Lookup for vulnerable packages by Package URL.

Purlpkg:composer/typo3/cms@4.3.0-beta1
Typecomposer
Namespacetypo3
Namecms
Version4.3.0-beta1
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version4.3.0-beta2
Latest_non_vulnerable_version12.2.0
Affected_by_vulnerabilities
0
url VCID-2tyf-qcd3-yybj
vulnerability_id VCID-2tyf-qcd3-yybj
summary
TYPO3 Install Tool Subcomponent Allows Access Using Only a Password's MD5 Hash as a Credential
The Install Tool subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote attackers to gain access by using only the password's md5 hash as a credential.
references
0
reference_url https://exchange.xforce.ibmcloud.com/vulnerabilities/53928
reference_id
reference_type
scores
url https://exchange.xforce.ibmcloud.com/vulnerabilities/53928
1
reference_url https://github.com/TYPO3/typo3
reference_id
reference_type
scores
url https://github.com/TYPO3/typo3
2
reference_url https://web.archive.org/web/20100105023145/http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016
reference_id
reference_type
scores
url https://web.archive.org/web/20100105023145/http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016
3
reference_url https://web.archive.org/web/20200229210314/http://www.securityfocus.com/bid/36801
reference_id
reference_type
scores
url https://web.archive.org/web/20200229210314/http://www.securityfocus.com/bid/36801
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2009-3635
reference_id CVE-2009-3635
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2009-3635
5
reference_url https://github.com/advisories/GHSA-hwrc-w5gg-f335
reference_id GHSA-hwrc-w5gg-f335
reference_type
scores
url https://github.com/advisories/GHSA-hwrc-w5gg-f335
fixed_packages
0
url pkg:composer/typo3/cms@4.3.0-beta2
purl pkg:composer/typo3/cms@4.3.0-beta2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@4.3.0-beta2
aliases CVE-2009-3635, GHSA-hwrc-w5gg-f335
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2tyf-qcd3-yybj
Fixing_vulnerabilities
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@4.3.0-beta1