2
vulnerability VCID-4eym-e6vt-8fbs
3
vulnerability VCID-66ru-n2df-b3ay
4
vulnerability VCID-7ch1-q9f4-a7bt
5
vulnerability VCID-7m6u-k5tp-gkhy
6
vulnerability VCID-848u-w88s-5bbe
7
vulnerability VCID-953t-q1cr-zyd6
8
vulnerability VCID-9saf-w56y-pugz
9
vulnerability VCID-abjx-8v46-d7d8
10
vulnerability VCID-am6s-67bm-77dr
11
vulnerability VCID-bn3p-39sv-6fdg
12
vulnerability VCID-d6c2-upx1-e7cd
13
vulnerability VCID-dsqm-9q3e-dudw
14
vulnerability VCID-e564-zdku-9fc6
15
vulnerability VCID-emqq-kwjg-3kfk
16
vulnerability VCID-ev4k-5k1d-2bhu
17
vulnerability VCID-fdnw-2tz5-4fdr
18
vulnerability VCID-fqkx-v8t5-q3h6
19
vulnerability VCID-fut7-bb1f-37g7
20
vulnerability VCID-h7cg-64er-uya9
21
vulnerability VCID-h7hf-sf2q-73ay
22
vulnerability VCID-hg2n-xera-jkdh
23
vulnerability VCID-hp99-ncuh-6ugv
24
vulnerability VCID-jp1p-rfxa-hyd9
25
vulnerability VCID-jq5y-7h9g-mufa
26
vulnerability VCID-jqe4-8hzb-mfea
27
vulnerability VCID-k5t3-28es-h3ez
28
vulnerability VCID-khpm-e1xb-hydb
29
vulnerability VCID-mctp-nf36-7qdn
30
vulnerability VCID-njsj-bwjq-fyap
31
vulnerability VCID-nney-azbc-pucg
32
vulnerability VCID-p7gd-anw2-1qbz
33
vulnerability VCID-pmvp-twk2-jqe4
34
vulnerability VCID-q52p-xfj8-gygd
35
vulnerability VCID-qv14-m93d-jyd9
36
vulnerability VCID-qxab-9uwr-yqhv
37
vulnerability VCID-rqrw-t2kj-mud8
38
vulnerability VCID-ru6w-m6q6-27gn
39
vulnerability VCID-sdsa-mh76-kqch
40
vulnerability VCID-sy7r-d6pv-yba9
41
vulnerability VCID-u259-2sxq-tbct
42
vulnerability VCID-vq15-t92r-5bhx
43
vulnerability VCID-vw2r-g8yy-eyf4
44
vulnerability VCID-wy45-2gmr-fkfg
45
vulnerability VCID-x5x1-w7yv-eye9
46
vulnerability VCID-xh68-defe-f7ce
47
vulnerability VCID-xw1s-93bu-wuh9
48
vulnerability VCID-y7ds-p5r2-yuhq
49
vulnerability VCID-ygw4-jdqu-4fbt
50
vulnerability VCID-yz6t-ge1y-qfgr
51
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.4.1
aliases TYPO3-CORE-SA-2016-023
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-eutz-mj58-audb
21
url VCID-ev4k-5k1d-2bhu
vulnerability_id VCID-ev4k-5k1d-2bhu
summary 
URL Redirection to Untrusted Site (Open Redirect)
Login Handling is susceptible to open redirection which allows attackers redirecting to arbitrary content, and conducting phishing attacks. No authentication is required in order to exploit this vulnerability.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-21338
reference_id
reference_type
scores
0
value 0.00253
scoring_system epss
scoring_elements 0.48774
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-21338
1
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21338.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21338.yaml
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21338.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21338.yaml
3
reference_url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-4jhw-2p6j-5wmp
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-4jhw-2p6j-5wmp
4
reference_url https://packagist.org/packages/typo3/cms-core
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://packagist.org/packages/typo3/cms-core
5
reference_url https://typo3.org/security/advisory/typo3-core-sa-2021-001
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2021-001
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-21338
reference_id CVE-2021-21338
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-21338
fixed_packages
0
url pkg:composer/typo3/cms@8.7.40
purl pkg:composer/typo3/cms@8.7.40
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-j8hk-bqnb-gycp
1
vulnerability VCID-sdjb-gp4t-vbgt
2
vulnerability VCID-uq77-aax5-k7d8
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.40
1
url pkg:composer/typo3/cms@9.5.25
purl pkg:composer/typo3/cms@9.5.25
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.25
2
url pkg:composer/typo3/cms@10.4.14
purl pkg:composer/typo3/cms@10.4.14
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@10.4.14
3
url pkg:composer/typo3/cms@11.1.1
purl pkg:composer/typo3/cms@11.1.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@11.1.1
aliases CVE-2021-21338, GHSA-4jhw-2p6j-5wmp
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ev4k-5k1d-2bhu
22
url VCID-fdnw-2tz5-4fdr
vulnerability_id VCID-fdnw-2tz5-4fdr
summary 
Uncontrolled Resource Consumption
Denial of Service in Frontend Record Registration.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-012/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2018-012/
fixed_packages
0
url pkg:composer/typo3/cms@8.7.21
purl pkg:composer/typo3/cms@8.7.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-4eym-e6vt-8fbs
2
vulnerability VCID-7m6u-k5tp-gkhy
3
vulnerability VCID-848u-w88s-5bbe
4
vulnerability VCID-am6s-67bm-77dr
5
vulnerability VCID-bn3p-39sv-6fdg
6
vulnerability VCID-ev4k-5k1d-2bhu
7
vulnerability VCID-fqkx-v8t5-q3h6
8
vulnerability VCID-fut7-bb1f-37g7
9
vulnerability VCID-jp1p-rfxa-hyd9
10
vulnerability VCID-k5t3-28es-h3ez
11
vulnerability VCID-khpm-e1xb-hydb
12
vulnerability VCID-nney-azbc-pucg
13
vulnerability VCID-p7gd-anw2-1qbz
14
vulnerability VCID-pmvp-twk2-jqe4
15
vulnerability VCID-qv14-m93d-jyd9
16
vulnerability VCID-rqrw-t2kj-mud8
17
vulnerability VCID-ru6w-m6q6-27gn
18
vulnerability VCID-sdsa-mh76-kqch
19
vulnerability VCID-tgyt-axv1-c7ag
20
vulnerability VCID-u259-2sxq-tbct
21
vulnerability VCID-vw2r-g8yy-eyf4
22
vulnerability VCID-x5x1-w7yv-eye9
23
vulnerability VCID-xw1s-93bu-wuh9
24
vulnerability VCID-y7ds-p5r2-yuhq
25
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.21
1
url pkg:composer/typo3/cms@9.0.0
purl pkg:composer/typo3/cms@9.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-11u3-8xzy-jfhh
1
vulnerability VCID-1ffs-9vj5-27hk
2
vulnerability VCID-1sfk-z8py-ykb8
3
vulnerability VCID-28fn-ncj5-2ufk
4
vulnerability VCID-2rhr-8vaz-hqfj
5
vulnerability VCID-39vn-73mc-jqav
6
vulnerability VCID-3k2k-a3gb-n3ba
7
vulnerability VCID-3ugj-6m1e-e3hr
8
vulnerability VCID-3ye6-vqje-abh4
9
vulnerability VCID-4an7-9ph4-mkd4
10
vulnerability VCID-4eym-e6vt-8fbs
11
vulnerability VCID-4jck-w9ct-budk
12
vulnerability VCID-66kh-c1dm-8fbf
13
vulnerability VCID-6mnf-2fcw-dqgp
14
vulnerability VCID-7ch1-q9f4-a7bt
15
vulnerability VCID-7m6u-k5tp-gkhy
16
vulnerability VCID-7xv1-78u7-xufp
17
vulnerability VCID-848u-w88s-5bbe
18
vulnerability VCID-8w4e-d49b-nbg8
19
vulnerability VCID-94r9-hh4g-jkej
20
vulnerability VCID-953t-q1cr-zyd6
21
vulnerability VCID-9adx-p876-kyb5
22
vulnerability VCID-9yu1-z7c2-t3fj
23
vulnerability VCID-a1g9-pyz5-9fca
24
vulnerability VCID-abjx-8v46-d7d8
25
vulnerability VCID-am6s-67bm-77dr
26
vulnerability VCID-bbh5-rss8-bfct
27
vulnerability VCID-buj5-2t53-3kcr
28
vulnerability VCID-cvk2-93hm-gkhx
29
vulnerability VCID-dsqm-9q3e-dudw
30
vulnerability VCID-e6zr-4bgg-kkh5
31
vulnerability VCID-emqq-kwjg-3kfk
32
vulnerability VCID-ev4k-5k1d-2bhu
33
vulnerability VCID-f319-jpf5-hyex
34
vulnerability VCID-f4n7-q72x-3yea
35
vulnerability VCID-fpa2-ffg1-fyaa
36
vulnerability VCID-fqkc-utex-3kav
37
vulnerability VCID-fqkx-v8t5-q3h6
38
vulnerability VCID-fut7-bb1f-37g7
39
vulnerability VCID-gpv4-4tpd-tbaa
40
vulnerability VCID-hknp-f88a-kqec
41
vulnerability VCID-hp99-ncuh-6ugv
42
vulnerability VCID-j8hk-bqnb-gycp
43
vulnerability VCID-je4q-svfw-hqda
44
vulnerability VCID-jp1p-rfxa-hyd9
45
vulnerability VCID-jq5y-7h9g-mufa
46
vulnerability VCID-jwb1-3sbg-kfa5
47
vulnerability VCID-k5t3-28es-h3ez
48
vulnerability VCID-khpm-e1xb-hydb
49
vulnerability VCID-n1gz-y615-cbbk
50
vulnerability VCID-njsj-bwjq-fyap
51
vulnerability VCID-nney-azbc-pucg
52
vulnerability VCID-p576-w7dd-p3h7
53
vulnerability VCID-p7gd-anw2-1qbz
54
vulnerability VCID-pmvp-twk2-jqe4
55
vulnerability VCID-q2t1-kx56-s3c3
56
vulnerability VCID-q7vt-19eb-sqeq
57
vulnerability VCID-qcnh-z4zh-myaw
58
vulnerability VCID-qdxh-arxx-wbcr
59
vulnerability VCID-qv14-m93d-jyd9
60
vulnerability VCID-qxab-9uwr-yqhv
61
vulnerability VCID-rqrw-t2kj-mud8
62
vulnerability VCID-ru6w-m6q6-27gn
63
vulnerability VCID-sdjb-gp4t-vbgt
64
vulnerability VCID-sdsa-mh76-kqch
65
vulnerability VCID-teby-zvvw-zkhv
66
vulnerability VCID-tgyt-axv1-c7ag
67
vulnerability VCID-u259-2sxq-tbct
68
vulnerability VCID-u6as-cwxc-pkhk
69
vulnerability VCID-uq77-aax5-k7d8
70
vulnerability VCID-vq15-t92r-5bhx
71
vulnerability VCID-vw2r-g8yy-eyf4
72
vulnerability VCID-w1wb-mq2y-dfca
73
vulnerability VCID-w7z1-aw31-vugx
74
vulnerability VCID-wat8-4m83-hken
75
vulnerability VCID-x5x1-w7yv-eye9
76
vulnerability VCID-xvyu-2hb8-8ufh
77
vulnerability VCID-xw1s-93bu-wuh9
78
vulnerability VCID-y7ds-p5r2-yuhq
79
vulnerability VCID-yh6b-tc4u-v3bk
80
vulnerability VCID-yz6t-ge1y-qfgr
81
vulnerability VCID-zeut-9wfp-q7et
82
vulnerability VCID-zgfw-pk39-gyg8
83
vulnerability VCID-zkvq-bms4-gfcv
84
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.0.0
aliases GMS-2018-103
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-fdnw-2tz5-4fdr
23
url VCID-fqkx-v8t5-q3h6
vulnerability_id VCID-fqkx-v8t5-q3h6
summary 
Cleartext Storage of Sensitive Information
User session identifiers are stored in cleartext - without processing of additional cryptographic hashing algorithms. This vulnerability cannot be exploited directly and occurs in combination with a chained attack - for example SQL injection in any other component of the system.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-21339
reference_id
reference_type
scores
0
value 0.00132
scoring_system epss
scoring_elements 0.32224
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-21339
1
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21339.yaml
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21339.yaml
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21339.yaml
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21339.yaml
3
reference_url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-qx3w-4864-94ch
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-qx3w-4864-94ch
4
reference_url https://packagist.org/packages/typo3/cms-core
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://packagist.org/packages/typo3/cms-core
5
reference_url https://typo3.org/security/advisory/typo3-core-sa-2021-006
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2021-006
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-21339
reference_id CVE-2021-21339
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-21339
fixed_packages
0
url pkg:composer/typo3/cms@8.7.40
purl pkg:composer/typo3/cms@8.7.40
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-j8hk-bqnb-gycp
1
vulnerability VCID-sdjb-gp4t-vbgt
2
vulnerability VCID-uq77-aax5-k7d8
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.40
1
url pkg:composer/typo3/cms@9.5.25
purl pkg:composer/typo3/cms@9.5.25
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.25
2
url pkg:composer/typo3/cms@10.4.14
purl pkg:composer/typo3/cms@10.4.14
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@10.4.14
3
url pkg:composer/typo3/cms@11.1.1
purl pkg:composer/typo3/cms@11.1.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@11.1.1
aliases CVE-2021-21339, GHSA-qx3w-4864-94ch
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-fqkx-v8t5-q3h6
24
url VCID-fut7-bb1f-37g7
vulnerability_id VCID-fut7-bb1f-37g7
summary 
Cross-site Scripting
Cross-Site Scripting in Link Handling.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-015/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-015/
fixed_packages
0
url pkg:composer/typo3/cms@8.7.27
purl pkg:composer/typo3/cms@8.7.27
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-848u-w88s-5bbe
2
vulnerability VCID-ev4k-5k1d-2bhu
3
vulnerability VCID-fqkx-v8t5-q3h6
4
vulnerability VCID-jp1p-rfxa-hyd9
5
vulnerability VCID-p7gd-anw2-1qbz
6
vulnerability VCID-rqrw-t2kj-mud8
7
vulnerability VCID-tgyt-axv1-c7ag
8
vulnerability VCID-xw1s-93bu-wuh9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.27
1
url pkg:composer/typo3/cms@9.5.8
purl pkg:composer/typo3/cms@9.5.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1sfk-z8py-ykb8
2
vulnerability VCID-4an7-9ph4-mkd4
3
vulnerability VCID-6mnf-2fcw-dqgp
4
vulnerability VCID-848u-w88s-5bbe
5
vulnerability VCID-8w4e-d49b-nbg8
6
vulnerability VCID-bbh5-rss8-bfct
7
vulnerability VCID-e6zr-4bgg-kkh5
8
vulnerability VCID-ev4k-5k1d-2bhu
9
vulnerability VCID-fqkx-v8t5-q3h6
10
vulnerability VCID-jp1p-rfxa-hyd9
11
vulnerability VCID-n1gz-y615-cbbk
12
vulnerability VCID-p7gd-anw2-1qbz
13
vulnerability VCID-rqrw-t2kj-mud8
14
vulnerability VCID-tgyt-axv1-c7ag
15
vulnerability VCID-xw1s-93bu-wuh9
16
vulnerability VCID-zkvq-bms4-gfcv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.8
aliases GMS-2019-186
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-fut7-bb1f-37g7
25
url VCID-h217-xe8x-nua3
vulnerability_id VCID-h217-xe8x-nua3
summary 
Path Traversal
Due to a too loose type check in an API method, attackers could bypass the directory traversal check by providing an invalid UTF-8 encoding sequence.
references
0
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2016-024
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2016-024
fixed_packages
0
url pkg:composer/typo3/cms@8.4.1
purl pkg:composer/typo3/cms@8.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-3ugj-6m1e-e3hr
2
vulnerability VCID-4eym-e6vt-8fbs
3
vulnerability VCID-66ru-n2df-b3ay
4
vulnerability VCID-7ch1-q9f4-a7bt
5
vulnerability VCID-7m6u-k5tp-gkhy
6
vulnerability VCID-848u-w88s-5bbe
7
vulnerability VCID-953t-q1cr-zyd6
8
vulnerability VCID-9saf-w56y-pugz
9
vulnerability VCID-abjx-8v46-d7d8
10
vulnerability VCID-am6s-67bm-77dr
11
vulnerability VCID-bn3p-39sv-6fdg
12
vulnerability VCID-d6c2-upx1-e7cd
13
vulnerability VCID-dsqm-9q3e-dudw
14
vulnerability VCID-e564-zdku-9fc6
15
vulnerability VCID-emqq-kwjg-3kfk
16
vulnerability VCID-ev4k-5k1d-2bhu
17
vulnerability VCID-fdnw-2tz5-4fdr
18
vulnerability VCID-fqkx-v8t5-q3h6
19
vulnerability VCID-fut7-bb1f-37g7
20
vulnerability VCID-h7cg-64er-uya9
21
vulnerability VCID-h7hf-sf2q-73ay
22
vulnerability VCID-hg2n-xera-jkdh
23
vulnerability VCID-hp99-ncuh-6ugv
24
vulnerability VCID-jp1p-rfxa-hyd9
25
vulnerability VCID-jq5y-7h9g-mufa
26
vulnerability VCID-jqe4-8hzb-mfea
27
vulnerability VCID-k5t3-28es-h3ez
28
vulnerability VCID-khpm-e1xb-hydb
29
vulnerability VCID-mctp-nf36-7qdn
30
vulnerability VCID-njsj-bwjq-fyap
31
vulnerability VCID-nney-azbc-pucg
32
vulnerability VCID-p7gd-anw2-1qbz
33
vulnerability VCID-pmvp-twk2-jqe4
34
vulnerability VCID-q52p-xfj8-gygd
35
vulnerability VCID-qv14-m93d-jyd9
36
vulnerability VCID-qxab-9uwr-yqhv
37
vulnerability VCID-rqrw-t2kj-mud8
38
vulnerability VCID-ru6w-m6q6-27gn
39
vulnerability VCID-sdsa-mh76-kqch
40
vulnerability VCID-sy7r-d6pv-yba9
41
vulnerability VCID-u259-2sxq-tbct
42
vulnerability VCID-vq15-t92r-5bhx
43
vulnerability VCID-vw2r-g8yy-eyf4
44
vulnerability VCID-wy45-2gmr-fkfg
45
vulnerability VCID-x5x1-w7yv-eye9
46
vulnerability VCID-xh68-defe-f7ce
47
vulnerability VCID-xw1s-93bu-wuh9
48
vulnerability VCID-y7ds-p5r2-yuhq
49
vulnerability VCID-ygw4-jdqu-4fbt
50
vulnerability VCID-yz6t-ge1y-qfgr
51
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.4.1
aliases TYPO3-CORE-SA-2016-024
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-h217-xe8x-nua3
26
url VCID-h7cg-64er-uya9
vulnerability_id VCID-h7cg-64er-uya9
summary 
Unrestricted Upload of File with Dangerous Type
Unrestricted File Upload vulnerability in the `fileDenyPattern` in `sysext/core/Classes/Core/SystemEnvironmentBuilder`.
references
0
reference_url http://blog.emaze.net/2017/12/typo3-unrestricted-file-upload-remote.html
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url http://blog.emaze.net/2017/12/typo3-unrestricted-file-upload-remote.html
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-14251
reference_id
reference_type
scores
0
value 0.03536
scoring_system epss
scoring_elements 0.8788
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-14251
2
reference_url https://github.com/TYPO3/typo3
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3
3
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-007
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-007
4
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-007/
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-007/
5
reference_url http://www.securityfocus.com/bid/100620
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.securityfocus.com/bid/100620
6
reference_url http://www.securitytracker.com/id/1039295
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.securitytracker.com/id/1039295
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-14251
reference_id CVE-2017-14251
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2017-14251
fixed_packages
0
url pkg:composer/typo3/cms@8.7.5
purl pkg:composer/typo3/cms@8.7.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-3ugj-6m1e-e3hr
2
vulnerability VCID-4eym-e6vt-8fbs
3
vulnerability VCID-7ch1-q9f4-a7bt
4
vulnerability VCID-7m6u-k5tp-gkhy
5
vulnerability VCID-848u-w88s-5bbe
6
vulnerability VCID-953t-q1cr-zyd6
7
vulnerability VCID-abjx-8v46-d7d8
8
vulnerability VCID-am6s-67bm-77dr
9
vulnerability VCID-bn3p-39sv-6fdg
10
vulnerability VCID-dsqm-9q3e-dudw
11
vulnerability VCID-emqq-kwjg-3kfk
12
vulnerability VCID-ev4k-5k1d-2bhu
13
vulnerability VCID-fdnw-2tz5-4fdr
14
vulnerability VCID-fqkx-v8t5-q3h6
15
vulnerability VCID-fut7-bb1f-37g7
16
vulnerability VCID-hp99-ncuh-6ugv
17
vulnerability VCID-je4q-svfw-hqda
18
vulnerability VCID-jp1p-rfxa-hyd9
19
vulnerability VCID-jq5y-7h9g-mufa
20
vulnerability VCID-k5t3-28es-h3ez
21
vulnerability VCID-khpm-e1xb-hydb
22
vulnerability VCID-njsj-bwjq-fyap
23
vulnerability VCID-nney-azbc-pucg
24
vulnerability VCID-p7gd-anw2-1qbz
25
vulnerability VCID-pmvp-twk2-jqe4
26
vulnerability VCID-qv14-m93d-jyd9
27
vulnerability VCID-qxab-9uwr-yqhv
28
vulnerability VCID-rqrw-t2kj-mud8
29
vulnerability VCID-ru6w-m6q6-27gn
30
vulnerability VCID-sdsa-mh76-kqch
31
vulnerability VCID-tgyt-axv1-c7ag
32
vulnerability VCID-u259-2sxq-tbct
33
vulnerability VCID-vq15-t92r-5bhx
34
vulnerability VCID-vw2r-g8yy-eyf4
35
vulnerability VCID-w1wb-mq2y-dfca
36
vulnerability VCID-x5x1-w7yv-eye9
37
vulnerability VCID-xw1s-93bu-wuh9
38
vulnerability VCID-y7ds-p5r2-yuhq
39
vulnerability VCID-yz6t-ge1y-qfgr
40
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.5
aliases CVE-2017-14251, GHSA-fh4q-hxrw-cjqq
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-h7cg-64er-uya9
27
url VCID-h7hf-sf2q-73ay
vulnerability_id VCID-h7hf-sf2q-73ay
summary 
Code Injection
Remote Code Execution in third party library swiftmailer.
references
0
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-001/
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-001/
fixed_packages
0
url pkg:composer/typo3/cms@8.5.0
purl pkg:composer/typo3/cms@8.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-3ugj-6m1e-e3hr
2
vulnerability VCID-4eym-e6vt-8fbs
3
vulnerability VCID-66ru-n2df-b3ay
4
vulnerability VCID-7ch1-q9f4-a7bt
5
vulnerability VCID-7m6u-k5tp-gkhy
6
vulnerability VCID-848u-w88s-5bbe
7
vulnerability VCID-953t-q1cr-zyd6
8
vulnerability VCID-9saf-w56y-pugz
9
vulnerability VCID-abjx-8v46-d7d8
10
vulnerability VCID-am6s-67bm-77dr
11
vulnerability VCID-bn3p-39sv-6fdg
12
vulnerability VCID-d6c2-upx1-e7cd
13
vulnerability VCID-dsqm-9q3e-dudw
14
vulnerability VCID-e564-zdku-9fc6
15
vulnerability VCID-emqq-kwjg-3kfk
16
vulnerability VCID-ev4k-5k1d-2bhu
17
vulnerability VCID-fdnw-2tz5-4fdr
18
vulnerability VCID-fpa2-ffg1-fyaa
19
vulnerability VCID-fqkx-v8t5-q3h6
20
vulnerability VCID-fut7-bb1f-37g7
21
vulnerability VCID-h7cg-64er-uya9
22
vulnerability VCID-hg2n-xera-jkdh
23
vulnerability VCID-hknp-f88a-kqec
24
vulnerability VCID-hp99-ncuh-6ugv
25
vulnerability VCID-je4q-svfw-hqda
26
vulnerability VCID-jp1p-rfxa-hyd9
27
vulnerability VCID-jq5y-7h9g-mufa
28
vulnerability VCID-jqe4-8hzb-mfea
29
vulnerability VCID-k5t3-28es-h3ez
30
vulnerability VCID-khpm-e1xb-hydb
31
vulnerability VCID-mctp-nf36-7qdn
32
vulnerability VCID-njsj-bwjq-fyap
33
vulnerability VCID-nney-azbc-pucg
34
vulnerability VCID-p7gd-anw2-1qbz
35
vulnerability VCID-pmvp-twk2-jqe4
36
vulnerability VCID-q52p-xfj8-gygd
37
vulnerability VCID-qv14-m93d-jyd9
38
vulnerability VCID-qxab-9uwr-yqhv
39
vulnerability VCID-rqrw-t2kj-mud8
40
vulnerability VCID-ru6w-m6q6-27gn
41
vulnerability VCID-sdsa-mh76-kqch
42
vulnerability VCID-sy7r-d6pv-yba9
43
vulnerability VCID-u259-2sxq-tbct
44
vulnerability VCID-vq15-t92r-5bhx
45
vulnerability VCID-vw2r-g8yy-eyf4
46
vulnerability VCID-w1wb-mq2y-dfca
47
vulnerability VCID-wy45-2gmr-fkfg
48
vulnerability VCID-x5x1-w7yv-eye9
49
vulnerability VCID-xh68-defe-f7ce
50
vulnerability VCID-xw1s-93bu-wuh9
51
vulnerability VCID-y7ds-p5r2-yuhq
52
vulnerability VCID-ygw4-jdqu-4fbt
53
vulnerability VCID-yz6t-ge1y-qfgr
54
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.5.0
aliases GMS-2017-347
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-h7hf-sf2q-73ay
28
url VCID-hg2n-xera-jkdh
vulnerability_id VCID-hg2n-xera-jkdh
summary 
Improper Authentication
Authentication Bypass in TYPO3 Frontend.
references
0
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-002/
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-002/
fixed_packages
0
url pkg:composer/typo3/cms@8.6.1
purl pkg:composer/typo3/cms@8.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-3ugj-6m1e-e3hr
2
vulnerability VCID-4eym-e6vt-8fbs
3
vulnerability VCID-7ch1-q9f4-a7bt
4
vulnerability VCID-7m6u-k5tp-gkhy
5
vulnerability VCID-848u-w88s-5bbe
6
vulnerability VCID-953t-q1cr-zyd6
7
vulnerability VCID-9saf-w56y-pugz
8
vulnerability VCID-abjx-8v46-d7d8
9
vulnerability VCID-am6s-67bm-77dr
10
vulnerability VCID-bn3p-39sv-6fdg
11
vulnerability VCID-dsqm-9q3e-dudw
12
vulnerability VCID-e564-zdku-9fc6
13
vulnerability VCID-emqq-kwjg-3kfk
14
vulnerability VCID-ev4k-5k1d-2bhu
15
vulnerability VCID-fdnw-2tz5-4fdr
16
vulnerability VCID-fqkx-v8t5-q3h6
17
vulnerability VCID-fut7-bb1f-37g7
18
vulnerability VCID-h7cg-64er-uya9
19
vulnerability VCID-hp99-ncuh-6ugv
20
vulnerability VCID-je4q-svfw-hqda
21
vulnerability VCID-jp1p-rfxa-hyd9
22
vulnerability VCID-jq5y-7h9g-mufa
23
vulnerability VCID-jqe4-8hzb-mfea
24
vulnerability VCID-k5t3-28es-h3ez
25
vulnerability VCID-khpm-e1xb-hydb
26
vulnerability VCID-mctp-nf36-7qdn
27
vulnerability VCID-njsj-bwjq-fyap
28
vulnerability VCID-nney-azbc-pucg
29
vulnerability VCID-p7gd-anw2-1qbz
30
vulnerability VCID-pmvp-twk2-jqe4
31
vulnerability VCID-q52p-xfj8-gygd
32
vulnerability VCID-qv14-m93d-jyd9
33
vulnerability VCID-qxab-9uwr-yqhv
34
vulnerability VCID-rqrw-t2kj-mud8
35
vulnerability VCID-ru6w-m6q6-27gn
36
vulnerability VCID-sdsa-mh76-kqch
37
vulnerability VCID-sy7r-d6pv-yba9
38
vulnerability VCID-u259-2sxq-tbct
39
vulnerability VCID-vq15-t92r-5bhx
40
vulnerability VCID-vw2r-g8yy-eyf4
41
vulnerability VCID-w1wb-mq2y-dfca
42
vulnerability VCID-wy45-2gmr-fkfg
43
vulnerability VCID-x5x1-w7yv-eye9
44
vulnerability VCID-xw1s-93bu-wuh9
45
vulnerability VCID-y7ds-p5r2-yuhq
46
vulnerability VCID-ygw4-jdqu-4fbt
47
vulnerability VCID-yz6t-ge1y-qfgr
48
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.6.1
aliases GMS-2017-348
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hg2n-xera-jkdh
29
url VCID-hp99-ncuh-6ugv
vulnerability_id VCID-hp99-ncuh-6ugv
summary 
Cross-site Scripting
Cross-Site Scripting in Frontend User Login.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-008/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2018-008/
fixed_packages
0
url pkg:composer/typo3/cms@8.7.21
purl pkg:composer/typo3/cms@8.7.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-4eym-e6vt-8fbs
2
vulnerability VCID-7m6u-k5tp-gkhy
3
vulnerability VCID-848u-w88s-5bbe
4
vulnerability VCID-am6s-67bm-77dr
5
vulnerability VCID-bn3p-39sv-6fdg
6
vulnerability VCID-ev4k-5k1d-2bhu
7
vulnerability VCID-fqkx-v8t5-q3h6
8
vulnerability VCID-fut7-bb1f-37g7
9
vulnerability VCID-jp1p-rfxa-hyd9
10
vulnerability VCID-k5t3-28es-h3ez
11
vulnerability VCID-khpm-e1xb-hydb
12
vulnerability VCID-nney-azbc-pucg
13
vulnerability VCID-p7gd-anw2-1qbz
14
vulnerability VCID-pmvp-twk2-jqe4
15
vulnerability VCID-qv14-m93d-jyd9
16
vulnerability VCID-rqrw-t2kj-mud8
17
vulnerability VCID-ru6w-m6q6-27gn
18
vulnerability VCID-sdsa-mh76-kqch
19
vulnerability VCID-tgyt-axv1-c7ag
20
vulnerability VCID-u259-2sxq-tbct
21
vulnerability VCID-vw2r-g8yy-eyf4
22
vulnerability VCID-x5x1-w7yv-eye9
23
vulnerability VCID-xw1s-93bu-wuh9
24
vulnerability VCID-y7ds-p5r2-yuhq
25
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.21
1
url pkg:composer/typo3/cms@9.5.2
purl pkg:composer/typo3/cms@9.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1sfk-z8py-ykb8
2
vulnerability VCID-3ye6-vqje-abh4
3
vulnerability VCID-4an7-9ph4-mkd4
4
vulnerability VCID-4eym-e6vt-8fbs
5
vulnerability VCID-4jck-w9ct-budk
6
vulnerability VCID-6mnf-2fcw-dqgp
7
vulnerability VCID-7m6u-k5tp-gkhy
8
vulnerability VCID-7xv1-78u7-xufp
9
vulnerability VCID-848u-w88s-5bbe
10
vulnerability VCID-8w4e-d49b-nbg8
11
vulnerability VCID-9adx-p876-kyb5
12
vulnerability VCID-am6s-67bm-77dr
13
vulnerability VCID-bbh5-rss8-bfct
14
vulnerability VCID-cvk2-93hm-gkhx
15
vulnerability VCID-e6zr-4bgg-kkh5
16
vulnerability VCID-ev4k-5k1d-2bhu
17
vulnerability VCID-fqkx-v8t5-q3h6
18
vulnerability VCID-fut7-bb1f-37g7
19
vulnerability VCID-jp1p-rfxa-hyd9
20
vulnerability VCID-k5t3-28es-h3ez
21
vulnerability VCID-khpm-e1xb-hydb
22
vulnerability VCID-n1gz-y615-cbbk
23
vulnerability VCID-nney-azbc-pucg
24
vulnerability VCID-p7gd-anw2-1qbz
25
vulnerability VCID-pmvp-twk2-jqe4
26
vulnerability VCID-qv14-m93d-jyd9
27
vulnerability VCID-rqrw-t2kj-mud8
28
vulnerability VCID-ru6w-m6q6-27gn
29
vulnerability VCID-sdsa-mh76-kqch
30
vulnerability VCID-tgyt-axv1-c7ag
31
vulnerability VCID-u259-2sxq-tbct
32
vulnerability VCID-vw2r-g8yy-eyf4
33
vulnerability VCID-x5x1-w7yv-eye9
34
vulnerability VCID-xw1s-93bu-wuh9
35
vulnerability VCID-y7ds-p5r2-yuhq
36
vulnerability VCID-zeut-9wfp-q7et
37
vulnerability VCID-zkvq-bms4-gfcv
38
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.2
aliases GMS-2018-99
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hp99-ncuh-6ugv
30
url VCID-jp1p-rfxa-hyd9
vulnerability_id VCID-jp1p-rfxa-hyd9
summary 
Cross-site Scripting
Content elements of type `_menu_` are vulnerable to cross-site scripting when their referenced items get previewed in the page module. A valid backend user account is needed to exploit this vulnerability.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-21370
reference_id
reference_type
scores
0
value 0.00342
scoring_system epss
scoring_elements 0.57112
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-21370
1
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21370.yaml
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21370.yaml
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21370.yaml
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21370.yaml
3
reference_url https://packagist.org/packages/typo3/cms-backend
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://packagist.org/packages/typo3/cms-backend
4
reference_url https://typo3.org/security/advisory/typo3-core-sa-2021-008
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2021-008
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-21370
reference_id CVE-2021-21370
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-21370
6
reference_url https://github.com/advisories/GHSA-x7hc-x7fm-f7qh
reference_id GHSA-x7hc-x7fm-f7qh
reference_type
scores
url https://github.com/advisories/GHSA-x7hc-x7fm-f7qh
7
reference_url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-x7hc-x7fm-f7qh
reference_id GHSA-x7hc-x7fm-f7qh
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-x7hc-x7fm-f7qh
fixed_packages
0
url pkg:composer/typo3/cms@8.7.40
purl pkg:composer/typo3/cms@8.7.40
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-j8hk-bqnb-gycp
1
vulnerability VCID-sdjb-gp4t-vbgt
2
vulnerability VCID-uq77-aax5-k7d8
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.40
1
url pkg:composer/typo3/cms@9.5.25
purl pkg:composer/typo3/cms@9.5.25
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.25
2
url pkg:composer/typo3/cms@10.4.14
purl pkg:composer/typo3/cms@10.4.14
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@10.4.14
3
url pkg:composer/typo3/cms@11.1.1
purl pkg:composer/typo3/cms@11.1.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@11.1.1
aliases CVE-2021-21370, GHSA-x7hc-x7fm-f7qh
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-jp1p-rfxa-hyd9
31
url VCID-jq5y-7h9g-mufa
vulnerability_id VCID-jq5y-7h9g-mufa
summary Information Disclosure in Install Tool.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-010/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2018-010/
fixed_packages
0
url pkg:composer/typo3/cms@8.7.21
purl pkg:composer/typo3/cms@8.7.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-4eym-e6vt-8fbs
2
vulnerability VCID-7m6u-k5tp-gkhy
3
vulnerability VCID-848u-w88s-5bbe
4
vulnerability VCID-am6s-67bm-77dr
5
vulnerability VCID-bn3p-39sv-6fdg
6
vulnerability VCID-ev4k-5k1d-2bhu
7
vulnerability VCID-fqkx-v8t5-q3h6
8
vulnerability VCID-fut7-bb1f-37g7
9
vulnerability VCID-jp1p-rfxa-hyd9
10
vulnerability VCID-k5t3-28es-h3ez
11
vulnerability VCID-khpm-e1xb-hydb
12
vulnerability VCID-nney-azbc-pucg
13
vulnerability VCID-p7gd-anw2-1qbz
14
vulnerability VCID-pmvp-twk2-jqe4
15
vulnerability VCID-qv14-m93d-jyd9
16
vulnerability VCID-rqrw-t2kj-mud8
17
vulnerability VCID-ru6w-m6q6-27gn
18
vulnerability VCID-sdsa-mh76-kqch
19
vulnerability VCID-tgyt-axv1-c7ag
20
vulnerability VCID-u259-2sxq-tbct
21
vulnerability VCID-vw2r-g8yy-eyf4
22
vulnerability VCID-x5x1-w7yv-eye9
23
vulnerability VCID-xw1s-93bu-wuh9
24
vulnerability VCID-y7ds-p5r2-yuhq
25
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.21
1
url pkg:composer/typo3/cms@9.5.2
purl pkg:composer/typo3/cms@9.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1sfk-z8py-ykb8
2
vulnerability VCID-3ye6-vqje-abh4
3
vulnerability VCID-4an7-9ph4-mkd4
4
vulnerability VCID-4eym-e6vt-8fbs
5
vulnerability VCID-4jck-w9ct-budk
6
vulnerability VCID-6mnf-2fcw-dqgp
7
vulnerability VCID-7m6u-k5tp-gkhy
8
vulnerability VCID-7xv1-78u7-xufp
9
vulnerability VCID-848u-w88s-5bbe
10
vulnerability VCID-8w4e-d49b-nbg8
11
vulnerability VCID-9adx-p876-kyb5
12
vulnerability VCID-am6s-67bm-77dr
13
vulnerability VCID-bbh5-rss8-bfct
14
vulnerability VCID-cvk2-93hm-gkhx
15
vulnerability VCID-e6zr-4bgg-kkh5
16
vulnerability VCID-ev4k-5k1d-2bhu
17
vulnerability VCID-fqkx-v8t5-q3h6
18
vulnerability VCID-fut7-bb1f-37g7
19
vulnerability VCID-jp1p-rfxa-hyd9
20
vulnerability VCID-k5t3-28es-h3ez
21
vulnerability VCID-khpm-e1xb-hydb
22
vulnerability VCID-n1gz-y615-cbbk
23
vulnerability VCID-nney-azbc-pucg
24
vulnerability VCID-p7gd-anw2-1qbz
25
vulnerability VCID-pmvp-twk2-jqe4
26
vulnerability VCID-qv14-m93d-jyd9
27
vulnerability VCID-rqrw-t2kj-mud8
28
vulnerability VCID-ru6w-m6q6-27gn
29
vulnerability VCID-sdsa-mh76-kqch
30
vulnerability VCID-tgyt-axv1-c7ag
31
vulnerability VCID-u259-2sxq-tbct
32
vulnerability VCID-vw2r-g8yy-eyf4
33
vulnerability VCID-x5x1-w7yv-eye9
34
vulnerability VCID-xw1s-93bu-wuh9
35
vulnerability VCID-y7ds-p5r2-yuhq
36
vulnerability VCID-zeut-9wfp-q7et
37
vulnerability VCID-zkvq-bms4-gfcv
38
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.2
aliases GMS-2018-101
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-jq5y-7h9g-mufa
32
url VCID-jqe4-8hzb-mfea
vulnerability_id VCID-jqe4-8hzb-mfea
summary 
Arbitrary Code Execution
Due to a missing file extension in the `fileDenyPattern`, backend user are allowed to upload *.pht files which can be executed in certain web server setups.
references
0
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-007/
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-007/
fixed_packages
0
url pkg:composer/typo3/cms@8.7.5
purl pkg:composer/typo3/cms@8.7.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-3ugj-6m1e-e3hr
2
vulnerability VCID-4eym-e6vt-8fbs
3
vulnerability VCID-7ch1-q9f4-a7bt
4
vulnerability VCID-7m6u-k5tp-gkhy
5
vulnerability VCID-848u-w88s-5bbe
6
vulnerability VCID-953t-q1cr-zyd6
7
vulnerability VCID-abjx-8v46-d7d8
8
vulnerability VCID-am6s-67bm-77dr
9
vulnerability VCID-bn3p-39sv-6fdg
10
vulnerability VCID-dsqm-9q3e-dudw
11
vulnerability VCID-emqq-kwjg-3kfk
12
vulnerability VCID-ev4k-5k1d-2bhu
13
vulnerability VCID-fdnw-2tz5-4fdr
14
vulnerability VCID-fqkx-v8t5-q3h6
15
vulnerability VCID-fut7-bb1f-37g7
16
vulnerability VCID-hp99-ncuh-6ugv
17
vulnerability VCID-je4q-svfw-hqda
18
vulnerability VCID-jp1p-rfxa-hyd9
19
vulnerability VCID-jq5y-7h9g-mufa
20
vulnerability VCID-k5t3-28es-h3ez
21
vulnerability VCID-khpm-e1xb-hydb
22
vulnerability VCID-njsj-bwjq-fyap
23
vulnerability VCID-nney-azbc-pucg
24
vulnerability VCID-p7gd-anw2-1qbz
25
vulnerability VCID-pmvp-twk2-jqe4
26
vulnerability VCID-qv14-m93d-jyd9
27
vulnerability VCID-qxab-9uwr-yqhv
28
vulnerability VCID-rqrw-t2kj-mud8
29
vulnerability VCID-ru6w-m6q6-27gn
30
vulnerability VCID-sdsa-mh76-kqch
31
vulnerability VCID-tgyt-axv1-c7ag
32
vulnerability VCID-u259-2sxq-tbct
33
vulnerability VCID-vq15-t92r-5bhx
34
vulnerability VCID-vw2r-g8yy-eyf4
35
vulnerability VCID-w1wb-mq2y-dfca
36
vulnerability VCID-x5x1-w7yv-eye9
37
vulnerability VCID-xw1s-93bu-wuh9
38
vulnerability VCID-y7ds-p5r2-yuhq
39
vulnerability VCID-yz6t-ge1y-qfgr
40
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.5
aliases TYPO3-CORE-SA-2017-007
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-jqe4-8hzb-mfea
33
url VCID-k5t3-28es-h3ez
vulnerability_id VCID-k5t3-28es-h3ez
summary 
Improper Input Validation
TYPO3 allows remote code execution because it does not properly configure the applications used for image processing, as demonstrated by `ImageMagick` or `GraphicsMagick`.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-11832
reference_id
reference_type
scores
0
value 0.00898
scoring_system epss
scoring_elements 0.76028
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-11832
1
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2019-11832.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2019-11832.yaml
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2019-11832.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2019-11832.yaml
3
reference_url https://github.com/github/advisory-database/pull/3530
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/github/advisory-database/pull/3530
4
reference_url https://github.com/TYPO3/typo3
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3
5
reference_url https://github.com/TYPO3/typo3/commit/2c04eeac44733fda491f92c697f88c1337d19c79
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/2c04eeac44733fda491f92c697f88c1337d19c79
6
reference_url https://github.com/TYPO3/typo3/commit/51fdb774a57ee30e8d60c0e33b4a0b92d775739e
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/51fdb774a57ee30e8d60c0e33b4a0b92d775739e
7
reference_url https://github.com/TYPO3/typo3/commit/e845d90b82b2f72ab12a9e37f15082297832beca
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/e845d90b82b2f72ab12a9e37f15082297832beca
8
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-012
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2019-012
9
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-012/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-012/
10
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-11832
reference_id CVE-2019-11832
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-11832
fixed_packages
0
url pkg:composer/typo3/cms@8.7.25
purl pkg:composer/typo3/cms@8.7.25
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-4eym-e6vt-8fbs
2
vulnerability VCID-7m6u-k5tp-gkhy
3
vulnerability VCID-848u-w88s-5bbe
4
vulnerability VCID-cbmm-1b2k-8qaz
5
vulnerability VCID-ev4k-5k1d-2bhu
6
vulnerability VCID-fqkx-v8t5-q3h6
7
vulnerability VCID-fut7-bb1f-37g7
8
vulnerability VCID-jp1p-rfxa-hyd9
9
vulnerability VCID-nney-azbc-pucg
10
vulnerability VCID-p7gd-anw2-1qbz
11
vulnerability VCID-qv14-m93d-jyd9
12
vulnerability VCID-rqrw-t2kj-mud8
13
vulnerability VCID-tgyt-axv1-c7ag
14
vulnerability VCID-xw1s-93bu-wuh9
15
vulnerability VCID-y7ds-p5r2-yuhq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.25
1
url pkg:composer/typo3/cms@9.5.6
purl pkg:composer/typo3/cms@9.5.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1sfk-z8py-ykb8
2
vulnerability VCID-4an7-9ph4-mkd4
3
vulnerability VCID-4eym-e6vt-8fbs
4
vulnerability VCID-6mnf-2fcw-dqgp
5
vulnerability VCID-7m6u-k5tp-gkhy
6
vulnerability VCID-7xv1-78u7-xufp
7
vulnerability VCID-848u-w88s-5bbe
8
vulnerability VCID-8w4e-d49b-nbg8
9
vulnerability VCID-bbh5-rss8-bfct
10
vulnerability VCID-cbmm-1b2k-8qaz
11
vulnerability VCID-cvk2-93hm-gkhx
12
vulnerability VCID-e6zr-4bgg-kkh5
13
vulnerability VCID-ev4k-5k1d-2bhu
14
vulnerability VCID-fqkx-v8t5-q3h6
15
vulnerability VCID-fut7-bb1f-37g7
16
vulnerability VCID-jp1p-rfxa-hyd9
17
vulnerability VCID-n1gz-y615-cbbk
18
vulnerability VCID-nney-azbc-pucg
19
vulnerability VCID-p7gd-anw2-1qbz
20
vulnerability VCID-qv14-m93d-jyd9
21
vulnerability VCID-rqrw-t2kj-mud8
22
vulnerability VCID-tgyt-axv1-c7ag
23
vulnerability VCID-xw1s-93bu-wuh9
24
vulnerability VCID-y7ds-p5r2-yuhq
25
vulnerability VCID-zeut-9wfp-q7et
26
vulnerability VCID-zkvq-bms4-gfcv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.6
aliases CVE-2019-11832, GHSA-3w4h-r27h-4r2w
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-k5t3-28es-h3ez
34
url VCID-khpm-e1xb-hydb
vulnerability_id VCID-khpm-e1xb-hydb
summary Information Disclosure of Installed Extensions.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-001/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-001/
fixed_packages
0
url pkg:composer/typo3/cms@8.7.23
purl pkg:composer/typo3/cms@8.7.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-4eym-e6vt-8fbs
2
vulnerability VCID-7m6u-k5tp-gkhy
3
vulnerability VCID-848u-w88s-5bbe
4
vulnerability VCID-ev4k-5k1d-2bhu
5
vulnerability VCID-fqkx-v8t5-q3h6
6
vulnerability VCID-fut7-bb1f-37g7
7
vulnerability VCID-jp1p-rfxa-hyd9
8
vulnerability VCID-k5t3-28es-h3ez
9
vulnerability VCID-nney-azbc-pucg
10
vulnerability VCID-p7gd-anw2-1qbz
11
vulnerability VCID-qv14-m93d-jyd9
12
vulnerability VCID-rqrw-t2kj-mud8
13
vulnerability VCID-ru6w-m6q6-27gn
14
vulnerability VCID-sdsa-mh76-kqch
15
vulnerability VCID-tgyt-axv1-c7ag
16
vulnerability VCID-x5x1-w7yv-eye9
17
vulnerability VCID-xw1s-93bu-wuh9
18
vulnerability VCID-y7ds-p5r2-yuhq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.23
1
url pkg:composer/typo3/cms@9.5.4
purl pkg:composer/typo3/cms@9.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1sfk-z8py-ykb8
2
vulnerability VCID-3ye6-vqje-abh4
3
vulnerability VCID-4an7-9ph4-mkd4
4
vulnerability VCID-4eym-e6vt-8fbs
5
vulnerability VCID-6mnf-2fcw-dqgp
6
vulnerability VCID-7m6u-k5tp-gkhy
7
vulnerability VCID-7xv1-78u7-xufp
8
vulnerability VCID-848u-w88s-5bbe
9
vulnerability VCID-8w4e-d49b-nbg8
10
vulnerability VCID-9adx-p876-kyb5
11
vulnerability VCID-bbh5-rss8-bfct
12
vulnerability VCID-cvk2-93hm-gkhx
13
vulnerability VCID-e6zr-4bgg-kkh5
14
vulnerability VCID-ev4k-5k1d-2bhu
15
vulnerability VCID-fqkx-v8t5-q3h6
16
vulnerability VCID-fut7-bb1f-37g7
17
vulnerability VCID-jp1p-rfxa-hyd9
18
vulnerability VCID-k5t3-28es-h3ez
19
vulnerability VCID-n1gz-y615-cbbk
20
vulnerability VCID-nney-azbc-pucg
21
vulnerability VCID-p7gd-anw2-1qbz
22
vulnerability VCID-qv14-m93d-jyd9
23
vulnerability VCID-rqrw-t2kj-mud8
24
vulnerability VCID-ru6w-m6q6-27gn
25
vulnerability VCID-sdsa-mh76-kqch
26
vulnerability VCID-tgyt-axv1-c7ag
27
vulnerability VCID-x5x1-w7yv-eye9
28
vulnerability VCID-xw1s-93bu-wuh9
29
vulnerability VCID-y7ds-p5r2-yuhq
30
vulnerability VCID-zeut-9wfp-q7et
31
vulnerability VCID-zkvq-bms4-gfcv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.4
aliases GMS-2019-172
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-khpm-e1xb-hydb
35
url VCID-mctp-nf36-7qdn
vulnerability_id VCID-mctp-nf36-7qdn
summary 
Information Disclosure
Failing to properly check user permission on file storages, editors could gain knowledge of protected storages and its folders as well as using them in a file collection being rendered in the frontend. A valid backend user account is needed to exploit this vulnerability.
references
0
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-005/
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-005/
fixed_packages
0
url pkg:composer/typo3/cms@8.7.5
purl pkg:composer/typo3/cms@8.7.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-3ugj-6m1e-e3hr
2
vulnerability VCID-4eym-e6vt-8fbs
3
vulnerability VCID-7ch1-q9f4-a7bt
4
vulnerability VCID-7m6u-k5tp-gkhy
5
vulnerability VCID-848u-w88s-5bbe
6
vulnerability VCID-953t-q1cr-zyd6
7
vulnerability VCID-abjx-8v46-d7d8
8
vulnerability VCID-am6s-67bm-77dr
9
vulnerability VCID-bn3p-39sv-6fdg
10
vulnerability VCID-dsqm-9q3e-dudw
11
vulnerability VCID-emqq-kwjg-3kfk
12
vulnerability VCID-ev4k-5k1d-2bhu
13
vulnerability VCID-fdnw-2tz5-4fdr
14
vulnerability VCID-fqkx-v8t5-q3h6
15
vulnerability VCID-fut7-bb1f-37g7
16
vulnerability VCID-hp99-ncuh-6ugv
17
vulnerability VCID-je4q-svfw-hqda
18
vulnerability VCID-jp1p-rfxa-hyd9
19
vulnerability VCID-jq5y-7h9g-mufa
20
vulnerability VCID-k5t3-28es-h3ez
21
vulnerability VCID-khpm-e1xb-hydb
22
vulnerability VCID-njsj-bwjq-fyap
23
vulnerability VCID-nney-azbc-pucg
24
vulnerability VCID-p7gd-anw2-1qbz
25
vulnerability VCID-pmvp-twk2-jqe4
26
vulnerability VCID-qv14-m93d-jyd9
27
vulnerability VCID-qxab-9uwr-yqhv
28
vulnerability VCID-rqrw-t2kj-mud8
29
vulnerability VCID-ru6w-m6q6-27gn
30
vulnerability VCID-sdsa-mh76-kqch
31
vulnerability VCID-tgyt-axv1-c7ag
32
vulnerability VCID-u259-2sxq-tbct
33
vulnerability VCID-vq15-t92r-5bhx
34
vulnerability VCID-vw2r-g8yy-eyf4
35
vulnerability VCID-w1wb-mq2y-dfca
36
vulnerability VCID-x5x1-w7yv-eye9
37
vulnerability VCID-xw1s-93bu-wuh9
38
vulnerability VCID-y7ds-p5r2-yuhq
39
vulnerability VCID-yz6t-ge1y-qfgr
40
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.5
aliases TYPO3-CORE-SA-2017-005
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-mctp-nf36-7qdn
36
url VCID-njsj-bwjq-fyap
vulnerability_id VCID-njsj-bwjq-fyap
summary Insecure Deserialization & Arbitrary Code Execution in TYPO3 CMS.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-002/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2018-002/
fixed_packages
0
url pkg:composer/typo3/cms@8.7.17
purl pkg:composer/typo3/cms@8.7.17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-3ugj-6m1e-e3hr
2
vulnerability VCID-4eym-e6vt-8fbs
3
vulnerability VCID-7ch1-q9f4-a7bt
4
vulnerability VCID-7m6u-k5tp-gkhy
5
vulnerability VCID-848u-w88s-5bbe
6
vulnerability VCID-953t-q1cr-zyd6
7
vulnerability VCID-am6s-67bm-77dr
8
vulnerability VCID-bn3p-39sv-6fdg
9
vulnerability VCID-dsqm-9q3e-dudw
10
vulnerability VCID-emqq-kwjg-3kfk
11
vulnerability VCID-ev4k-5k1d-2bhu
12
vulnerability VCID-fdnw-2tz5-4fdr
13
vulnerability VCID-fqkx-v8t5-q3h6
14
vulnerability VCID-fut7-bb1f-37g7
15
vulnerability VCID-hp99-ncuh-6ugv
16
vulnerability VCID-jp1p-rfxa-hyd9
17
vulnerability VCID-jq5y-7h9g-mufa
18
vulnerability VCID-k5t3-28es-h3ez
19
vulnerability VCID-khpm-e1xb-hydb
20
vulnerability VCID-nney-azbc-pucg
21
vulnerability VCID-p7gd-anw2-1qbz
22
vulnerability VCID-pmvp-twk2-jqe4
23
vulnerability VCID-qv14-m93d-jyd9
24
vulnerability VCID-qxab-9uwr-yqhv
25
vulnerability VCID-rqrw-t2kj-mud8
26
vulnerability VCID-ru6w-m6q6-27gn
27
vulnerability VCID-sdsa-mh76-kqch
28
vulnerability VCID-tgyt-axv1-c7ag
29
vulnerability VCID-u259-2sxq-tbct
30
vulnerability VCID-vw2r-g8yy-eyf4
31
vulnerability VCID-x5x1-w7yv-eye9
32
vulnerability VCID-xw1s-93bu-wuh9
33
vulnerability VCID-y7ds-p5r2-yuhq
34
vulnerability VCID-yz6t-ge1y-qfgr
35
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.17
1
url pkg:composer/typo3/cms@9.3.2
purl pkg:composer/typo3/cms@9.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1sfk-z8py-ykb8
2
vulnerability VCID-3ugj-6m1e-e3hr
3
vulnerability VCID-3ye6-vqje-abh4
4
vulnerability VCID-4an7-9ph4-mkd4
5
vulnerability VCID-4eym-e6vt-8fbs
6
vulnerability VCID-4jck-w9ct-budk
7
vulnerability VCID-6mnf-2fcw-dqgp
8
vulnerability VCID-7ch1-q9f4-a7bt
9
vulnerability VCID-7m6u-k5tp-gkhy
10
vulnerability VCID-7xv1-78u7-xufp
11
vulnerability VCID-848u-w88s-5bbe
12
vulnerability VCID-8w4e-d49b-nbg8
13
vulnerability VCID-953t-q1cr-zyd6
14
vulnerability VCID-9adx-p876-kyb5
15
vulnerability VCID-am6s-67bm-77dr
16
vulnerability VCID-bbh5-rss8-bfct
17
vulnerability VCID-cvk2-93hm-gkhx
18
vulnerability VCID-dsqm-9q3e-dudw
19
vulnerability VCID-e6zr-4bgg-kkh5
20
vulnerability VCID-emqq-kwjg-3kfk
21
vulnerability VCID-ev4k-5k1d-2bhu
22
vulnerability VCID-fqkx-v8t5-q3h6
23
vulnerability VCID-fut7-bb1f-37g7
24
vulnerability VCID-hp99-ncuh-6ugv
25
vulnerability VCID-jp1p-rfxa-hyd9
26
vulnerability VCID-jq5y-7h9g-mufa
27
vulnerability VCID-k5t3-28es-h3ez
28
vulnerability VCID-khpm-e1xb-hydb
29
vulnerability VCID-n1gz-y615-cbbk
30
vulnerability VCID-nney-azbc-pucg
31
vulnerability VCID-p7gd-anw2-1qbz
32
vulnerability VCID-pmvp-twk2-jqe4
33
vulnerability VCID-qv14-m93d-jyd9
34
vulnerability VCID-qxab-9uwr-yqhv
35
vulnerability VCID-rqrw-t2kj-mud8
36
vulnerability VCID-ru6w-m6q6-27gn
37
vulnerability VCID-sdsa-mh76-kqch
38
vulnerability VCID-tgyt-axv1-c7ag
39
vulnerability VCID-u259-2sxq-tbct
40
vulnerability VCID-vw2r-g8yy-eyf4
41
vulnerability VCID-x5x1-w7yv-eye9
42
vulnerability VCID-xw1s-93bu-wuh9
43
vulnerability VCID-y7ds-p5r2-yuhq
44
vulnerability VCID-yz6t-ge1y-qfgr
45
vulnerability VCID-zeut-9wfp-q7et
46
vulnerability VCID-zkvq-bms4-gfcv
47
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.3.2
aliases GMS-2018-94
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-njsj-bwjq-fyap
37
url VCID-nney-azbc-pucg
vulnerability_id VCID-nney-azbc-pucg
summary Information Disclosure in Backend User Interface.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-014/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-014/
fixed_packages
0
url pkg:composer/typo3/cms@8.7.27
purl pkg:composer/typo3/cms@8.7.27
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-848u-w88s-5bbe
2
vulnerability VCID-ev4k-5k1d-2bhu
3
vulnerability VCID-fqkx-v8t5-q3h6
4
vulnerability VCID-jp1p-rfxa-hyd9
5
vulnerability VCID-p7gd-anw2-1qbz
6
vulnerability VCID-rqrw-t2kj-mud8
7
vulnerability VCID-tgyt-axv1-c7ag
8
vulnerability VCID-xw1s-93bu-wuh9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.27
1
url pkg:composer/typo3/cms@9.5.8
purl pkg:composer/typo3/cms@9.5.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1sfk-z8py-ykb8
2
vulnerability VCID-4an7-9ph4-mkd4
3
vulnerability VCID-6mnf-2fcw-dqgp
4
vulnerability VCID-848u-w88s-5bbe
5
vulnerability VCID-8w4e-d49b-nbg8
6
vulnerability VCID-bbh5-rss8-bfct
7
vulnerability VCID-e6zr-4bgg-kkh5
8
vulnerability VCID-ev4k-5k1d-2bhu
9
vulnerability VCID-fqkx-v8t5-q3h6
10
vulnerability VCID-jp1p-rfxa-hyd9
11
vulnerability VCID-n1gz-y615-cbbk
12
vulnerability VCID-p7gd-anw2-1qbz
13
vulnerability VCID-rqrw-t2kj-mud8
14
vulnerability VCID-tgyt-axv1-c7ag
15
vulnerability VCID-xw1s-93bu-wuh9
16
vulnerability VCID-zkvq-bms4-gfcv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.8
aliases GMS-2019-185
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-nney-azbc-pucg
38
url VCID-p7gd-anw2-1qbz
vulnerability_id VCID-p7gd-anw2-1qbz
summary 
Deserialization of Untrusted Data
It has been discovered that the classes `QueryGenerator` and `QueryView` are vulnerable to insecure deserialization. One exploitable scenario requires having the system extension `ext:lowlevel` (Backend Module `DB Check`) installed, with a valid backend user who has administrator privileges. The other exploitable scenario requires having the system extension `ext:sys_action` installed, with a valid backend user who has limited privileges.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-19849
reference_id
reference_type
scores
0
value 0.00746
scoring_system epss
scoring_elements 0.7342
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-19849
1
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2019-19849.yaml
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2019-19849.yaml
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2019-19849.yaml
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2019-19849.yaml
3
reference_url https://review.typo3.org/q/%2522Resolves:+%252389005%2522+topic:security
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://review.typo3.org/q/%2522Resolves:+%252389005%2522+topic:security
4
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-026
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2019-026
5
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-026/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-026/
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-19849
reference_id CVE-2019-19849
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-19849
fixed_packages
0
url pkg:composer/typo3/cms@8.7.30
purl pkg:composer/typo3/cms@8.7.30
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-848u-w88s-5bbe
2
vulnerability VCID-ev4k-5k1d-2bhu
3
vulnerability VCID-fqkx-v8t5-q3h6
4
vulnerability VCID-jp1p-rfxa-hyd9
5
vulnerability VCID-tgyt-axv1-c7ag
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.30
1
url pkg:composer/typo3/cms@9.5.12
purl pkg:composer/typo3/cms@9.5.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1sfk-z8py-ykb8
2
vulnerability VCID-4an7-9ph4-mkd4
3
vulnerability VCID-6mnf-2fcw-dqgp
4
vulnerability VCID-848u-w88s-5bbe
5
vulnerability VCID-8w4e-d49b-nbg8
6
vulnerability VCID-bbh5-rss8-bfct
7
vulnerability VCID-bcbd-zzet-mff6
8
vulnerability VCID-e6zr-4bgg-kkh5
9
vulnerability VCID-ev4k-5k1d-2bhu
10
vulnerability VCID-fqkx-v8t5-q3h6
11
vulnerability VCID-jp1p-rfxa-hyd9
12
vulnerability VCID-n1gz-y615-cbbk
13
vulnerability VCID-tgyt-axv1-c7ag
14
vulnerability VCID-zkvq-bms4-gfcv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.12
2
url pkg:composer/typo3/cms@10.2.1
purl pkg:composer/typo3/cms@10.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1sfk-z8py-ykb8
2
vulnerability VCID-2tz2-8qdm-2kcv
3
vulnerability VCID-4an7-9ph4-mkd4
4
vulnerability VCID-6mnf-2fcw-dqgp
5
vulnerability VCID-6urp-p9mn-cffv
6
vulnerability VCID-848u-w88s-5bbe
7
vulnerability VCID-8w4e-d49b-nbg8
8
vulnerability VCID-bbh5-rss8-bfct
9
vulnerability VCID-bcbd-zzet-mff6
10
vulnerability VCID-c46m-ht19-ybc4
11
vulnerability VCID-e6zr-4bgg-kkh5
12
vulnerability VCID-ev4k-5k1d-2bhu
13
vulnerability VCID-fqkx-v8t5-q3h6
14
vulnerability VCID-jp1p-rfxa-hyd9
15
vulnerability VCID-n1gz-y615-cbbk
16
vulnerability VCID-r3az-g422-gqf9
17
vulnerability VCID-tgyt-axv1-c7ag
18
vulnerability VCID-zkvq-bms4-gfcv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@10.2.1
3
url pkg:composer/typo3/cms@10.2.2
purl pkg:composer/typo3/cms@10.2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1sfk-z8py-ykb8
2
vulnerability VCID-2tz2-8qdm-2kcv
3
vulnerability VCID-4an7-9ph4-mkd4
4
vulnerability VCID-6mnf-2fcw-dqgp
5
vulnerability VCID-6urp-p9mn-cffv
6
vulnerability VCID-848u-w88s-5bbe
7
vulnerability VCID-8w4e-d49b-nbg8
8
vulnerability VCID-bbh5-rss8-bfct
9
vulnerability VCID-bcbd-zzet-mff6
10
vulnerability VCID-c46m-ht19-ybc4
11
vulnerability VCID-e6zr-4bgg-kkh5
12
vulnerability VCID-ev4k-5k1d-2bhu
13
vulnerability VCID-fqkx-v8t5-q3h6
14
vulnerability VCID-jp1p-rfxa-hyd9
15
vulnerability VCID-n1gz-y615-cbbk
16
vulnerability VCID-r3az-g422-gqf9
17
vulnerability VCID-tgyt-axv1-c7ag
18
vulnerability VCID-zkvq-bms4-gfcv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@10.2.2
aliases CVE-2019-19849, GHSA-rcgc-4xfc-564v
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-p7gd-anw2-1qbz
39
url VCID-pmvp-twk2-jqe4
vulnerability_id VCID-pmvp-twk2-jqe4
summary Security Misconfiguration for Backend User Accounts.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-002/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-002/
fixed_packages
0
url pkg:composer/typo3/cms@8.7.23
purl pkg:composer/typo3/cms@8.7.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-4eym-e6vt-8fbs
2
vulnerability VCID-7m6u-k5tp-gkhy
3
vulnerability VCID-848u-w88s-5bbe
4
vulnerability VCID-ev4k-5k1d-2bhu
5
vulnerability VCID-fqkx-v8t5-q3h6
6
vulnerability VCID-fut7-bb1f-37g7
7
vulnerability VCID-jp1p-rfxa-hyd9
8
vulnerability VCID-k5t3-28es-h3ez
9
vulnerability VCID-nney-azbc-pucg
10
vulnerability VCID-p7gd-anw2-1qbz
11
vulnerability VCID-qv14-m93d-jyd9
12
vulnerability VCID-rqrw-t2kj-mud8
13
vulnerability VCID-ru6w-m6q6-27gn
14
vulnerability VCID-sdsa-mh76-kqch
15
vulnerability VCID-tgyt-axv1-c7ag
16
vulnerability VCID-x5x1-w7yv-eye9
17
vulnerability VCID-xw1s-93bu-wuh9
18
vulnerability VCID-y7ds-p5r2-yuhq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.23
1
url pkg:composer/typo3/cms@9.5.4
purl pkg:composer/typo3/cms@9.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1sfk-z8py-ykb8
2
vulnerability VCID-3ye6-vqje-abh4
3
vulnerability VCID-4an7-9ph4-mkd4
4
vulnerability VCID-4eym-e6vt-8fbs
5
vulnerability VCID-6mnf-2fcw-dqgp
6
vulnerability VCID-7m6u-k5tp-gkhy
7
vulnerability VCID-7xv1-78u7-xufp
8
vulnerability VCID-848u-w88s-5bbe
9
vulnerability VCID-8w4e-d49b-nbg8
10
vulnerability VCID-9adx-p876-kyb5
11
vulnerability VCID-bbh5-rss8-bfct
12
vulnerability VCID-cvk2-93hm-gkhx
13
vulnerability VCID-e6zr-4bgg-kkh5
14
vulnerability VCID-ev4k-5k1d-2bhu
15
vulnerability VCID-fqkx-v8t5-q3h6
16
vulnerability VCID-fut7-bb1f-37g7
17
vulnerability VCID-jp1p-rfxa-hyd9
18
vulnerability VCID-k5t3-28es-h3ez
19
vulnerability VCID-n1gz-y615-cbbk
20
vulnerability VCID-nney-azbc-pucg
21
vulnerability VCID-p7gd-anw2-1qbz
22
vulnerability VCID-qv14-m93d-jyd9
23
vulnerability VCID-rqrw-t2kj-mud8
24
vulnerability VCID-ru6w-m6q6-27gn
25
vulnerability VCID-sdsa-mh76-kqch
26
vulnerability VCID-tgyt-axv1-c7ag
27
vulnerability VCID-x5x1-w7yv-eye9
28
vulnerability VCID-xw1s-93bu-wuh9
29
vulnerability VCID-y7ds-p5r2-yuhq
30
vulnerability VCID-zeut-9wfp-q7et
31
vulnerability VCID-zkvq-bms4-gfcv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.4
aliases GMS-2019-173
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pmvp-twk2-jqe4
40
url VCID-q52p-xfj8-gygd
vulnerability_id VCID-q52p-xfj8-gygd
summary 
Cross-site Scripting
XSS in TYPO3 CMS Backend.
references
0
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-004/
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-004/
fixed_packages
0
url pkg:composer/typo3/cms@8.7.0
purl pkg:composer/typo3/cms@8.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-3ugj-6m1e-e3hr
2
vulnerability VCID-4eym-e6vt-8fbs
3
vulnerability VCID-6a22-c7x5-sqe2
4
vulnerability VCID-7ch1-q9f4-a7bt
5
vulnerability VCID-7m6u-k5tp-gkhy
6
vulnerability VCID-848u-w88s-5bbe
7
vulnerability VCID-953t-q1cr-zyd6
8
vulnerability VCID-abjx-8v46-d7d8
9
vulnerability VCID-am6s-67bm-77dr
10
vulnerability VCID-bn3p-39sv-6fdg
11
vulnerability VCID-dsqm-9q3e-dudw
12
vulnerability VCID-e564-zdku-9fc6
13
vulnerability VCID-emqq-kwjg-3kfk
14
vulnerability VCID-ev4k-5k1d-2bhu
15
vulnerability VCID-fdnw-2tz5-4fdr
16
vulnerability VCID-fqkx-v8t5-q3h6
17
vulnerability VCID-fut7-bb1f-37g7
18
vulnerability VCID-h7cg-64er-uya9
19
vulnerability VCID-hp99-ncuh-6ugv
20
vulnerability VCID-je4q-svfw-hqda
21
vulnerability VCID-jp1p-rfxa-hyd9
22
vulnerability VCID-jq5y-7h9g-mufa
23
vulnerability VCID-jqe4-8hzb-mfea
24
vulnerability VCID-k5t3-28es-h3ez
25
vulnerability VCID-khpm-e1xb-hydb
26
vulnerability VCID-mctp-nf36-7qdn
27
vulnerability VCID-njsj-bwjq-fyap
28
vulnerability VCID-nney-azbc-pucg
29
vulnerability VCID-p7gd-anw2-1qbz
30
vulnerability VCID-pmvp-twk2-jqe4
31
vulnerability VCID-qv14-m93d-jyd9
32
vulnerability VCID-qxab-9uwr-yqhv
33
vulnerability VCID-rqrw-t2kj-mud8
34
vulnerability VCID-ru6w-m6q6-27gn
35
vulnerability VCID-sdsa-mh76-kqch
36
vulnerability VCID-tgyt-axv1-c7ag
37
vulnerability VCID-u259-2sxq-tbct
38
vulnerability VCID-vq15-t92r-5bhx
39
vulnerability VCID-vw2r-g8yy-eyf4
40
vulnerability VCID-w1wb-mq2y-dfca
41
vulnerability VCID-wy45-2gmr-fkfg
42
vulnerability VCID-x5x1-w7yv-eye9
43
vulnerability VCID-xw1s-93bu-wuh9
44
vulnerability VCID-y7ds-p5r2-yuhq
45
vulnerability VCID-yz6t-ge1y-qfgr
46
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.0
aliases GMS-2017-350
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-q52p-xfj8-gygd
41
url VCID-qv14-m93d-jyd9
vulnerability_id VCID-qv14-m93d-jyd9
summary 
Cross-site Scripting
TYPO3 allows XSS.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-12748
reference_id
reference_type
scores
0
value 0.00301
scoring_system epss
scoring_elements 0.53716
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-12748
1
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2019-12748.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2019-12748.yaml
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2019-12748.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2019-12748.yaml
3
reference_url https://github.com/TYPO3-CMS/core
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core
4
reference_url https://typo3.org/cms/release-news/typo3-8-release-notes
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/cms/release-news/typo3-8-release-notes
5
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-015
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2019-015
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-12748
reference_id CVE-2019-12748
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-12748
fixed_packages
0
url pkg:composer/typo3/cms@8.7.27
purl pkg:composer/typo3/cms@8.7.27
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-848u-w88s-5bbe
2
vulnerability VCID-ev4k-5k1d-2bhu
3
vulnerability VCID-fqkx-v8t5-q3h6
4
vulnerability VCID-jp1p-rfxa-hyd9
5
vulnerability VCID-p7gd-anw2-1qbz
6
vulnerability VCID-rqrw-t2kj-mud8
7
vulnerability VCID-tgyt-axv1-c7ag
8
vulnerability VCID-xw1s-93bu-wuh9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.27
1
url pkg:composer/typo3/cms@9.5.8
purl pkg:composer/typo3/cms@9.5.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1sfk-z8py-ykb8
2
vulnerability VCID-4an7-9ph4-mkd4
3
vulnerability VCID-6mnf-2fcw-dqgp
4
vulnerability VCID-848u-w88s-5bbe
5
vulnerability VCID-8w4e-d49b-nbg8
6
vulnerability VCID-bbh5-rss8-bfct
7
vulnerability VCID-e6zr-4bgg-kkh5
8
vulnerability VCID-ev4k-5k1d-2bhu
9
vulnerability VCID-fqkx-v8t5-q3h6
10
vulnerability VCID-jp1p-rfxa-hyd9
11
vulnerability VCID-n1gz-y615-cbbk
12
vulnerability VCID-p7gd-anw2-1qbz
13
vulnerability VCID-rqrw-t2kj-mud8
14
vulnerability VCID-tgyt-axv1-c7ag
15
vulnerability VCID-xw1s-93bu-wuh9
16
vulnerability VCID-zkvq-bms4-gfcv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.8
aliases CVE-2019-12748, GHSA-r6fv-56gp-j3r4
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qv14-m93d-jyd9
42
url VCID-qxab-9uwr-yqhv
vulnerability_id VCID-qxab-9uwr-yqhv
summary 
Cross-site Scripting
CKEditor allows user-assisted XSS involving a source-mode paste.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-17960
reference_id
reference_type
scores
0
value 0.02024
scoring_system epss
scoring_elements 0.84092
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-17960
1
reference_url https://ckeditor.com/blog/CKEditor-4.11-with-emoji-dropdown-and-auto-link-on-typing-released
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://ckeditor.com/blog/CKEditor-4.11-with-emoji-dropdown-and-auto-link-on-typing-released
2
reference_url https://ckeditor.com/blog/CKEditor-4.11-with-emoji-dropdown-and-auto-link-on-typing-released/
reference_id
reference_type
scores
url https://ckeditor.com/blog/CKEditor-4.11-with-emoji-dropdown-and-auto-link-on-typing-released/
3
reference_url https://ckeditor.com/cke4/release/CKEditor-4.11.0
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://ckeditor.com/cke4/release/CKEditor-4.11.0
4
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-005
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2018-005
5
reference_url https://web.archive.org/web/20200227030123/http://www.securityfocus.com/bid/109205
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20200227030123/http://www.securityfocus.com/bid/109205
6
reference_url https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
7
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1015217
reference_id 1015217
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1015217
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-17960
reference_id CVE-2018-17960
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-17960
9
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2018-17960.yaml
reference_id CVE-2018-17960.YAML
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2018-17960.yaml
10
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2018-17960.yaml
reference_id CVE-2018-17960.YAML
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2018-17960.yaml
11
reference_url https://github.com/advisories/GHSA-g68x-vvqq-pvw3
reference_id GHSA-g68x-vvqq-pvw3
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-g68x-vvqq-pvw3
fixed_packages
0
url pkg:composer/typo3/cms@8.7.21
purl pkg:composer/typo3/cms@8.7.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-4eym-e6vt-8fbs
2
vulnerability VCID-7m6u-k5tp-gkhy
3
vulnerability VCID-848u-w88s-5bbe
4
vulnerability VCID-am6s-67bm-77dr
5
vulnerability VCID-bn3p-39sv-6fdg
6
vulnerability VCID-ev4k-5k1d-2bhu
7
vulnerability VCID-fqkx-v8t5-q3h6
8
vulnerability VCID-fut7-bb1f-37g7
9
vulnerability VCID-jp1p-rfxa-hyd9
10
vulnerability VCID-k5t3-28es-h3ez
11
vulnerability VCID-khpm-e1xb-hydb
12
vulnerability VCID-nney-azbc-pucg
13
vulnerability VCID-p7gd-anw2-1qbz
14
vulnerability VCID-pmvp-twk2-jqe4
15
vulnerability VCID-qv14-m93d-jyd9
16
vulnerability VCID-rqrw-t2kj-mud8
17
vulnerability VCID-ru6w-m6q6-27gn
18
vulnerability VCID-sdsa-mh76-kqch
19
vulnerability VCID-tgyt-axv1-c7ag
20
vulnerability VCID-u259-2sxq-tbct
21
vulnerability VCID-vw2r-g8yy-eyf4
22
vulnerability VCID-x5x1-w7yv-eye9
23
vulnerability VCID-xw1s-93bu-wuh9
24
vulnerability VCID-y7ds-p5r2-yuhq
25
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.21
1
url pkg:composer/typo3/cms@9.5.2
purl pkg:composer/typo3/cms@9.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1sfk-z8py-ykb8
2
vulnerability VCID-3ye6-vqje-abh4
3
vulnerability VCID-4an7-9ph4-mkd4
4
vulnerability VCID-4eym-e6vt-8fbs
5
vulnerability VCID-4jck-w9ct-budk
6
vulnerability VCID-6mnf-2fcw-dqgp
7
vulnerability VCID-7m6u-k5tp-gkhy
8
vulnerability VCID-7xv1-78u7-xufp
9
vulnerability VCID-848u-w88s-5bbe
10
vulnerability VCID-8w4e-d49b-nbg8
11
vulnerability VCID-9adx-p876-kyb5
12
vulnerability VCID-am6s-67bm-77dr
13
vulnerability VCID-bbh5-rss8-bfct
14
vulnerability VCID-cvk2-93hm-gkhx
15
vulnerability VCID-e6zr-4bgg-kkh5
16
vulnerability VCID-ev4k-5k1d-2bhu
17
vulnerability VCID-fqkx-v8t5-q3h6
18
vulnerability VCID-fut7-bb1f-37g7
19
vulnerability VCID-jp1p-rfxa-hyd9
20
vulnerability VCID-k5t3-28es-h3ez
21
vulnerability VCID-khpm-e1xb-hydb
22
vulnerability VCID-n1gz-y615-cbbk
23
vulnerability VCID-nney-azbc-pucg
24
vulnerability VCID-p7gd-anw2-1qbz
25
vulnerability VCID-pmvp-twk2-jqe4
26
vulnerability VCID-qv14-m93d-jyd9
27
vulnerability VCID-rqrw-t2kj-mud8
28
vulnerability VCID-ru6w-m6q6-27gn
29
vulnerability VCID-sdsa-mh76-kqch
30
vulnerability VCID-tgyt-axv1-c7ag
31
vulnerability VCID-u259-2sxq-tbct
32
vulnerability VCID-vw2r-g8yy-eyf4
33
vulnerability VCID-x5x1-w7yv-eye9
34
vulnerability VCID-xw1s-93bu-wuh9
35
vulnerability VCID-y7ds-p5r2-yuhq
36
vulnerability VCID-zeut-9wfp-q7et
37
vulnerability VCID-zkvq-bms4-gfcv
38
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.2
aliases CVE-2018-17960, GHSA-g68x-vvqq-pvw3
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qxab-9uwr-yqhv
43
url VCID-rqrw-t2kj-mud8
vulnerability_id VCID-rqrw-t2kj-mud8
summary 
SQL Injection
Because escaping of user-submitted content is mishandled, the class QueryGenerator is vulnerable to SQL injection. Exploitation requires having the system extension `ext:lowlevel` installed, and a valid backend user who has administrator privileges.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-19850
reference_id
reference_type
scores
0
value 0.00284
scoring_system epss
scoring_elements 0.52069
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-19850
1
reference_url https://github.com/TYPO3/typo3
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3
2
reference_url https://review.typo3.org/q/%2522Resolves:+%252389452%2522+topic:security
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://review.typo3.org/q/%2522Resolves:+%252389452%2522+topic:security
3
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-025
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2019-025
4
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-025/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-025/
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-19850
reference_id CVE-2019-19850
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-19850
fixed_packages
0
url pkg:composer/typo3/cms@8.7.30
purl pkg:composer/typo3/cms@8.7.30
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-848u-w88s-5bbe
2
vulnerability VCID-ev4k-5k1d-2bhu
3
vulnerability VCID-fqkx-v8t5-q3h6
4
vulnerability VCID-jp1p-rfxa-hyd9
5
vulnerability VCID-tgyt-axv1-c7ag
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.30
1
url pkg:composer/typo3/cms@9.5.12
purl pkg:composer/typo3/cms@9.5.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1sfk-z8py-ykb8
2
vulnerability VCID-4an7-9ph4-mkd4
3
vulnerability VCID-6mnf-2fcw-dqgp
4
vulnerability VCID-848u-w88s-5bbe
5
vulnerability VCID-8w4e-d49b-nbg8
6
vulnerability VCID-bbh5-rss8-bfct
7
vulnerability VCID-bcbd-zzet-mff6
8
vulnerability VCID-e6zr-4bgg-kkh5
9
vulnerability VCID-ev4k-5k1d-2bhu
10
vulnerability VCID-fqkx-v8t5-q3h6
11
vulnerability VCID-jp1p-rfxa-hyd9
12
vulnerability VCID-n1gz-y615-cbbk
13
vulnerability VCID-tgyt-axv1-c7ag
14
vulnerability VCID-zkvq-bms4-gfcv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.12
2
url pkg:composer/typo3/cms@10.2.2
purl pkg:composer/typo3/cms@10.2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1sfk-z8py-ykb8
2
vulnerability VCID-2tz2-8qdm-2kcv
3
vulnerability VCID-4an7-9ph4-mkd4
4
vulnerability VCID-6mnf-2fcw-dqgp
5
vulnerability VCID-6urp-p9mn-cffv
6
vulnerability VCID-848u-w88s-5bbe
7
vulnerability VCID-8w4e-d49b-nbg8
8
vulnerability VCID-bbh5-rss8-bfct
9
vulnerability VCID-bcbd-zzet-mff6
10
vulnerability VCID-c46m-ht19-ybc4
11
vulnerability VCID-e6zr-4bgg-kkh5
12
vulnerability VCID-ev4k-5k1d-2bhu
13
vulnerability VCID-fqkx-v8t5-q3h6
14
vulnerability VCID-jp1p-rfxa-hyd9
15
vulnerability VCID-n1gz-y615-cbbk
16
vulnerability VCID-r3az-g422-gqf9
17
vulnerability VCID-tgyt-axv1-c7ag
18
vulnerability VCID-zkvq-bms4-gfcv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@10.2.2
aliases CVE-2019-19850, GHSA-59pj-7mjh-4465
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-rqrw-t2kj-mud8
44
url VCID-ru6w-m6q6-27gn
vulnerability_id VCID-ru6w-m6q6-27gn
summary 
Cross-site Scripting
Cross-Site Scripting in Fluid Engine.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-013/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-013/
fixed_packages
0
url pkg:composer/typo3/cms@8.7.25
purl pkg:composer/typo3/cms@8.7.25
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-4eym-e6vt-8fbs
2
vulnerability VCID-7m6u-k5tp-gkhy
3
vulnerability VCID-848u-w88s-5bbe
4
vulnerability VCID-cbmm-1b2k-8qaz
5
vulnerability VCID-ev4k-5k1d-2bhu
6
vulnerability VCID-fqkx-v8t5-q3h6
7
vulnerability VCID-fut7-bb1f-37g7
8
vulnerability VCID-jp1p-rfxa-hyd9
9
vulnerability VCID-nney-azbc-pucg
10
vulnerability VCID-p7gd-anw2-1qbz
11
vulnerability VCID-qv14-m93d-jyd9
12
vulnerability VCID-rqrw-t2kj-mud8
13
vulnerability VCID-tgyt-axv1-c7ag
14
vulnerability VCID-xw1s-93bu-wuh9
15
vulnerability VCID-y7ds-p5r2-yuhq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.25
1
url pkg:composer/typo3/cms@9.5.6
purl pkg:composer/typo3/cms@9.5.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1sfk-z8py-ykb8
2
vulnerability VCID-4an7-9ph4-mkd4
3
vulnerability VCID-4eym-e6vt-8fbs
4
vulnerability VCID-6mnf-2fcw-dqgp
5
vulnerability VCID-7m6u-k5tp-gkhy
6
vulnerability VCID-7xv1-78u7-xufp
7
vulnerability VCID-848u-w88s-5bbe
8
vulnerability VCID-8w4e-d49b-nbg8
9
vulnerability VCID-bbh5-rss8-bfct
10
vulnerability VCID-cbmm-1b2k-8qaz
11
vulnerability VCID-cvk2-93hm-gkhx
12
vulnerability VCID-e6zr-4bgg-kkh5
13
vulnerability VCID-ev4k-5k1d-2bhu
14
vulnerability VCID-fqkx-v8t5-q3h6
15
vulnerability VCID-fut7-bb1f-37g7
16
vulnerability VCID-jp1p-rfxa-hyd9
17
vulnerability VCID-n1gz-y615-cbbk
18
vulnerability VCID-nney-azbc-pucg
19
vulnerability VCID-p7gd-anw2-1qbz
20
vulnerability VCID-qv14-m93d-jyd9
21
vulnerability VCID-rqrw-t2kj-mud8
22
vulnerability VCID-tgyt-axv1-c7ag
23
vulnerability VCID-xw1s-93bu-wuh9
24
vulnerability VCID-y7ds-p5r2-yuhq
25
vulnerability VCID-zeut-9wfp-q7et
26
vulnerability VCID-zkvq-bms4-gfcv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.6
aliases GMS-2019-180
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ru6w-m6q6-27gn
45
url VCID-sdsa-mh76-kqch
vulnerability_id VCID-sdsa-mh76-kqch
summary Security Misconfiguration in User Session Handling.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-011/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-011/
fixed_packages
0
url pkg:composer/typo3/cms@8.7.25
purl pkg:composer/typo3/cms@8.7.25
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-4eym-e6vt-8fbs
2
vulnerability VCID-7m6u-k5tp-gkhy
3
vulnerability VCID-848u-w88s-5bbe
4
vulnerability VCID-cbmm-1b2k-8qaz
5
vulnerability VCID-ev4k-5k1d-2bhu
6
vulnerability VCID-fqkx-v8t5-q3h6
7
vulnerability VCID-fut7-bb1f-37g7
8
vulnerability VCID-jp1p-rfxa-hyd9
9
vulnerability VCID-nney-azbc-pucg
10
vulnerability VCID-p7gd-anw2-1qbz
11
vulnerability VCID-qv14-m93d-jyd9
12
vulnerability VCID-rqrw-t2kj-mud8
13
vulnerability VCID-tgyt-axv1-c7ag
14
vulnerability VCID-xw1s-93bu-wuh9
15
vulnerability VCID-y7ds-p5r2-yuhq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.25
1
url pkg:composer/typo3/cms@9.5.6
purl pkg:composer/typo3/cms@9.5.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1sfk-z8py-ykb8
2
vulnerability VCID-4an7-9ph4-mkd4
3
vulnerability VCID-4eym-e6vt-8fbs
4
vulnerability VCID-6mnf-2fcw-dqgp
5
vulnerability VCID-7m6u-k5tp-gkhy
6
vulnerability VCID-7xv1-78u7-xufp
7
vulnerability VCID-848u-w88s-5bbe
8
vulnerability VCID-8w4e-d49b-nbg8
9
vulnerability VCID-bbh5-rss8-bfct
10
vulnerability VCID-cbmm-1b2k-8qaz
11
vulnerability VCID-cvk2-93hm-gkhx
12
vulnerability VCID-e6zr-4bgg-kkh5
13
vulnerability VCID-ev4k-5k1d-2bhu
14
vulnerability VCID-fqkx-v8t5-q3h6
15
vulnerability VCID-fut7-bb1f-37g7
16
vulnerability VCID-jp1p-rfxa-hyd9
17
vulnerability VCID-n1gz-y615-cbbk
18
vulnerability VCID-nney-azbc-pucg
19
vulnerability VCID-p7gd-anw2-1qbz
20
vulnerability VCID-qv14-m93d-jyd9
21
vulnerability VCID-rqrw-t2kj-mud8
22
vulnerability VCID-tgyt-axv1-c7ag
23
vulnerability VCID-xw1s-93bu-wuh9
24
vulnerability VCID-y7ds-p5r2-yuhq
25
vulnerability VCID-zeut-9wfp-q7et
26
vulnerability VCID-zkvq-bms4-gfcv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.6
aliases GMS-2019-181
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-sdsa-mh76-kqch
46
url VCID-sy7r-d6pv-yba9
vulnerability_id VCID-sy7r-d6pv-yba9
summary 
Code Injection
Arbitrary Code Execution in TYPO3 CMS.
references
0
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-007/
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-007/
fixed_packages
0
url pkg:composer/typo3/cms@8.7.0
purl pkg:composer/typo3/cms@8.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-3ugj-6m1e-e3hr
2
vulnerability VCID-4eym-e6vt-8fbs
3
vulnerability VCID-6a22-c7x5-sqe2
4
vulnerability VCID-7ch1-q9f4-a7bt
5
vulnerability VCID-7m6u-k5tp-gkhy
6
vulnerability VCID-848u-w88s-5bbe
7
vulnerability VCID-953t-q1cr-zyd6
8
vulnerability VCID-abjx-8v46-d7d8
9
vulnerability VCID-am6s-67bm-77dr
10
vulnerability VCID-bn3p-39sv-6fdg
11
vulnerability VCID-dsqm-9q3e-dudw
12
vulnerability VCID-e564-zdku-9fc6
13
vulnerability VCID-emqq-kwjg-3kfk
14
vulnerability VCID-ev4k-5k1d-2bhu
15
vulnerability VCID-fdnw-2tz5-4fdr
16
vulnerability VCID-fqkx-v8t5-q3h6
17
vulnerability VCID-fut7-bb1f-37g7
18
vulnerability VCID-h7cg-64er-uya9
19
vulnerability VCID-hp99-ncuh-6ugv
20
vulnerability VCID-je4q-svfw-hqda
21
vulnerability VCID-jp1p-rfxa-hyd9
22
vulnerability VCID-jq5y-7h9g-mufa
23
vulnerability VCID-jqe4-8hzb-mfea
24
vulnerability VCID-k5t3-28es-h3ez
25
vulnerability VCID-khpm-e1xb-hydb
26
vulnerability VCID-mctp-nf36-7qdn
27
vulnerability VCID-njsj-bwjq-fyap
28
vulnerability VCID-nney-azbc-pucg
29
vulnerability VCID-p7gd-anw2-1qbz
30
vulnerability VCID-pmvp-twk2-jqe4
31
vulnerability VCID-qv14-m93d-jyd9
32
vulnerability VCID-qxab-9uwr-yqhv
33
vulnerability VCID-rqrw-t2kj-mud8
34
vulnerability VCID-ru6w-m6q6-27gn
35
vulnerability VCID-sdsa-mh76-kqch
36
vulnerability VCID-tgyt-axv1-c7ag
37
vulnerability VCID-u259-2sxq-tbct
38
vulnerability VCID-vq15-t92r-5bhx
39
vulnerability VCID-vw2r-g8yy-eyf4
40
vulnerability VCID-w1wb-mq2y-dfca
41
vulnerability VCID-wy45-2gmr-fkfg
42
vulnerability VCID-x5x1-w7yv-eye9
43
vulnerability VCID-xw1s-93bu-wuh9
44
vulnerability VCID-y7ds-p5r2-yuhq
45
vulnerability VCID-yz6t-ge1y-qfgr
46
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.0
aliases GMS-2017-353
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-sy7r-d6pv-yba9
47
url VCID-u259-2sxq-tbct
vulnerability_id VCID-u259-2sxq-tbct
summary 
Cross-site Scripting
Cross-Site Scripting in Fluid `ViewHelpers`.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-005/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-005/
fixed_packages
0
url pkg:composer/typo3/cms@8.7.23
purl pkg:composer/typo3/cms@8.7.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-4eym-e6vt-8fbs
2
vulnerability VCID-7m6u-k5tp-gkhy
3
vulnerability VCID-848u-w88s-5bbe
4
vulnerability VCID-ev4k-5k1d-2bhu
5
vulnerability VCID-fqkx-v8t5-q3h6
6
vulnerability VCID-fut7-bb1f-37g7
7
vulnerability VCID-jp1p-rfxa-hyd9
8
vulnerability VCID-k5t3-28es-h3ez
9
vulnerability VCID-nney-azbc-pucg
10
vulnerability VCID-p7gd-anw2-1qbz
11
vulnerability VCID-qv14-m93d-jyd9
12
vulnerability VCID-rqrw-t2kj-mud8
13
vulnerability VCID-ru6w-m6q6-27gn
14
vulnerability VCID-sdsa-mh76-kqch
15
vulnerability VCID-tgyt-axv1-c7ag
16
vulnerability VCID-x5x1-w7yv-eye9
17
vulnerability VCID-xw1s-93bu-wuh9
18
vulnerability VCID-y7ds-p5r2-yuhq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.23
1
url pkg:composer/typo3/cms@9.5.4
purl pkg:composer/typo3/cms@9.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1sfk-z8py-ykb8
2
vulnerability VCID-3ye6-vqje-abh4
3
vulnerability VCID-4an7-9ph4-mkd4
4
vulnerability VCID-4eym-e6vt-8fbs
5
vulnerability VCID-6mnf-2fcw-dqgp
6
vulnerability VCID-7m6u-k5tp-gkhy
7
vulnerability VCID-7xv1-78u7-xufp
8
vulnerability VCID-848u-w88s-5bbe
9
vulnerability VCID-8w4e-d49b-nbg8
10
vulnerability VCID-9adx-p876-kyb5
11
vulnerability VCID-bbh5-rss8-bfct
12
vulnerability VCID-cvk2-93hm-gkhx
13
vulnerability VCID-e6zr-4bgg-kkh5
14
vulnerability VCID-ev4k-5k1d-2bhu
15
vulnerability VCID-fqkx-v8t5-q3h6
16
vulnerability VCID-fut7-bb1f-37g7
17
vulnerability VCID-jp1p-rfxa-hyd9
18
vulnerability VCID-k5t3-28es-h3ez
19
vulnerability VCID-n1gz-y615-cbbk
20
vulnerability VCID-nney-azbc-pucg
21
vulnerability VCID-p7gd-anw2-1qbz
22
vulnerability VCID-qv14-m93d-jyd9
23
vulnerability VCID-rqrw-t2kj-mud8
24
vulnerability VCID-ru6w-m6q6-27gn
25
vulnerability VCID-sdsa-mh76-kqch
26
vulnerability VCID-tgyt-axv1-c7ag
27
vulnerability VCID-x5x1-w7yv-eye9
28
vulnerability VCID-xw1s-93bu-wuh9
29
vulnerability VCID-y7ds-p5r2-yuhq
30
vulnerability VCID-zeut-9wfp-q7et
31
vulnerability VCID-zkvq-bms4-gfcv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.4
aliases GMS-2019-175
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-u259-2sxq-tbct
48
url VCID-vq15-t92r-5bhx
vulnerability_id VCID-vq15-t92r-5bhx
summary 
Cross-site Scripting
The page module in TYPO3 is vulnerable to XSS via `$GLOBALS['TYPO3_CONF_VARS']['SYS']['sitename']`, as demonstrated by an admin entering a crafted site name during the installation process.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-6905
reference_id
reference_type
scores
0
value 0.02274
scoring_system epss
scoring_elements 0.8496
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-6905
1
reference_url https://forge.typo3.org/issues/84191
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://forge.typo3.org/issues/84191
2
reference_url https://github.com/pradeepjairamani/TYPO3-XSS-POC
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pradeepjairamani/TYPO3-XSS-POC
3
reference_url https://github.com/TYPO3/typo3/commit/d2c0ea7db3b31a796a82f9d39f77f9983beb7c35
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/d2c0ea7db3b31a796a82f9d39f77f9983beb7c35
4
reference_url http://www.securitytracker.com/id/1040755
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.securitytracker.com/id/1040755
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-6905
reference_id CVE-2018-6905
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-6905
fixed_packages
0
url pkg:composer/typo3/cms@8.7.11
purl pkg:composer/typo3/cms@8.7.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-3ugj-6m1e-e3hr
2
vulnerability VCID-4eym-e6vt-8fbs
3
vulnerability VCID-7ch1-q9f4-a7bt
4
vulnerability VCID-7m6u-k5tp-gkhy
5
vulnerability VCID-848u-w88s-5bbe
6
vulnerability VCID-953t-q1cr-zyd6
7
vulnerability VCID-abjx-8v46-d7d8
8
vulnerability VCID-am6s-67bm-77dr
9
vulnerability VCID-bn3p-39sv-6fdg
10
vulnerability VCID-dsqm-9q3e-dudw
11
vulnerability VCID-emqq-kwjg-3kfk
12
vulnerability VCID-ev4k-5k1d-2bhu
13
vulnerability VCID-fdnw-2tz5-4fdr
14
vulnerability VCID-fqkx-v8t5-q3h6
15
vulnerability VCID-fut7-bb1f-37g7
16
vulnerability VCID-hp99-ncuh-6ugv
17
vulnerability VCID-je4q-svfw-hqda
18
vulnerability VCID-jp1p-rfxa-hyd9
19
vulnerability VCID-jq5y-7h9g-mufa
20
vulnerability VCID-k5t3-28es-h3ez
21
vulnerability VCID-khpm-e1xb-hydb
22
vulnerability VCID-njsj-bwjq-fyap
23
vulnerability VCID-nney-azbc-pucg
24
vulnerability VCID-p7gd-anw2-1qbz
25
vulnerability VCID-pmvp-twk2-jqe4
26
vulnerability VCID-qv14-m93d-jyd9
27
vulnerability VCID-qxab-9uwr-yqhv
28
vulnerability VCID-rqrw-t2kj-mud8
29
vulnerability VCID-ru6w-m6q6-27gn
30
vulnerability VCID-sdsa-mh76-kqch
31
vulnerability VCID-tgyt-axv1-c7ag
32
vulnerability VCID-u259-2sxq-tbct
33
vulnerability VCID-vw2r-g8yy-eyf4
34
vulnerability VCID-w1wb-mq2y-dfca
35
vulnerability VCID-x5x1-w7yv-eye9
36
vulnerability VCID-xw1s-93bu-wuh9
37
vulnerability VCID-y7ds-p5r2-yuhq
38
vulnerability VCID-yz6t-ge1y-qfgr
39
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.11
1
url pkg:composer/typo3/cms@9.1.0
purl pkg:composer/typo3/cms@9.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1sfk-z8py-ykb8
2
vulnerability VCID-3ugj-6m1e-e3hr
3
vulnerability VCID-3ye6-vqje-abh4
4
vulnerability VCID-4an7-9ph4-mkd4
5
vulnerability VCID-4eym-e6vt-8fbs
6
vulnerability VCID-4jck-w9ct-budk
7
vulnerability VCID-6mnf-2fcw-dqgp
8
vulnerability VCID-7ch1-q9f4-a7bt
9
vulnerability VCID-7m6u-k5tp-gkhy
10
vulnerability VCID-7xv1-78u7-xufp
11
vulnerability VCID-848u-w88s-5bbe
12
vulnerability VCID-8w4e-d49b-nbg8
13
vulnerability VCID-953t-q1cr-zyd6
14
vulnerability VCID-9adx-p876-kyb5
15
vulnerability VCID-abjx-8v46-d7d8
16
vulnerability VCID-am6s-67bm-77dr
17
vulnerability VCID-bbh5-rss8-bfct
18
vulnerability VCID-cvk2-93hm-gkhx
19
vulnerability VCID-dsqm-9q3e-dudw
20
vulnerability VCID-e6zr-4bgg-kkh5
21
vulnerability VCID-emqq-kwjg-3kfk
22
vulnerability VCID-ev4k-5k1d-2bhu
23
vulnerability VCID-fqkx-v8t5-q3h6
24
vulnerability VCID-fut7-bb1f-37g7
25
vulnerability VCID-hp99-ncuh-6ugv
26
vulnerability VCID-je4q-svfw-hqda
27
vulnerability VCID-jp1p-rfxa-hyd9
28
vulnerability VCID-jq5y-7h9g-mufa
29
vulnerability VCID-k5t3-28es-h3ez
30
vulnerability VCID-khpm-e1xb-hydb
31
vulnerability VCID-n1gz-y615-cbbk
32
vulnerability VCID-njsj-bwjq-fyap
33
vulnerability VCID-nney-azbc-pucg
34
vulnerability VCID-p7gd-anw2-1qbz
35
vulnerability VCID-pmvp-twk2-jqe4
36
vulnerability VCID-qv14-m93d-jyd9
37
vulnerability VCID-qxab-9uwr-yqhv
38
vulnerability VCID-rqrw-t2kj-mud8
39
vulnerability VCID-ru6w-m6q6-27gn
40
vulnerability VCID-sdsa-mh76-kqch
41
vulnerability VCID-tgyt-axv1-c7ag
42
vulnerability VCID-u259-2sxq-tbct
43
vulnerability VCID-vw2r-g8yy-eyf4
44
vulnerability VCID-w1wb-mq2y-dfca
45
vulnerability VCID-x5x1-w7yv-eye9
46
vulnerability VCID-xw1s-93bu-wuh9
47
vulnerability VCID-y7ds-p5r2-yuhq
48
vulnerability VCID-yz6t-ge1y-qfgr
49
vulnerability VCID-zeut-9wfp-q7et
50
vulnerability VCID-zkvq-bms4-gfcv
51
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.1.0
2
url pkg:composer/typo3/cms@9.2.0
purl pkg:composer/typo3/cms@9.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1sfk-z8py-ykb8
2
vulnerability VCID-3ugj-6m1e-e3hr
3
vulnerability VCID-3ye6-vqje-abh4
4
vulnerability VCID-4an7-9ph4-mkd4
5
vulnerability VCID-4eym-e6vt-8fbs
6
vulnerability VCID-4jck-w9ct-budk
7
vulnerability VCID-6mnf-2fcw-dqgp
8
vulnerability VCID-7ch1-q9f4-a7bt
9
vulnerability VCID-7m6u-k5tp-gkhy
10
vulnerability VCID-7xv1-78u7-xufp
11
vulnerability VCID-848u-w88s-5bbe
12
vulnerability VCID-8w4e-d49b-nbg8
13
vulnerability VCID-953t-q1cr-zyd6
14
vulnerability VCID-9adx-p876-kyb5
15
vulnerability VCID-abjx-8v46-d7d8
16
vulnerability VCID-am6s-67bm-77dr
17
vulnerability VCID-bbh5-rss8-bfct
18
vulnerability VCID-cvk2-93hm-gkhx
19
vulnerability VCID-dsqm-9q3e-dudw
20
vulnerability VCID-e6zr-4bgg-kkh5
21
vulnerability VCID-emqq-kwjg-3kfk
22
vulnerability VCID-ev4k-5k1d-2bhu
23
vulnerability VCID-fqkx-v8t5-q3h6
24
vulnerability VCID-fut7-bb1f-37g7
25
vulnerability VCID-hp99-ncuh-6ugv
26
vulnerability VCID-je4q-svfw-hqda
27
vulnerability VCID-jp1p-rfxa-hyd9
28
vulnerability VCID-jq5y-7h9g-mufa
29
vulnerability VCID-k5t3-28es-h3ez
30
vulnerability VCID-khpm-e1xb-hydb
31
vulnerability VCID-n1gz-y615-cbbk
32
vulnerability VCID-njsj-bwjq-fyap
33
vulnerability VCID-nney-azbc-pucg
34
vulnerability VCID-p7gd-anw2-1qbz
35
vulnerability VCID-pmvp-twk2-jqe4
36
vulnerability VCID-qv14-m93d-jyd9
37
vulnerability VCID-qxab-9uwr-yqhv
38
vulnerability VCID-rqrw-t2kj-mud8
39
vulnerability VCID-ru6w-m6q6-27gn
40
vulnerability VCID-sdsa-mh76-kqch
41
vulnerability VCID-tgyt-axv1-c7ag
42
vulnerability VCID-u259-2sxq-tbct
43
vulnerability VCID-vw2r-g8yy-eyf4
44
vulnerability VCID-w1wb-mq2y-dfca
45
vulnerability VCID-x5x1-w7yv-eye9
46
vulnerability VCID-xw1s-93bu-wuh9
47
vulnerability VCID-y7ds-p5r2-yuhq
48
vulnerability VCID-yz6t-ge1y-qfgr
49
vulnerability VCID-zeut-9wfp-q7et
50
vulnerability VCID-zkvq-bms4-gfcv
51
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.2.0
aliases CVE-2018-6905, GHSA-3w22-wrwx-2r75
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-vq15-t92r-5bhx
49
url VCID-vw2r-g8yy-eyf4
vulnerability_id VCID-vw2r-g8yy-eyf4
summary 
Code Injection
Arbitrary Code Execution via File List Module.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-008/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-008/
fixed_packages
0
url pkg:composer/typo3/cms@8.7.23
purl pkg:composer/typo3/cms@8.7.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-4eym-e6vt-8fbs
2
vulnerability VCID-7m6u-k5tp-gkhy
3
vulnerability VCID-848u-w88s-5bbe
4
vulnerability VCID-ev4k-5k1d-2bhu
5
vulnerability VCID-fqkx-v8t5-q3h6
6
vulnerability VCID-fut7-bb1f-37g7
7
vulnerability VCID-jp1p-rfxa-hyd9
8
vulnerability VCID-k5t3-28es-h3ez
9
vulnerability VCID-nney-azbc-pucg
10
vulnerability VCID-p7gd-anw2-1qbz
11
vulnerability VCID-qv14-m93d-jyd9
12
vulnerability VCID-rqrw-t2kj-mud8
13
vulnerability VCID-ru6w-m6q6-27gn
14
vulnerability VCID-sdsa-mh76-kqch
15
vulnerability VCID-tgyt-axv1-c7ag
16
vulnerability VCID-x5x1-w7yv-eye9
17
vulnerability VCID-xw1s-93bu-wuh9
18
vulnerability VCID-y7ds-p5r2-yuhq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.23
1
url pkg:composer/typo3/cms@9.5.4
purl pkg:composer/typo3/cms@9.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1sfk-z8py-ykb8
2
vulnerability VCID-3ye6-vqje-abh4
3
vulnerability VCID-4an7-9ph4-mkd4
4
vulnerability VCID-4eym-e6vt-8fbs
5
vulnerability VCID-6mnf-2fcw-dqgp
6
vulnerability VCID-7m6u-k5tp-gkhy
7
vulnerability VCID-7xv1-78u7-xufp
8
vulnerability VCID-848u-w88s-5bbe
9
vulnerability VCID-8w4e-d49b-nbg8
10
vulnerability VCID-9adx-p876-kyb5
11
vulnerability VCID-bbh5-rss8-bfct
12
vulnerability VCID-cvk2-93hm-gkhx
13
vulnerability VCID-e6zr-4bgg-kkh5
14
vulnerability VCID-ev4k-5k1d-2bhu
15
vulnerability VCID-fqkx-v8t5-q3h6
16
vulnerability VCID-fut7-bb1f-37g7
17
vulnerability VCID-jp1p-rfxa-hyd9
18
vulnerability VCID-k5t3-28es-h3ez
19
vulnerability VCID-n1gz-y615-cbbk
20
vulnerability VCID-nney-azbc-pucg
21
vulnerability VCID-p7gd-anw2-1qbz
22
vulnerability VCID-qv14-m93d-jyd9
23
vulnerability VCID-rqrw-t2kj-mud8
24
vulnerability VCID-ru6w-m6q6-27gn
25
vulnerability VCID-sdsa-mh76-kqch
26
vulnerability VCID-tgyt-axv1-c7ag
27
vulnerability VCID-x5x1-w7yv-eye9
28
vulnerability VCID-xw1s-93bu-wuh9
29
vulnerability VCID-y7ds-p5r2-yuhq
30
vulnerability VCID-zeut-9wfp-q7et
31
vulnerability VCID-zkvq-bms4-gfcv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.4
aliases GMS-2019-178
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-vw2r-g8yy-eyf4
50
url VCID-wy45-2gmr-fkfg
vulnerability_id VCID-wy45-2gmr-fkfg
summary 
XSS Vulnerability
Failing to properly encode user input, backend forms are vulnerable to Cross-Site Scripting. A valid backend user account is needed to exploit this vulnerability.
references
0
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-004/
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-004/
fixed_packages
0
url pkg:composer/typo3/cms@8.7.5
purl pkg:composer/typo3/cms@8.7.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-3ugj-6m1e-e3hr
2
vulnerability VCID-4eym-e6vt-8fbs
3
vulnerability VCID-7ch1-q9f4-a7bt
4
vulnerability VCID-7m6u-k5tp-gkhy
5
vulnerability VCID-848u-w88s-5bbe
6
vulnerability VCID-953t-q1cr-zyd6
7
vulnerability VCID-abjx-8v46-d7d8
8
vulnerability VCID-am6s-67bm-77dr
9
vulnerability VCID-bn3p-39sv-6fdg
10
vulnerability VCID-dsqm-9q3e-dudw
11
vulnerability VCID-emqq-kwjg-3kfk
12
vulnerability VCID-ev4k-5k1d-2bhu
13
vulnerability VCID-fdnw-2tz5-4fdr
14
vulnerability VCID-fqkx-v8t5-q3h6
15
vulnerability VCID-fut7-bb1f-37g7
16
vulnerability VCID-hp99-ncuh-6ugv
17
vulnerability VCID-je4q-svfw-hqda
18
vulnerability VCID-jp1p-rfxa-hyd9
19
vulnerability VCID-jq5y-7h9g-mufa
20
vulnerability VCID-k5t3-28es-h3ez
21
vulnerability VCID-khpm-e1xb-hydb
22
vulnerability VCID-njsj-bwjq-fyap
23
vulnerability VCID-nney-azbc-pucg
24
vulnerability VCID-p7gd-anw2-1qbz
25
vulnerability VCID-pmvp-twk2-jqe4
26
vulnerability VCID-qv14-m93d-jyd9
27
vulnerability VCID-qxab-9uwr-yqhv
28
vulnerability VCID-rqrw-t2kj-mud8
29
vulnerability VCID-ru6w-m6q6-27gn
30
vulnerability VCID-sdsa-mh76-kqch
31
vulnerability VCID-tgyt-axv1-c7ag
32
vulnerability VCID-u259-2sxq-tbct
33
vulnerability VCID-vq15-t92r-5bhx
34
vulnerability VCID-vw2r-g8yy-eyf4
35
vulnerability VCID-w1wb-mq2y-dfca
36
vulnerability VCID-x5x1-w7yv-eye9
37
vulnerability VCID-xw1s-93bu-wuh9
38
vulnerability VCID-y7ds-p5r2-yuhq
39
vulnerability VCID-yz6t-ge1y-qfgr
40
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.5
aliases TYPO3-CORE-SA-2017-004
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wy45-2gmr-fkfg
51
url VCID-x5x1-w7yv-eye9
vulnerability_id VCID-x5x1-w7yv-eye9
summary 
Code Injection
Possible Arbitrary Code Execution in Image Processing.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-012/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-012/
fixed_packages
0
url pkg:composer/typo3/cms@8.7.25
purl pkg:composer/typo3/cms@8.7.25
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-4eym-e6vt-8fbs
2
vulnerability VCID-7m6u-k5tp-gkhy
3
vulnerability VCID-848u-w88s-5bbe
4
vulnerability VCID-cbmm-1b2k-8qaz
5
vulnerability VCID-ev4k-5k1d-2bhu
6
vulnerability VCID-fqkx-v8t5-q3h6
7
vulnerability VCID-fut7-bb1f-37g7
8
vulnerability VCID-jp1p-rfxa-hyd9
9
vulnerability VCID-nney-azbc-pucg
10
vulnerability VCID-p7gd-anw2-1qbz
11
vulnerability VCID-qv14-m93d-jyd9
12
vulnerability VCID-rqrw-t2kj-mud8
13
vulnerability VCID-tgyt-axv1-c7ag
14
vulnerability VCID-xw1s-93bu-wuh9
15
vulnerability VCID-y7ds-p5r2-yuhq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.25
1
url pkg:composer/typo3/cms@9.5.6
purl pkg:composer/typo3/cms@9.5.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1sfk-z8py-ykb8
2
vulnerability VCID-4an7-9ph4-mkd4
3
vulnerability VCID-4eym-e6vt-8fbs
4
vulnerability VCID-6mnf-2fcw-dqgp
5
vulnerability VCID-7m6u-k5tp-gkhy
6
vulnerability VCID-7xv1-78u7-xufp
7
vulnerability VCID-848u-w88s-5bbe
8
vulnerability VCID-8w4e-d49b-nbg8
9
vulnerability VCID-bbh5-rss8-bfct
10
vulnerability VCID-cbmm-1b2k-8qaz
11
vulnerability VCID-cvk2-93hm-gkhx
12
vulnerability VCID-e6zr-4bgg-kkh5
13
vulnerability VCID-ev4k-5k1d-2bhu
14
vulnerability VCID-fqkx-v8t5-q3h6
15
vulnerability VCID-fut7-bb1f-37g7
16
vulnerability VCID-jp1p-rfxa-hyd9
17
vulnerability VCID-n1gz-y615-cbbk
18
vulnerability VCID-nney-azbc-pucg
19
vulnerability VCID-p7gd-anw2-1qbz
20
vulnerability VCID-qv14-m93d-jyd9
21
vulnerability VCID-rqrw-t2kj-mud8
22
vulnerability VCID-tgyt-axv1-c7ag
23
vulnerability VCID-xw1s-93bu-wuh9
24
vulnerability VCID-y7ds-p5r2-yuhq
25
vulnerability VCID-zeut-9wfp-q7et
26
vulnerability VCID-zkvq-bms4-gfcv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.6
aliases GMS-2019-182
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-x5x1-w7yv-eye9
52
url VCID-xh68-defe-f7ce
vulnerability_id VCID-xh68-defe-f7ce
summary 
XSS Vulnerability
TYPO3 is vulnerable to Cross-Site Scripting.
references
0
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-003/
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-003/
fixed_packages
0
url pkg:composer/typo3/cms@8.6.1
purl pkg:composer/typo3/cms@8.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-3ugj-6m1e-e3hr
2
vulnerability VCID-4eym-e6vt-8fbs
3
vulnerability VCID-7ch1-q9f4-a7bt
4
vulnerability VCID-7m6u-k5tp-gkhy
5
vulnerability VCID-848u-w88s-5bbe
6
vulnerability VCID-953t-q1cr-zyd6
7
vulnerability VCID-9saf-w56y-pugz
8
vulnerability VCID-abjx-8v46-d7d8
9
vulnerability VCID-am6s-67bm-77dr
10
vulnerability VCID-bn3p-39sv-6fdg
11
vulnerability VCID-dsqm-9q3e-dudw
12
vulnerability VCID-e564-zdku-9fc6
13
vulnerability VCID-emqq-kwjg-3kfk
14
vulnerability VCID-ev4k-5k1d-2bhu
15
vulnerability VCID-fdnw-2tz5-4fdr
16
vulnerability VCID-fqkx-v8t5-q3h6
17
vulnerability VCID-fut7-bb1f-37g7
18
vulnerability VCID-h7cg-64er-uya9
19
vulnerability VCID-hp99-ncuh-6ugv
20
vulnerability VCID-je4q-svfw-hqda
21
vulnerability VCID-jp1p-rfxa-hyd9
22
vulnerability VCID-jq5y-7h9g-mufa
23
vulnerability VCID-jqe4-8hzb-mfea
24
vulnerability VCID-k5t3-28es-h3ez
25
vulnerability VCID-khpm-e1xb-hydb
26
vulnerability VCID-mctp-nf36-7qdn
27
vulnerability VCID-njsj-bwjq-fyap
28
vulnerability VCID-nney-azbc-pucg
29
vulnerability VCID-p7gd-anw2-1qbz
30
vulnerability VCID-pmvp-twk2-jqe4
31
vulnerability VCID-q52p-xfj8-gygd
32
vulnerability VCID-qv14-m93d-jyd9
33
vulnerability VCID-qxab-9uwr-yqhv
34
vulnerability VCID-rqrw-t2kj-mud8
35
vulnerability VCID-ru6w-m6q6-27gn
36
vulnerability VCID-sdsa-mh76-kqch
37
vulnerability VCID-sy7r-d6pv-yba9
38
vulnerability VCID-u259-2sxq-tbct
39
vulnerability VCID-vq15-t92r-5bhx
40
vulnerability VCID-vw2r-g8yy-eyf4
41
vulnerability VCID-w1wb-mq2y-dfca
42
vulnerability VCID-wy45-2gmr-fkfg
43
vulnerability VCID-x5x1-w7yv-eye9
44
vulnerability VCID-xw1s-93bu-wuh9
45
vulnerability VCID-y7ds-p5r2-yuhq
46
vulnerability VCID-ygw4-jdqu-4fbt
47
vulnerability VCID-yz6t-ge1y-qfgr
48
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.6.1
aliases TYPO3-CORE-SA-2017-003
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xh68-defe-f7ce
53
url VCID-xw1s-93bu-wuh9
vulnerability_id VCID-xw1s-93bu-wuh9
summary 
Path Traversal
It has been discovered that the extraction of manually uploaded ZIP archives in Extension Manager is vulnerable to directory traversal. Admin privileges are required in order to exploit this vulnerability.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-19848
reference_id
reference_type
scores
0
value 0.00374
scoring_system epss
scoring_elements 0.59393
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-19848
1
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2019-19848.yaml
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2019-19848.yaml
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2019-19848.yaml
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2019-19848.yaml
3
reference_url https://review.typo3.org/q/%2522Resolves:+%252388764%2522+topic:security
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://review.typo3.org/q/%2522Resolves:+%252388764%2522+topic:security
4
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-024
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2019-024
5
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-024/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-024/
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-19848
reference_id CVE-2019-19848
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-19848
fixed_packages
0
url pkg:composer/typo3/cms@8.7.30
purl pkg:composer/typo3/cms@8.7.30
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-848u-w88s-5bbe
2
vulnerability VCID-ev4k-5k1d-2bhu
3
vulnerability VCID-fqkx-v8t5-q3h6
4
vulnerability VCID-jp1p-rfxa-hyd9
5
vulnerability VCID-tgyt-axv1-c7ag
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.30
1
url pkg:composer/typo3/cms@9.5.12
purl pkg:composer/typo3/cms@9.5.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1sfk-z8py-ykb8
2
vulnerability VCID-4an7-9ph4-mkd4
3
vulnerability VCID-6mnf-2fcw-dqgp
4
vulnerability VCID-848u-w88s-5bbe
5
vulnerability VCID-8w4e-d49b-nbg8
6
vulnerability VCID-bbh5-rss8-bfct
7
vulnerability VCID-bcbd-zzet-mff6
8
vulnerability VCID-e6zr-4bgg-kkh5
9
vulnerability VCID-ev4k-5k1d-2bhu
10
vulnerability VCID-fqkx-v8t5-q3h6
11
vulnerability VCID-jp1p-rfxa-hyd9
12
vulnerability VCID-n1gz-y615-cbbk
13
vulnerability VCID-tgyt-axv1-c7ag
14
vulnerability VCID-zkvq-bms4-gfcv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.12
2
url pkg:composer/typo3/cms@10.2.2
purl pkg:composer/typo3/cms@10.2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1sfk-z8py-ykb8
2
vulnerability VCID-2tz2-8qdm-2kcv
3
vulnerability VCID-4an7-9ph4-mkd4
4
vulnerability VCID-6mnf-2fcw-dqgp
5
vulnerability VCID-6urp-p9mn-cffv
6
vulnerability VCID-848u-w88s-5bbe
7
vulnerability VCID-8w4e-d49b-nbg8
8
vulnerability VCID-bbh5-rss8-bfct
9
vulnerability VCID-bcbd-zzet-mff6
10
vulnerability VCID-c46m-ht19-ybc4
11
vulnerability VCID-e6zr-4bgg-kkh5
12
vulnerability VCID-ev4k-5k1d-2bhu
13
vulnerability VCID-fqkx-v8t5-q3h6
14
vulnerability VCID-jp1p-rfxa-hyd9
15
vulnerability VCID-n1gz-y615-cbbk
16
vulnerability VCID-r3az-g422-gqf9
17
vulnerability VCID-tgyt-axv1-c7ag
18
vulnerability VCID-zkvq-bms4-gfcv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@10.2.2
aliases CVE-2019-19848, GHSA-77p4-wfr8-977w
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xw1s-93bu-wuh9
54
url VCID-y7ds-p5r2-yuhq
vulnerability_id VCID-y7ds-p5r2-yuhq
summary Security Misconfiguration in Frontend Session Handling.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-018/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-018/
fixed_packages
0
url pkg:composer/typo3/cms@8.7.27
purl pkg:composer/typo3/cms@8.7.27
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-848u-w88s-5bbe
2
vulnerability VCID-ev4k-5k1d-2bhu
3
vulnerability VCID-fqkx-v8t5-q3h6
4
vulnerability VCID-jp1p-rfxa-hyd9
5
vulnerability VCID-p7gd-anw2-1qbz
6
vulnerability VCID-rqrw-t2kj-mud8
7
vulnerability VCID-tgyt-axv1-c7ag
8
vulnerability VCID-xw1s-93bu-wuh9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.27
1
url pkg:composer/typo3/cms@9.5.8
purl pkg:composer/typo3/cms@9.5.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1sfk-z8py-ykb8
2
vulnerability VCID-4an7-9ph4-mkd4
3
vulnerability VCID-6mnf-2fcw-dqgp
4
vulnerability VCID-848u-w88s-5bbe
5
vulnerability VCID-8w4e-d49b-nbg8
6
vulnerability VCID-bbh5-rss8-bfct
7
vulnerability VCID-e6zr-4bgg-kkh5
8
vulnerability VCID-ev4k-5k1d-2bhu
9
vulnerability VCID-fqkx-v8t5-q3h6
10
vulnerability VCID-jp1p-rfxa-hyd9
11
vulnerability VCID-n1gz-y615-cbbk
12
vulnerability VCID-p7gd-anw2-1qbz
13
vulnerability VCID-rqrw-t2kj-mud8
14
vulnerability VCID-tgyt-axv1-c7ag
15
vulnerability VCID-xw1s-93bu-wuh9
16
vulnerability VCID-zkvq-bms4-gfcv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.8
aliases GMS-2019-187
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-y7ds-p5r2-yuhq
55
url VCID-ygw4-jdqu-4fbt
vulnerability_id VCID-ygw4-jdqu-4fbt
summary Information Disclosure in TYPO3 CMS.
references
0
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-006/
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-006/
fixed_packages
0
url pkg:composer/typo3/cms@8.7.0
purl pkg:composer/typo3/cms@8.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-3ugj-6m1e-e3hr
2
vulnerability VCID-4eym-e6vt-8fbs
3
vulnerability VCID-6a22-c7x5-sqe2
4
vulnerability VCID-7ch1-q9f4-a7bt
5
vulnerability VCID-7m6u-k5tp-gkhy
6
vulnerability VCID-848u-w88s-5bbe
7
vulnerability VCID-953t-q1cr-zyd6
8
vulnerability VCID-abjx-8v46-d7d8
9
vulnerability VCID-am6s-67bm-77dr
10
vulnerability VCID-bn3p-39sv-6fdg
11
vulnerability VCID-dsqm-9q3e-dudw
12
vulnerability VCID-e564-zdku-9fc6
13
vulnerability VCID-emqq-kwjg-3kfk
14
vulnerability VCID-ev4k-5k1d-2bhu
15
vulnerability VCID-fdnw-2tz5-4fdr
16
vulnerability VCID-fqkx-v8t5-q3h6
17
vulnerability VCID-fut7-bb1f-37g7
18
vulnerability VCID-h7cg-64er-uya9
19
vulnerability VCID-hp99-ncuh-6ugv
20
vulnerability VCID-je4q-svfw-hqda
21
vulnerability VCID-jp1p-rfxa-hyd9
22
vulnerability VCID-jq5y-7h9g-mufa
23
vulnerability VCID-jqe4-8hzb-mfea
24
vulnerability VCID-k5t3-28es-h3ez
25
vulnerability VCID-khpm-e1xb-hydb
26
vulnerability VCID-mctp-nf36-7qdn
27
vulnerability VCID-njsj-bwjq-fyap
28
vulnerability VCID-nney-azbc-pucg
29
vulnerability VCID-p7gd-anw2-1qbz
30
vulnerability VCID-pmvp-twk2-jqe4
31
vulnerability VCID-qv14-m93d-jyd9
32
vulnerability VCID-qxab-9uwr-yqhv
33
vulnerability VCID-rqrw-t2kj-mud8
34
vulnerability VCID-ru6w-m6q6-27gn
35
vulnerability VCID-sdsa-mh76-kqch
36
vulnerability VCID-tgyt-axv1-c7ag
37
vulnerability VCID-u259-2sxq-tbct
38
vulnerability VCID-vq15-t92r-5bhx
39
vulnerability VCID-vw2r-g8yy-eyf4
40
vulnerability VCID-w1wb-mq2y-dfca
41
vulnerability VCID-wy45-2gmr-fkfg
42
vulnerability VCID-x5x1-w7yv-eye9
43
vulnerability VCID-xw1s-93bu-wuh9
44
vulnerability VCID-y7ds-p5r2-yuhq
45
vulnerability VCID-yz6t-ge1y-qfgr
46
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.0
aliases GMS-2017-352
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ygw4-jdqu-4fbt
56
url VCID-yz6t-ge1y-qfgr
vulnerability_id VCID-yz6t-ge1y-qfgr
summary Security Misconfiguration in Install Tool Cookie.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-009/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2018-009/
fixed_packages
0
url pkg:composer/typo3/cms@8.7.21
purl pkg:composer/typo3/cms@8.7.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-4eym-e6vt-8fbs
2
vulnerability VCID-7m6u-k5tp-gkhy
3
vulnerability VCID-848u-w88s-5bbe
4
vulnerability VCID-am6s-67bm-77dr
5
vulnerability VCID-bn3p-39sv-6fdg
6
vulnerability VCID-ev4k-5k1d-2bhu
7
vulnerability VCID-fqkx-v8t5-q3h6
8
vulnerability VCID-fut7-bb1f-37g7
9
vulnerability VCID-jp1p-rfxa-hyd9
10
vulnerability VCID-k5t3-28es-h3ez
11
vulnerability VCID-khpm-e1xb-hydb
12
vulnerability VCID-nney-azbc-pucg
13
vulnerability VCID-p7gd-anw2-1qbz
14
vulnerability VCID-pmvp-twk2-jqe4
15
vulnerability VCID-qv14-m93d-jyd9
16
vulnerability VCID-rqrw-t2kj-mud8
17
vulnerability VCID-ru6w-m6q6-27gn
18
vulnerability VCID-sdsa-mh76-kqch
19
vulnerability VCID-tgyt-axv1-c7ag
20
vulnerability VCID-u259-2sxq-tbct
21
vulnerability VCID-vw2r-g8yy-eyf4
22
vulnerability VCID-x5x1-w7yv-eye9
23
vulnerability VCID-xw1s-93bu-wuh9
24
vulnerability VCID-y7ds-p5r2-yuhq
25
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.21
1
url pkg:composer/typo3/cms@9.5.2
purl pkg:composer/typo3/cms@9.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1sfk-z8py-ykb8
2
vulnerability VCID-3ye6-vqje-abh4
3
vulnerability VCID-4an7-9ph4-mkd4
4
vulnerability VCID-4eym-e6vt-8fbs
5
vulnerability VCID-4jck-w9ct-budk
6
vulnerability VCID-6mnf-2fcw-dqgp
7
vulnerability VCID-7m6u-k5tp-gkhy
8
vulnerability VCID-7xv1-78u7-xufp
9
vulnerability VCID-848u-w88s-5bbe
10
vulnerability VCID-8w4e-d49b-nbg8
11
vulnerability VCID-9adx-p876-kyb5
12
vulnerability VCID-am6s-67bm-77dr
13
vulnerability VCID-bbh5-rss8-bfct
14
vulnerability VCID-cvk2-93hm-gkhx
15
vulnerability VCID-e6zr-4bgg-kkh5
16
vulnerability VCID-ev4k-5k1d-2bhu
17
vulnerability VCID-fqkx-v8t5-q3h6
18
vulnerability VCID-fut7-bb1f-37g7
19
vulnerability VCID-jp1p-rfxa-hyd9
20
vulnerability VCID-k5t3-28es-h3ez
21
vulnerability VCID-khpm-e1xb-hydb
22
vulnerability VCID-n1gz-y615-cbbk
23
vulnerability VCID-nney-azbc-pucg
24
vulnerability VCID-p7gd-anw2-1qbz
25
vulnerability VCID-pmvp-twk2-jqe4
26
vulnerability VCID-qv14-m93d-jyd9
27
vulnerability VCID-rqrw-t2kj-mud8
28
vulnerability VCID-ru6w-m6q6-27gn
29
vulnerability VCID-sdsa-mh76-kqch
30
vulnerability VCID-tgyt-axv1-c7ag
31
vulnerability VCID-u259-2sxq-tbct
32
vulnerability VCID-vw2r-g8yy-eyf4
33
vulnerability VCID-x5x1-w7yv-eye9
34
vulnerability VCID-xw1s-93bu-wuh9
35
vulnerability VCID-y7ds-p5r2-yuhq
36
vulnerability VCID-zeut-9wfp-q7et
37
vulnerability VCID-zkvq-bms4-gfcv
38
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.2
aliases GMS-2018-100
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-yz6t-ge1y-qfgr
57
url VCID-zmwv-gwq3-fkej
vulnerability_id VCID-zmwv-gwq3-fkej
summary 
Cross-site Scripting
Cross-Site Scripting in Form Framework.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-007/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-007/
fixed_packages
0
url pkg:composer/typo3/cms@8.7.23
purl pkg:composer/typo3/cms@8.7.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-4eym-e6vt-8fbs
2
vulnerability VCID-7m6u-k5tp-gkhy
3
vulnerability VCID-848u-w88s-5bbe
4
vulnerability VCID-ev4k-5k1d-2bhu
5
vulnerability VCID-fqkx-v8t5-q3h6
6
vulnerability VCID-fut7-bb1f-37g7
7
vulnerability VCID-jp1p-rfxa-hyd9
8
vulnerability VCID-k5t3-28es-h3ez
9
vulnerability VCID-nney-azbc-pucg
10
vulnerability VCID-p7gd-anw2-1qbz
11
vulnerability VCID-qv14-m93d-jyd9
12
vulnerability VCID-rqrw-t2kj-mud8
13
vulnerability VCID-ru6w-m6q6-27gn
14
vulnerability VCID-sdsa-mh76-kqch
15
vulnerability VCID-tgyt-axv1-c7ag
16
vulnerability VCID-x5x1-w7yv-eye9
17
vulnerability VCID-xw1s-93bu-wuh9
18
vulnerability VCID-y7ds-p5r2-yuhq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.23
1
url pkg:composer/typo3/cms@9.5.4
purl pkg:composer/typo3/cms@9.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1sfk-z8py-ykb8
2
vulnerability VCID-3ye6-vqje-abh4
3
vulnerability VCID-4an7-9ph4-mkd4
4
vulnerability VCID-4eym-e6vt-8fbs
5
vulnerability VCID-6mnf-2fcw-dqgp
6
vulnerability VCID-7m6u-k5tp-gkhy
7
vulnerability VCID-7xv1-78u7-xufp
8
vulnerability VCID-848u-w88s-5bbe
9
vulnerability VCID-8w4e-d49b-nbg8
10
vulnerability VCID-9adx-p876-kyb5
11
vulnerability VCID-bbh5-rss8-bfct
12
vulnerability VCID-cvk2-93hm-gkhx
13
vulnerability VCID-e6zr-4bgg-kkh5
14
vulnerability VCID-ev4k-5k1d-2bhu
15
vulnerability VCID-fqkx-v8t5-q3h6
16
vulnerability VCID-fut7-bb1f-37g7
17
vulnerability VCID-jp1p-rfxa-hyd9
18
vulnerability VCID-k5t3-28es-h3ez
19
vulnerability VCID-n1gz-y615-cbbk
20
vulnerability VCID-nney-azbc-pucg
21
vulnerability VCID-p7gd-anw2-1qbz
22
vulnerability VCID-qv14-m93d-jyd9
23
vulnerability VCID-rqrw-t2kj-mud8
24
vulnerability VCID-ru6w-m6q6-27gn
25
vulnerability VCID-sdsa-mh76-kqch
26
vulnerability VCID-tgyt-axv1-c7ag
27
vulnerability VCID-x5x1-w7yv-eye9
28
vulnerability VCID-xw1s-93bu-wuh9
29
vulnerability VCID-y7ds-p5r2-yuhq
30
vulnerability VCID-zeut-9wfp-q7et
31
vulnerability VCID-zkvq-bms4-gfcv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.4
aliases GMS-2019-177
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zmwv-gwq3-fkej
Fixing_vulnerabilities
0
url VCID-hzma-cduk-3uhp
vulnerability_id VCID-hzma-cduk-3uhp
summary 
Cross-site Scripting
XSS in TYPO3 Backend.
references
0
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2016-021
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2016-021
fixed_packages
0
url pkg:composer/typo3/cms@6.2.27
purl pkg:composer/typo3/cms@6.2.27
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5dxs-cdht-27hw
1
vulnerability VCID-727q-h3ey-6yc9
2
vulnerability VCID-eutz-mj58-audb
3
vulnerability VCID-ev4k-5k1d-2bhu
4
vulnerability VCID-fqkx-v8t5-q3h6
5
vulnerability VCID-h217-xe8x-nua3
6
vulnerability VCID-h7hf-sf2q-73ay
7
vulnerability VCID-nqqc-nkwq-rqhx
8
vulnerability VCID-p7gd-anw2-1qbz
9
vulnerability VCID-tgyt-axv1-c7ag
10
vulnerability VCID-vq15-t92r-5bhx
11
vulnerability VCID-xw1s-93bu-wuh9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@6.2.27
1
url pkg:composer/typo3/cms@7.0.0
purl pkg:composer/typo3/cms@7.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1u4r-r97q-3yfk
1
vulnerability VCID-28fn-ncj5-2ufk
2
vulnerability VCID-2rhr-8vaz-hqfj
3
vulnerability VCID-3ugj-6m1e-e3hr
4
vulnerability VCID-5ru2-1n1f-afa4
5
vulnerability VCID-66kh-c1dm-8fbf
6
vulnerability VCID-6u6t-uy5y-5fd6
7
vulnerability VCID-7n9x-c9gs-9yb3
8
vulnerability VCID-953t-q1cr-zyd6
9
vulnerability VCID-9899-uxyb-73gg
10
vulnerability VCID-abjx-8v46-d7d8
11
vulnerability VCID-ansr-8m5j-pya6
12
vulnerability VCID-c57c-akce-xufq
13
vulnerability VCID-cgqm-1wwf-kbg6
14
vulnerability VCID-dsqm-9q3e-dudw
15
vulnerability VCID-dwjk-7sqh-hqa8
16
vulnerability VCID-dyhd-5p1e-fya6
17
vulnerability VCID-e1gr-txgg-fqa6
18
vulnerability VCID-e1ms-4r4s-g7e7
19
vulnerability VCID-e2bk-pfbe-puek
20
vulnerability VCID-e82x-2cdb-7fgn
21
vulnerability VCID-ec17-eauu-67d3
22
vulnerability VCID-ev4k-5k1d-2bhu
23
vulnerability VCID-fdnw-2tz5-4fdr
24
vulnerability VCID-fqkx-v8t5-q3h6
25
vulnerability VCID-gpv4-4tpd-tbaa
26
vulnerability VCID-hp99-ncuh-6ugv
27
vulnerability VCID-hyx9-8ae6-sba8
28
vulnerability VCID-j6x1-dfre-2bdq
29
vulnerability VCID-jp1p-rfxa-hyd9
30
vulnerability VCID-jq5y-7h9g-mufa
31
vulnerability VCID-jwb1-3sbg-kfa5
32
vulnerability VCID-jx9x-wxwq-5khx
33
vulnerability VCID-n18b-qe5x-z7cj
34
vulnerability VCID-nhjv-nke2-2kf8
35
vulnerability VCID-njsj-bwjq-fyap
36
vulnerability VCID-nqqc-nkwq-rqhx
37
vulnerability VCID-p576-w7dd-p3h7
38
vulnerability VCID-p7gd-anw2-1qbz
39
vulnerability VCID-q5f3-nhjn-hyb4
40
vulnerability VCID-qcnh-z4zh-myaw
41
vulnerability VCID-qek9-g3h8-nfdz
42
vulnerability VCID-r6hu-hvdh-abb1
43
vulnerability VCID-rae3-cugy-hbh5
44
vulnerability VCID-teby-zvvw-zkhv
45
vulnerability VCID-u6h1-ccgw-jqds
46
vulnerability VCID-ub3e-hrb1-wqac
47
vulnerability VCID-uq77-aax5-k7d8
48
vulnerability VCID-vq15-t92r-5bhx
49
vulnerability VCID-w65h-8a9d-ckgj
50
vulnerability VCID-wms8-dnuz-b3hc
51
vulnerability VCID-xvyu-2hb8-8ufh
52
vulnerability VCID-xw1s-93bu-wuh9
53
vulnerability VCID-ys6f-g39p-fkfc
54
vulnerability VCID-yz6t-ge1y-qfgr
55
vulnerability VCID-zru2-9g25-77dc
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.0.0
2
url pkg:composer/typo3/cms@7.6.11
purl pkg:composer/typo3/cms@7.6.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3ugj-6m1e-e3hr
1
vulnerability VCID-5dxs-cdht-27hw
2
vulnerability VCID-66ru-n2df-b3ay
3
vulnerability VCID-727q-h3ey-6yc9
4
vulnerability VCID-953t-q1cr-zyd6
5
vulnerability VCID-9saf-w56y-pugz
6
vulnerability VCID-abjx-8v46-d7d8
7
vulnerability VCID-dsqm-9q3e-dudw
8
vulnerability VCID-e564-zdku-9fc6
9
vulnerability VCID-eutz-mj58-audb
10
vulnerability VCID-ev4k-5k1d-2bhu
11
vulnerability VCID-fdnw-2tz5-4fdr
12
vulnerability VCID-fqkx-v8t5-q3h6
13
vulnerability VCID-h217-xe8x-nua3
14
vulnerability VCID-h7cg-64er-uya9
15
vulnerability VCID-h7hf-sf2q-73ay
16
vulnerability VCID-hp99-ncuh-6ugv
17
vulnerability VCID-jp1p-rfxa-hyd9
18
vulnerability VCID-jq5y-7h9g-mufa
19
vulnerability VCID-jqe4-8hzb-mfea
20
vulnerability VCID-mctp-nf36-7qdn
21
vulnerability VCID-njsj-bwjq-fyap
22
vulnerability VCID-p7gd-anw2-1qbz
23
vulnerability VCID-sy7r-d6pv-yba9
24
vulnerability VCID-tgyt-axv1-c7ag
25
vulnerability VCID-vq15-t92r-5bhx
26
vulnerability VCID-xh68-defe-f7ce
27
vulnerability VCID-xw1s-93bu-wuh9
28
vulnerability VCID-ygw4-jdqu-4fbt
29
vulnerability VCID-yz6t-ge1y-qfgr
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.11
3
url pkg:composer/typo3/cms@8.3.0
purl pkg:composer/typo3/cms@8.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-3ugj-6m1e-e3hr
2
vulnerability VCID-4eym-e6vt-8fbs
3
vulnerability VCID-5dxs-cdht-27hw
4
vulnerability VCID-5hm4-ms5p-uuae
5
vulnerability VCID-66ru-n2df-b3ay
6
vulnerability VCID-727q-h3ey-6yc9
7
vulnerability VCID-7ch1-q9f4-a7bt
8
vulnerability VCID-7m6u-k5tp-gkhy
9
vulnerability VCID-848u-w88s-5bbe
10
vulnerability VCID-8jcy-3kje-fqeh
11
vulnerability VCID-953t-q1cr-zyd6
12
vulnerability VCID-9saf-w56y-pugz
13
vulnerability VCID-abjx-8v46-d7d8
14
vulnerability VCID-am6s-67bm-77dr
15
vulnerability VCID-bn3p-39sv-6fdg
16
vulnerability VCID-d6c2-upx1-e7cd
17
vulnerability VCID-dsqm-9q3e-dudw
18
vulnerability VCID-e564-zdku-9fc6
19
vulnerability VCID-emqq-kwjg-3kfk
20
vulnerability VCID-eutz-mj58-audb
21
vulnerability VCID-ev4k-5k1d-2bhu
22
vulnerability VCID-fdnw-2tz5-4fdr
23
vulnerability VCID-fqkx-v8t5-q3h6
24
vulnerability VCID-fut7-bb1f-37g7
25
vulnerability VCID-h217-xe8x-nua3
26
vulnerability VCID-h7cg-64er-uya9
27
vulnerability VCID-h7hf-sf2q-73ay
28
vulnerability VCID-hg2n-xera-jkdh
29
vulnerability VCID-hp99-ncuh-6ugv
30
vulnerability VCID-jp1p-rfxa-hyd9
31
vulnerability VCID-jq5y-7h9g-mufa
32
vulnerability VCID-jqe4-8hzb-mfea
33
vulnerability VCID-k5t3-28es-h3ez
34
vulnerability VCID-khpm-e1xb-hydb
35
vulnerability VCID-mctp-nf36-7qdn
36
vulnerability VCID-njsj-bwjq-fyap
37
vulnerability VCID-nney-azbc-pucg
38
vulnerability VCID-p7gd-anw2-1qbz
39
vulnerability VCID-pmvp-twk2-jqe4
40
vulnerability VCID-q52p-xfj8-gygd
41
vulnerability VCID-qv14-m93d-jyd9
42
vulnerability VCID-qxab-9uwr-yqhv
43
vulnerability VCID-rqrw-t2kj-mud8
44
vulnerability VCID-ru6w-m6q6-27gn
45
vulnerability VCID-sdsa-mh76-kqch
46
vulnerability VCID-sy7r-d6pv-yba9
47
vulnerability VCID-u259-2sxq-tbct
48
vulnerability VCID-vq15-t92r-5bhx
49
vulnerability VCID-vw2r-g8yy-eyf4
50
vulnerability VCID-wy45-2gmr-fkfg
51
vulnerability VCID-x5x1-w7yv-eye9
52
vulnerability VCID-xh68-defe-f7ce
53
vulnerability VCID-xw1s-93bu-wuh9
54
vulnerability VCID-y7ds-p5r2-yuhq
55
vulnerability VCID-ygw4-jdqu-4fbt
56
vulnerability VCID-yz6t-ge1y-qfgr
57
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.3.0
aliases GMS-2016-155
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hzma-cduk-3uhp
1
url VCID-yn6z-9v7k-x7br
vulnerability_id VCID-yn6z-9v7k-x7br
summary 
Uncontrolled Resource Consumption
Cache Flooding in TYPO3 Frontend.
references
0
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2016-022
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2016-022
fixed_packages
0
url pkg:composer/typo3/cms@6.2.27
purl pkg:composer/typo3/cms@6.2.27
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5dxs-cdht-27hw
1
vulnerability VCID-727q-h3ey-6yc9
2
vulnerability VCID-eutz-mj58-audb
3
vulnerability VCID-ev4k-5k1d-2bhu
4
vulnerability VCID-fqkx-v8t5-q3h6
5
vulnerability VCID-h217-xe8x-nua3
6
vulnerability VCID-h7hf-sf2q-73ay
7
vulnerability VCID-nqqc-nkwq-rqhx
8
vulnerability VCID-p7gd-anw2-1qbz
9
vulnerability VCID-tgyt-axv1-c7ag
10
vulnerability VCID-vq15-t92r-5bhx
11
vulnerability VCID-xw1s-93bu-wuh9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@6.2.27
1
url pkg:composer/typo3/cms@7.0.0
purl pkg:composer/typo3/cms@7.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1u4r-r97q-3yfk
1
vulnerability VCID-28fn-ncj5-2ufk
2
vulnerability VCID-2rhr-8vaz-hqfj
3
vulnerability VCID-3ugj-6m1e-e3hr
4
vulnerability VCID-5ru2-1n1f-afa4
5
vulnerability VCID-66kh-c1dm-8fbf
6
vulnerability VCID-6u6t-uy5y-5fd6
7
vulnerability VCID-7n9x-c9gs-9yb3
8
vulnerability VCID-953t-q1cr-zyd6
9
vulnerability VCID-9899-uxyb-73gg
10
vulnerability VCID-abjx-8v46-d7d8
11
vulnerability VCID-ansr-8m5j-pya6
12
vulnerability VCID-c57c-akce-xufq
13
vulnerability VCID-cgqm-1wwf-kbg6
14
vulnerability VCID-dsqm-9q3e-dudw
15
vulnerability VCID-dwjk-7sqh-hqa8
16
vulnerability VCID-dyhd-5p1e-fya6
17
vulnerability VCID-e1gr-txgg-fqa6
18
vulnerability VCID-e1ms-4r4s-g7e7
19
vulnerability VCID-e2bk-pfbe-puek
20
vulnerability VCID-e82x-2cdb-7fgn
21
vulnerability VCID-ec17-eauu-67d3
22
vulnerability VCID-ev4k-5k1d-2bhu
23
vulnerability VCID-fdnw-2tz5-4fdr
24
vulnerability VCID-fqkx-v8t5-q3h6
25
vulnerability VCID-gpv4-4tpd-tbaa
26
vulnerability VCID-hp99-ncuh-6ugv
27
vulnerability VCID-hyx9-8ae6-sba8
28
vulnerability VCID-j6x1-dfre-2bdq
29
vulnerability VCID-jp1p-rfxa-hyd9
30
vulnerability VCID-jq5y-7h9g-mufa
31
vulnerability VCID-jwb1-3sbg-kfa5
32
vulnerability VCID-jx9x-wxwq-5khx
33
vulnerability VCID-n18b-qe5x-z7cj
34
vulnerability VCID-nhjv-nke2-2kf8
35
vulnerability VCID-njsj-bwjq-fyap
36
vulnerability VCID-nqqc-nkwq-rqhx
37
vulnerability VCID-p576-w7dd-p3h7
38
vulnerability VCID-p7gd-anw2-1qbz
39
vulnerability VCID-q5f3-nhjn-hyb4
40
vulnerability VCID-qcnh-z4zh-myaw
41
vulnerability VCID-qek9-g3h8-nfdz
42
vulnerability VCID-r6hu-hvdh-abb1
43
vulnerability VCID-rae3-cugy-hbh5
44
vulnerability VCID-teby-zvvw-zkhv
45
vulnerability VCID-u6h1-ccgw-jqds
46
vulnerability VCID-ub3e-hrb1-wqac
47
vulnerability VCID-uq77-aax5-k7d8
48
vulnerability VCID-vq15-t92r-5bhx
49
vulnerability VCID-w65h-8a9d-ckgj
50
vulnerability VCID-wms8-dnuz-b3hc
51
vulnerability VCID-xvyu-2hb8-8ufh
52
vulnerability VCID-xw1s-93bu-wuh9
53
vulnerability VCID-ys6f-g39p-fkfc
54
vulnerability VCID-yz6t-ge1y-qfgr
55
vulnerability VCID-zru2-9g25-77dc
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.0.0
2
url pkg:composer/typo3/cms@7.6.11
purl pkg:composer/typo3/cms@7.6.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3ugj-6m1e-e3hr
1
vulnerability VCID-5dxs-cdht-27hw
2
vulnerability VCID-66ru-n2df-b3ay
3
vulnerability VCID-727q-h3ey-6yc9
4
vulnerability VCID-953t-q1cr-zyd6
5
vulnerability VCID-9saf-w56y-pugz
6
vulnerability VCID-abjx-8v46-d7d8
7
vulnerability VCID-dsqm-9q3e-dudw
8
vulnerability VCID-e564-zdku-9fc6
9
vulnerability VCID-eutz-mj58-audb
10
vulnerability VCID-ev4k-5k1d-2bhu
11
vulnerability VCID-fdnw-2tz5-4fdr
12
vulnerability VCID-fqkx-v8t5-q3h6
13
vulnerability VCID-h217-xe8x-nua3
14
vulnerability VCID-h7cg-64er-uya9
15
vulnerability VCID-h7hf-sf2q-73ay
16
vulnerability VCID-hp99-ncuh-6ugv
17
vulnerability VCID-jp1p-rfxa-hyd9
18
vulnerability VCID-jq5y-7h9g-mufa
19
vulnerability VCID-jqe4-8hzb-mfea
20
vulnerability VCID-mctp-nf36-7qdn
21
vulnerability VCID-njsj-bwjq-fyap
22
vulnerability VCID-p7gd-anw2-1qbz
23
vulnerability VCID-sy7r-d6pv-yba9
24
vulnerability VCID-tgyt-axv1-c7ag
25
vulnerability VCID-vq15-t92r-5bhx
26
vulnerability VCID-xh68-defe-f7ce
27
vulnerability VCID-xw1s-93bu-wuh9
28
vulnerability VCID-ygw4-jdqu-4fbt
29
vulnerability VCID-yz6t-ge1y-qfgr
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@7.6.11
3
url pkg:composer/typo3/cms@8.3.0
purl pkg:composer/typo3/cms@8.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-3ugj-6m1e-e3hr
2
vulnerability VCID-4eym-e6vt-8fbs
3
vulnerability VCID-5dxs-cdht-27hw
4
vulnerability VCID-5hm4-ms5p-uuae
5
vulnerability VCID-66ru-n2df-b3ay
6
vulnerability VCID-727q-h3ey-6yc9
7
vulnerability VCID-7ch1-q9f4-a7bt
8
vulnerability VCID-7m6u-k5tp-gkhy
9
vulnerability VCID-848u-w88s-5bbe
10
vulnerability VCID-8jcy-3kje-fqeh
11
vulnerability VCID-953t-q1cr-zyd6
12
vulnerability VCID-9saf-w56y-pugz
13
vulnerability VCID-abjx-8v46-d7d8
14
vulnerability VCID-am6s-67bm-77dr
15
vulnerability VCID-bn3p-39sv-6fdg
16
vulnerability VCID-d6c2-upx1-e7cd
17
vulnerability VCID-dsqm-9q3e-dudw
18
vulnerability VCID-e564-zdku-9fc6
19
vulnerability VCID-emqq-kwjg-3kfk
20
vulnerability VCID-eutz-mj58-audb
21
vulnerability VCID-ev4k-5k1d-2bhu
22
vulnerability VCID-fdnw-2tz5-4fdr
23
vulnerability VCID-fqkx-v8t5-q3h6
24
vulnerability VCID-fut7-bb1f-37g7
25
vulnerability VCID-h217-xe8x-nua3
26
vulnerability VCID-h7cg-64er-uya9
27
vulnerability VCID-h7hf-sf2q-73ay
28
vulnerability VCID-hg2n-xera-jkdh
29
vulnerability VCID-hp99-ncuh-6ugv
30
vulnerability VCID-jp1p-rfxa-hyd9
31
vulnerability VCID-jq5y-7h9g-mufa
32
vulnerability VCID-jqe4-8hzb-mfea
33
vulnerability VCID-k5t3-28es-h3ez
34
vulnerability VCID-khpm-e1xb-hydb
35
vulnerability VCID-mctp-nf36-7qdn
36
vulnerability VCID-njsj-bwjq-fyap
37
vulnerability VCID-nney-azbc-pucg
38
vulnerability VCID-p7gd-anw2-1qbz
39
vulnerability VCID-pmvp-twk2-jqe4
40
vulnerability VCID-q52p-xfj8-gygd
41
vulnerability VCID-qv14-m93d-jyd9
42
vulnerability VCID-qxab-9uwr-yqhv
43
vulnerability VCID-rqrw-t2kj-mud8
44
vulnerability VCID-ru6w-m6q6-27gn
45
vulnerability VCID-sdsa-mh76-kqch
46
vulnerability VCID-sy7r-d6pv-yba9
47
vulnerability VCID-u259-2sxq-tbct
48
vulnerability VCID-vq15-t92r-5bhx
49
vulnerability VCID-vw2r-g8yy-eyf4
50
vulnerability VCID-wy45-2gmr-fkfg
51
vulnerability VCID-x5x1-w7yv-eye9
52
vulnerability VCID-xh68-defe-f7ce
53
vulnerability VCID-xw1s-93bu-wuh9
54
vulnerability VCID-y7ds-p5r2-yuhq
55
vulnerability VCID-ygw4-jdqu-4fbt
56
vulnerability VCID-yz6t-ge1y-qfgr
57
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.3.0
aliases GMS-2016-156
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-yn6z-9v7k-x7br
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.3.0