Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/55352?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/55352?format=api", "purl": "pkg:composer/typo3/cms@9.0.0", "type": "composer", "namespace": "typo3", "name": "cms", "version": "9.0.0", "qualifiers": {}, "subpath": "", "is_vulnerable": true, "next_non_vulnerable_version": "9.1.0", "latest_non_vulnerable_version": "12.2.0", "affected_by_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/41293?format=api", "vulnerability_id": "VCID-2rhr-8vaz-hqfj", "summary": "Cross-site Scripting\nTYPO3 is vulnerable to cross-site scripting. Corresponding rendering instructions via TypoScript functionality HTMLparser does not consider all potentially malicious HTML tag & attribute combinations per default. In default scenarios, a valid backend user account is needed to exploit this vulnerability. In case custom plugins used in the website frontend accept and reflect rich-text content submitted by users, no authentication is required.", "references": [ { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2021-013", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2021-013" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-32768", "reference_id": "CVE-2021-32768", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-32768" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/58647?format=api", "purl": "pkg:composer/typo3/cms@9.5.29", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.29" }, { "url": "http://public2.vulnerablecode.io/api/packages/58648?format=api", "purl": "pkg:composer/typo3/cms@10.4.19", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@10.4.19" }, { "url": "http://public2.vulnerablecode.io/api/packages/58649?format=api", "purl": "pkg:composer/typo3/cms@11.3.2", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@11.3.2" } ], "aliases": [ "CVE-2021-32768", "GHSA-c5c9-8c6m-727v" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-2rhr-8vaz-hqfj" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40509?format=api", "vulnerability_id": "VCID-3ugj-6m1e-e3hr", "summary": "Cross-site Scripting\nCross-Site Scripting in Online Media Asset Rendering.", "references": [ { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2018-006/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2018-006/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/57074?format=api", "purl": "pkg:composer/typo3/cms@9.5.2", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.2" } ], "aliases": [ "GMS-2018-97" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-3ugj-6m1e-e3hr" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40967?format=api", "vulnerability_id": "VCID-3ye6-vqje-abh4", "summary": "Information Disclosure in Page Tree.", "references": [ { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2019-009/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2019-009/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/57974?format=api", "purl": "pkg:composer/typo3/cms@9.5.6", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.6" } ], "aliases": [ "GMS-2019-183" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-3ye6-vqje-abh4" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/41129?format=api", "vulnerability_id": "VCID-4eym-e6vt-8fbs", "summary": "Code Injection\nArbitrary Code Execution and Cross-Site Scripting in Backend API.", "references": [ { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2019-019/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2019-019/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/58252?format=api", "purl": "pkg:composer/typo3/cms@9.5.8", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.8" } ], "aliases": [ "GMS-2019-188" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-4eym-e6vt-8fbs" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40632?format=api", "vulnerability_id": "VCID-4jck-w9ct-budk", "summary": "Cross-site Scripting\nCross-Site Scripting in Language Pack Handling.", "references": [ { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2019-004/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2019-004/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/56436?format=api", "purl": "pkg:composer/typo3/cms@9.5.4", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.4" } ], "aliases": [ "GMS-2019-179" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-4jck-w9ct-budk" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40095?format=api", "vulnerability_id": "VCID-7ch1-q9f4-a7bt", "summary": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')\nIn Bootstrap, XSS is possible in the data-target property of scrollspy.", "references": [ { "reference_url": "https://access.redhat.com/errata/RHSA-2019:1456", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:1456" }, { "reference_url": "https://blog.getbootstrap.com/2018/07/12/bootstrap-4-1-2", "reference_id": "", "reference_type": "", "scores": [], "url": "https://blog.getbootstrap.com/2018/07/12/bootstrap-4-1-2" }, { "reference_url": "https://github.com/twbs/bootstrap", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/twbs/bootstrap" }, { "reference_url": "https://github.com/twbs/bootstrap/issues/26423", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/twbs/bootstrap/issues/26423" }, { "reference_url": "https://github.com/twbs/bootstrap/issues/26627", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/twbs/bootstrap/issues/26627" }, { "reference_url": "https://github.com/twbs/bootstrap/pull/26630", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/twbs/bootstrap/pull/26630" }, { "reference_url": "https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/52e0e6b5df827ee7f1e68f7cc3babe61af3b2160f5d74a85469b7b0e@%3Cdev.superset.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.apache.org/thread.html/52e0e6b5df827ee7f1e68f7cc3babe61af3b2160f5d74a85469b7b0e@%3Cdev.superset.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/r3dc0cac8d856bca02bd6997355d7ff83027dcfc82f8646a29b89b714@%3Cissues.hbase.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.apache.org/thread.html/r3dc0cac8d856bca02bd6997355d7ff83027dcfc82f8646a29b89b714@%3Cissues.hbase.apache.org%3E" }, { "reference_url": "https://seclists.org/bugtraq/2019/May/18", "reference_id": "", "reference_type": "", "scores": [], "url": "https://seclists.org/bugtraq/2019/May/18" }, { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2019-006", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2019-006" }, { "reference_url": "https://www.oracle.com/security-alerts/cpuApr2021.html", "reference_id": "", "reference_type": "", "scores": [], "url": "https://www.oracle.com/security-alerts/cpuApr2021.html" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-14041", "reference_id": "CVE-2018-14041", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-14041" }, { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2018-14041.yaml", "reference_id": "CVE-2018-14041.YAML", "reference_type": "", "scores": [], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2018-14041.yaml" }, { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2018-14041.yaml", "reference_id": "CVE-2018-14041.YAML", "reference_type": "", "scores": [], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2018-14041.yaml" }, { "reference_url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/bootstrap/CVE-2018-14041.yml", "reference_id": "CVE-2018-14041.YML", "reference_type": "", "scores": [], "url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/bootstrap/CVE-2018-14041.yml" }, { "reference_url": "https://github.com/advisories/GHSA-pj7m-g53m-7638", "reference_id": "GHSA-pj7m-g53m-7638", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-pj7m-g53m-7638" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/56436?format=api", "purl": "pkg:composer/typo3/cms@9.5.4", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.4" } ], "aliases": [ "CVE-2018-14041", "GHSA-pj7m-g53m-7638" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-7ch1-q9f4-a7bt" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/41118?format=api", "vulnerability_id": "VCID-7m6u-k5tp-gkhy", "summary": "Insecure Deserialization in TYPO3 CMS.", "references": [ { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2019-020/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2019-020/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/58252?format=api", "purl": "pkg:composer/typo3/cms@9.5.8", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.8" } ], "aliases": [ "GMS-2019-189" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-7m6u-k5tp-gkhy" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/41122?format=api", "vulnerability_id": "VCID-7xv1-78u7-xufp", "summary": "Deserialization of Untrusted Data\nPossible deserialization side-effects in `symfony/cache`.", "references": [ { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2019-016/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2019-016/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/58252?format=api", "purl": "pkg:composer/typo3/cms@9.5.8", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.8" } ], "aliases": [ "GMS-2019-190" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-7xv1-78u7-xufp" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40505?format=api", "vulnerability_id": "VCID-953t-q1cr-zyd6", "summary": "Cross-site Scripting\nCross-Site Scripting in Backend Modal Component.", "references": [ { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2018-007/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2018-007/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/57074?format=api", "purl": "pkg:composer/typo3/cms@9.5.2", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.2" } ], "aliases": [ "GMS-2018-98" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-953t-q1cr-zyd6" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40960?format=api", "vulnerability_id": "VCID-9adx-p876-kyb5", "summary": "Information Disclosure in User Authentication.", "references": [ { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2019-010/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2019-010/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/57974?format=api", "purl": "pkg:composer/typo3/cms@9.5.6", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.6" } ], "aliases": [ "GMS-2019-184" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-9adx-p876-kyb5" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/41234?format=api", "vulnerability_id": "VCID-a1g9-pyz5-9fca", "summary": "Cross-site Scripting\nTYPO3 contains a cross-site scripting vulnerability. When _Page TSconfig_ settings are not properly encoded, corresponding page preview module (`_Web>View_`) is vulnerable to persistent cross-site scripting. A valid backend user account is needed to exploit this vulnerability. TYPO3 contain a patch for this issue.", "references": [ { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2021-009", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2021-009" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-32667", "reference_id": "CVE-2021-32667", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-32667" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/58457?format=api", "purl": "pkg:composer/typo3/cms@10.4.18", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2rhr-8vaz-hqfj" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@10.4.18" }, { "url": "http://public2.vulnerablecode.io/api/packages/58458?format=api", "purl": "pkg:composer/typo3/cms@11.3.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2rhr-8vaz-hqfj" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@11.3.1" } ], "aliases": [ "CVE-2021-32667", "GHSA-8mq9-fqv8-59wf" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-a1g9-pyz5-9fca" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40086?format=api", "vulnerability_id": "VCID-abjx-8v46-d7d8", "summary": "Improper Authentication\nAuthentication Bypass in TYPO3 CMS.", "references": [ { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2018-001/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2018-001/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/56095?format=api", "purl": "pkg:composer/typo3/cms@9.3.2", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.3.2" } ], "aliases": [ "GMS-2018-93" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-abjx-8v46-d7d8" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40634?format=api", "vulnerability_id": "VCID-am6s-67bm-77dr", "summary": "Cross-site Scripting\nCross-Site Scripting in Bootstrap CSS toolkit.", "references": [ { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2019-006/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2019-006/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/56436?format=api", "purl": "pkg:composer/typo3/cms@9.5.4", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.4" } ], "aliases": [ "GMS-2019-176" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-am6s-67bm-77dr" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/41120?format=api", "vulnerability_id": "VCID-cvk2-93hm-gkhx", "summary": "Improper Access Control\nBroken Access Control in Import Module.", "references": [ { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2019-017/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2019-017/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/58252?format=api", "purl": "pkg:composer/typo3/cms@9.5.8", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.8" } ], "aliases": [ "GMS-2019-191" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-cvk2-93hm-gkhx" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40497?format=api", "vulnerability_id": "VCID-dsqm-9q3e-dudw", "summary": "Uncontrolled Resource Consumption\nDenial of Service in Online Media Asset Handling.", "references": [ { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2018-011/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2018-011/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/57074?format=api", "purl": "pkg:composer/typo3/cms@9.5.2", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.2" } ], "aliases": [ "GMS-2018-102" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-dsqm-9q3e-dudw" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40496?format=api", "vulnerability_id": "VCID-emqq-kwjg-3kfk", "summary": "Cross-site Scripting\nCross-Site Scripting in CKEditor.", "references": [ { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2018-005/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2018-005/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/57074?format=api", "purl": "pkg:composer/typo3/cms@9.5.2", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.2" } ], "aliases": [ "GMS-2018-104" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-emqq-kwjg-3kfk" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/41127?format=api", "vulnerability_id": "VCID-fut7-bb1f-37g7", "summary": "Cross-site Scripting\nCross-Site Scripting in Link Handling.", "references": [ { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2019-015/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2019-015/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/58252?format=api", "purl": "pkg:composer/typo3/cms@9.5.8", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.8" } ], "aliases": [ "GMS-2019-186" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-fut7-bb1f-37g7" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40507?format=api", "vulnerability_id": "VCID-hp99-ncuh-6ugv", "summary": "Cross-site Scripting\nCross-Site Scripting in Frontend User Login.", "references": [ { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2018-008/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2018-008/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/57074?format=api", "purl": "pkg:composer/typo3/cms@9.5.2", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.2" } ], "aliases": [ "GMS-2018-99" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-hp99-ncuh-6ugv" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/41236?format=api", "vulnerability_id": "VCID-j8hk-bqnb-gycp", "summary": "Cross-site Scripting\nTYPO3 contains a cross-site scripting vulnerability. When error messages are not properly encoded, the components `_QueryGenerator_` and `_QueryView_` are vulnerable to both reflected and persistent cross-site scripting. A valid backend user account having administrator privileges is needed to exploit this vulnerability. TYPO3 contain a patch for this issue.", "references": [ { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2021-010", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2021-010" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-32668", "reference_id": "CVE-2021-32668", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-32668" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/58457?format=api", "purl": "pkg:composer/typo3/cms@10.4.18", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2rhr-8vaz-hqfj" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@10.4.18" }, { "url": "http://public2.vulnerablecode.io/api/packages/58458?format=api", "purl": "pkg:composer/typo3/cms@11.3.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2rhr-8vaz-hqfj" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@11.3.1" } ], "aliases": [ "CVE-2021-32668", "GHSA-6mh3-j5r5-2379" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-j8hk-bqnb-gycp" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40089?format=api", "vulnerability_id": "VCID-je4q-svfw-hqda", "summary": "Insecure Deserialization in TYPO3 CMS.", "references": [ { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2018-004/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2018-004/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/56095?format=api", "purl": "pkg:composer/typo3/cms@9.3.2", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.3.2" } ], "aliases": [ "GMS-2018-96" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-je4q-svfw-hqda" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40511?format=api", "vulnerability_id": "VCID-jq5y-7h9g-mufa", "summary": "Information Disclosure in Install Tool.", "references": [ { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2018-010/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2018-010/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/57074?format=api", "purl": "pkg:composer/typo3/cms@9.5.2", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.2" } ], "aliases": [ "GMS-2018-101" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-jq5y-7h9g-mufa" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40968?format=api", "vulnerability_id": "VCID-k5t3-28es-h3ez", "summary": "Improper Input Validation\nTYPO3 allows remote code execution because it does not properly configure the applications used for image processing, as demonstrated by `ImageMagick` or `GraphicsMagick`.", "references": [ { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2019-012/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2019-012/" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11832", "reference_id": "CVE-2019-11832", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11832" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/57974?format=api", "purl": "pkg:composer/typo3/cms@9.5.6", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.6" } ], "aliases": [ "CVE-2019-11832" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-k5t3-28es-h3ez" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40617?format=api", "vulnerability_id": "VCID-khpm-e1xb-hydb", "summary": "Information Disclosure of Installed Extensions.", "references": [ { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2019-001/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2019-001/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/56436?format=api", "purl": "pkg:composer/typo3/cms@9.5.4", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.4" } ], "aliases": [ "GMS-2019-172" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-khpm-e1xb-hydb" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40087?format=api", "vulnerability_id": "VCID-njsj-bwjq-fyap", "summary": "Insecure Deserialization & Arbitrary Code Execution in TYPO3 CMS.", "references": [ { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2018-002/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2018-002/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/56095?format=api", "purl": "pkg:composer/typo3/cms@9.3.2", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.3.2" } ], "aliases": [ "GMS-2018-94" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-njsj-bwjq-fyap" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/41128?format=api", "vulnerability_id": "VCID-nney-azbc-pucg", "summary": "Information Disclosure in Backend User Interface.", "references": [ { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2019-014/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2019-014/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/58252?format=api", "purl": "pkg:composer/typo3/cms@9.5.8", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.8" } ], "aliases": [ "GMS-2019-185" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-nney-azbc-pucg" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40639?format=api", "vulnerability_id": "VCID-pmvp-twk2-jqe4", "summary": "Security Misconfiguration for Backend User Accounts.", "references": [ { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2019-002/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2019-002/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/56436?format=api", "purl": "pkg:composer/typo3/cms@9.5.4", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.4" } ], "aliases": [ "GMS-2019-173" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-pmvp-twk2-jqe4" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/41160?format=api", "vulnerability_id": "VCID-qv14-m93d-jyd9", "summary": "Cross-site Scripting\nTYPO3 allows XSS.", "references": [ { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-12748", "reference_id": "CVE-2019-12748", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-12748" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/58252?format=api", "purl": "pkg:composer/typo3/cms@9.5.8", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.8" } ], "aliases": [ "CVE-2019-12748" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-qv14-m93d-jyd9" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40440?format=api", "vulnerability_id": "VCID-qxab-9uwr-yqhv", "summary": "Cross-site Scripting\nCKEditor allows user-assisted XSS involving a source-mode paste.", "references": [ { "reference_url": "https://ckeditor.com/blog/CKEditor-4.11-with-emoji-dropdown-and-auto-link-on-typing-released/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://ckeditor.com/blog/CKEditor-4.11-with-emoji-dropdown-and-auto-link-on-typing-released/" }, { "reference_url": "https://ckeditor.com/cke4/release/CKEditor-4.11.0", "reference_id": "", "reference_type": "", "scores": [], "url": "https://ckeditor.com/cke4/release/CKEditor-4.11.0" }, { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2018-005", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2018-005" }, { "reference_url": "https://web.archive.org/web/20200227030123/http://www.securityfocus.com/bid/109205", "reference_id": "", "reference_type": "", "scores": [], "url": "https://web.archive.org/web/20200227030123/http://www.securityfocus.com/bid/109205" }, { "reference_url": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html", "reference_id": "", "reference_type": "", "scores": [], "url": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-17960", "reference_id": "CVE-2018-17960", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-17960" }, { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2018-17960.yaml", "reference_id": "CVE-2018-17960.YAML", "reference_type": "", "scores": [], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2018-17960.yaml" }, { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2018-17960.yaml", "reference_id": "CVE-2018-17960.YAML", "reference_type": "", "scores": [], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2018-17960.yaml" }, { "reference_url": "https://github.com/advisories/GHSA-g68x-vvqq-pvw3", "reference_id": "GHSA-g68x-vvqq-pvw3", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-g68x-vvqq-pvw3" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/57074?format=api", "purl": "pkg:composer/typo3/cms@9.5.2", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.2" } ], "aliases": [ "CVE-2018-17960", "GHSA-g68x-vvqq-pvw3" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-qxab-9uwr-yqhv" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40966?format=api", "vulnerability_id": "VCID-ru6w-m6q6-27gn", "summary": "Cross-site Scripting\nCross-Site Scripting in Fluid Engine.", "references": [ { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2019-013/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2019-013/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/57974?format=api", "purl": "pkg:composer/typo3/cms@9.5.6", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.6" } ], "aliases": [ "GMS-2019-180" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ru6w-m6q6-27gn" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/41235?format=api", "vulnerability_id": "VCID-sdjb-gp4t-vbgt", "summary": "Cross-site Scripting\nTYPO3 is an open source PHP based web content management system. have a cross-site scripting vulnerability. When settings for _backend layouts_ are not properly encoded, the corresponding grid view is vulnerable to persistent cross-site scripting. A valid backend user account is needed to exploit this vulnerability. TYPO3 contain a patch for this vulnerability.", "references": [ { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2021-011", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2021-011" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-32669", "reference_id": "CVE-2021-32669", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-32669" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/58457?format=api", "purl": "pkg:composer/typo3/cms@10.4.18", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2rhr-8vaz-hqfj" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@10.4.18" }, { "url": "http://public2.vulnerablecode.io/api/packages/58458?format=api", "purl": "pkg:composer/typo3/cms@11.3.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2rhr-8vaz-hqfj" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@11.3.1" } ], "aliases": [ "CVE-2021-32669", "GHSA-rgcg-28xm-8mmw" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-sdjb-gp4t-vbgt" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40959?format=api", "vulnerability_id": "VCID-sdsa-mh76-kqch", "summary": "Security Misconfiguration in User Session Handling.", "references": [ { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2019-011/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2019-011/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/57974?format=api", "purl": "pkg:composer/typo3/cms@9.5.6", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.6" } ], "aliases": [ "GMS-2019-181" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-sdsa-mh76-kqch" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40636?format=api", "vulnerability_id": "VCID-u259-2sxq-tbct", "summary": "Cross-site Scripting\nCross-Site Scripting in Fluid `ViewHelpers`.", "references": [ { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2019-005/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2019-005/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/56436?format=api", "purl": "pkg:composer/typo3/cms@9.5.4", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.4" } ], "aliases": [ "GMS-2019-175" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-u259-2sxq-tbct" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/41233?format=api", "vulnerability_id": "VCID-uq77-aax5-k7d8", "summary": "Inclusion of Sensitive Information in Log Files\nTYPO3 is an open source PHP based web content management system. User credentials may been logged as plain-text. This occurs when explicitly using log level debug, which is not the default configuration. TYPO3 contain a patch for this vulnerability.", "references": [ { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-32767", "reference_id": "CVE-2021-32767", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-32767" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/58456?format=api", "purl": "pkg:composer/typo3/cms@9.5.28", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2rhr-8vaz-hqfj" }, { "vulnerability": "VCID-j8hk-bqnb-gycp" }, { "vulnerability": "VCID-sdjb-gp4t-vbgt" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.28" }, { "url": "http://public2.vulnerablecode.io/api/packages/58457?format=api", "purl": "pkg:composer/typo3/cms@10.4.18", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2rhr-8vaz-hqfj" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@10.4.18" }, { "url": "http://public2.vulnerablecode.io/api/packages/58458?format=api", "purl": "pkg:composer/typo3/cms@11.3.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2rhr-8vaz-hqfj" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@11.3.1" } ], "aliases": [ "CVE-2021-32767", "GHSA-34fr-fhqr-7235" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-uq77-aax5-k7d8" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/39555?format=api", "vulnerability_id": "VCID-vq15-t92r-5bhx", "summary": "Cross-site Scripting\nThe page module in TYPO3 is vulnerable to XSS via `$GLOBALS['TYPO3_CONF_VARS']['SYS']['sitename']`, as demonstrated by an admin entering a crafted site name during the installation process.", "references": [ { "reference_url": "https://forge.typo3.org/issues/84191", "reference_id": "", "reference_type": "", "scores": [], "url": "https://forge.typo3.org/issues/84191" }, { "reference_url": "http://www.securitytracker.com/id/1040755", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securitytracker.com/id/1040755" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-6905", "reference_id": "CVE-2018-6905", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-6905" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/55354?format=api", "purl": "pkg:composer/typo3/cms@9.1.0", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.1.0" } ], "aliases": [ "CVE-2018-6905" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-vq15-t92r-5bhx" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40620?format=api", "vulnerability_id": "VCID-vw2r-g8yy-eyf4", "summary": "Code Injection\nArbitrary Code Execution via File List Module.", "references": [ { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2019-008/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2019-008/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/56436?format=api", "purl": "pkg:composer/typo3/cms@9.5.4", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.4" } ], "aliases": [ "GMS-2019-178" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-vw2r-g8yy-eyf4" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40088?format=api", "vulnerability_id": "VCID-w1wb-mq2y-dfca", "summary": "Privilege Escalation & SQL Injection in TYPO3 CMS.", "references": [ { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2018-003/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2018-003/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/56095?format=api", "purl": "pkg:composer/typo3/cms@9.3.2", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.3.2" } ], "aliases": [ "GMS-2018-95" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-w1wb-mq2y-dfca" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40958?format=api", "vulnerability_id": "VCID-x5x1-w7yv-eye9", "summary": "Code Injection\nPossible Arbitrary Code Execution in Image Processing.", "references": [ { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2019-012/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2019-012/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/57974?format=api", "purl": "pkg:composer/typo3/cms@9.5.6", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.6" } ], "aliases": [ "GMS-2019-182" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-x5x1-w7yv-eye9" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/41124?format=api", "vulnerability_id": "VCID-y7ds-p5r2-yuhq", "summary": "Security Misconfiguration in Frontend Session Handling.", "references": [ { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2019-018/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2019-018/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/58252?format=api", "purl": "pkg:composer/typo3/cms@9.5.8", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.8" } ], "aliases": [ "GMS-2019-187" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-y7ds-p5r2-yuhq" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40503?format=api", "vulnerability_id": "VCID-yz6t-ge1y-qfgr", "summary": "Security Misconfiguration in Install Tool Cookie.", "references": [ { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2018-009/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2018-009/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/57074?format=api", "purl": "pkg:composer/typo3/cms@9.5.2", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.2" } ], "aliases": [ "GMS-2018-100" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-yz6t-ge1y-qfgr" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40627?format=api", "vulnerability_id": "VCID-zmwv-gwq3-fkej", "summary": "Cross-site Scripting\nCross-Site Scripting in Form Framework.", "references": [ { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2019-007/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://typo3.org/security/advisory/typo3-core-sa-2019-007/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/56436?format=api", "purl": "pkg:composer/typo3/cms@9.5.4", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.4" } ], "aliases": [ "GMS-2019-177" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-zmwv-gwq3-fkej" } ], "fixing_vulnerabilities": [], "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.0.0" }