Search for packages
| purl | pkg:composer/typo3/cms@7.6.2 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-1bnd-6xsq-nbec
Aliases: 2016-04-12-3 |
Improper Authentication Authentication Bypass in TYPO3 CMS. |
Affected by 73 other vulnerabilities. Affected by 116 other vulnerabilities. |
|
VCID-1jcy-nx8g-z3d3
Aliases: 2016-11-22-1 |
Insecure Deserialization Insecure Unserialize in TYPO3 Backend. |
Affected by 46 other vulnerabilities. Affected by 92 other vulnerabilities. |
|
VCID-1qjx-grvf-y7bk
Aliases: GHSA-c7rj-92xr-wprg |
Insecure Unserialize in TYPO3 Backend Failing to properly validate incoming data, the suggest wizard is susceptible to insecure unserialize. To exploit this vulnerability a valid backend user account is needed. |
Affected by 46 other vulnerabilities. Affected by 92 other vulnerabilities. |
|
VCID-25t3-1sm6-3kdn
Aliases: 2016-09-14-1 |
Cross-site Scripting XSS in TYPO3 Backend. |
Affected by 52 other vulnerabilities. Affected by 102 other vulnerabilities. |
|
VCID-28bf-jvah-zkhw
Aliases: 2018-07-12-1 |
Improper Authentication Authentication Bypass in TYPO3 CMS. |
Affected by 26 other vulnerabilities. Affected by 68 other vulnerabilities. Affected by 84 other vulnerabilities. |
|
VCID-2fs8-bscc-3ye2
Aliases: 2017-02-28-2 |
Cross-site Scripting XSS in TYPO3 CMS. |
Affected by 41 other vulnerabilities. Affected by 88 other vulnerabilities. |
|
VCID-3m53-kkk2-j7c2
Aliases: GHSA-qffc-gwpp-m2xr |
XML External Entity (XXE) Processing in TYPO3 Core All XML processing within the TYPO3 CMS are vulnerable to XEE processing. This can lead to load internal and/or external (file) content within an XML structure. Furthermore it is possible to inject arbitrary files for an XML Denial of Service attack. For more information on that topic see https://www.owasp.org/index.php/XML_External_Entity_(XXE)_Processing. |
Affected by 79 other vulnerabilities. |
|
VCID-435j-f3yx-9yep
Aliases: 2016-11-22-2 |
Path Traversal in TYPO3 Core. |
Affected by 46 other vulnerabilities. Affected by 92 other vulnerabilities. |
|
VCID-47px-4d98-ubab
Aliases: GHSA-qmwf-j7g7-f5jw |
Cross-Site Scripting in third party library mso/idna-convert Make sure to not expose the vendor directory to the publicly accessible document root. In composer managed installation, make sure to configure a dedicated web folder. In general it is recommended to not expose the complete typo3_src sources folder in the document root. |
Affected by 56 other vulnerabilities. Affected by 101 other vulnerabilities. |
|
VCID-5jgb-dsyx-hyb4
Aliases: CVE-2021-21338 GHSA-4jhw-2p6j-5wmp |
Open Redirection in Login Handling ### Problem It has been discovered that Login Handling is susceptible to open redirection which allows attackers redirecting to arbitrary content, and conducting phishing attacks. No authentication is required in order to exploit this vulnerability. ### Solution Update to TYPO3 versions 6.2.57, 7.6.51, 8.7.40, 9.5.25, 10.4.14, 11.1.1 that fix the problem described. ### Credits Thanks to Alexander Kellner who reported this issue and to TYPO3 security team member Torben Hansen who fixed the issue. ### References * [TYPO3-CORE-SA-2021-001](https://typo3.org/security/advisory/typo3-core-sa-2021-001) |
Affected by 1 other vulnerability. Affected by 3 other vulnerabilities. Affected by 12 other vulnerabilities. Affected by 22 other vulnerabilities. Affected by 23 other vulnerabilities. |
|
VCID-5paq-5frf-43ed
Aliases: CVE-2022-36107 GHSA-9c6w-55cp-5w25 |
TYPO3 CMS Stored Cross-Site Scripting via FileDumpController > ### Meta > * CVSS: `CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N/E:F/RL:O/RC:C` (5.0) ### Problem It has been discovered that the `FileDumpController` (backend and frontend context) is vulnerable to cross-site scripting when malicious files are displayed using this component. A valid backend user account is needed to exploit this vulnerability. ### Solution Update to TYPO3 version 7.6.58 ELTS, 8.7.48 ELTS, 9.5.37 ELTS, 10.4.32 or 11.5.16 that fix the problem described above. ### Credits Thanks to Vautia who reported this issue and to TYPO3 core & security team member Oliver Hader who fixed the issue. ### References * [TYPO3-CORE-SA-2022-009](https://typo3.org/security/advisory/typo3-core-sa-2022-009) * [Vulnerability Report on huntr.dev](https://huntr.dev/bounties/51e9b709-193c-41fd-bd4a-833aaca0bd4e/) (embargoed +30 days) |
Affected by 7 other vulnerabilities. Affected by 7 other vulnerabilities. |
|
VCID-5ppt-avmb-cqb2
Aliases: 2016-09-14-2 |
Uncontrolled Resource Consumption Cache Flooding in TYPO3 Frontend. |
Affected by 52 other vulnerabilities. Affected by 102 other vulnerabilities. |
|
VCID-6b5q-vzs3-pkcc
Aliases: GHSA-f777-f784-36gm |
TYPO3 Security Misconfiguration in Install Tool Cookie It has been discovered that cookies created in the Install Tool are not hardened to be submitted only via HTTP. In combination with other vulnerabilities such as cross-site scripting it can lead to hijacking an active and valid session in the Install Tool. |
Affected by 12 other vulnerabilities. Affected by 51 other vulnerabilities. Affected by 69 other vulnerabilities. |
|
VCID-6wsa-4ywc-8fh4
Aliases: GHSA-pw2q-qwvj-gh43 |
Cache Flooding in TYPO3 Frontend Links with a valid cHash argument lead to newly generated page cache entries. Because the cHash is not bound to a specific page, attackers could use valid cHash arguments for multiple pages, leading to additional useless page cache entries. Depending on the number of pages in the system and the number of available valid links with a cHash, attackers could add a considerable amount of additional cache entries, which in the end exceed storage limits and thus could lead to the system not responding any more. This means the Cache Flooding attack potentially could lead to a successful Denial of Service (DoS) attack. |
Affected by 52 other vulnerabilities. Affected by 98 other vulnerabilities. |
|
VCID-7d1g-j3k5-gub8
Aliases: 2016-07-19-4 |
Information Disclosure in TYPO3 Backend. |
Affected by 56 other vulnerabilities. Affected by 101 other vulnerabilities. |
|
VCID-8jp8-a363-67be
Aliases: GHSA-86r8-4g3w-7xjp |
Cross-Site Scripting in TYPO3 Backend Failing to properly encode user input, some backend components are vulnerable to Cross-Site Scripting. A valid backend user account is needed to exploit this vulnerability. |
Affected by 56 other vulnerabilities. Affected by 101 other vulnerabilities. |
|
VCID-b715-6z6c-qqar
Aliases: 2016-02-23-4 |
Uncontrolled Resource Consumption Denial of Service attack possibility in TYPO3 component Indexed Search. |
Affected by 79 other vulnerabilities. |
|
VCID-bajy-qbwq-fufn
Aliases: CVE-2022-31047 GHSA-fh99-4pgr-8j99 |
Insertion of Sensitive Information into Log File in typo3/cms-core > ### Meta > * CVSS: `CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C` (4.9) ### Problem It has been discovered that system internal credentials or keys (e.g. database credentials) have been logged as plaintext in exception handlers, when logging the complete exception stack trace. ### Solution Update to TYPO3 versions 7.6.57 ELTS, 8.7.47 ELTS, 9.5.35 ELTS, 10.4.29, 11.5.11 that fix the problem described above. ### Credits Thanks to Marco Huber who reported this issue and to TYPO3 security member Torben Hansen who fixed the issue. ### References * [TYPO3-CORE-SA-2022-002](https://typo3.org/security/advisory/typo3-core-sa-2022-002) |
Affected by 12 other vulnerabilities. Affected by 13 other vulnerabilities. |
|
VCID-bck9-34jp-6ydx
Aliases: GHSA-vpr3-rc99-2wpr |
Information Disclosure in TYPO3 Backend The TYPO3 backend module stores the username of an authenticated backend user in its cache files. By guessing the file path to the cache files it is possible to receive valid backend usernames. |
Affected by 56 other vulnerabilities. Affected by 101 other vulnerabilities. |
|
VCID-bmj2-4k58-tqa4
Aliases: 2016-07-19-7 |
Cross-site Scripting Cross-Site Scripting in third party library `mso/idna-convert`. |
Affected by 56 other vulnerabilities. Affected by 101 other vulnerabilities. |
|
VCID-bnne-7p2q-eqd2
Aliases: 2018-12-11-6 |
Uncontrolled Resource Consumption Denial of Service in Online Media Asset Handling. |
Affected by 12 other vulnerabilities. Affected by 51 other vulnerabilities. Affected by 69 other vulnerabilities. |
|
VCID-bxjw-7426-gyb8
Aliases: GHSA-6f9m-v7mp-7jjq |
Authentication Bypass in TYPO3 CMS It has been discovered that TYPO3’s Salted Password system extension (which is a mandatory system component) is vulnerable to Authentication Bypass when using hashing methods which are related by PHP class inheritance. In standard TYPO3 core distributions stored passwords using the blowfish hashing algorithm can be overridden when using MD5 as the default hashing algorithm by just knowing a valid username. Per default the Portable PHP hashing algorithm (PHPass) is used which is not vulnerable. |
Affected by 26 other vulnerabilities. Affected by 68 other vulnerabilities. Affected by 84 other vulnerabilities. |
|
VCID-c6zq-cfg5-u7d9
Aliases: GHSA-gj48-w74w-8gvm GMS-2024-342 |
Path Traversal in TYPO3 Core Due to a too loose type check in an API method, attackers could bypass the directory traversal check by providing an invalid UTF-8 encoding sequence. |
Affected by 46 other vulnerabilities. Affected by 92 other vulnerabilities. |
|
VCID-dbrh-t8zx-nkd9
Aliases: GHSA-6487-3qvg-8px9 |
TYPO3 Information Disclosure in Install Tool The Install Tool exposes the current TYPO3 version number to non-authenticated users. |
Affected by 12 other vulnerabilities. Affected by 51 other vulnerabilities. Affected by 69 other vulnerabilities. |
|
VCID-dm97-51uu-r7gw
Aliases: 2018-12-11-1 |
Cross-site Scripting Cross-Site Scripting in Online Media Asset Rendering. |
Affected by 12 other vulnerabilities. Affected by 51 other vulnerabilities. Affected by 69 other vulnerabilities. |
|
VCID-dsu7-jjjq-f3e1
Aliases: CVE-2021-21339 GHSA-qx3w-4864-94ch |
Cleartext storage of session identifier ### Problem User session identifiers were stored in cleartext - without processing of additional cryptographic hashing algorithms. This vulnerability cannot be exploited directly and occurs in combination with a chained attack - like for instance SQL injection in any other component of the system. ### Solution Update to TYPO3 versions 6.2.57, 7.6.51, 8.7.40, 9.5.25, 10.4.14, 11.1.1 that fix the problem described. ### Credits Thanks to TYPO3 security team member Oliver Hader who reported this issue and to TYPO3 core & security team members Benni Mack & Oliver Hader who fixed the issue. ### References * [TYPO3-CORE-SA-2021-006](https://typo3.org/security/advisory/typo3-core-sa-2021-006) |
Affected by 1 other vulnerability. Affected by 3 other vulnerabilities. Affected by 12 other vulnerabilities. Affected by 22 other vulnerabilities. Affected by 23 other vulnerabilities. |
|
VCID-ehzg-bzrd-kbcc
Aliases: 2018-12-11-7 |
Uncontrolled Resource Consumption Denial of Service in Frontend Record Registration. |
Affected by 12 other vulnerabilities. Affected by 51 other vulnerabilities. Affected by 95 other vulnerabilities. |
|
VCID-ep6t-zwd1-4bb3
Aliases: TYPO3-CORE-SA-2017-003 |
XSS Vulnerability TYPO3 is vulnerable to Cross-Site Scripting. |
Affected by 41 other vulnerabilities. Affected by 88 other vulnerabilities. |
|
VCID-f963-qur3-2qb7
Aliases: CVE-2020-26227 GHSA-vqqx-jw6p-q3rf |
Cross-Site Scripting in Fluid view helpers > ### Meta > * CVSS: `CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:F/RL:O/RC:C` (5.7) > * CWE-79 ### Problem It has been discovered that system extension Fluid (`typo3/cms-fluid`) of the TYPO3 core is vulnerable to cross-site scripting passing user-controlled data as argument to Fluid view helpers. ``` <f:form ... fieldNamePrefix="{payload}" /> <f:be.labels.csh ... label="{payload}" /> <f:be.menus.actionMenu ... label="{payload}" /> ``` ### Solution Update to TYPO3 versions 9.5.23 or 10.4.10 that fix the problem described. ### Credits Thanks to TYPO3 security team member Oliver Hader who reported this issue and to TYPO3 security team members Helmut Hummel & Oliver Hader who fixed the issue. ### References * [TYPO3-CORE-SA-2020-010](https://typo3.org/security/advisory/typo3-core-sa-2020-010) |
Affected by 122 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 18 other vulnerabilities. Affected by 30 other vulnerabilities. |
|
VCID-fber-yp9q-f7dr
Aliases: 2016-05-24-1 |
Improper Access Control Missing Access Check in TYPO3 CMS. |
Affected by 70 other vulnerabilities. Affected by 113 other vulnerabilities. |
|
VCID-fqbx-7xyq-fkav
Aliases: 2016-04-12-4 |
Improper Privilege Management Privilege Escalation in TYPO3 CMS. |
Affected by 73 other vulnerabilities. Affected by 116 other vulnerabilities. |
|
VCID-fy3g-uegw-2bew
Aliases: GHSA-67wg-6j7r-mqh8 |
Arbitrary Code Execution in TYPO3 CMS Due to a missing file extension in the fileDenyPattern, backend user are allowed to upload *.pht files which can be executed in certain web server setups. The new default fileDenyPattern is the following, which might have been overridden in the TYPO3 Install Tool. ``` \.(php[3-7]?|phpsh|phtml|pht)(\..*)?$|^\.htaccess$ ``` |
Affected by 31 other vulnerabilities. Affected by 77 other vulnerabilities. |
|
VCID-g4ak-ertr-rya6
Aliases: 2016-02-23-1 |
Improper Restriction of XML External Entity Reference XML External Entity (XXE) Processing in TYPO3 Core. |
Affected by 79 other vulnerabilities. |
|
VCID-gcnj-6qb6-pbgz
Aliases: CVE-2019-19848 GHSA-77p4-wfr8-977w |
TYPO3 Directory Traversal on ZIP extraction An issue was discovered in TYPO3 before 8.7.30, 9.x before 9.5.12, and 10.x before 10.2.2. It has been discovered that the extraction of manually uploaded ZIP archives in Extension Manager is vulnerable to directory traversal. Admin privileges are required in order to exploit this vulnerability. (In v9 LTS and later, System Maintainer privileges are also required.) |
Affected by 16 other vulnerabilities. Affected by 27 other vulnerabilities. Affected by 41 other vulnerabilities. |
|
VCID-gezz-pvpj-p3c6
Aliases: GHSA-gwfx-p7mr-f92v |
Missing Access Check in TYPO3 CMS Extbase request handling fails to implement a proper access check for requested controller/ action combinations, which makes it possible for an attacker to execute arbitrary Extbase actions by crafting a special request. To successfully exploit this vulnerability, an attacker must have access to at least one Extbase plugin or module action in a TYPO3 installation. The missing access check inevitably leads to information disclosure or remote code execution, depending on the action that an attacker is able to execute. |
Affected by 70 other vulnerabilities. Affected by 113 other vulnerabilities. |
|
VCID-gspd-apwy-efgu
Aliases: 2016-04-12-1 |
Cross-site Scripting Cross-Site Scripting in TYPO3 Backend. |
Affected by 73 other vulnerabilities. Affected by 116 other vulnerabilities. |
|
VCID-h2dd-7b1r-k7bs
Aliases: 2016-07-19-3 |
SQL Injection in TYPO3 Frontend Login. |
Affected by 56 other vulnerabilities. Affected by 122 other vulnerabilities. |
|
VCID-h63t-9enx-qfdn
Aliases: GHSA-g46h-v2cc-6c94 |
Information Disclosure in TYPO3 CMS Failing to properly check user permission on file storages, editors could gain knowledge of protected storages and its folders as well as using them in a file collection being rendered in the frontend. A valid backend user account is needed to exploit this vulnerability. |
Affected by 31 other vulnerabilities. Affected by 77 other vulnerabilities. |
|
VCID-h958-d3pm-kfcs
Aliases: TYPO3-CORE-SA-2016-013 |
Missing Access Check Extbase request handling fails to implement a proper access check for requested controller/ action combinations, which makes it possible for an attacker to execute arbitrary Extbase actions by crafting a special request. To successfully exploit this vulnerability, an attacker must have access to at least one Extbase plugin or module action in a TYPO3 installation. The missing access check inevitably leads to information disclosure or remote code execution, depending on the action that an attacker is able to execute. |
Affected by 70 other vulnerabilities. Affected by 113 other vulnerabilities. |
|
VCID-hpgq-deze-p7dp
Aliases: 2017-09-05-2 |
Information Disclosure in TYPO3 CMS. |
Affected by 31 other vulnerabilities. Affected by 87 other vulnerabilities. |
|
VCID-hv3n-j8ck-1ufx
Aliases: GHSA-g4pf-3jvq-2gcw |
TYPO3 Remote Code Execution in third party library swiftmailer TYPO3 uses the package swiftmailer/swiftmailer for mail actions. This package is known to be vulnerable to Remote Code Execution. |
Affected by 45 other vulnerabilities. Affected by 94 other vulnerabilities. |
|
VCID-jmu3-5k7e-x7ch
Aliases: TYPO3-CORE-SA-2016-021 |
Failing to properly encode user input, the page module is vulnerable to Cross-Site Scripting. A valid backend user account with permissions to edit plugins is needed to exploit this vulnerability. |
Affected by 52 other vulnerabilities. Affected by 122 other vulnerabilities. Affected by 98 other vulnerabilities. |
|
VCID-jqth-wfgx-87cx
Aliases: CVE-2017-14251 GHSA-fh4q-hxrw-cjqq |
Unrestricted Upload of File with Dangerous Type Unrestricted File Upload vulnerability in the `fileDenyPattern` in `sysext/core/Classes/Core/SystemEnvironmentBuilder`. |
Affected by 31 other vulnerabilities. Affected by 77 other vulnerabilities. |
|
VCID-jqx9-41zx-dbcy
Aliases: TYPO3-CORE-SA-2016-022 |
Cache Flooding in Frontend Links with a valid cHash argument lead to newly generated page cache entries. Because the cHash is not bound to a specific page, attackers could use valid cHash arguments for multiple pages, leading to additional useless page cache entries. Depending on the number of pages in the system and the number of available valid links with a cHash, attackers could add a considerable amount of additional cache entries, which in the end exceed storage limits and thus could lead to the system not responding any more. This means the Cache Flooding attack potentially could lead to a successful Denial of Service (DoS) attack. |
Affected by 52 other vulnerabilities. Affected by 122 other vulnerabilities. Affected by 98 other vulnerabilities. |
|
VCID-m3nf-1qbv-d3dj
Aliases: 2016-07-19-2 |
Deserialization of Untrusted Data Insecure Unserialize in TYPO3 Import/Export. |
Affected by 56 other vulnerabilities. Affected by 101 other vulnerabilities. |
|
VCID-mhud-kq57-nka3
Aliases: 2016-02-16-2 |
Cross-site Scripting Cross-Site Scripting in link validator component. |
Affected by 85 other vulnerabilities. |
|
VCID-mnz3-rj21-67ad
Aliases: CVE-2022-36105 GHSA-m392-235j-9r7r |
TYPO3 CMS vulnerable to User Enumeration via Response Timing > ### Meta > * CVSS: `CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:F/RL:O/RC:C` (4.9) ### Problem It has been discovered that observing response time during user authentication (backend and frontend) can be used to distinguish between existing and non-existing user accounts. Extension authors of 3rd party TYPO3 extensions providing a custom authentication service should check if the extension is affected by the described problem. Affected extensions must implement new `MimicServiceInterface::mimicAuthUser`, which simulates corresponding times regular processing would usually take. ### Solution Update to TYPO3 version 7.6.58 ELTS, 8.7.48 ELTS, 9.5.37 ELTS, 10.4.32 or 11.5.16 that fix the problem described above. ### Credits Thanks to Vautia who reported this issue and to TYPO3 core & security team members Oliver Hader who fixed the issue. ### References * [TYPO3-CORE-SA-2022-007](https://typo3.org/security/advisory/typo3-core-sa-2022-007) * [Vulnerability Report on huntr.dev](https://huntr.dev/bounties/7d519735-2877-4fad-bd77-accde3e290a7/) (embargoed +30 days) |
Affected by 7 other vulnerabilities. Affected by 7 other vulnerabilities. |
|
VCID-mqbh-k9n3-nbed
Aliases: TYPO3-CORE-SA-2017-005 |
Information Disclosure Failing to properly check user permission on file storages, editors could gain knowledge of protected storages and its folders as well as using them in a file collection being rendered in the frontend. A valid backend user account is needed to exploit this vulnerability. |
Affected by 31 other vulnerabilities. Affected by 77 other vulnerabilities. |
|
VCID-mqk6-z77g-bfdv
Aliases: GHSA-hq37-rfjc-mr8h |
Cross-Site Scripting (XSS) in TYPO3 Backend Failing to properly encode user input, the page module is vulnerable to Cross-Site Scripting. A valid backend user account with permissions to edit plugins is needed to exploit this vulnerability. |
Affected by 52 other vulnerabilities. Affected by 98 other vulnerabilities. |
|
VCID-mub5-s7h1-57cy
Aliases: GHSA-c7p6-3c9c-f88q |
Information Disclosure in TYPO3 CMS HTTP requests being performed using the TYPO3 API expose the specific TYPO3 version to the called endpoint. |
Affected by 31 other vulnerabilities. Affected by 77 other vulnerabilities. |
|
VCID-n15v-ta9h-6ffb
Aliases: CVE-2021-32767 GHSA-34fr-fhqr-7235 |
Inclusion of Sensitive Information in Log Files TYPO3 is an open source PHP based web content management system. User credentials may been logged as plain-text. This occurs when explicitly using log level debug, which is not the default configuration. TYPO3 contain a patch for this vulnerability. |
Affected by 10 other vulnerabilities. Affected by 18 other vulnerabilities. Affected by 20 other vulnerabilities. |
|
VCID-n61z-6v8a-hygf
Aliases: GHSA-p5c5-gmj4-g48f |
Cross-Site Scripting (XSS) vulnerability in typolinks All link fields within the TYPO3 installation are vulnerable to Cross-Site Scripting as authorized editors can insert data commands by using the url scheme "data:". |
Affected by 56 other vulnerabilities. Affected by 101 other vulnerabilities. |
|
VCID-n78p-x7hh-gqcf
Aliases: 2018-12-11-5 |
Information Disclosure in Install Tool. |
Affected by 12 other vulnerabilities. Affected by 51 other vulnerabilities. Affected by 69 other vulnerabilities. |
|
VCID-nnh9-udcj-m7fv
Aliases: TYPO3-CORE-SA-2016-024 |
Path Traversal Due to a too loose type check in an API method, attackers could bypass the directory traversal check by providing an invalid UTF-8 encoding sequence. |
Affected by 46 other vulnerabilities. Affected by 92 other vulnerabilities. |
|
VCID-npn5-rand-q3dg
Aliases: GHSA-6xh8-8pfv-53vx |
Authentication Bypass in TYPO3 CMS The default authentication service misses to invalidate empty strings as password. Therefore it is possible to authenticate backend and frontend users without password set in the database. Note: TYPO3 does not allow to create user accounts without a password. Your TYPO3 installation might only be affected if there is a third party component creating user accounts without password by directly manipulating the database. |
Affected by 73 other vulnerabilities. Affected by 116 other vulnerabilities. |
|
VCID-nt6a-5zkv-pbcm
Aliases: 2017-09-05-4 |
Code Injection Arbitrary Code Execution in TYPO3 CMS. |
Affected by 31 other vulnerabilities. Affected by 87 other vulnerabilities. |
|
VCID-nwxj-3ajk-rkh5
Aliases: CVE-2018-6905 GHSA-3w22-wrwx-2r75 |
Cross-site Scripting The page module in TYPO3 is vulnerable to XSS via `$GLOBALS['TYPO3_CONF_VARS']['SYS']['sitename']`, as demonstrated by an admin entering a crafted site name during the installation process. |
Affected by 76 other vulnerabilities. Affected by 92 other vulnerabilities. Affected by 92 other vulnerabilities. |
|
VCID-p1u9-66hm-47er
Aliases: GHSA-v5jp-4h2p-j2p4 |
Privilege Escalation in TYPO3 CMS The workspace/ version preview link created by a privileged (backend) user could be abused to obtain certain editing permission, if the admin panel is configured to be shown. A valid preview link is required to exploit this vulnerability. |
Affected by 73 other vulnerabilities. Affected by 116 other vulnerabilities. |
|
VCID-p545-vwe6-9kfr
Aliases: GHSA-xvcp-33rc-j8gq |
Insecure Unserialize in TYPO3 Import/Export Failing to properly validate incoming import data, the Import/Export component is susceptible to insecure unserialize. To exploit this vulnerability a valid backend user account is needed. |
Affected by 56 other vulnerabilities. Affected by 101 other vulnerabilities. |
|
VCID-pk8d-8u15-5bfq
Aliases: GHSA-f3wf-q4fj-3gxf |
TYPO3 Denial of Service in Online Media Asset Handling Online Media Asset Handling (*`.youtube` and *`.vimeo` files) in the TYPO3 backend is vulnerable to denial of service. Putting large files with according file extensions results in high consumption of system resources. This can lead to exceeding limits of the current PHP process which results in a dysfunctional backend component. A valid backend user account or write access on the server system (e.g. SFTP) is needed in order to exploit this vulnerability. |
Affected by 12 other vulnerabilities. Affected by 51 other vulnerabilities. Affected by 69 other vulnerabilities. |
|
VCID-pnfa-cksc-43de
Aliases: TYPO3-CORE-SA-2017-006 |
Information Disclosure HTTP requests being performed using the TYPO3 API expose the specific TYPO3 version to the called endpoint. |
Affected by 31 other vulnerabilities. Affected by 77 other vulnerabilities. |
|
VCID-prbd-r82t-87dm
Aliases: TYPO3-CORE-SA-2016-023 |
Insecure Unserialize in TYPO3 Backend Failing to properly validate incoming data, the suggest wizard is susceptible to insecure unserialize. To exploit this vulnerability a valid backend user account is needed. |
Affected by 46 other vulnerabilities. Affected by 92 other vulnerabilities. |
|
VCID-q9ak-qcq6-qfhy
Aliases: 2017-01-03-1 |
Code Injection Remote Code Execution in third party library swiftmailer. |
Affected by 45 other vulnerabilities. Affected by 95 other vulnerabilities. |
|
VCID-rdrs-mhaw-b3ge
Aliases: 2018-12-11-3 |
Cross-site Scripting Cross-Site Scripting in Frontend User Login. |
Affected by 12 other vulnerabilities. Affected by 51 other vulnerabilities. Affected by 69 other vulnerabilities. |
|
VCID-rg5d-d8nc-9qfu
Aliases: GHSA-5wx6-xwxf-q8qj |
Cross-Site Scripting in TYPO3 Backend Failing to properly encode user input, some backend components are vulnerable to Cross-Site Scripting. A valid backend user account is needed to exploit this vulnerability. |
Affected by 73 other vulnerabilities. Affected by 116 other vulnerabilities. |
|
VCID-rkms-w15c-4yb1
Aliases: GHSA-j86x-pjmr-9m6w |
SQL Injection in TYPO3 Frontend Login Failing to properly escape user input, the frontend login component is vulnerable to SQL Injection. A valid frontend user account is needed to exploit this vulnerability. |
Affected by 56 other vulnerabilities. |
|
VCID-rzw5-8d1u-sfam
Aliases: TYPO3-CORE-SA-2017-007 |
Arbitrary Code Execution Due to a missing file extension in the `fileDenyPattern`, backend user are allowed to upload *.pht files which can be executed in certain web server setups. |
Affected by 31 other vulnerabilities. Affected by 77 other vulnerabilities. |
|
VCID-sr3p-pdxy-4yhu
Aliases: 2018-07-12-2 |
Insecure Deserialization & Arbitrary Code Execution in TYPO3 CMS. |
Affected by 26 other vulnerabilities. Affected by 68 other vulnerabilities. Affected by 84 other vulnerabilities. |
|
VCID-t3jn-vwbx-u7cr
Aliases: CVE-2021-21370 GHSA-x7hc-x7fm-f7qh |
Cross-Site Scripting in Content Preview (CType menu) ### Problem It has been discovered that content elements of type _menu_ are vulnerable to cross-site scripting when their referenced items get previewed in the page module. A valid backend user account is needed to exploit this vulnerability. ### Solution Update to TYPO3 versions 7.6.51, 8.7.40, 9.5.25, 10.4.14, 11.1.1 that fix the problem described. ### Credits Thanks to TYPO3 contributor Oliver Bartsch who reported and fixed the issue. ### References * [TYPO3-CORE-SA-2021-008](https://typo3.org/security/advisory/typo3-core-sa-2021-008) |
Affected by 1 other vulnerability. Affected by 3 other vulnerabilities. Affected by 12 other vulnerabilities. Affected by 22 other vulnerabilities. Affected by 23 other vulnerabilities. |
|
VCID-tmrt-6fxw-5ugh
Aliases: GHSA-ppgf-8745-8pgx |
Insecure Deserialization & Arbitrary Code Execution in TYPO3 CMS Phar files (formerly known as "PHP archives") can act als self extracting archives which leads to the fact that source code is executed when Phar files are invoked. The Phar file format is not limited to be stored with a dedicated file extension - "bundle.phar" would be valid as well as "bundle.txt" would be. This way, Phar files can be obfuscated as image or text file which would not be denied from being uploaded and persisted to a TYPO3 installation. Due to a missing sanitization of user input, those Phar files can be invoked by manipulated URLs in TYPO3 backend forms. A valid backend user account is needed to exploit this vulnerability. In theory the attack vector would be possible in the TYPO3 frontend as well, however no functional exploit has been identified so far. |
Affected by 26 other vulnerabilities. Affected by 68 other vulnerabilities. Affected by 84 other vulnerabilities. |
|
VCID-tw1y-t4qj-j3d1
Aliases: 2018-12-11-2 |
Cross-site Scripting Cross-Site Scripting in Backend Modal Component. |
Affected by 12 other vulnerabilities. Affected by 51 other vulnerabilities. Affected by 69 other vulnerabilities. |
|
VCID-uckg-j48d-efad
Aliases: 2016-07-19-1 |
Cross-site Scripting Cross-Site Scripting in TYPO3 Backend. |
Affected by 56 other vulnerabilities. Affected by 101 other vulnerabilities. |
|
VCID-uj89-13ub-43fz
Aliases: GHSA-cg4m-qjjp-7497 |
TYPO3 Cross-Site Scripting in link validator component Failing to sanitize content from editors, the link validator component is susceptible to Cross-Site Scripting. A valid editor account with access to content which is scanned by the link validator component is required to exploit this vulnerability. |
Affected by 85 other vulnerabilities. |
|
VCID-utpu-q2dv-m3hm
Aliases: 2016-07-19-5 |
Cross-site Scripting Cross-Site Scripting vulnerability in typolinks. |
Affected by 56 other vulnerabilities. Affected by 101 other vulnerabilities. |
|
VCID-vndb-w8e1-4ugv
Aliases: GHSA-8m6j-p5jv-v69w |
TYPO3 Cross-Site Scripting in Online Media Asset Rendering Failing to properly encode user input, online media asset rendering (`*.youtube` and `*.vimeo` files) is vulnerable to cross-site scripting. A valid backend user account or write access on the server system (e.g. SFTP) is needed in order to exploit this vulnerability. |
Affected by 12 other vulnerabilities. Affected by 51 other vulnerabilities. Affected by 69 other vulnerabilities. |
|
VCID-vrt1-aj9v-2kb6
Aliases: GHSA-5gr6-97fv-52cc |
Cross-Site Scripting in TYPO3 CMS Failing to properly encode user input, several places of the TYPO3 CMS are vulnerable to Cross-Site Scripting. |
Affected by 41 other vulnerabilities. Affected by 88 other vulnerabilities. |
|
VCID-w5pn-eb7y-1kdp
Aliases: GHSA-pmxp-7224-h794 |
Denial of Service (DoS) attack possibility in TYPO3 component Indexed Search Due to an oversized maximum result limit, TYPO3 component Indexed Search is susceptible to a Denial of Service attack. |
Affected by 79 other vulnerabilities. |
|
VCID-wge3-kxdq-f3bz
Aliases: 2017-09-05-3 |
Information Disclosure in TYPO3 CMS. |
Affected by 31 other vulnerabilities. Affected by 87 other vulnerabilities. |
|
VCID-wq32-kgff-gke8
Aliases: GHSA-8j9v-4hhh-x43c |
Cross-Site Scripting (XSS) in TYPO3 component CSS styled content Failing to properly encode user input, the CSS styled content component is susceptible to Cross-Site Scripting, allowing authenticated editors to inject arbitrary HTML or JavaScript. |
Affected by 79 other vulnerabilities. |
|
VCID-wr5t-xqnn-gkcj
Aliases: GHSA-7q33-hxwj-7p8v |
TYPO3 Cross-Site Scripting in Backend Modal Component Failing to properly encode user input, notifications shown in modal windows in the TYPO3 backend are vulnerable to cross-site scripting. A valid backend user account is needed in order to exploit this vulnerability. |
Affected by 12 other vulnerabilities. Affected by 51 other vulnerabilities. Affected by 69 other vulnerabilities. |
|
VCID-wxps-mnue-6bbh
Aliases: GHSA-2rcw-9hrm-8q7q |
TYPO3 Cross-Site Scripting in Frontend User Login Failing to properly encode user input, login status display is vulnerable to cross-site scripting in the website frontend. A valid user account is needed in order to exploit this vulnerability - either a backend user or a frontend user having the possibility to modify their user profile. Template patterns that are affected are - ###FEUSER_[fieldName]### using system extension felogin - <!--###USERNAME###--> for regular frontend rendering (pattern can be defined individually using TypoScript setting config.USERNAME_substToken) |
Affected by 12 other vulnerabilities. Affected by 51 other vulnerabilities. Affected by 69 other vulnerabilities. |
|
VCID-xa4m-xpa9-v7h8
Aliases: CVE-2019-19849 GHSA-rcgc-4xfc-564v |
TYPO3 Insecure Deserialization in Query Generator & Query View An issue was discovered in TYPO3 before 8.7.30, 9.x before 9.5.12, and 10.x before 10.2.2. It has been discovered that the classes QueryGenerator and QueryView are vulnerable to insecure deserialization. One exploitable scenario requires having the system extension ext:lowlevel (Backend Module: DB Check) installed, with a valid backend user who has administrator privileges. The other exploitable scenario requires having the system extension ext:sys_action installed, with a valid backend user who has limited privileges. |
Affected by 16 other vulnerabilities. Affected by 27 other vulnerabilities. Affected by 41 other vulnerabilities. Affected by 41 other vulnerabilities. |
|
VCID-xqew-bx7v-1qfk
Aliases: GHSA-g585-crjf-vhwq |
TYPO3 Denial of Service in Frontend Record Registration TYPO3’s built-in record registration functionality (aka `basic shopping cart`) using recs URL parameters is vulnerable to denial of service. Failing to properly ensure that anonymous user sessions are valid, attackers can use this vulnerability in order to create an arbitrary amount of individual session-data records in the database. |
Affected by 12 other vulnerabilities. Affected by 51 other vulnerabilities. |
|
VCID-y32z-2d3f-gkgw
Aliases: CVE-2021-32768 GHSA-c5c9-8c6m-727v |
Cross-site Scripting TYPO3 is vulnerable to cross-site scripting. Corresponding rendering instructions via TypoScript functionality HTMLparser does not consider all potentially malicious HTML tag & attribute combinations per default. In default scenarios, a valid backend user account is needed to exploit this vulnerability. In case custom plugins used in the website frontend accept and reflect rich-text content submitted by users, no authentication is required. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 7 other vulnerabilities. Affected by 17 other vulnerabilities. Affected by 19 other vulnerabilities. |
|
VCID-z5qq-nwn5-tqgm
Aliases: 2016-02-23-3 |
Cross-site Scripting Cross-Site Scripting in TYPO3 component CSS styled content. |
Affected by 79 other vulnerabilities. |
|
VCID-zdq2-dhb2-6kaq
Aliases: CVE-2022-23501 GHSA-jfp7-79g7-89rf GMS-2022-8134 |
TYPO3 CMS vulnerable to Weak Authentication in Frontend Login ### Problem Restricting frontend login to specific users, organized in different storage folders (partitions), can be bypassed. A potential attacker might use this ambiguity in usernames to get access to a different account - however, credentials must be known to the adversary. ### Solution Update to TYPO3 versions 8.7.49 ELTS, 9.5.38 ELTS, 10.4.33, 11.5.20, 12.1.1 that fix the problem described above. ### References * [TYPO3-CORE-SA-2022-013](https://typo3.org/security/advisory/typo3-core-sa-2022-013) |
Affected by 1 other vulnerability. Affected by 1 other vulnerability. Affected by 1 other vulnerability. |
|
VCID-zspb-bd6j-wyd2
Aliases: 2018-12-11-4 |
Security Misconfiguration in Install Tool Cookie. |
Affected by 12 other vulnerabilities. Affected by 51 other vulnerabilities. Affected by 69 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||