Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:composer/typo3/cms-core@8.7.7
Typecomposer
Namespacetypo3
Namecms-core
Version8.7.7
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version9.5.25
Latest_non_vulnerable_version14.0.2
Affected_by_vulnerabilities
0
url VCID-1ffs-9vj5-27hk
vulnerability_id VCID-1ffs-9vj5-27hk
summary 
Path Traversal
Due to improper input validation, attackers can by-pass restrictions of predefined options and submit arbitrary data in the Form Designer backend module of the Form Framework. In the default configuration of the Form Framework this allows attackers to explicitly allow arbitrary mime-types for file uploads - however, default `_fileDenyPattern_` successfully blocked files like `_.htaccess_` or `_malicious.php_`. Besides that, attackers can persist those files in any writable directory of the corresponding TYPO3 installation. A valid backend user account with access to the form module is needed to exploit this vulnerability.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-21357
reference_id
reference_type
scores
0
value 0.01121
scoring_system epss
scoring_elements 0.78584
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-21357
1
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21357.yaml
reference_id
reference_type
scores
0
value 8.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H/E:H/RL:O/RC:C
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21357.yaml
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21357.yaml
reference_id
reference_type
scores
0
value 8.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H/E:H/RL:O/RC:C
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21357.yaml
3
reference_url https://packagist.org/packages/typo3/cms-form
reference_id
reference_type
scores
0
value 8.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H/E:H/RL:O/RC:C
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://packagist.org/packages/typo3/cms-form
4
reference_url https://typo3.org/security/advisory/typo3-core-sa-2021-003
reference_id
reference_type
scores
0
value 8.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H/E:H/RL:O/RC:C
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2021-003
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-21357
reference_id CVE-2021-21357
reference_type
scores
0
value 8.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H/E:H/RL:O/RC:C
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-21357
6
reference_url https://github.com/advisories/GHSA-3vg7-jw9m-pc3f
reference_id GHSA-3vg7-jw9m-pc3f
reference_type
scores
url https://github.com/advisories/GHSA-3vg7-jw9m-pc3f
7
reference_url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-3vg7-jw9m-pc3f
reference_id GHSA-3vg7-jw9m-pc3f
reference_type
scores
0
value 8.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H/E:H/RL:O/RC:C
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-3vg7-jw9m-pc3f
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.40
purl pkg:composer/typo3/cms-core@8.7.40
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-j8hk-bqnb-gycp
1
vulnerability VCID-sdjb-gp4t-vbgt
2
vulnerability VCID-uq77-aax5-k7d8
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.40
1
url pkg:composer/typo3/cms-core@9.5.25
purl pkg:composer/typo3/cms-core@9.5.25
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.25
2
url pkg:composer/typo3/cms-core@10.4.14
purl pkg:composer/typo3/cms-core@10.4.14
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@10.4.14
3
url pkg:composer/typo3/cms-core@11.1.1
purl pkg:composer/typo3/cms-core@11.1.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@11.1.1
aliases CVE-2021-21357, GHSA-3vg7-jw9m-pc3f
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1ffs-9vj5-27hk
1
url VCID-1knh-es99-dubw
vulnerability_id VCID-1knh-es99-dubw
summary 
Code Injection
Arbitrary Code Execution and Cross-Site Scripting in Backend API.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-019/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-019/
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.27
purl pkg:composer/typo3/cms-core@8.7.27
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-848u-w88s-5bbe
2
vulnerability VCID-ev4k-5k1d-2bhu
3
vulnerability VCID-fqkx-v8t5-q3h6
4
vulnerability VCID-jp1p-rfxa-hyd9
5
vulnerability VCID-tgyt-axv1-c7ag
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.27
1
url pkg:composer/typo3/cms-core@9.5.8
purl pkg:composer/typo3/cms-core@9.5.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1sfk-z8py-ykb8
2
vulnerability VCID-4an7-9ph4-mkd4
3
vulnerability VCID-6mnf-2fcw-dqgp
4
vulnerability VCID-848u-w88s-5bbe
5
vulnerability VCID-8w4e-d49b-nbg8
6
vulnerability VCID-bbh5-rss8-bfct
7
vulnerability VCID-e6zr-4bgg-kkh5
8
vulnerability VCID-ev4k-5k1d-2bhu
9
vulnerability VCID-fqkx-v8t5-q3h6
10
vulnerability VCID-jp1p-rfxa-hyd9
11
vulnerability VCID-n1gz-y615-cbbk
12
vulnerability VCID-tgyt-axv1-c7ag
13
vulnerability VCID-zkvq-bms4-gfcv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.8
aliases GMS-2019-168
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1knh-es99-dubw
2
url VCID-1prg-c74k-37ec
vulnerability_id VCID-1prg-c74k-37ec
summary 
Code Injection
Arbitrary Code Execution via File List Module.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-008/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-008/
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.23
purl pkg:composer/typo3/cms-core@8.7.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1knh-es99-dubw
2
vulnerability VCID-6ffw-r4k7-5qf8
3
vulnerability VCID-82ds-xda8-5ye4
4
vulnerability VCID-848u-w88s-5bbe
5
vulnerability VCID-8sek-v483-8ueu
6
vulnerability VCID-cv9x-ea8e-pufu
7
vulnerability VCID-e8ze-umec-a7hx
8
vulnerability VCID-ev4k-5k1d-2bhu
9
vulnerability VCID-fqkx-v8t5-q3h6
10
vulnerability VCID-hnyk-614g-yuhy
11
vulnerability VCID-jp1p-rfxa-hyd9
12
vulnerability VCID-qr1u-kcn9-cuf6
13
vulnerability VCID-tgyt-axv1-c7ag
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.23
1
url pkg:composer/typo3/cms-core@9.5.4
purl pkg:composer/typo3/cms-core@9.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1knh-es99-dubw
2
vulnerability VCID-1sfk-z8py-ykb8
3
vulnerability VCID-23ss-xwrm-1qcu
4
vulnerability VCID-4an7-9ph4-mkd4
5
vulnerability VCID-6ffw-r4k7-5qf8
6
vulnerability VCID-6mnf-2fcw-dqgp
7
vulnerability VCID-82ds-xda8-5ye4
8
vulnerability VCID-848u-w88s-5bbe
9
vulnerability VCID-8sek-v483-8ueu
10
vulnerability VCID-8w4e-d49b-nbg8
11
vulnerability VCID-bbh5-rss8-bfct
12
vulnerability VCID-cv9x-ea8e-pufu
13
vulnerability VCID-e6zr-4bgg-kkh5
14
vulnerability VCID-e8ze-umec-a7hx
15
vulnerability VCID-efrn-3w2z-xyaf
16
vulnerability VCID-ev4k-5k1d-2bhu
17
vulnerability VCID-fqkx-v8t5-q3h6
18
vulnerability VCID-hnyk-614g-yuhy
19
vulnerability VCID-jp1p-rfxa-hyd9
20
vulnerability VCID-n1gz-y615-cbbk
21
vulnerability VCID-qr1u-kcn9-cuf6
22
vulnerability VCID-tgyt-axv1-c7ag
23
vulnerability VCID-x5jb-yj3d-qbdf
24
vulnerability VCID-zeut-9wfp-q7et
25
vulnerability VCID-zhcb-h8ph-7uhk
26
vulnerability VCID-zkvq-bms4-gfcv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.4
aliases GMS-2019-158
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1prg-c74k-37ec
3
url VCID-2m67-xdxz-ryc2
vulnerability_id VCID-2m67-xdxz-ryc2
summary 
Improper Authentication
Authentication Bypass in TYPO3 CMS.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-001/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2018-001/
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.17
purl pkg:composer/typo3/cms-core@8.7.17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1knh-es99-dubw
2
vulnerability VCID-1prg-c74k-37ec
3
vulnerability VCID-6ffw-r4k7-5qf8
4
vulnerability VCID-6q7t-kdrg-8qc3
5
vulnerability VCID-6rgp-dzw1-kycx
6
vulnerability VCID-7ch1-q9f4-a7bt
7
vulnerability VCID-82ds-xda8-5ye4
8
vulnerability VCID-848u-w88s-5bbe
9
vulnerability VCID-8sek-v483-8ueu
10
vulnerability VCID-b92x-56ng-3ygy
11
vulnerability VCID-cg7w-xkyg-abgj
12
vulnerability VCID-cv9x-ea8e-pufu
13
vulnerability VCID-daz8-j1ns-rkgt
14
vulnerability VCID-e8ze-umec-a7hx
15
vulnerability VCID-e9jc-8mpp-fkgh
16
vulnerability VCID-ev4k-5k1d-2bhu
17
vulnerability VCID-fqkx-v8t5-q3h6
18
vulnerability VCID-hnyk-614g-yuhy
19
vulnerability VCID-jp1p-rfxa-hyd9
20
vulnerability VCID-k8r2-2ak8-qkak
21
vulnerability VCID-n56h-zuzr-ruhf
22
vulnerability VCID-nyw8-q5ef-2fcv
23
vulnerability VCID-pwh8-c992-vqav
24
vulnerability VCID-qr1u-kcn9-cuf6
25
vulnerability VCID-qxab-9uwr-yqhv
26
vulnerability VCID-tgyt-axv1-c7ag
27
vulnerability VCID-uaf3-fyst-u7gm
28
vulnerability VCID-uncp-sa58-ufdd
29
vulnerability VCID-wm4a-hcvt-vkbk
30
vulnerability VCID-z2bk-m2kw-h3c9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.17
1
url pkg:composer/typo3/cms-core@9.3.2
purl pkg:composer/typo3/cms-core@9.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1knh-es99-dubw
2
vulnerability VCID-1prg-c74k-37ec
3
vulnerability VCID-1sfk-z8py-ykb8
4
vulnerability VCID-23ss-xwrm-1qcu
5
vulnerability VCID-4an7-9ph4-mkd4
6
vulnerability VCID-6ffw-r4k7-5qf8
7
vulnerability VCID-6mnf-2fcw-dqgp
8
vulnerability VCID-6q7t-kdrg-8qc3
9
vulnerability VCID-6rgp-dzw1-kycx
10
vulnerability VCID-7ch1-q9f4-a7bt
11
vulnerability VCID-82ds-xda8-5ye4
12
vulnerability VCID-848u-w88s-5bbe
13
vulnerability VCID-8sek-v483-8ueu
14
vulnerability VCID-8w4e-d49b-nbg8
15
vulnerability VCID-bbh5-rss8-bfct
16
vulnerability VCID-cv9x-ea8e-pufu
17
vulnerability VCID-daz8-j1ns-rkgt
18
vulnerability VCID-e6zr-4bgg-kkh5
19
vulnerability VCID-e8ze-umec-a7hx
20
vulnerability VCID-e9jc-8mpp-fkgh
21
vulnerability VCID-efrn-3w2z-xyaf
22
vulnerability VCID-ev4k-5k1d-2bhu
23
vulnerability VCID-fqkx-v8t5-q3h6
24
vulnerability VCID-hnyk-614g-yuhy
25
vulnerability VCID-jp1p-rfxa-hyd9
26
vulnerability VCID-k8r2-2ak8-qkak
27
vulnerability VCID-n1gz-y615-cbbk
28
vulnerability VCID-n56h-zuzr-ruhf
29
vulnerability VCID-nyw8-q5ef-2fcv
30
vulnerability VCID-pwh8-c992-vqav
31
vulnerability VCID-qr1u-kcn9-cuf6
32
vulnerability VCID-qxab-9uwr-yqhv
33
vulnerability VCID-tgyt-axv1-c7ag
34
vulnerability VCID-uaf3-fyst-u7gm
35
vulnerability VCID-uncp-sa58-ufdd
36
vulnerability VCID-v7b1-x8hy-2kcg
37
vulnerability VCID-wm4a-hcvt-vkbk
38
vulnerability VCID-x5jb-yj3d-qbdf
39
vulnerability VCID-z2bk-m2kw-h3c9
40
vulnerability VCID-zeut-9wfp-q7et
41
vulnerability VCID-zhcb-h8ph-7uhk
42
vulnerability VCID-zkvq-bms4-gfcv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.3.2
aliases GMS-2018-81
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2m67-xdxz-ryc2
4
url VCID-6ffw-r4k7-5qf8
vulnerability_id VCID-6ffw-r4k7-5qf8
summary Security Misconfiguration in Frontend Session Handling.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-018/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-018/
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.27
purl pkg:composer/typo3/cms-core@8.7.27
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-848u-w88s-5bbe
2
vulnerability VCID-ev4k-5k1d-2bhu
3
vulnerability VCID-fqkx-v8t5-q3h6
4
vulnerability VCID-jp1p-rfxa-hyd9
5
vulnerability VCID-tgyt-axv1-c7ag
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.27
1
url pkg:composer/typo3/cms-core@9.5.8
purl pkg:composer/typo3/cms-core@9.5.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1sfk-z8py-ykb8
2
vulnerability VCID-4an7-9ph4-mkd4
3
vulnerability VCID-6mnf-2fcw-dqgp
4
vulnerability VCID-848u-w88s-5bbe
5
vulnerability VCID-8w4e-d49b-nbg8
6
vulnerability VCID-bbh5-rss8-bfct
7
vulnerability VCID-e6zr-4bgg-kkh5
8
vulnerability VCID-ev4k-5k1d-2bhu
9
vulnerability VCID-fqkx-v8t5-q3h6
10
vulnerability VCID-jp1p-rfxa-hyd9
11
vulnerability VCID-n1gz-y615-cbbk
12
vulnerability VCID-tgyt-axv1-c7ag
13
vulnerability VCID-zkvq-bms4-gfcv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.8
aliases GMS-2019-167
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6ffw-r4k7-5qf8
5
url VCID-6q7t-kdrg-8qc3
vulnerability_id VCID-6q7t-kdrg-8qc3
summary Security Misconfiguration for Backend User Accounts.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-002/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-002/
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.23
purl pkg:composer/typo3/cms-core@8.7.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1knh-es99-dubw
2
vulnerability VCID-6ffw-r4k7-5qf8
3
vulnerability VCID-82ds-xda8-5ye4
4
vulnerability VCID-848u-w88s-5bbe
5
vulnerability VCID-8sek-v483-8ueu
6
vulnerability VCID-cv9x-ea8e-pufu
7
vulnerability VCID-e8ze-umec-a7hx
8
vulnerability VCID-ev4k-5k1d-2bhu
9
vulnerability VCID-fqkx-v8t5-q3h6
10
vulnerability VCID-hnyk-614g-yuhy
11
vulnerability VCID-jp1p-rfxa-hyd9
12
vulnerability VCID-qr1u-kcn9-cuf6
13
vulnerability VCID-tgyt-axv1-c7ag
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.23
1
url pkg:composer/typo3/cms-core@9.5.4
purl pkg:composer/typo3/cms-core@9.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1knh-es99-dubw
2
vulnerability VCID-1sfk-z8py-ykb8
3
vulnerability VCID-23ss-xwrm-1qcu
4
vulnerability VCID-4an7-9ph4-mkd4
5
vulnerability VCID-6ffw-r4k7-5qf8
6
vulnerability VCID-6mnf-2fcw-dqgp
7
vulnerability VCID-82ds-xda8-5ye4
8
vulnerability VCID-848u-w88s-5bbe
9
vulnerability VCID-8sek-v483-8ueu
10
vulnerability VCID-8w4e-d49b-nbg8
11
vulnerability VCID-bbh5-rss8-bfct
12
vulnerability VCID-cv9x-ea8e-pufu
13
vulnerability VCID-e6zr-4bgg-kkh5
14
vulnerability VCID-e8ze-umec-a7hx
15
vulnerability VCID-efrn-3w2z-xyaf
16
vulnerability VCID-ev4k-5k1d-2bhu
17
vulnerability VCID-fqkx-v8t5-q3h6
18
vulnerability VCID-hnyk-614g-yuhy
19
vulnerability VCID-jp1p-rfxa-hyd9
20
vulnerability VCID-n1gz-y615-cbbk
21
vulnerability VCID-qr1u-kcn9-cuf6
22
vulnerability VCID-tgyt-axv1-c7ag
23
vulnerability VCID-x5jb-yj3d-qbdf
24
vulnerability VCID-zeut-9wfp-q7et
25
vulnerability VCID-zhcb-h8ph-7uhk
26
vulnerability VCID-zkvq-bms4-gfcv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.4
aliases GMS-2019-153
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6q7t-kdrg-8qc3
6
url VCID-6rgp-dzw1-kycx
vulnerability_id VCID-6rgp-dzw1-kycx
summary 
Cross-site Scripting
Cross-Site Scripting in Bootstrap CSS toolkit.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-006/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-006/
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.23
purl pkg:composer/typo3/cms-core@8.7.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1knh-es99-dubw
2
vulnerability VCID-6ffw-r4k7-5qf8
3
vulnerability VCID-82ds-xda8-5ye4
4
vulnerability VCID-848u-w88s-5bbe
5
vulnerability VCID-8sek-v483-8ueu
6
vulnerability VCID-cv9x-ea8e-pufu
7
vulnerability VCID-e8ze-umec-a7hx
8
vulnerability VCID-ev4k-5k1d-2bhu
9
vulnerability VCID-fqkx-v8t5-q3h6
10
vulnerability VCID-hnyk-614g-yuhy
11
vulnerability VCID-jp1p-rfxa-hyd9
12
vulnerability VCID-qr1u-kcn9-cuf6
13
vulnerability VCID-tgyt-axv1-c7ag
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.23
1
url pkg:composer/typo3/cms-core@9.5.4
purl pkg:composer/typo3/cms-core@9.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1knh-es99-dubw
2
vulnerability VCID-1sfk-z8py-ykb8
3
vulnerability VCID-23ss-xwrm-1qcu
4
vulnerability VCID-4an7-9ph4-mkd4
5
vulnerability VCID-6ffw-r4k7-5qf8
6
vulnerability VCID-6mnf-2fcw-dqgp
7
vulnerability VCID-82ds-xda8-5ye4
8
vulnerability VCID-848u-w88s-5bbe
9
vulnerability VCID-8sek-v483-8ueu
10
vulnerability VCID-8w4e-d49b-nbg8
11
vulnerability VCID-bbh5-rss8-bfct
12
vulnerability VCID-cv9x-ea8e-pufu
13
vulnerability VCID-e6zr-4bgg-kkh5
14
vulnerability VCID-e8ze-umec-a7hx
15
vulnerability VCID-efrn-3w2z-xyaf
16
vulnerability VCID-ev4k-5k1d-2bhu
17
vulnerability VCID-fqkx-v8t5-q3h6
18
vulnerability VCID-hnyk-614g-yuhy
19
vulnerability VCID-jp1p-rfxa-hyd9
20
vulnerability VCID-n1gz-y615-cbbk
21
vulnerability VCID-qr1u-kcn9-cuf6
22
vulnerability VCID-tgyt-axv1-c7ag
23
vulnerability VCID-x5jb-yj3d-qbdf
24
vulnerability VCID-zeut-9wfp-q7et
25
vulnerability VCID-zhcb-h8ph-7uhk
26
vulnerability VCID-zkvq-bms4-gfcv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.4
aliases GMS-2019-156
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6rgp-dzw1-kycx
7
url VCID-7ch1-q9f4-a7bt
vulnerability_id VCID-7ch1-q9f4-a7bt
summary 
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
In Bootstrap, XSS is possible in the data-target property of scrollspy.
references
0
reference_url http://packetstormsecurity.com/files/152787/dotCMS-5.1.1-Vulnerable-Dependencies.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://packetstormsecurity.com/files/152787/dotCMS-5.1.1-Vulnerable-Dependencies.html
1
reference_url http://packetstormsecurity.com/files/156743/OctoberCMS-Insecure-Dependencies.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://packetstormsecurity.com/files/156743/OctoberCMS-Insecure-Dependencies.html
2
reference_url https://access.redhat.com/errata/RHSA-2019:1456
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2019:1456
3
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14041.json
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14041.json
4
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-14041
reference_id
reference_type
scores
0
value 0.07723
scoring_system epss
scoring_elements 0.92076
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-14041
5
reference_url https://blog.getbootstrap.com/2018/07/12/bootstrap-4-1-2
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3
scoring_elements
1
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://blog.getbootstrap.com/2018/07/12/bootstrap-4-1-2
6
reference_url http://seclists.org/fulldisclosure/2019/May/10
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://seclists.org/fulldisclosure/2019/May/10
7
reference_url http://seclists.org/fulldisclosure/2019/May/11
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://seclists.org/fulldisclosure/2019/May/11
8
reference_url http://seclists.org/fulldisclosure/2019/May/13
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://seclists.org/fulldisclosure/2019/May/13
9
reference_url https://github.com/twbs/bootstrap
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/twbs/bootstrap
10
reference_url https://github.com/twbs/bootstrap/issues/26423
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/twbs/bootstrap/issues/26423
11
reference_url https://github.com/twbs/bootstrap/issues/26627
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/twbs/bootstrap/issues/26627
12
reference_url https://github.com/twbs/bootstrap/pull/26630
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/twbs/bootstrap/pull/26630
13
reference_url https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E
14
reference_url https://lists.apache.org/thread.html/52e0e6b5df827ee7f1e68f7cc3babe61af3b2160f5d74a85469b7b0e@%3Cdev.superset.apache.org%3E
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/52e0e6b5df827ee7f1e68f7cc3babe61af3b2160f5d74a85469b7b0e@%3Cdev.superset.apache.org%3E
15
reference_url https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E
16
reference_url https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E
17
reference_url https://lists.apache.org/thread.html/r3dc0cac8d856bca02bd6997355d7ff83027dcfc82f8646a29b89b714@%3Cissues.hbase.apache.org%3E
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r3dc0cac8d856bca02bd6997355d7ff83027dcfc82f8646a29b89b714@%3Cissues.hbase.apache.org%3E
18
reference_url https://seclists.org/bugtraq/2019/May/18
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://seclists.org/bugtraq/2019/May/18
19
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-006
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2019-006
20
reference_url https://www.oracle.com/security-alerts/cpuApr2021.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.oracle.com/security-alerts/cpuApr2021.html
21
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1601616
reference_id 1601616
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1601616
22
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-14041
reference_id CVE-2018-14041
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-14041
23
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2018-14041.yaml
reference_id CVE-2018-14041.YAML
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2018-14041.yaml
24
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2018-14041.yaml
reference_id CVE-2018-14041.YAML
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2018-14041.yaml
25
reference_url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/bootstrap/CVE-2018-14041.yml
reference_id CVE-2018-14041.YML
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/bootstrap/CVE-2018-14041.yml
26
reference_url https://github.com/advisories/GHSA-pj7m-g53m-7638
reference_id GHSA-pj7m-g53m-7638
reference_type
scores
url https://github.com/advisories/GHSA-pj7m-g53m-7638
27
reference_url https://access.redhat.com/errata/RHSA-2023:0552
reference_id RHSA-2023:0552
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:0552
28
reference_url https://access.redhat.com/errata/RHSA-2023:0553
reference_id RHSA-2023:0553
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:0553
29
reference_url https://access.redhat.com/errata/RHSA-2023:0554
reference_id RHSA-2023:0554
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:0554
30
reference_url https://access.redhat.com/errata/RHSA-2023:0556
reference_id RHSA-2023:0556
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:0556
31
reference_url https://access.redhat.com/errata/RHSA-2023:5693
reference_id RHSA-2023:5693
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:5693
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.23
purl pkg:composer/typo3/cms-core@8.7.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1knh-es99-dubw
2
vulnerability VCID-6ffw-r4k7-5qf8
3
vulnerability VCID-82ds-xda8-5ye4
4
vulnerability VCID-848u-w88s-5bbe
5
vulnerability VCID-8sek-v483-8ueu
6
vulnerability VCID-cv9x-ea8e-pufu
7
vulnerability VCID-e8ze-umec-a7hx
8
vulnerability VCID-ev4k-5k1d-2bhu
9
vulnerability VCID-fqkx-v8t5-q3h6
10
vulnerability VCID-hnyk-614g-yuhy
11
vulnerability VCID-jp1p-rfxa-hyd9
12
vulnerability VCID-qr1u-kcn9-cuf6
13
vulnerability VCID-tgyt-axv1-c7ag
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.23
1
url pkg:composer/typo3/cms-core@9.5.4
purl pkg:composer/typo3/cms-core@9.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1knh-es99-dubw
2
vulnerability VCID-1sfk-z8py-ykb8
3
vulnerability VCID-23ss-xwrm-1qcu
4
vulnerability VCID-4an7-9ph4-mkd4
5
vulnerability VCID-6ffw-r4k7-5qf8
6
vulnerability VCID-6mnf-2fcw-dqgp
7
vulnerability VCID-82ds-xda8-5ye4
8
vulnerability VCID-848u-w88s-5bbe
9
vulnerability VCID-8sek-v483-8ueu
10
vulnerability VCID-8w4e-d49b-nbg8
11
vulnerability VCID-bbh5-rss8-bfct
12
vulnerability VCID-cv9x-ea8e-pufu
13
vulnerability VCID-e6zr-4bgg-kkh5
14
vulnerability VCID-e8ze-umec-a7hx
15
vulnerability VCID-efrn-3w2z-xyaf
16
vulnerability VCID-ev4k-5k1d-2bhu
17
vulnerability VCID-fqkx-v8t5-q3h6
18
vulnerability VCID-hnyk-614g-yuhy
19
vulnerability VCID-jp1p-rfxa-hyd9
20
vulnerability VCID-n1gz-y615-cbbk
21
vulnerability VCID-qr1u-kcn9-cuf6
22
vulnerability VCID-tgyt-axv1-c7ag
23
vulnerability VCID-x5jb-yj3d-qbdf
24
vulnerability VCID-zeut-9wfp-q7et
25
vulnerability VCID-zhcb-h8ph-7uhk
26
vulnerability VCID-zkvq-bms4-gfcv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.4
aliases CVE-2018-14041, GHSA-pj7m-g53m-7638
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7ch1-q9f4-a7bt
8
url VCID-82ds-xda8-5ye4
vulnerability_id VCID-82ds-xda8-5ye4
summary Insecure Deserialization in TYPO3 CMS.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-020/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-020/
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.27
purl pkg:composer/typo3/cms-core@8.7.27
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-848u-w88s-5bbe
2
vulnerability VCID-ev4k-5k1d-2bhu
3
vulnerability VCID-fqkx-v8t5-q3h6
4
vulnerability VCID-jp1p-rfxa-hyd9
5
vulnerability VCID-tgyt-axv1-c7ag
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.27
1
url pkg:composer/typo3/cms-core@9.5.8
purl pkg:composer/typo3/cms-core@9.5.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1sfk-z8py-ykb8
2
vulnerability VCID-4an7-9ph4-mkd4
3
vulnerability VCID-6mnf-2fcw-dqgp
4
vulnerability VCID-848u-w88s-5bbe
5
vulnerability VCID-8w4e-d49b-nbg8
6
vulnerability VCID-bbh5-rss8-bfct
7
vulnerability VCID-e6zr-4bgg-kkh5
8
vulnerability VCID-ev4k-5k1d-2bhu
9
vulnerability VCID-fqkx-v8t5-q3h6
10
vulnerability VCID-jp1p-rfxa-hyd9
11
vulnerability VCID-n1gz-y615-cbbk
12
vulnerability VCID-tgyt-axv1-c7ag
13
vulnerability VCID-zkvq-bms4-gfcv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.8
aliases GMS-2019-169
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-82ds-xda8-5ye4
9
url VCID-848u-w88s-5bbe
vulnerability_id VCID-848u-w88s-5bbe
summary 
Unrestricted Upload of File with Dangerous Type
Due to the lack of ensuring file extensions belong to configured allowed mime-types, attackers can upload arbitrary data with arbitrary file extensions - however, default `_fileDenyPattern_` successfully blocked files like `_.htaccess_` or `_malicious.php_`. Additionally, `_UploadedFileReferenceConverter_` transforming uploaded files into proper FileReference domain model objects handles possible file uploads for other extensions as well - given those extensions use the Extbase MVC framework, make use of FileReference items in their direct or inherited domain model definitions and did not implement their own type converter. In case this scenario applies, `_UploadedFileReferenceConverter_` accepts any file mime-type and persists files in the default location. In any way, uploaded files are placed in the default location `_/fileadmin/user_upload/_`, in most scenarios keeping the submitted filename - which allows attackers to directly reference files, or even correctly guess filenames used by other individuals, disclosing this information. No authentication is required to exploit this vulnerability.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-21355
reference_id
reference_type
scores
0
value 0.00416
scoring_system epss
scoring_elements 0.62059
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-21355
1
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21355.yaml
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L/E:F/RL:O/RC:C
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21355.yaml
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21355.yaml
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L/E:F/RL:O/RC:C
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21355.yaml
3
reference_url https://packagist.org/packages/typo3/cms-form
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L/E:F/RL:O/RC:C
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://packagist.org/packages/typo3/cms-form
4
reference_url https://typo3.org/security/advisory/typo3-core-sa-2021-002
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L/E:F/RL:O/RC:C
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2021-002
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-21355
reference_id CVE-2021-21355
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L/E:F/RL:O/RC:C
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-21355
6
reference_url https://github.com/advisories/GHSA-2r6j-862c-m2v2
reference_id GHSA-2r6j-862c-m2v2
reference_type
scores
url https://github.com/advisories/GHSA-2r6j-862c-m2v2
7
reference_url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-2r6j-862c-m2v2
reference_id GHSA-2r6j-862c-m2v2
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L/E:F/RL:O/RC:C
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-2r6j-862c-m2v2
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.40
purl pkg:composer/typo3/cms-core@8.7.40
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-j8hk-bqnb-gycp
1
vulnerability VCID-sdjb-gp4t-vbgt
2
vulnerability VCID-uq77-aax5-k7d8
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.40
1
url pkg:composer/typo3/cms-core@9.5.25
purl pkg:composer/typo3/cms-core@9.5.25
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.25
2
url pkg:composer/typo3/cms-core@10.4.14
purl pkg:composer/typo3/cms-core@10.4.14
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@10.4.14
3
url pkg:composer/typo3/cms-core@11.1.1
purl pkg:composer/typo3/cms-core@11.1.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@11.1.1
aliases CVE-2021-21355, GHSA-2r6j-862c-m2v2
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-848u-w88s-5bbe
10
url VCID-8sek-v483-8ueu
vulnerability_id VCID-8sek-v483-8ueu
summary 
Code Injection
Possible Arbitrary Code Execution in Image Processing.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-012/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-012/
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.25
purl pkg:composer/typo3/cms-core@8.7.25
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1knh-es99-dubw
2
vulnerability VCID-6ffw-r4k7-5qf8
3
vulnerability VCID-82ds-xda8-5ye4
4
vulnerability VCID-848u-w88s-5bbe
5
vulnerability VCID-cbmm-1b2k-8qaz
6
vulnerability VCID-cv9x-ea8e-pufu
7
vulnerability VCID-e8ze-umec-a7hx
8
vulnerability VCID-ev4k-5k1d-2bhu
9
vulnerability VCID-fqkx-v8t5-q3h6
10
vulnerability VCID-jp1p-rfxa-hyd9
11
vulnerability VCID-tgyt-axv1-c7ag
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.25
1
url pkg:composer/typo3/cms-core@9.5.6
purl pkg:composer/typo3/cms-core@9.5.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1knh-es99-dubw
2
vulnerability VCID-1sfk-z8py-ykb8
3
vulnerability VCID-23ss-xwrm-1qcu
4
vulnerability VCID-4an7-9ph4-mkd4
5
vulnerability VCID-6ffw-r4k7-5qf8
6
vulnerability VCID-6mnf-2fcw-dqgp
7
vulnerability VCID-82ds-xda8-5ye4
8
vulnerability VCID-848u-w88s-5bbe
9
vulnerability VCID-8w4e-d49b-nbg8
10
vulnerability VCID-bbh5-rss8-bfct
11
vulnerability VCID-cbmm-1b2k-8qaz
12
vulnerability VCID-cv9x-ea8e-pufu
13
vulnerability VCID-e6zr-4bgg-kkh5
14
vulnerability VCID-e8ze-umec-a7hx
15
vulnerability VCID-efrn-3w2z-xyaf
16
vulnerability VCID-ev4k-5k1d-2bhu
17
vulnerability VCID-fqkx-v8t5-q3h6
18
vulnerability VCID-jp1p-rfxa-hyd9
19
vulnerability VCID-n1gz-y615-cbbk
20
vulnerability VCID-tgyt-axv1-c7ag
21
vulnerability VCID-zeut-9wfp-q7et
22
vulnerability VCID-zkvq-bms4-gfcv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.6
aliases GMS-2019-162
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8sek-v483-8ueu
11
url VCID-b92x-56ng-3ygy
vulnerability_id VCID-b92x-56ng-3ygy
summary 
Uncontrolled Resource Consumption
Denial of Service in Frontend Record Registration.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-012/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2018-012/
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.21
purl pkg:composer/typo3/cms-core@8.7.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1knh-es99-dubw
2
vulnerability VCID-1prg-c74k-37ec
3
vulnerability VCID-6ffw-r4k7-5qf8
4
vulnerability VCID-6q7t-kdrg-8qc3
5
vulnerability VCID-6rgp-dzw1-kycx
6
vulnerability VCID-82ds-xda8-5ye4
7
vulnerability VCID-848u-w88s-5bbe
8
vulnerability VCID-8sek-v483-8ueu
9
vulnerability VCID-cg7w-xkyg-abgj
10
vulnerability VCID-cv9x-ea8e-pufu
11
vulnerability VCID-e8ze-umec-a7hx
12
vulnerability VCID-ev4k-5k1d-2bhu
13
vulnerability VCID-fqkx-v8t5-q3h6
14
vulnerability VCID-hnyk-614g-yuhy
15
vulnerability VCID-jp1p-rfxa-hyd9
16
vulnerability VCID-k8r2-2ak8-qkak
17
vulnerability VCID-n56h-zuzr-ruhf
18
vulnerability VCID-qr1u-kcn9-cuf6
19
vulnerability VCID-tgyt-axv1-c7ag
20
vulnerability VCID-wm4a-hcvt-vkbk
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.21
1
url pkg:composer/typo3/cms-core@9.0.0
purl pkg:composer/typo3/cms-core@9.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-11sw-6x9k-vued
1
vulnerability VCID-13up-fwbr-17am
2
vulnerability VCID-1ffs-9vj5-27hk
3
vulnerability VCID-1knh-es99-dubw
4
vulnerability VCID-1prg-c74k-37ec
5
vulnerability VCID-1sfk-z8py-ykb8
6
vulnerability VCID-23ss-xwrm-1qcu
7
vulnerability VCID-2m67-xdxz-ryc2
8
vulnerability VCID-2rhr-8vaz-hqfj
9
vulnerability VCID-2rmv-a83x-9ka8
10
vulnerability VCID-36cz-khgc-6fft
11
vulnerability VCID-3ebd-765h-j3g7
12
vulnerability VCID-3hta-35zx-zuc4
13
vulnerability VCID-4an7-9ph4-mkd4
14
vulnerability VCID-4q6d-bd3h-t7f4
15
vulnerability VCID-4rfq-u488-sbh5
16
vulnerability VCID-51k2-j834-pffb
17
vulnerability VCID-5k47-9k7t-rqak
18
vulnerability VCID-5nq2-nchj-fkc8
19
vulnerability VCID-5ync-ktk5-23gh
20
vulnerability VCID-6ffw-r4k7-5qf8
21
vulnerability VCID-6mnf-2fcw-dqgp
22
vulnerability VCID-6q7t-kdrg-8qc3
23
vulnerability VCID-6rgp-dzw1-kycx
24
vulnerability VCID-6xgm-uan4-u7fu
25
vulnerability VCID-78ff-k66z-bkh7
26
vulnerability VCID-7auq-pwty-pkfh
27
vulnerability VCID-7ch1-q9f4-a7bt
28
vulnerability VCID-7r4g-gxc6-hubh
29
vulnerability VCID-7snt-7hyt-1fbx
30
vulnerability VCID-8216-asqx-f7eb
31
vulnerability VCID-82ds-xda8-5ye4
32
vulnerability VCID-848u-w88s-5bbe
33
vulnerability VCID-87ej-qn3k-t3dy
34
vulnerability VCID-8sek-v483-8ueu
35
vulnerability VCID-8w4e-d49b-nbg8
36
vulnerability VCID-9c49-n1a2-pubu
37
vulnerability VCID-9mpc-hjjh-u3d2
38
vulnerability VCID-a1g9-pyz5-9fca
39
vulnerability VCID-an3r-c2yp-1bbd
40
vulnerability VCID-bbh5-rss8-bfct
41
vulnerability VCID-bzqv-s7g3-wff9
42
vulnerability VCID-cf9m-qdyj-eyav
43
vulnerability VCID-cgny-nmk3-4fcd
44
vulnerability VCID-cq82-qt6v-dfhz
45
vulnerability VCID-cv9x-ea8e-pufu
46
vulnerability VCID-daz8-j1ns-rkgt
47
vulnerability VCID-dzrt-8tny-kbcy
48
vulnerability VCID-e6zr-4bgg-kkh5
49
vulnerability VCID-e8ze-umec-a7hx
50
vulnerability VCID-e9jc-8mpp-fkgh
51
vulnerability VCID-efrn-3w2z-xyaf
52
vulnerability VCID-eq57-btkt-hug8
53
vulnerability VCID-etcc-43a3-a7ek
54
vulnerability VCID-ev4k-5k1d-2bhu
55
vulnerability VCID-f9pk-cwyr-a7cv
56
vulnerability VCID-fgkd-jp96-cbcs
57
vulnerability VCID-fqkx-v8t5-q3h6
58
vulnerability VCID-g3t9-1yx2-6ufd
59
vulnerability VCID-gbev-1zs8-8bac
60
vulnerability VCID-gemf-j9uj-jka1
61
vulnerability VCID-gvag-nxmd-s7d1
62
vulnerability VCID-hfcx-1kuh-p3ez
63
vulnerability VCID-hnyk-614g-yuhy
64
vulnerability VCID-hr6r-88m3-9udv
65
vulnerability VCID-hsw8-nbs6-auaa
66
vulnerability VCID-j8hk-bqnb-gycp
67
vulnerability VCID-jp1p-rfxa-hyd9
68
vulnerability VCID-k8r2-2ak8-qkak
69
vulnerability VCID-ke39-846j-kbh3
70
vulnerability VCID-myhc-dyh9-xygg
71
vulnerability VCID-n1gz-y615-cbbk
72
vulnerability VCID-n56h-zuzr-ruhf
73
vulnerability VCID-nyw8-q5ef-2fcv
74
vulnerability VCID-p7gd-anw2-1qbz
75
vulnerability VCID-pwh8-c992-vqav
76
vulnerability VCID-qr1u-kcn9-cuf6
77
vulnerability VCID-qtyt-338b-ayay
78
vulnerability VCID-qv14-m93d-jyd9
79
vulnerability VCID-qxab-9uwr-yqhv
80
vulnerability VCID-rqrw-t2kj-mud8
81
vulnerability VCID-rzx5-nv6h-qqhg
82
vulnerability VCID-sdjb-gp4t-vbgt
83
vulnerability VCID-tgyt-axv1-c7ag
84
vulnerability VCID-tzpj-j3x1-ekgk
85
vulnerability VCID-uaf3-fyst-u7gm
86
vulnerability VCID-uhrk-ad4f-nqgh
87
vulnerability VCID-un7r-8sah-33cr
88
vulnerability VCID-uncp-sa58-ufdd
89
vulnerability VCID-uq77-aax5-k7d8
90
vulnerability VCID-uua1-9rt1-dfbz
91
vulnerability VCID-v7b1-x8hy-2kcg
92
vulnerability VCID-w94g-xxea-23fb
93
vulnerability VCID-wm4a-hcvt-vkbk
94
vulnerability VCID-x3n3-tsjh-8kby
95
vulnerability VCID-x5jb-yj3d-qbdf
96
vulnerability VCID-xw1s-93bu-wuh9
97
vulnerability VCID-y3zj-acc7-jkau
98
vulnerability VCID-yf3d-yyzq-guh1
99
vulnerability VCID-ygw1-vqxg-z3h3
100
vulnerability VCID-z2bk-m2kw-h3c9
101
vulnerability VCID-z718-97ez-r7g3
102
vulnerability VCID-zbm9-cx69-wqg3
103
vulnerability VCID-zeut-9wfp-q7et
104
vulnerability VCID-zhcb-h8ph-7uhk
105
vulnerability VCID-zkvq-bms4-gfcv
106
vulnerability VCID-zybp-mb3d-jyee
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.0.0
aliases GMS-2018-91
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-b92x-56ng-3ygy
12
url VCID-cf9m-qdyj-eyav
vulnerability_id VCID-cf9m-qdyj-eyav
summary Privilege Escalation & SQL Injection in TYPO3 CMS.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-003/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2018-003/
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.17
purl pkg:composer/typo3/cms-core@8.7.17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1knh-es99-dubw
2
vulnerability VCID-1prg-c74k-37ec
3
vulnerability VCID-6ffw-r4k7-5qf8
4
vulnerability VCID-6q7t-kdrg-8qc3
5
vulnerability VCID-6rgp-dzw1-kycx
6
vulnerability VCID-7ch1-q9f4-a7bt
7
vulnerability VCID-82ds-xda8-5ye4
8
vulnerability VCID-848u-w88s-5bbe
9
vulnerability VCID-8sek-v483-8ueu
10
vulnerability VCID-b92x-56ng-3ygy
11
vulnerability VCID-cg7w-xkyg-abgj
12
vulnerability VCID-cv9x-ea8e-pufu
13
vulnerability VCID-daz8-j1ns-rkgt
14
vulnerability VCID-e8ze-umec-a7hx
15
vulnerability VCID-e9jc-8mpp-fkgh
16
vulnerability VCID-ev4k-5k1d-2bhu
17
vulnerability VCID-fqkx-v8t5-q3h6
18
vulnerability VCID-hnyk-614g-yuhy
19
vulnerability VCID-jp1p-rfxa-hyd9
20
vulnerability VCID-k8r2-2ak8-qkak
21
vulnerability VCID-n56h-zuzr-ruhf
22
vulnerability VCID-nyw8-q5ef-2fcv
23
vulnerability VCID-pwh8-c992-vqav
24
vulnerability VCID-qr1u-kcn9-cuf6
25
vulnerability VCID-qxab-9uwr-yqhv
26
vulnerability VCID-tgyt-axv1-c7ag
27
vulnerability VCID-uaf3-fyst-u7gm
28
vulnerability VCID-uncp-sa58-ufdd
29
vulnerability VCID-wm4a-hcvt-vkbk
30
vulnerability VCID-z2bk-m2kw-h3c9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.17
1
url pkg:composer/typo3/cms-core@9.3.2
purl pkg:composer/typo3/cms-core@9.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1knh-es99-dubw
2
vulnerability VCID-1prg-c74k-37ec
3
vulnerability VCID-1sfk-z8py-ykb8
4
vulnerability VCID-23ss-xwrm-1qcu
5
vulnerability VCID-4an7-9ph4-mkd4
6
vulnerability VCID-6ffw-r4k7-5qf8
7
vulnerability VCID-6mnf-2fcw-dqgp
8
vulnerability VCID-6q7t-kdrg-8qc3
9
vulnerability VCID-6rgp-dzw1-kycx
10
vulnerability VCID-7ch1-q9f4-a7bt
11
vulnerability VCID-82ds-xda8-5ye4
12
vulnerability VCID-848u-w88s-5bbe
13
vulnerability VCID-8sek-v483-8ueu
14
vulnerability VCID-8w4e-d49b-nbg8
15
vulnerability VCID-bbh5-rss8-bfct
16
vulnerability VCID-cv9x-ea8e-pufu
17
vulnerability VCID-daz8-j1ns-rkgt
18
vulnerability VCID-e6zr-4bgg-kkh5
19
vulnerability VCID-e8ze-umec-a7hx
20
vulnerability VCID-e9jc-8mpp-fkgh
21
vulnerability VCID-efrn-3w2z-xyaf
22
vulnerability VCID-ev4k-5k1d-2bhu
23
vulnerability VCID-fqkx-v8t5-q3h6
24
vulnerability VCID-hnyk-614g-yuhy
25
vulnerability VCID-jp1p-rfxa-hyd9
26
vulnerability VCID-k8r2-2ak8-qkak
27
vulnerability VCID-n1gz-y615-cbbk
28
vulnerability VCID-n56h-zuzr-ruhf
29
vulnerability VCID-nyw8-q5ef-2fcv
30
vulnerability VCID-pwh8-c992-vqav
31
vulnerability VCID-qr1u-kcn9-cuf6
32
vulnerability VCID-qxab-9uwr-yqhv
33
vulnerability VCID-tgyt-axv1-c7ag
34
vulnerability VCID-uaf3-fyst-u7gm
35
vulnerability VCID-uncp-sa58-ufdd
36
vulnerability VCID-v7b1-x8hy-2kcg
37
vulnerability VCID-wm4a-hcvt-vkbk
38
vulnerability VCID-x5jb-yj3d-qbdf
39
vulnerability VCID-z2bk-m2kw-h3c9
40
vulnerability VCID-zeut-9wfp-q7et
41
vulnerability VCID-zhcb-h8ph-7uhk
42
vulnerability VCID-zkvq-bms4-gfcv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.3.2
aliases GMS-2018-83
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-cf9m-qdyj-eyav
13
url VCID-cg7w-xkyg-abgj
vulnerability_id VCID-cg7w-xkyg-abgj
summary 
Improper Access Control
Broken Access Control in Localization Handling.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-003/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-003/
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.23
purl pkg:composer/typo3/cms-core@8.7.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1knh-es99-dubw
2
vulnerability VCID-6ffw-r4k7-5qf8
3
vulnerability VCID-82ds-xda8-5ye4
4
vulnerability VCID-848u-w88s-5bbe
5
vulnerability VCID-8sek-v483-8ueu
6
vulnerability VCID-cv9x-ea8e-pufu
7
vulnerability VCID-e8ze-umec-a7hx
8
vulnerability VCID-ev4k-5k1d-2bhu
9
vulnerability VCID-fqkx-v8t5-q3h6
10
vulnerability VCID-hnyk-614g-yuhy
11
vulnerability VCID-jp1p-rfxa-hyd9
12
vulnerability VCID-qr1u-kcn9-cuf6
13
vulnerability VCID-tgyt-axv1-c7ag
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.23
1
url pkg:composer/typo3/cms-core@9.0.0
purl pkg:composer/typo3/cms-core@9.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-11sw-6x9k-vued
1
vulnerability VCID-13up-fwbr-17am
2
vulnerability VCID-1ffs-9vj5-27hk
3
vulnerability VCID-1knh-es99-dubw
4
vulnerability VCID-1prg-c74k-37ec
5
vulnerability VCID-1sfk-z8py-ykb8
6
vulnerability VCID-23ss-xwrm-1qcu
7
vulnerability VCID-2m67-xdxz-ryc2
8
vulnerability VCID-2rhr-8vaz-hqfj
9
vulnerability VCID-2rmv-a83x-9ka8
10
vulnerability VCID-36cz-khgc-6fft
11
vulnerability VCID-3ebd-765h-j3g7
12
vulnerability VCID-3hta-35zx-zuc4
13
vulnerability VCID-4an7-9ph4-mkd4
14
vulnerability VCID-4q6d-bd3h-t7f4
15
vulnerability VCID-4rfq-u488-sbh5
16
vulnerability VCID-51k2-j834-pffb
17
vulnerability VCID-5k47-9k7t-rqak
18
vulnerability VCID-5nq2-nchj-fkc8
19
vulnerability VCID-5ync-ktk5-23gh
20
vulnerability VCID-6ffw-r4k7-5qf8
21
vulnerability VCID-6mnf-2fcw-dqgp
22
vulnerability VCID-6q7t-kdrg-8qc3
23
vulnerability VCID-6rgp-dzw1-kycx
24
vulnerability VCID-6xgm-uan4-u7fu
25
vulnerability VCID-78ff-k66z-bkh7
26
vulnerability VCID-7auq-pwty-pkfh
27
vulnerability VCID-7ch1-q9f4-a7bt
28
vulnerability VCID-7r4g-gxc6-hubh
29
vulnerability VCID-7snt-7hyt-1fbx
30
vulnerability VCID-8216-asqx-f7eb
31
vulnerability VCID-82ds-xda8-5ye4
32
vulnerability VCID-848u-w88s-5bbe
33
vulnerability VCID-87ej-qn3k-t3dy
34
vulnerability VCID-8sek-v483-8ueu
35
vulnerability VCID-8w4e-d49b-nbg8
36
vulnerability VCID-9c49-n1a2-pubu
37
vulnerability VCID-9mpc-hjjh-u3d2
38
vulnerability VCID-a1g9-pyz5-9fca
39
vulnerability VCID-an3r-c2yp-1bbd
40
vulnerability VCID-bbh5-rss8-bfct
41
vulnerability VCID-bzqv-s7g3-wff9
42
vulnerability VCID-cf9m-qdyj-eyav
43
vulnerability VCID-cgny-nmk3-4fcd
44
vulnerability VCID-cq82-qt6v-dfhz
45
vulnerability VCID-cv9x-ea8e-pufu
46
vulnerability VCID-daz8-j1ns-rkgt
47
vulnerability VCID-dzrt-8tny-kbcy
48
vulnerability VCID-e6zr-4bgg-kkh5
49
vulnerability VCID-e8ze-umec-a7hx
50
vulnerability VCID-e9jc-8mpp-fkgh
51
vulnerability VCID-efrn-3w2z-xyaf
52
vulnerability VCID-eq57-btkt-hug8
53
vulnerability VCID-etcc-43a3-a7ek
54
vulnerability VCID-ev4k-5k1d-2bhu
55
vulnerability VCID-f9pk-cwyr-a7cv
56
vulnerability VCID-fgkd-jp96-cbcs
57
vulnerability VCID-fqkx-v8t5-q3h6
58
vulnerability VCID-g3t9-1yx2-6ufd
59
vulnerability VCID-gbev-1zs8-8bac
60
vulnerability VCID-gemf-j9uj-jka1
61
vulnerability VCID-gvag-nxmd-s7d1
62
vulnerability VCID-hfcx-1kuh-p3ez
63
vulnerability VCID-hnyk-614g-yuhy
64
vulnerability VCID-hr6r-88m3-9udv
65
vulnerability VCID-hsw8-nbs6-auaa
66
vulnerability VCID-j8hk-bqnb-gycp
67
vulnerability VCID-jp1p-rfxa-hyd9
68
vulnerability VCID-k8r2-2ak8-qkak
69
vulnerability VCID-ke39-846j-kbh3
70
vulnerability VCID-myhc-dyh9-xygg
71
vulnerability VCID-n1gz-y615-cbbk
72
vulnerability VCID-n56h-zuzr-ruhf
73
vulnerability VCID-nyw8-q5ef-2fcv
74
vulnerability VCID-p7gd-anw2-1qbz
75
vulnerability VCID-pwh8-c992-vqav
76
vulnerability VCID-qr1u-kcn9-cuf6
77
vulnerability VCID-qtyt-338b-ayay
78
vulnerability VCID-qv14-m93d-jyd9
79
vulnerability VCID-qxab-9uwr-yqhv
80
vulnerability VCID-rqrw-t2kj-mud8
81
vulnerability VCID-rzx5-nv6h-qqhg
82
vulnerability VCID-sdjb-gp4t-vbgt
83
vulnerability VCID-tgyt-axv1-c7ag
84
vulnerability VCID-tzpj-j3x1-ekgk
85
vulnerability VCID-uaf3-fyst-u7gm
86
vulnerability VCID-uhrk-ad4f-nqgh
87
vulnerability VCID-un7r-8sah-33cr
88
vulnerability VCID-uncp-sa58-ufdd
89
vulnerability VCID-uq77-aax5-k7d8
90
vulnerability VCID-uua1-9rt1-dfbz
91
vulnerability VCID-v7b1-x8hy-2kcg
92
vulnerability VCID-w94g-xxea-23fb
93
vulnerability VCID-wm4a-hcvt-vkbk
94
vulnerability VCID-x3n3-tsjh-8kby
95
vulnerability VCID-x5jb-yj3d-qbdf
96
vulnerability VCID-xw1s-93bu-wuh9
97
vulnerability VCID-y3zj-acc7-jkau
98
vulnerability VCID-yf3d-yyzq-guh1
99
vulnerability VCID-ygw1-vqxg-z3h3
100
vulnerability VCID-z2bk-m2kw-h3c9
101
vulnerability VCID-z718-97ez-r7g3
102
vulnerability VCID-zbm9-cx69-wqg3
103
vulnerability VCID-zeut-9wfp-q7et
104
vulnerability VCID-zhcb-h8ph-7uhk
105
vulnerability VCID-zkvq-bms4-gfcv
106
vulnerability VCID-zybp-mb3d-jyee
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.0.0
aliases GMS-2019-154
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-cg7w-xkyg-abgj
14
url VCID-cv9x-ea8e-pufu
vulnerability_id VCID-cv9x-ea8e-pufu
summary 
Cross-site Scripting
Cross-Site Scripting in Link Handling.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-015/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-015/
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.27
purl pkg:composer/typo3/cms-core@8.7.27
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-848u-w88s-5bbe
2
vulnerability VCID-ev4k-5k1d-2bhu
3
vulnerability VCID-fqkx-v8t5-q3h6
4
vulnerability VCID-jp1p-rfxa-hyd9
5
vulnerability VCID-tgyt-axv1-c7ag
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.27
1
url pkg:composer/typo3/cms-core@9.5.8
purl pkg:composer/typo3/cms-core@9.5.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1sfk-z8py-ykb8
2
vulnerability VCID-4an7-9ph4-mkd4
3
vulnerability VCID-6mnf-2fcw-dqgp
4
vulnerability VCID-848u-w88s-5bbe
5
vulnerability VCID-8w4e-d49b-nbg8
6
vulnerability VCID-bbh5-rss8-bfct
7
vulnerability VCID-e6zr-4bgg-kkh5
8
vulnerability VCID-ev4k-5k1d-2bhu
9
vulnerability VCID-fqkx-v8t5-q3h6
10
vulnerability VCID-jp1p-rfxa-hyd9
11
vulnerability VCID-n1gz-y615-cbbk
12
vulnerability VCID-tgyt-axv1-c7ag
13
vulnerability VCID-zkvq-bms4-gfcv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.8
aliases GMS-2019-166
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-cv9x-ea8e-pufu
15
url VCID-daz8-j1ns-rkgt
vulnerability_id VCID-daz8-j1ns-rkgt
summary Information Disclosure in Install Tool.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-010/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2018-010/
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.21
purl pkg:composer/typo3/cms-core@8.7.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1knh-es99-dubw
2
vulnerability VCID-1prg-c74k-37ec
3
vulnerability VCID-6ffw-r4k7-5qf8
4
vulnerability VCID-6q7t-kdrg-8qc3
5
vulnerability VCID-6rgp-dzw1-kycx
6
vulnerability VCID-82ds-xda8-5ye4
7
vulnerability VCID-848u-w88s-5bbe
8
vulnerability VCID-8sek-v483-8ueu
9
vulnerability VCID-cg7w-xkyg-abgj
10
vulnerability VCID-cv9x-ea8e-pufu
11
vulnerability VCID-e8ze-umec-a7hx
12
vulnerability VCID-ev4k-5k1d-2bhu
13
vulnerability VCID-fqkx-v8t5-q3h6
14
vulnerability VCID-hnyk-614g-yuhy
15
vulnerability VCID-jp1p-rfxa-hyd9
16
vulnerability VCID-k8r2-2ak8-qkak
17
vulnerability VCID-n56h-zuzr-ruhf
18
vulnerability VCID-qr1u-kcn9-cuf6
19
vulnerability VCID-tgyt-axv1-c7ag
20
vulnerability VCID-wm4a-hcvt-vkbk
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.21
1
url pkg:composer/typo3/cms-core@9.5.2
purl pkg:composer/typo3/cms-core@9.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1knh-es99-dubw
2
vulnerability VCID-1prg-c74k-37ec
3
vulnerability VCID-1sfk-z8py-ykb8
4
vulnerability VCID-23ss-xwrm-1qcu
5
vulnerability VCID-4an7-9ph4-mkd4
6
vulnerability VCID-6ffw-r4k7-5qf8
7
vulnerability VCID-6mnf-2fcw-dqgp
8
vulnerability VCID-6q7t-kdrg-8qc3
9
vulnerability VCID-6rgp-dzw1-kycx
10
vulnerability VCID-82ds-xda8-5ye4
11
vulnerability VCID-848u-w88s-5bbe
12
vulnerability VCID-8sek-v483-8ueu
13
vulnerability VCID-8w4e-d49b-nbg8
14
vulnerability VCID-bbh5-rss8-bfct
15
vulnerability VCID-cv9x-ea8e-pufu
16
vulnerability VCID-e6zr-4bgg-kkh5
17
vulnerability VCID-e8ze-umec-a7hx
18
vulnerability VCID-efrn-3w2z-xyaf
19
vulnerability VCID-ev4k-5k1d-2bhu
20
vulnerability VCID-fqkx-v8t5-q3h6
21
vulnerability VCID-hnyk-614g-yuhy
22
vulnerability VCID-jp1p-rfxa-hyd9
23
vulnerability VCID-k8r2-2ak8-qkak
24
vulnerability VCID-n1gz-y615-cbbk
25
vulnerability VCID-n56h-zuzr-ruhf
26
vulnerability VCID-qr1u-kcn9-cuf6
27
vulnerability VCID-tgyt-axv1-c7ag
28
vulnerability VCID-v7b1-x8hy-2kcg
29
vulnerability VCID-wm4a-hcvt-vkbk
30
vulnerability VCID-x5jb-yj3d-qbdf
31
vulnerability VCID-zeut-9wfp-q7et
32
vulnerability VCID-zhcb-h8ph-7uhk
33
vulnerability VCID-zkvq-bms4-gfcv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.2
aliases GMS-2018-89
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-daz8-j1ns-rkgt
16
url VCID-e8ze-umec-a7hx
vulnerability_id VCID-e8ze-umec-a7hx
summary Information Disclosure in Backend User Interface.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-014/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-014/
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.27
purl pkg:composer/typo3/cms-core@8.7.27
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-848u-w88s-5bbe
2
vulnerability VCID-ev4k-5k1d-2bhu
3
vulnerability VCID-fqkx-v8t5-q3h6
4
vulnerability VCID-jp1p-rfxa-hyd9
5
vulnerability VCID-tgyt-axv1-c7ag
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.27
1
url pkg:composer/typo3/cms-core@9.5.8
purl pkg:composer/typo3/cms-core@9.5.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1sfk-z8py-ykb8
2
vulnerability VCID-4an7-9ph4-mkd4
3
vulnerability VCID-6mnf-2fcw-dqgp
4
vulnerability VCID-848u-w88s-5bbe
5
vulnerability VCID-8w4e-d49b-nbg8
6
vulnerability VCID-bbh5-rss8-bfct
7
vulnerability VCID-e6zr-4bgg-kkh5
8
vulnerability VCID-ev4k-5k1d-2bhu
9
vulnerability VCID-fqkx-v8t5-q3h6
10
vulnerability VCID-jp1p-rfxa-hyd9
11
vulnerability VCID-n1gz-y615-cbbk
12
vulnerability VCID-tgyt-axv1-c7ag
13
vulnerability VCID-zkvq-bms4-gfcv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.8
aliases GMS-2019-165
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-e8ze-umec-a7hx
17
url VCID-e9jc-8mpp-fkgh
vulnerability_id VCID-e9jc-8mpp-fkgh
summary Security Misconfiguration in Install Tool Cookie.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-009/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2018-009/
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.21
purl pkg:composer/typo3/cms-core@8.7.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1knh-es99-dubw
2
vulnerability VCID-1prg-c74k-37ec
3
vulnerability VCID-6ffw-r4k7-5qf8
4
vulnerability VCID-6q7t-kdrg-8qc3
5
vulnerability VCID-6rgp-dzw1-kycx
6
vulnerability VCID-82ds-xda8-5ye4
7
vulnerability VCID-848u-w88s-5bbe
8
vulnerability VCID-8sek-v483-8ueu
9
vulnerability VCID-cg7w-xkyg-abgj
10
vulnerability VCID-cv9x-ea8e-pufu
11
vulnerability VCID-e8ze-umec-a7hx
12
vulnerability VCID-ev4k-5k1d-2bhu
13
vulnerability VCID-fqkx-v8t5-q3h6
14
vulnerability VCID-hnyk-614g-yuhy
15
vulnerability VCID-jp1p-rfxa-hyd9
16
vulnerability VCID-k8r2-2ak8-qkak
17
vulnerability VCID-n56h-zuzr-ruhf
18
vulnerability VCID-qr1u-kcn9-cuf6
19
vulnerability VCID-tgyt-axv1-c7ag
20
vulnerability VCID-wm4a-hcvt-vkbk
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.21
1
url pkg:composer/typo3/cms-core@9.5.2
purl pkg:composer/typo3/cms-core@9.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1knh-es99-dubw
2
vulnerability VCID-1prg-c74k-37ec
3
vulnerability VCID-1sfk-z8py-ykb8
4
vulnerability VCID-23ss-xwrm-1qcu
5
vulnerability VCID-4an7-9ph4-mkd4
6
vulnerability VCID-6ffw-r4k7-5qf8
7
vulnerability VCID-6mnf-2fcw-dqgp
8
vulnerability VCID-6q7t-kdrg-8qc3
9
vulnerability VCID-6rgp-dzw1-kycx
10
vulnerability VCID-82ds-xda8-5ye4
11
vulnerability VCID-848u-w88s-5bbe
12
vulnerability VCID-8sek-v483-8ueu
13
vulnerability VCID-8w4e-d49b-nbg8
14
vulnerability VCID-bbh5-rss8-bfct
15
vulnerability VCID-cv9x-ea8e-pufu
16
vulnerability VCID-e6zr-4bgg-kkh5
17
vulnerability VCID-e8ze-umec-a7hx
18
vulnerability VCID-efrn-3w2z-xyaf
19
vulnerability VCID-ev4k-5k1d-2bhu
20
vulnerability VCID-fqkx-v8t5-q3h6
21
vulnerability VCID-hnyk-614g-yuhy
22
vulnerability VCID-jp1p-rfxa-hyd9
23
vulnerability VCID-k8r2-2ak8-qkak
24
vulnerability VCID-n1gz-y615-cbbk
25
vulnerability VCID-n56h-zuzr-ruhf
26
vulnerability VCID-qr1u-kcn9-cuf6
27
vulnerability VCID-tgyt-axv1-c7ag
28
vulnerability VCID-v7b1-x8hy-2kcg
29
vulnerability VCID-wm4a-hcvt-vkbk
30
vulnerability VCID-x5jb-yj3d-qbdf
31
vulnerability VCID-zeut-9wfp-q7et
32
vulnerability VCID-zhcb-h8ph-7uhk
33
vulnerability VCID-zkvq-bms4-gfcv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.2
aliases GMS-2018-88
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-e9jc-8mpp-fkgh
18
url VCID-ev4k-5k1d-2bhu
vulnerability_id VCID-ev4k-5k1d-2bhu
summary 
URL Redirection to Untrusted Site (Open Redirect)
Login Handling is susceptible to open redirection which allows attackers redirecting to arbitrary content, and conducting phishing attacks. No authentication is required in order to exploit this vulnerability.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-21338
reference_id
reference_type
scores
0
value 0.00253
scoring_system epss
scoring_elements 0.48774
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-21338
1
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21338.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21338.yaml
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21338.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21338.yaml
3
reference_url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-4jhw-2p6j-5wmp
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-4jhw-2p6j-5wmp
4
reference_url https://packagist.org/packages/typo3/cms-core
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://packagist.org/packages/typo3/cms-core
5
reference_url https://typo3.org/security/advisory/typo3-core-sa-2021-001
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2021-001
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-21338
reference_id CVE-2021-21338
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-21338
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.40
purl pkg:composer/typo3/cms-core@8.7.40
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-j8hk-bqnb-gycp
1
vulnerability VCID-sdjb-gp4t-vbgt
2
vulnerability VCID-uq77-aax5-k7d8
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.40
1
url pkg:composer/typo3/cms-core@9.5.25
purl pkg:composer/typo3/cms-core@9.5.25
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.25
2
url pkg:composer/typo3/cms-core@10.4.14
purl pkg:composer/typo3/cms-core@10.4.14
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@10.4.14
3
url pkg:composer/typo3/cms-core@11.1.1
purl pkg:composer/typo3/cms-core@11.1.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@11.1.1
aliases CVE-2021-21338, GHSA-4jhw-2p6j-5wmp
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ev4k-5k1d-2bhu
19
url VCID-fqkx-v8t5-q3h6
vulnerability_id VCID-fqkx-v8t5-q3h6
summary 
Cleartext Storage of Sensitive Information
User session identifiers are stored in cleartext - without processing of additional cryptographic hashing algorithms. This vulnerability cannot be exploited directly and occurs in combination with a chained attack - for example SQL injection in any other component of the system.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-21339
reference_id
reference_type
scores
0
value 0.00132
scoring_system epss
scoring_elements 0.32224
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-21339
1
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21339.yaml
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21339.yaml
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21339.yaml
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21339.yaml
3
reference_url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-qx3w-4864-94ch
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-qx3w-4864-94ch
4
reference_url https://packagist.org/packages/typo3/cms-core
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://packagist.org/packages/typo3/cms-core
5
reference_url https://typo3.org/security/advisory/typo3-core-sa-2021-006
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2021-006
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-21339
reference_id CVE-2021-21339
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-21339
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.40
purl pkg:composer/typo3/cms-core@8.7.40
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-j8hk-bqnb-gycp
1
vulnerability VCID-sdjb-gp4t-vbgt
2
vulnerability VCID-uq77-aax5-k7d8
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.40
1
url pkg:composer/typo3/cms-core@9.5.25
purl pkg:composer/typo3/cms-core@9.5.25
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.25
2
url pkg:composer/typo3/cms-core@10.4.14
purl pkg:composer/typo3/cms-core@10.4.14
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@10.4.14
3
url pkg:composer/typo3/cms-core@11.1.1
purl pkg:composer/typo3/cms-core@11.1.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@11.1.1
aliases CVE-2021-21339, GHSA-qx3w-4864-94ch
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-fqkx-v8t5-q3h6
20
url VCID-hfcx-1kuh-p3ez
vulnerability_id VCID-hfcx-1kuh-p3ez
summary Insecure Deserialization & Arbitrary Code Execution in TYPO3 CMS.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-002/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2018-002/
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.17
purl pkg:composer/typo3/cms-core@8.7.17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1knh-es99-dubw
2
vulnerability VCID-1prg-c74k-37ec
3
vulnerability VCID-6ffw-r4k7-5qf8
4
vulnerability VCID-6q7t-kdrg-8qc3
5
vulnerability VCID-6rgp-dzw1-kycx
6
vulnerability VCID-7ch1-q9f4-a7bt
7
vulnerability VCID-82ds-xda8-5ye4
8
vulnerability VCID-848u-w88s-5bbe
9
vulnerability VCID-8sek-v483-8ueu
10
vulnerability VCID-b92x-56ng-3ygy
11
vulnerability VCID-cg7w-xkyg-abgj
12
vulnerability VCID-cv9x-ea8e-pufu
13
vulnerability VCID-daz8-j1ns-rkgt
14
vulnerability VCID-e8ze-umec-a7hx
15
vulnerability VCID-e9jc-8mpp-fkgh
16
vulnerability VCID-ev4k-5k1d-2bhu
17
vulnerability VCID-fqkx-v8t5-q3h6
18
vulnerability VCID-hnyk-614g-yuhy
19
vulnerability VCID-jp1p-rfxa-hyd9
20
vulnerability VCID-k8r2-2ak8-qkak
21
vulnerability VCID-n56h-zuzr-ruhf
22
vulnerability VCID-nyw8-q5ef-2fcv
23
vulnerability VCID-pwh8-c992-vqav
24
vulnerability VCID-qr1u-kcn9-cuf6
25
vulnerability VCID-qxab-9uwr-yqhv
26
vulnerability VCID-tgyt-axv1-c7ag
27
vulnerability VCID-uaf3-fyst-u7gm
28
vulnerability VCID-uncp-sa58-ufdd
29
vulnerability VCID-wm4a-hcvt-vkbk
30
vulnerability VCID-z2bk-m2kw-h3c9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.17
1
url pkg:composer/typo3/cms-core@9.3.2
purl pkg:composer/typo3/cms-core@9.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1knh-es99-dubw
2
vulnerability VCID-1prg-c74k-37ec
3
vulnerability VCID-1sfk-z8py-ykb8
4
vulnerability VCID-23ss-xwrm-1qcu
5
vulnerability VCID-4an7-9ph4-mkd4
6
vulnerability VCID-6ffw-r4k7-5qf8
7
vulnerability VCID-6mnf-2fcw-dqgp
8
vulnerability VCID-6q7t-kdrg-8qc3
9
vulnerability VCID-6rgp-dzw1-kycx
10
vulnerability VCID-7ch1-q9f4-a7bt
11
vulnerability VCID-82ds-xda8-5ye4
12
vulnerability VCID-848u-w88s-5bbe
13
vulnerability VCID-8sek-v483-8ueu
14
vulnerability VCID-8w4e-d49b-nbg8
15
vulnerability VCID-bbh5-rss8-bfct
16
vulnerability VCID-cv9x-ea8e-pufu
17
vulnerability VCID-daz8-j1ns-rkgt
18
vulnerability VCID-e6zr-4bgg-kkh5
19
vulnerability VCID-e8ze-umec-a7hx
20
vulnerability VCID-e9jc-8mpp-fkgh
21
vulnerability VCID-efrn-3w2z-xyaf
22
vulnerability VCID-ev4k-5k1d-2bhu
23
vulnerability VCID-fqkx-v8t5-q3h6
24
vulnerability VCID-hnyk-614g-yuhy
25
vulnerability VCID-jp1p-rfxa-hyd9
26
vulnerability VCID-k8r2-2ak8-qkak
27
vulnerability VCID-n1gz-y615-cbbk
28
vulnerability VCID-n56h-zuzr-ruhf
29
vulnerability VCID-nyw8-q5ef-2fcv
30
vulnerability VCID-pwh8-c992-vqav
31
vulnerability VCID-qr1u-kcn9-cuf6
32
vulnerability VCID-qxab-9uwr-yqhv
33
vulnerability VCID-tgyt-axv1-c7ag
34
vulnerability VCID-uaf3-fyst-u7gm
35
vulnerability VCID-uncp-sa58-ufdd
36
vulnerability VCID-v7b1-x8hy-2kcg
37
vulnerability VCID-wm4a-hcvt-vkbk
38
vulnerability VCID-x5jb-yj3d-qbdf
39
vulnerability VCID-z2bk-m2kw-h3c9
40
vulnerability VCID-zeut-9wfp-q7et
41
vulnerability VCID-zhcb-h8ph-7uhk
42
vulnerability VCID-zkvq-bms4-gfcv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.3.2
aliases GMS-2018-82
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hfcx-1kuh-p3ez
21
url VCID-hnyk-614g-yuhy
vulnerability_id VCID-hnyk-614g-yuhy
summary Security Misconfiguration in User Session Handling.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-011/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-011/
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.25
purl pkg:composer/typo3/cms-core@8.7.25
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1knh-es99-dubw
2
vulnerability VCID-6ffw-r4k7-5qf8
3
vulnerability VCID-82ds-xda8-5ye4
4
vulnerability VCID-848u-w88s-5bbe
5
vulnerability VCID-cbmm-1b2k-8qaz
6
vulnerability VCID-cv9x-ea8e-pufu
7
vulnerability VCID-e8ze-umec-a7hx
8
vulnerability VCID-ev4k-5k1d-2bhu
9
vulnerability VCID-fqkx-v8t5-q3h6
10
vulnerability VCID-jp1p-rfxa-hyd9
11
vulnerability VCID-tgyt-axv1-c7ag
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.25
1
url pkg:composer/typo3/cms-core@9.5.6
purl pkg:composer/typo3/cms-core@9.5.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1knh-es99-dubw
2
vulnerability VCID-1sfk-z8py-ykb8
3
vulnerability VCID-23ss-xwrm-1qcu
4
vulnerability VCID-4an7-9ph4-mkd4
5
vulnerability VCID-6ffw-r4k7-5qf8
6
vulnerability VCID-6mnf-2fcw-dqgp
7
vulnerability VCID-82ds-xda8-5ye4
8
vulnerability VCID-848u-w88s-5bbe
9
vulnerability VCID-8w4e-d49b-nbg8
10
vulnerability VCID-bbh5-rss8-bfct
11
vulnerability VCID-cbmm-1b2k-8qaz
12
vulnerability VCID-cv9x-ea8e-pufu
13
vulnerability VCID-e6zr-4bgg-kkh5
14
vulnerability VCID-e8ze-umec-a7hx
15
vulnerability VCID-efrn-3w2z-xyaf
16
vulnerability VCID-ev4k-5k1d-2bhu
17
vulnerability VCID-fqkx-v8t5-q3h6
18
vulnerability VCID-jp1p-rfxa-hyd9
19
vulnerability VCID-n1gz-y615-cbbk
20
vulnerability VCID-tgyt-axv1-c7ag
21
vulnerability VCID-zeut-9wfp-q7et
22
vulnerability VCID-zkvq-bms4-gfcv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.6
aliases GMS-2019-161
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hnyk-614g-yuhy
22
url VCID-jp1p-rfxa-hyd9
vulnerability_id VCID-jp1p-rfxa-hyd9
summary 
Cross-site Scripting
Content elements of type `_menu_` are vulnerable to cross-site scripting when their referenced items get previewed in the page module. A valid backend user account is needed to exploit this vulnerability.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-21370
reference_id
reference_type
scores
0
value 0.00342
scoring_system epss
scoring_elements 0.57112
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-21370
1
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21370.yaml
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-21370.yaml
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21370.yaml
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-21370.yaml
3
reference_url https://packagist.org/packages/typo3/cms-backend
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://packagist.org/packages/typo3/cms-backend
4
reference_url https://typo3.org/security/advisory/typo3-core-sa-2021-008
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2021-008
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-21370
reference_id CVE-2021-21370
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-21370
6
reference_url https://github.com/advisories/GHSA-x7hc-x7fm-f7qh
reference_id GHSA-x7hc-x7fm-f7qh
reference_type
scores
url https://github.com/advisories/GHSA-x7hc-x7fm-f7qh
7
reference_url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-x7hc-x7fm-f7qh
reference_id GHSA-x7hc-x7fm-f7qh
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-x7hc-x7fm-f7qh
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.40
purl pkg:composer/typo3/cms-core@8.7.40
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-j8hk-bqnb-gycp
1
vulnerability VCID-sdjb-gp4t-vbgt
2
vulnerability VCID-uq77-aax5-k7d8
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.40
1
url pkg:composer/typo3/cms-core@9.5.25
purl pkg:composer/typo3/cms-core@9.5.25
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.25
2
url pkg:composer/typo3/cms-core@10.4.14
purl pkg:composer/typo3/cms-core@10.4.14
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@10.4.14
3
url pkg:composer/typo3/cms-core@11.1.1
purl pkg:composer/typo3/cms-core@11.1.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@11.1.1
aliases CVE-2021-21370, GHSA-x7hc-x7fm-f7qh
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-jp1p-rfxa-hyd9
23
url VCID-k8r2-2ak8-qkak
vulnerability_id VCID-k8r2-2ak8-qkak
summary 
Cross-site Scripting
Cross-Site Scripting in Form Framework.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-007/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-007/
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.23
purl pkg:composer/typo3/cms-core@8.7.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1knh-es99-dubw
2
vulnerability VCID-6ffw-r4k7-5qf8
3
vulnerability VCID-82ds-xda8-5ye4
4
vulnerability VCID-848u-w88s-5bbe
5
vulnerability VCID-8sek-v483-8ueu
6
vulnerability VCID-cv9x-ea8e-pufu
7
vulnerability VCID-e8ze-umec-a7hx
8
vulnerability VCID-ev4k-5k1d-2bhu
9
vulnerability VCID-fqkx-v8t5-q3h6
10
vulnerability VCID-hnyk-614g-yuhy
11
vulnerability VCID-jp1p-rfxa-hyd9
12
vulnerability VCID-qr1u-kcn9-cuf6
13
vulnerability VCID-tgyt-axv1-c7ag
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.23
1
url pkg:composer/typo3/cms-core@9.5.4
purl pkg:composer/typo3/cms-core@9.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1knh-es99-dubw
2
vulnerability VCID-1sfk-z8py-ykb8
3
vulnerability VCID-23ss-xwrm-1qcu
4
vulnerability VCID-4an7-9ph4-mkd4
5
vulnerability VCID-6ffw-r4k7-5qf8
6
vulnerability VCID-6mnf-2fcw-dqgp
7
vulnerability VCID-82ds-xda8-5ye4
8
vulnerability VCID-848u-w88s-5bbe
9
vulnerability VCID-8sek-v483-8ueu
10
vulnerability VCID-8w4e-d49b-nbg8
11
vulnerability VCID-bbh5-rss8-bfct
12
vulnerability VCID-cv9x-ea8e-pufu
13
vulnerability VCID-e6zr-4bgg-kkh5
14
vulnerability VCID-e8ze-umec-a7hx
15
vulnerability VCID-efrn-3w2z-xyaf
16
vulnerability VCID-ev4k-5k1d-2bhu
17
vulnerability VCID-fqkx-v8t5-q3h6
18
vulnerability VCID-hnyk-614g-yuhy
19
vulnerability VCID-jp1p-rfxa-hyd9
20
vulnerability VCID-n1gz-y615-cbbk
21
vulnerability VCID-qr1u-kcn9-cuf6
22
vulnerability VCID-tgyt-axv1-c7ag
23
vulnerability VCID-x5jb-yj3d-qbdf
24
vulnerability VCID-zeut-9wfp-q7et
25
vulnerability VCID-zhcb-h8ph-7uhk
26
vulnerability VCID-zkvq-bms4-gfcv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.4
aliases GMS-2019-157
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-k8r2-2ak8-qkak
24
url VCID-n56h-zuzr-ruhf
vulnerability_id VCID-n56h-zuzr-ruhf
summary 
Cross-site Scripting
Cross-Site Scripting in Fluid `ViewHelpers`.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-005/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-005/
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.23
purl pkg:composer/typo3/cms-core@8.7.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1knh-es99-dubw
2
vulnerability VCID-6ffw-r4k7-5qf8
3
vulnerability VCID-82ds-xda8-5ye4
4
vulnerability VCID-848u-w88s-5bbe
5
vulnerability VCID-8sek-v483-8ueu
6
vulnerability VCID-cv9x-ea8e-pufu
7
vulnerability VCID-e8ze-umec-a7hx
8
vulnerability VCID-ev4k-5k1d-2bhu
9
vulnerability VCID-fqkx-v8t5-q3h6
10
vulnerability VCID-hnyk-614g-yuhy
11
vulnerability VCID-jp1p-rfxa-hyd9
12
vulnerability VCID-qr1u-kcn9-cuf6
13
vulnerability VCID-tgyt-axv1-c7ag
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.23
1
url pkg:composer/typo3/cms-core@9.5.4
purl pkg:composer/typo3/cms-core@9.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1knh-es99-dubw
2
vulnerability VCID-1sfk-z8py-ykb8
3
vulnerability VCID-23ss-xwrm-1qcu
4
vulnerability VCID-4an7-9ph4-mkd4
5
vulnerability VCID-6ffw-r4k7-5qf8
6
vulnerability VCID-6mnf-2fcw-dqgp
7
vulnerability VCID-82ds-xda8-5ye4
8
vulnerability VCID-848u-w88s-5bbe
9
vulnerability VCID-8sek-v483-8ueu
10
vulnerability VCID-8w4e-d49b-nbg8
11
vulnerability VCID-bbh5-rss8-bfct
12
vulnerability VCID-cv9x-ea8e-pufu
13
vulnerability VCID-e6zr-4bgg-kkh5
14
vulnerability VCID-e8ze-umec-a7hx
15
vulnerability VCID-efrn-3w2z-xyaf
16
vulnerability VCID-ev4k-5k1d-2bhu
17
vulnerability VCID-fqkx-v8t5-q3h6
18
vulnerability VCID-hnyk-614g-yuhy
19
vulnerability VCID-jp1p-rfxa-hyd9
20
vulnerability VCID-n1gz-y615-cbbk
21
vulnerability VCID-qr1u-kcn9-cuf6
22
vulnerability VCID-tgyt-axv1-c7ag
23
vulnerability VCID-x5jb-yj3d-qbdf
24
vulnerability VCID-zeut-9wfp-q7et
25
vulnerability VCID-zhcb-h8ph-7uhk
26
vulnerability VCID-zkvq-bms4-gfcv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.4
aliases GMS-2019-155
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-n56h-zuzr-ruhf
25
url VCID-nyw8-q5ef-2fcv
vulnerability_id VCID-nyw8-q5ef-2fcv
summary 
Uncontrolled Resource Consumption
Denial of Service in Online Media Asset Handling.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-011/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2018-011/
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.21
purl pkg:composer/typo3/cms-core@8.7.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1knh-es99-dubw
2
vulnerability VCID-1prg-c74k-37ec
3
vulnerability VCID-6ffw-r4k7-5qf8
4
vulnerability VCID-6q7t-kdrg-8qc3
5
vulnerability VCID-6rgp-dzw1-kycx
6
vulnerability VCID-82ds-xda8-5ye4
7
vulnerability VCID-848u-w88s-5bbe
8
vulnerability VCID-8sek-v483-8ueu
9
vulnerability VCID-cg7w-xkyg-abgj
10
vulnerability VCID-cv9x-ea8e-pufu
11
vulnerability VCID-e8ze-umec-a7hx
12
vulnerability VCID-ev4k-5k1d-2bhu
13
vulnerability VCID-fqkx-v8t5-q3h6
14
vulnerability VCID-hnyk-614g-yuhy
15
vulnerability VCID-jp1p-rfxa-hyd9
16
vulnerability VCID-k8r2-2ak8-qkak
17
vulnerability VCID-n56h-zuzr-ruhf
18
vulnerability VCID-qr1u-kcn9-cuf6
19
vulnerability VCID-tgyt-axv1-c7ag
20
vulnerability VCID-wm4a-hcvt-vkbk
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.21
1
url pkg:composer/typo3/cms-core@9.5.2
purl pkg:composer/typo3/cms-core@9.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1knh-es99-dubw
2
vulnerability VCID-1prg-c74k-37ec
3
vulnerability VCID-1sfk-z8py-ykb8
4
vulnerability VCID-23ss-xwrm-1qcu
5
vulnerability VCID-4an7-9ph4-mkd4
6
vulnerability VCID-6ffw-r4k7-5qf8
7
vulnerability VCID-6mnf-2fcw-dqgp
8
vulnerability VCID-6q7t-kdrg-8qc3
9
vulnerability VCID-6rgp-dzw1-kycx
10
vulnerability VCID-82ds-xda8-5ye4
11
vulnerability VCID-848u-w88s-5bbe
12
vulnerability VCID-8sek-v483-8ueu
13
vulnerability VCID-8w4e-d49b-nbg8
14
vulnerability VCID-bbh5-rss8-bfct
15
vulnerability VCID-cv9x-ea8e-pufu
16
vulnerability VCID-e6zr-4bgg-kkh5
17
vulnerability VCID-e8ze-umec-a7hx
18
vulnerability VCID-efrn-3w2z-xyaf
19
vulnerability VCID-ev4k-5k1d-2bhu
20
vulnerability VCID-fqkx-v8t5-q3h6
21
vulnerability VCID-hnyk-614g-yuhy
22
vulnerability VCID-jp1p-rfxa-hyd9
23
vulnerability VCID-k8r2-2ak8-qkak
24
vulnerability VCID-n1gz-y615-cbbk
25
vulnerability VCID-n56h-zuzr-ruhf
26
vulnerability VCID-qr1u-kcn9-cuf6
27
vulnerability VCID-tgyt-axv1-c7ag
28
vulnerability VCID-v7b1-x8hy-2kcg
29
vulnerability VCID-wm4a-hcvt-vkbk
30
vulnerability VCID-x5jb-yj3d-qbdf
31
vulnerability VCID-zeut-9wfp-q7et
32
vulnerability VCID-zhcb-h8ph-7uhk
33
vulnerability VCID-zkvq-bms4-gfcv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.2
aliases GMS-2018-90
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-nyw8-q5ef-2fcv
26
url VCID-pwh8-c992-vqav
vulnerability_id VCID-pwh8-c992-vqav
summary 
Cross-site Scripting
Cross-Site Scripting in CKEditor.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-005/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2018-005/
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.21
purl pkg:composer/typo3/cms-core@8.7.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1knh-es99-dubw
2
vulnerability VCID-1prg-c74k-37ec
3
vulnerability VCID-6ffw-r4k7-5qf8
4
vulnerability VCID-6q7t-kdrg-8qc3
5
vulnerability VCID-6rgp-dzw1-kycx
6
vulnerability VCID-82ds-xda8-5ye4
7
vulnerability VCID-848u-w88s-5bbe
8
vulnerability VCID-8sek-v483-8ueu
9
vulnerability VCID-cg7w-xkyg-abgj
10
vulnerability VCID-cv9x-ea8e-pufu
11
vulnerability VCID-e8ze-umec-a7hx
12
vulnerability VCID-ev4k-5k1d-2bhu
13
vulnerability VCID-fqkx-v8t5-q3h6
14
vulnerability VCID-hnyk-614g-yuhy
15
vulnerability VCID-jp1p-rfxa-hyd9
16
vulnerability VCID-k8r2-2ak8-qkak
17
vulnerability VCID-n56h-zuzr-ruhf
18
vulnerability VCID-qr1u-kcn9-cuf6
19
vulnerability VCID-tgyt-axv1-c7ag
20
vulnerability VCID-wm4a-hcvt-vkbk
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.21
1
url pkg:composer/typo3/cms-core@9.5.2
purl pkg:composer/typo3/cms-core@9.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1knh-es99-dubw
2
vulnerability VCID-1prg-c74k-37ec
3
vulnerability VCID-1sfk-z8py-ykb8
4
vulnerability VCID-23ss-xwrm-1qcu
5
vulnerability VCID-4an7-9ph4-mkd4
6
vulnerability VCID-6ffw-r4k7-5qf8
7
vulnerability VCID-6mnf-2fcw-dqgp
8
vulnerability VCID-6q7t-kdrg-8qc3
9
vulnerability VCID-6rgp-dzw1-kycx
10
vulnerability VCID-82ds-xda8-5ye4
11
vulnerability VCID-848u-w88s-5bbe
12
vulnerability VCID-8sek-v483-8ueu
13
vulnerability VCID-8w4e-d49b-nbg8
14
vulnerability VCID-bbh5-rss8-bfct
15
vulnerability VCID-cv9x-ea8e-pufu
16
vulnerability VCID-e6zr-4bgg-kkh5
17
vulnerability VCID-e8ze-umec-a7hx
18
vulnerability VCID-efrn-3w2z-xyaf
19
vulnerability VCID-ev4k-5k1d-2bhu
20
vulnerability VCID-fqkx-v8t5-q3h6
21
vulnerability VCID-hnyk-614g-yuhy
22
vulnerability VCID-jp1p-rfxa-hyd9
23
vulnerability VCID-k8r2-2ak8-qkak
24
vulnerability VCID-n1gz-y615-cbbk
25
vulnerability VCID-n56h-zuzr-ruhf
26
vulnerability VCID-qr1u-kcn9-cuf6
27
vulnerability VCID-tgyt-axv1-c7ag
28
vulnerability VCID-v7b1-x8hy-2kcg
29
vulnerability VCID-wm4a-hcvt-vkbk
30
vulnerability VCID-x5jb-yj3d-qbdf
31
vulnerability VCID-zeut-9wfp-q7et
32
vulnerability VCID-zhcb-h8ph-7uhk
33
vulnerability VCID-zkvq-bms4-gfcv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.2
aliases GMS-2018-92
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pwh8-c992-vqav
27
url VCID-qr1u-kcn9-cuf6
vulnerability_id VCID-qr1u-kcn9-cuf6
summary 
Cross-site Scripting
Cross-Site Scripting in Fluid Engine.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-013/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-013/
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.25
purl pkg:composer/typo3/cms-core@8.7.25
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1knh-es99-dubw
2
vulnerability VCID-6ffw-r4k7-5qf8
3
vulnerability VCID-82ds-xda8-5ye4
4
vulnerability VCID-848u-w88s-5bbe
5
vulnerability VCID-cbmm-1b2k-8qaz
6
vulnerability VCID-cv9x-ea8e-pufu
7
vulnerability VCID-e8ze-umec-a7hx
8
vulnerability VCID-ev4k-5k1d-2bhu
9
vulnerability VCID-fqkx-v8t5-q3h6
10
vulnerability VCID-jp1p-rfxa-hyd9
11
vulnerability VCID-tgyt-axv1-c7ag
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.25
1
url pkg:composer/typo3/cms-core@9.5.6
purl pkg:composer/typo3/cms-core@9.5.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1knh-es99-dubw
2
vulnerability VCID-1sfk-z8py-ykb8
3
vulnerability VCID-23ss-xwrm-1qcu
4
vulnerability VCID-4an7-9ph4-mkd4
5
vulnerability VCID-6ffw-r4k7-5qf8
6
vulnerability VCID-6mnf-2fcw-dqgp
7
vulnerability VCID-82ds-xda8-5ye4
8
vulnerability VCID-848u-w88s-5bbe
9
vulnerability VCID-8w4e-d49b-nbg8
10
vulnerability VCID-bbh5-rss8-bfct
11
vulnerability VCID-cbmm-1b2k-8qaz
12
vulnerability VCID-cv9x-ea8e-pufu
13
vulnerability VCID-e6zr-4bgg-kkh5
14
vulnerability VCID-e8ze-umec-a7hx
15
vulnerability VCID-efrn-3w2z-xyaf
16
vulnerability VCID-ev4k-5k1d-2bhu
17
vulnerability VCID-fqkx-v8t5-q3h6
18
vulnerability VCID-jp1p-rfxa-hyd9
19
vulnerability VCID-n1gz-y615-cbbk
20
vulnerability VCID-tgyt-axv1-c7ag
21
vulnerability VCID-zeut-9wfp-q7et
22
vulnerability VCID-zkvq-bms4-gfcv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.6
aliases GMS-2019-160
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qr1u-kcn9-cuf6
28
url VCID-qxab-9uwr-yqhv
vulnerability_id VCID-qxab-9uwr-yqhv
summary 
Cross-site Scripting
CKEditor allows user-assisted XSS involving a source-mode paste.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-17960
reference_id
reference_type
scores
0
value 0.02024
scoring_system epss
scoring_elements 0.84092
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-17960
1
reference_url https://ckeditor.com/blog/CKEditor-4.11-with-emoji-dropdown-and-auto-link-on-typing-released
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://ckeditor.com/blog/CKEditor-4.11-with-emoji-dropdown-and-auto-link-on-typing-released
2
reference_url https://ckeditor.com/blog/CKEditor-4.11-with-emoji-dropdown-and-auto-link-on-typing-released/
reference_id
reference_type
scores
url https://ckeditor.com/blog/CKEditor-4.11-with-emoji-dropdown-and-auto-link-on-typing-released/
3
reference_url https://ckeditor.com/cke4/release/CKEditor-4.11.0
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://ckeditor.com/cke4/release/CKEditor-4.11.0
4
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-005
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2018-005
5
reference_url https://web.archive.org/web/20200227030123/http://www.securityfocus.com/bid/109205
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20200227030123/http://www.securityfocus.com/bid/109205
6
reference_url https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
7
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1015217
reference_id 1015217
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1015217
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-17960
reference_id CVE-2018-17960
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-17960
9
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2018-17960.yaml
reference_id CVE-2018-17960.YAML
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2018-17960.yaml
10
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2018-17960.yaml
reference_id CVE-2018-17960.YAML
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2018-17960.yaml
11
reference_url https://github.com/advisories/GHSA-g68x-vvqq-pvw3
reference_id GHSA-g68x-vvqq-pvw3
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-g68x-vvqq-pvw3
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.21
purl pkg:composer/typo3/cms-core@8.7.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1knh-es99-dubw
2
vulnerability VCID-1prg-c74k-37ec
3
vulnerability VCID-6ffw-r4k7-5qf8
4
vulnerability VCID-6q7t-kdrg-8qc3
5
vulnerability VCID-6rgp-dzw1-kycx
6
vulnerability VCID-82ds-xda8-5ye4
7
vulnerability VCID-848u-w88s-5bbe
8
vulnerability VCID-8sek-v483-8ueu
9
vulnerability VCID-cg7w-xkyg-abgj
10
vulnerability VCID-cv9x-ea8e-pufu
11
vulnerability VCID-e8ze-umec-a7hx
12
vulnerability VCID-ev4k-5k1d-2bhu
13
vulnerability VCID-fqkx-v8t5-q3h6
14
vulnerability VCID-hnyk-614g-yuhy
15
vulnerability VCID-jp1p-rfxa-hyd9
16
vulnerability VCID-k8r2-2ak8-qkak
17
vulnerability VCID-n56h-zuzr-ruhf
18
vulnerability VCID-qr1u-kcn9-cuf6
19
vulnerability VCID-tgyt-axv1-c7ag
20
vulnerability VCID-wm4a-hcvt-vkbk
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.21
1
url pkg:composer/typo3/cms-core@9.5.2
purl pkg:composer/typo3/cms-core@9.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1knh-es99-dubw
2
vulnerability VCID-1prg-c74k-37ec
3
vulnerability VCID-1sfk-z8py-ykb8
4
vulnerability VCID-23ss-xwrm-1qcu
5
vulnerability VCID-4an7-9ph4-mkd4
6
vulnerability VCID-6ffw-r4k7-5qf8
7
vulnerability VCID-6mnf-2fcw-dqgp
8
vulnerability VCID-6q7t-kdrg-8qc3
9
vulnerability VCID-6rgp-dzw1-kycx
10
vulnerability VCID-82ds-xda8-5ye4
11
vulnerability VCID-848u-w88s-5bbe
12
vulnerability VCID-8sek-v483-8ueu
13
vulnerability VCID-8w4e-d49b-nbg8
14
vulnerability VCID-bbh5-rss8-bfct
15
vulnerability VCID-cv9x-ea8e-pufu
16
vulnerability VCID-e6zr-4bgg-kkh5
17
vulnerability VCID-e8ze-umec-a7hx
18
vulnerability VCID-efrn-3w2z-xyaf
19
vulnerability VCID-ev4k-5k1d-2bhu
20
vulnerability VCID-fqkx-v8t5-q3h6
21
vulnerability VCID-hnyk-614g-yuhy
22
vulnerability VCID-jp1p-rfxa-hyd9
23
vulnerability VCID-k8r2-2ak8-qkak
24
vulnerability VCID-n1gz-y615-cbbk
25
vulnerability VCID-n56h-zuzr-ruhf
26
vulnerability VCID-qr1u-kcn9-cuf6
27
vulnerability VCID-tgyt-axv1-c7ag
28
vulnerability VCID-v7b1-x8hy-2kcg
29
vulnerability VCID-wm4a-hcvt-vkbk
30
vulnerability VCID-x5jb-yj3d-qbdf
31
vulnerability VCID-zeut-9wfp-q7et
32
vulnerability VCID-zhcb-h8ph-7uhk
33
vulnerability VCID-zkvq-bms4-gfcv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.2
aliases CVE-2018-17960, GHSA-g68x-vvqq-pvw3
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qxab-9uwr-yqhv
29
url VCID-tgyt-axv1-c7ag
vulnerability_id VCID-tgyt-axv1-c7ag
summary 
Cross-site Scripting
TYPO3 is an open source PHP based web content management system. In TYPO3 the system extension Fluid (typo3/cms-fluid) of the TYPO3 core is vulnerable to cross-site scripting passing user-controlled data as argument to Fluid view helpers. Update to TYPO3 that fix the problem described.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-26227
reference_id
reference_type
scores
0
value 0.00359
scoring_system epss
scoring_elements 0.5838
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-26227
1
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2020-26227.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2020-26227.yaml
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2020-26227.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2020-26227.yaml
3
reference_url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-vqqx-jw6p-q3rf
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-vqqx-jw6p-q3rf
4
reference_url https://packagist.org/packages/typo3/cms-core
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://packagist.org/packages/typo3/cms-core
5
reference_url https://typo3.org/security/advisory/typo3-core-sa-2020-010
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2020-010
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-26227
reference_id CVE-2020-26227
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-26227
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.38
purl pkg:composer/typo3/cms-core@8.7.38
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.38
1
url pkg:composer/typo3/cms-core@9.5.23
purl pkg:composer/typo3/cms-core@9.5.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-6mnf-2fcw-dqgp
2
vulnerability VCID-848u-w88s-5bbe
3
vulnerability VCID-ev4k-5k1d-2bhu
4
vulnerability VCID-fqkx-v8t5-q3h6
5
vulnerability VCID-jp1p-rfxa-hyd9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.23
2
url pkg:composer/typo3/cms-core@10.4.10
purl pkg:composer/typo3/cms-core@10.4.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-6mnf-2fcw-dqgp
2
vulnerability VCID-6urp-p9mn-cffv
3
vulnerability VCID-848u-w88s-5bbe
4
vulnerability VCID-c46m-ht19-ybc4
5
vulnerability VCID-ev4k-5k1d-2bhu
6
vulnerability VCID-fqkx-v8t5-q3h6
7
vulnerability VCID-jp1p-rfxa-hyd9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@10.4.10
aliases CVE-2020-26227, GHSA-vqqx-jw6p-q3rf
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-tgyt-axv1-c7ag
30
url VCID-uaf3-fyst-u7gm
vulnerability_id VCID-uaf3-fyst-u7gm
summary 
Cross-site Scripting
Cross-Site Scripting in Backend Modal Component.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-007/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2018-007/
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.21
purl pkg:composer/typo3/cms-core@8.7.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1knh-es99-dubw
2
vulnerability VCID-1prg-c74k-37ec
3
vulnerability VCID-6ffw-r4k7-5qf8
4
vulnerability VCID-6q7t-kdrg-8qc3
5
vulnerability VCID-6rgp-dzw1-kycx
6
vulnerability VCID-82ds-xda8-5ye4
7
vulnerability VCID-848u-w88s-5bbe
8
vulnerability VCID-8sek-v483-8ueu
9
vulnerability VCID-cg7w-xkyg-abgj
10
vulnerability VCID-cv9x-ea8e-pufu
11
vulnerability VCID-e8ze-umec-a7hx
12
vulnerability VCID-ev4k-5k1d-2bhu
13
vulnerability VCID-fqkx-v8t5-q3h6
14
vulnerability VCID-hnyk-614g-yuhy
15
vulnerability VCID-jp1p-rfxa-hyd9
16
vulnerability VCID-k8r2-2ak8-qkak
17
vulnerability VCID-n56h-zuzr-ruhf
18
vulnerability VCID-qr1u-kcn9-cuf6
19
vulnerability VCID-tgyt-axv1-c7ag
20
vulnerability VCID-wm4a-hcvt-vkbk
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.21
1
url pkg:composer/typo3/cms-core@9.5.2
purl pkg:composer/typo3/cms-core@9.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1knh-es99-dubw
2
vulnerability VCID-1prg-c74k-37ec
3
vulnerability VCID-1sfk-z8py-ykb8
4
vulnerability VCID-23ss-xwrm-1qcu
5
vulnerability VCID-4an7-9ph4-mkd4
6
vulnerability VCID-6ffw-r4k7-5qf8
7
vulnerability VCID-6mnf-2fcw-dqgp
8
vulnerability VCID-6q7t-kdrg-8qc3
9
vulnerability VCID-6rgp-dzw1-kycx
10
vulnerability VCID-82ds-xda8-5ye4
11
vulnerability VCID-848u-w88s-5bbe
12
vulnerability VCID-8sek-v483-8ueu
13
vulnerability VCID-8w4e-d49b-nbg8
14
vulnerability VCID-bbh5-rss8-bfct
15
vulnerability VCID-cv9x-ea8e-pufu
16
vulnerability VCID-e6zr-4bgg-kkh5
17
vulnerability VCID-e8ze-umec-a7hx
18
vulnerability VCID-efrn-3w2z-xyaf
19
vulnerability VCID-ev4k-5k1d-2bhu
20
vulnerability VCID-fqkx-v8t5-q3h6
21
vulnerability VCID-hnyk-614g-yuhy
22
vulnerability VCID-jp1p-rfxa-hyd9
23
vulnerability VCID-k8r2-2ak8-qkak
24
vulnerability VCID-n1gz-y615-cbbk
25
vulnerability VCID-n56h-zuzr-ruhf
26
vulnerability VCID-qr1u-kcn9-cuf6
27
vulnerability VCID-tgyt-axv1-c7ag
28
vulnerability VCID-v7b1-x8hy-2kcg
29
vulnerability VCID-wm4a-hcvt-vkbk
30
vulnerability VCID-x5jb-yj3d-qbdf
31
vulnerability VCID-zeut-9wfp-q7et
32
vulnerability VCID-zhcb-h8ph-7uhk
33
vulnerability VCID-zkvq-bms4-gfcv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.2
aliases GMS-2018-86
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-uaf3-fyst-u7gm
31
url VCID-uncp-sa58-ufdd
vulnerability_id VCID-uncp-sa58-ufdd
summary 
Cross-site Scripting
Cross-Site Scripting in Online Media Asset Rendering.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-006/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2018-006/
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.21
purl pkg:composer/typo3/cms-core@8.7.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1knh-es99-dubw
2
vulnerability VCID-1prg-c74k-37ec
3
vulnerability VCID-6ffw-r4k7-5qf8
4
vulnerability VCID-6q7t-kdrg-8qc3
5
vulnerability VCID-6rgp-dzw1-kycx
6
vulnerability VCID-82ds-xda8-5ye4
7
vulnerability VCID-848u-w88s-5bbe
8
vulnerability VCID-8sek-v483-8ueu
9
vulnerability VCID-cg7w-xkyg-abgj
10
vulnerability VCID-cv9x-ea8e-pufu
11
vulnerability VCID-e8ze-umec-a7hx
12
vulnerability VCID-ev4k-5k1d-2bhu
13
vulnerability VCID-fqkx-v8t5-q3h6
14
vulnerability VCID-hnyk-614g-yuhy
15
vulnerability VCID-jp1p-rfxa-hyd9
16
vulnerability VCID-k8r2-2ak8-qkak
17
vulnerability VCID-n56h-zuzr-ruhf
18
vulnerability VCID-qr1u-kcn9-cuf6
19
vulnerability VCID-tgyt-axv1-c7ag
20
vulnerability VCID-wm4a-hcvt-vkbk
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.21
1
url pkg:composer/typo3/cms-core@9.5.2
purl pkg:composer/typo3/cms-core@9.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1knh-es99-dubw
2
vulnerability VCID-1prg-c74k-37ec
3
vulnerability VCID-1sfk-z8py-ykb8
4
vulnerability VCID-23ss-xwrm-1qcu
5
vulnerability VCID-4an7-9ph4-mkd4
6
vulnerability VCID-6ffw-r4k7-5qf8
7
vulnerability VCID-6mnf-2fcw-dqgp
8
vulnerability VCID-6q7t-kdrg-8qc3
9
vulnerability VCID-6rgp-dzw1-kycx
10
vulnerability VCID-82ds-xda8-5ye4
11
vulnerability VCID-848u-w88s-5bbe
12
vulnerability VCID-8sek-v483-8ueu
13
vulnerability VCID-8w4e-d49b-nbg8
14
vulnerability VCID-bbh5-rss8-bfct
15
vulnerability VCID-cv9x-ea8e-pufu
16
vulnerability VCID-e6zr-4bgg-kkh5
17
vulnerability VCID-e8ze-umec-a7hx
18
vulnerability VCID-efrn-3w2z-xyaf
19
vulnerability VCID-ev4k-5k1d-2bhu
20
vulnerability VCID-fqkx-v8t5-q3h6
21
vulnerability VCID-hnyk-614g-yuhy
22
vulnerability VCID-jp1p-rfxa-hyd9
23
vulnerability VCID-k8r2-2ak8-qkak
24
vulnerability VCID-n1gz-y615-cbbk
25
vulnerability VCID-n56h-zuzr-ruhf
26
vulnerability VCID-qr1u-kcn9-cuf6
27
vulnerability VCID-tgyt-axv1-c7ag
28
vulnerability VCID-v7b1-x8hy-2kcg
29
vulnerability VCID-wm4a-hcvt-vkbk
30
vulnerability VCID-x5jb-yj3d-qbdf
31
vulnerability VCID-zeut-9wfp-q7et
32
vulnerability VCID-zhcb-h8ph-7uhk
33
vulnerability VCID-zkvq-bms4-gfcv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.2
aliases GMS-2018-85
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-uncp-sa58-ufdd
32
url VCID-wm4a-hcvt-vkbk
vulnerability_id VCID-wm4a-hcvt-vkbk
summary Information Disclosure of Installed Extensions.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-001/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2019-001/
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.23
purl pkg:composer/typo3/cms-core@8.7.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1knh-es99-dubw
2
vulnerability VCID-6ffw-r4k7-5qf8
3
vulnerability VCID-82ds-xda8-5ye4
4
vulnerability VCID-848u-w88s-5bbe
5
vulnerability VCID-8sek-v483-8ueu
6
vulnerability VCID-cv9x-ea8e-pufu
7
vulnerability VCID-e8ze-umec-a7hx
8
vulnerability VCID-ev4k-5k1d-2bhu
9
vulnerability VCID-fqkx-v8t5-q3h6
10
vulnerability VCID-hnyk-614g-yuhy
11
vulnerability VCID-jp1p-rfxa-hyd9
12
vulnerability VCID-qr1u-kcn9-cuf6
13
vulnerability VCID-tgyt-axv1-c7ag
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.23
1
url pkg:composer/typo3/cms-core@9.5.4
purl pkg:composer/typo3/cms-core@9.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1knh-es99-dubw
2
vulnerability VCID-1sfk-z8py-ykb8
3
vulnerability VCID-23ss-xwrm-1qcu
4
vulnerability VCID-4an7-9ph4-mkd4
5
vulnerability VCID-6ffw-r4k7-5qf8
6
vulnerability VCID-6mnf-2fcw-dqgp
7
vulnerability VCID-82ds-xda8-5ye4
8
vulnerability VCID-848u-w88s-5bbe
9
vulnerability VCID-8sek-v483-8ueu
10
vulnerability VCID-8w4e-d49b-nbg8
11
vulnerability VCID-bbh5-rss8-bfct
12
vulnerability VCID-cv9x-ea8e-pufu
13
vulnerability VCID-e6zr-4bgg-kkh5
14
vulnerability VCID-e8ze-umec-a7hx
15
vulnerability VCID-efrn-3w2z-xyaf
16
vulnerability VCID-ev4k-5k1d-2bhu
17
vulnerability VCID-fqkx-v8t5-q3h6
18
vulnerability VCID-hnyk-614g-yuhy
19
vulnerability VCID-jp1p-rfxa-hyd9
20
vulnerability VCID-n1gz-y615-cbbk
21
vulnerability VCID-qr1u-kcn9-cuf6
22
vulnerability VCID-tgyt-axv1-c7ag
23
vulnerability VCID-x5jb-yj3d-qbdf
24
vulnerability VCID-zeut-9wfp-q7et
25
vulnerability VCID-zhcb-h8ph-7uhk
26
vulnerability VCID-zkvq-bms4-gfcv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.4
aliases GMS-2019-152
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wm4a-hcvt-vkbk
33
url VCID-z2bk-m2kw-h3c9
vulnerability_id VCID-z2bk-m2kw-h3c9
summary 
Cross-site Scripting
Cross-Site Scripting in Frontend User Login.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-008/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2018-008/
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.21
purl pkg:composer/typo3/cms-core@8.7.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1knh-es99-dubw
2
vulnerability VCID-1prg-c74k-37ec
3
vulnerability VCID-6ffw-r4k7-5qf8
4
vulnerability VCID-6q7t-kdrg-8qc3
5
vulnerability VCID-6rgp-dzw1-kycx
6
vulnerability VCID-82ds-xda8-5ye4
7
vulnerability VCID-848u-w88s-5bbe
8
vulnerability VCID-8sek-v483-8ueu
9
vulnerability VCID-cg7w-xkyg-abgj
10
vulnerability VCID-cv9x-ea8e-pufu
11
vulnerability VCID-e8ze-umec-a7hx
12
vulnerability VCID-ev4k-5k1d-2bhu
13
vulnerability VCID-fqkx-v8t5-q3h6
14
vulnerability VCID-hnyk-614g-yuhy
15
vulnerability VCID-jp1p-rfxa-hyd9
16
vulnerability VCID-k8r2-2ak8-qkak
17
vulnerability VCID-n56h-zuzr-ruhf
18
vulnerability VCID-qr1u-kcn9-cuf6
19
vulnerability VCID-tgyt-axv1-c7ag
20
vulnerability VCID-wm4a-hcvt-vkbk
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.21
1
url pkg:composer/typo3/cms-core@9.5.2
purl pkg:composer/typo3/cms-core@9.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1knh-es99-dubw
2
vulnerability VCID-1prg-c74k-37ec
3
vulnerability VCID-1sfk-z8py-ykb8
4
vulnerability VCID-23ss-xwrm-1qcu
5
vulnerability VCID-4an7-9ph4-mkd4
6
vulnerability VCID-6ffw-r4k7-5qf8
7
vulnerability VCID-6mnf-2fcw-dqgp
8
vulnerability VCID-6q7t-kdrg-8qc3
9
vulnerability VCID-6rgp-dzw1-kycx
10
vulnerability VCID-82ds-xda8-5ye4
11
vulnerability VCID-848u-w88s-5bbe
12
vulnerability VCID-8sek-v483-8ueu
13
vulnerability VCID-8w4e-d49b-nbg8
14
vulnerability VCID-bbh5-rss8-bfct
15
vulnerability VCID-cv9x-ea8e-pufu
16
vulnerability VCID-e6zr-4bgg-kkh5
17
vulnerability VCID-e8ze-umec-a7hx
18
vulnerability VCID-efrn-3w2z-xyaf
19
vulnerability VCID-ev4k-5k1d-2bhu
20
vulnerability VCID-fqkx-v8t5-q3h6
21
vulnerability VCID-hnyk-614g-yuhy
22
vulnerability VCID-jp1p-rfxa-hyd9
23
vulnerability VCID-k8r2-2ak8-qkak
24
vulnerability VCID-n1gz-y615-cbbk
25
vulnerability VCID-n56h-zuzr-ruhf
26
vulnerability VCID-qr1u-kcn9-cuf6
27
vulnerability VCID-tgyt-axv1-c7ag
28
vulnerability VCID-v7b1-x8hy-2kcg
29
vulnerability VCID-wm4a-hcvt-vkbk
30
vulnerability VCID-x5jb-yj3d-qbdf
31
vulnerability VCID-zeut-9wfp-q7et
32
vulnerability VCID-zhcb-h8ph-7uhk
33
vulnerability VCID-zkvq-bms4-gfcv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.2
aliases GMS-2018-87
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-z2bk-m2kw-h3c9
34
url VCID-zbm9-cx69-wqg3
vulnerability_id VCID-zbm9-cx69-wqg3
summary Insecure Deserialization in TYPO3 CMS.
references
0
reference_url https://typo3.org/security/advisory/typo3-core-sa-2018-004/
reference_id
reference_type
scores
url https://typo3.org/security/advisory/typo3-core-sa-2018-004/
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.17
purl pkg:composer/typo3/cms-core@8.7.17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1knh-es99-dubw
2
vulnerability VCID-1prg-c74k-37ec
3
vulnerability VCID-6ffw-r4k7-5qf8
4
vulnerability VCID-6q7t-kdrg-8qc3
5
vulnerability VCID-6rgp-dzw1-kycx
6
vulnerability VCID-7ch1-q9f4-a7bt
7
vulnerability VCID-82ds-xda8-5ye4
8
vulnerability VCID-848u-w88s-5bbe
9
vulnerability VCID-8sek-v483-8ueu
10
vulnerability VCID-b92x-56ng-3ygy
11
vulnerability VCID-cg7w-xkyg-abgj
12
vulnerability VCID-cv9x-ea8e-pufu
13
vulnerability VCID-daz8-j1ns-rkgt
14
vulnerability VCID-e8ze-umec-a7hx
15
vulnerability VCID-e9jc-8mpp-fkgh
16
vulnerability VCID-ev4k-5k1d-2bhu
17
vulnerability VCID-fqkx-v8t5-q3h6
18
vulnerability VCID-hnyk-614g-yuhy
19
vulnerability VCID-jp1p-rfxa-hyd9
20
vulnerability VCID-k8r2-2ak8-qkak
21
vulnerability VCID-n56h-zuzr-ruhf
22
vulnerability VCID-nyw8-q5ef-2fcv
23
vulnerability VCID-pwh8-c992-vqav
24
vulnerability VCID-qr1u-kcn9-cuf6
25
vulnerability VCID-qxab-9uwr-yqhv
26
vulnerability VCID-tgyt-axv1-c7ag
27
vulnerability VCID-uaf3-fyst-u7gm
28
vulnerability VCID-uncp-sa58-ufdd
29
vulnerability VCID-wm4a-hcvt-vkbk
30
vulnerability VCID-z2bk-m2kw-h3c9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.17
1
url pkg:composer/typo3/cms-core@9.3.2
purl pkg:composer/typo3/cms-core@9.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1knh-es99-dubw
2
vulnerability VCID-1prg-c74k-37ec
3
vulnerability VCID-1sfk-z8py-ykb8
4
vulnerability VCID-23ss-xwrm-1qcu
5
vulnerability VCID-4an7-9ph4-mkd4
6
vulnerability VCID-6ffw-r4k7-5qf8
7
vulnerability VCID-6mnf-2fcw-dqgp
8
vulnerability VCID-6q7t-kdrg-8qc3
9
vulnerability VCID-6rgp-dzw1-kycx
10
vulnerability VCID-7ch1-q9f4-a7bt
11
vulnerability VCID-82ds-xda8-5ye4
12
vulnerability VCID-848u-w88s-5bbe
13
vulnerability VCID-8sek-v483-8ueu
14
vulnerability VCID-8w4e-d49b-nbg8
15
vulnerability VCID-bbh5-rss8-bfct
16
vulnerability VCID-cv9x-ea8e-pufu
17
vulnerability VCID-daz8-j1ns-rkgt
18
vulnerability VCID-e6zr-4bgg-kkh5
19
vulnerability VCID-e8ze-umec-a7hx
20
vulnerability VCID-e9jc-8mpp-fkgh
21
vulnerability VCID-efrn-3w2z-xyaf
22
vulnerability VCID-ev4k-5k1d-2bhu
23
vulnerability VCID-fqkx-v8t5-q3h6
24
vulnerability VCID-hnyk-614g-yuhy
25
vulnerability VCID-jp1p-rfxa-hyd9
26
vulnerability VCID-k8r2-2ak8-qkak
27
vulnerability VCID-n1gz-y615-cbbk
28
vulnerability VCID-n56h-zuzr-ruhf
29
vulnerability VCID-nyw8-q5ef-2fcv
30
vulnerability VCID-pwh8-c992-vqav
31
vulnerability VCID-qr1u-kcn9-cuf6
32
vulnerability VCID-qxab-9uwr-yqhv
33
vulnerability VCID-tgyt-axv1-c7ag
34
vulnerability VCID-uaf3-fyst-u7gm
35
vulnerability VCID-uncp-sa58-ufdd
36
vulnerability VCID-v7b1-x8hy-2kcg
37
vulnerability VCID-wm4a-hcvt-vkbk
38
vulnerability VCID-x5jb-yj3d-qbdf
39
vulnerability VCID-z2bk-m2kw-h3c9
40
vulnerability VCID-zeut-9wfp-q7et
41
vulnerability VCID-zhcb-h8ph-7uhk
42
vulnerability VCID-zkvq-bms4-gfcv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.3.2
aliases GMS-2018-84
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zbm9-cx69-wqg3
Fixing_vulnerabilities
0
url VCID-nqqc-nkwq-rqhx
vulnerability_id VCID-nqqc-nkwq-rqhx
summary 
Cross-site Scripting
`svg.swf` in TYPO3 could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack on a targeted system. This may be at a `contrib/websvg/svg.swf` pathname.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-8091
reference_id
reference_type
scores
0
value 0.20517
scoring_system epss
scoring_elements 0.95671
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-8091
1
reference_url https://github.com/TYPO3/typo3
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3
2
reference_url https://github.com/TYPO3/typo3/blob/4cb53e828bd5138d180cdf9cac1ccf7fd31086d2/typo3/sysext/core/Documentation/Changelog/7.2/Breaking-65962-WebSVGLibraryAndAPIRemoved.rst
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/blob/4cb53e828bd5138d180cdf9cac1ccf7fd31086d2/typo3/sysext/core/Documentation/Changelog/7.2/Breaking-65962-WebSVGLibraryAndAPIRemoved.rst
3
reference_url https://github.com/TYPO3/typo3/commit/482e2e992f80f5e38cb48fcaea40fd9812a5252c
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/482e2e992f80f5e38cb48fcaea40fd9812a5252c
4
reference_url https://typo3.org/security/advisory/typo3-psa-2019-003
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-psa-2019-003
5
reference_url https://www.purplemet.com/blog/typo3-xss-vulnerability
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.purplemet.com/blog/typo3-xss-vulnerability
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-8091
reference_id CVE-2020-8091
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-8091
fixed_packages
0
url pkg:composer/typo3/cms-core@8.7.7
purl pkg:composer/typo3/cms-core@8.7.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-1knh-es99-dubw
2
vulnerability VCID-1prg-c74k-37ec
3
vulnerability VCID-2m67-xdxz-ryc2
4
vulnerability VCID-6ffw-r4k7-5qf8
5
vulnerability VCID-6q7t-kdrg-8qc3
6
vulnerability VCID-6rgp-dzw1-kycx
7
vulnerability VCID-7ch1-q9f4-a7bt
8
vulnerability VCID-82ds-xda8-5ye4
9
vulnerability VCID-848u-w88s-5bbe
10
vulnerability VCID-8sek-v483-8ueu
11
vulnerability VCID-b92x-56ng-3ygy
12
vulnerability VCID-cf9m-qdyj-eyav
13
vulnerability VCID-cg7w-xkyg-abgj
14
vulnerability VCID-cv9x-ea8e-pufu
15
vulnerability VCID-daz8-j1ns-rkgt
16
vulnerability VCID-e8ze-umec-a7hx
17
vulnerability VCID-e9jc-8mpp-fkgh
18
vulnerability VCID-ev4k-5k1d-2bhu
19
vulnerability VCID-fqkx-v8t5-q3h6
20
vulnerability VCID-hfcx-1kuh-p3ez
21
vulnerability VCID-hnyk-614g-yuhy
22
vulnerability VCID-jp1p-rfxa-hyd9
23
vulnerability VCID-k8r2-2ak8-qkak
24
vulnerability VCID-n56h-zuzr-ruhf
25
vulnerability VCID-nyw8-q5ef-2fcv
26
vulnerability VCID-pwh8-c992-vqav
27
vulnerability VCID-qr1u-kcn9-cuf6
28
vulnerability VCID-qxab-9uwr-yqhv
29
vulnerability VCID-tgyt-axv1-c7ag
30
vulnerability VCID-uaf3-fyst-u7gm
31
vulnerability VCID-uncp-sa58-ufdd
32
vulnerability VCID-wm4a-hcvt-vkbk
33
vulnerability VCID-z2bk-m2kw-h3c9
34
vulnerability VCID-zbm9-cx69-wqg3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.7
aliases CVE-2020-8091, GHSA-qvhv-pwww-53jj
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-nqqc-nkwq-rqhx
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.7