{"url":"http://public2.vulnerablecode.io/api/packages/55352?format=json","purl":"pkg:composer/typo3/cms@9.0.0","type":"composer","namespace":"typo3","name":"cms","version":"9.0.0","qualifiers":{},"subpath":"","is_vulnerable":true,"next_non_vulnerable_version":"9.1.0","latest_non_vulnerable_version":"12.2.0","affected_by_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/41293?format=json","vulnerability_id":"VCID-2rhr-8vaz-hqfj","summary":"Cross-site Scripting\nTYPO3 is vulnerable to cross-site scripting. Corresponding rendering instructions via TypoScript functionality HTMLparser does not consider all potentially malicious HTML tag & attribute combinations per default. In default scenarios, a valid backend user account is needed to exploit this vulnerability. In case custom plugins used in the website frontend accept and reflect rich-text content submitted by users, no authentication is required.","references":[{"reference_url":"https://typo3.org/security/advisory/typo3-core-sa-2021-013","reference_id":"","reference_type":"","scores":[],"url":"https://typo3.org/security/advisory/typo3-core-sa-2021-013"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-32768","reference_id":"CVE-2021-32768","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-32768"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/58647?format=json","purl":"pkg:composer/typo3/cms@9.5.29","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.29"},{"url":"http://public2.vulnerablecode.io/api/packages/58648?format=json","purl":"pkg:composer/typo3/cms@10.4.19","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@10.4.19"},{"url":"http://public2.vulnerablecode.io/api/packages/58649?format=json","purl":"pkg:composer/typo3/cms@11.3.2","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@11.3.2"}],"aliases":["CVE-2021-32768","GHSA-c5c9-8c6m-727v"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-2rhr-8vaz-hqfj"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/40509?format=json","vulnerability_id":"VCID-3ugj-6m1e-e3hr","summary":"Cross-site Scripting\nCross-Site Scripting in Online Media Asset Rendering.","references":[{"reference_url":"https://typo3.org/security/advisory/typo3-core-sa-2018-006/","reference_id":"","reference_type":"","scores":[],"url":"https://typo3.org/security/advisory/typo3-core-sa-2018-006/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/57074?format=json","purl":"pkg:composer/typo3/cms@9.5.2","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.2"}],"aliases":["GMS-2018-97"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-3ugj-6m1e-e3hr"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/40967?format=json","vulnerability_id":"VCID-3ye6-vqje-abh4","summary":"Information Disclosure in Page Tree.","references":[{"reference_url":"https://typo3.org/security/advisory/typo3-core-sa-2019-009/","reference_id":"","reference_type":"","scores":[],"url":"https://typo3.org/security/advisory/typo3-core-sa-2019-009/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/57974?format=json","purl":"pkg:composer/typo3/cms@9.5.6","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.6"}],"aliases":["GMS-2019-183"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-3ye6-vqje-abh4"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/41129?format=json","vulnerability_id":"VCID-4eym-e6vt-8fbs","summary":"Code Injection\nArbitrary Code Execution and Cross-Site Scripting in Backend API.","references":[{"reference_url":"https://typo3.org/security/advisory/typo3-core-sa-2019-019/","reference_id":"","reference_type":"","scores":[],"url":"https://typo3.org/security/advisory/typo3-core-sa-2019-019/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/58252?format=json","purl":"pkg:composer/typo3/cms@9.5.8","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.8"}],"aliases":["GMS-2019-188"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-4eym-e6vt-8fbs"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/40632?format=json","vulnerability_id":"VCID-4jck-w9ct-budk","summary":"Cross-site Scripting\nCross-Site Scripting in Language Pack Handling.","references":[{"reference_url":"https://typo3.org/security/advisory/typo3-core-sa-2019-004/","reference_id":"","reference_type":"","scores":[],"url":"https://typo3.org/security/advisory/typo3-core-sa-2019-004/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/56436?format=json","purl":"pkg:composer/typo3/cms@9.5.4","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.4"}],"aliases":["GMS-2019-179"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-4jck-w9ct-budk"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/40095?format=json","vulnerability_id":"VCID-7ch1-q9f4-a7bt","summary":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')\nIn Bootstrap, XSS is possible in the data-target property of scrollspy.","references":[{"reference_url":"https://access.redhat.com/errata/RHSA-2019:1456","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2019:1456"},{"reference_url":"https://blog.getbootstrap.com/2018/07/12/bootstrap-4-1-2","reference_id":"","reference_type":"","scores":[],"url":"https://blog.getbootstrap.com/2018/07/12/bootstrap-4-1-2"},{"reference_url":"https://github.com/twbs/bootstrap","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/twbs/bootstrap"},{"reference_url":"https://github.com/twbs/bootstrap/issues/26423","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/twbs/bootstrap/issues/26423"},{"reference_url":"https://github.com/twbs/bootstrap/issues/26627","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/twbs/bootstrap/issues/26627"},{"reference_url":"https://github.com/twbs/bootstrap/pull/26630","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/twbs/bootstrap/pull/26630"},{"reference_url":"https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E","reference_id":"","reference_type":"","scores":[],"url":"https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/52e0e6b5df827ee7f1e68f7cc3babe61af3b2160f5d74a85469b7b0e@%3Cdev.superset.apache.org%3E","reference_id":"","reference_type":"","scores":[],"url":"https://lists.apache.org/thread.html/52e0e6b5df827ee7f1e68f7cc3babe61af3b2160f5d74a85469b7b0e@%3Cdev.superset.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E","reference_id":"","reference_type":"","scores":[],"url":"https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E","reference_id":"","reference_type":"","scores":[],"url":"https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/r3dc0cac8d856bca02bd6997355d7ff83027dcfc82f8646a29b89b714@%3Cissues.hbase.apache.org%3E","reference_id":"","reference_type":"","scores":[],"url":"https://lists.apache.org/thread.html/r3dc0cac8d856bca02bd6997355d7ff83027dcfc82f8646a29b89b714@%3Cissues.hbase.apache.org%3E"},{"reference_url":"https://seclists.org/bugtraq/2019/May/18","reference_id":"","reference_type":"","scores":[],"url":"https://seclists.org/bugtraq/2019/May/18"},{"reference_url":"https://typo3.org/security/advisory/typo3-core-sa-2019-006","reference_id":"","reference_type":"","scores":[],"url":"https://typo3.org/security/advisory/typo3-core-sa-2019-006"},{"reference_url":"https://www.oracle.com/security-alerts/cpuApr2021.html","reference_id":"","reference_type":"","scores":[],"url":"https://www.oracle.com/security-alerts/cpuApr2021.html"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14041","reference_id":"CVE-2018-14041","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14041"},{"reference_url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2018-14041.yaml","reference_id":"CVE-2018-14041.YAML","reference_type":"","scores":[],"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2018-14041.yaml"},{"reference_url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2018-14041.yaml","reference_id":"CVE-2018-14041.YAML","reference_type":"","scores":[],"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2018-14041.yaml"},{"reference_url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/bootstrap/CVE-2018-14041.yml","reference_id":"CVE-2018-14041.YML","reference_type":"","scores":[],"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/bootstrap/CVE-2018-14041.yml"},{"reference_url":"https://github.com/advisories/GHSA-pj7m-g53m-7638","reference_id":"GHSA-pj7m-g53m-7638","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-pj7m-g53m-7638"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/56436?format=json","purl":"pkg:composer/typo3/cms@9.5.4","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.4"}],"aliases":["CVE-2018-14041","GHSA-pj7m-g53m-7638"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-7ch1-q9f4-a7bt"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/41118?format=json","vulnerability_id":"VCID-7m6u-k5tp-gkhy","summary":"Insecure Deserialization in TYPO3 CMS.","references":[{"reference_url":"https://typo3.org/security/advisory/typo3-core-sa-2019-020/","reference_id":"","reference_type":"","scores":[],"url":"https://typo3.org/security/advisory/typo3-core-sa-2019-020/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/58252?format=json","purl":"pkg:composer/typo3/cms@9.5.8","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.8"}],"aliases":["GMS-2019-189"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-7m6u-k5tp-gkhy"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/41122?format=json","vulnerability_id":"VCID-7xv1-78u7-xufp","summary":"Deserialization of Untrusted Data\nPossible deserialization side-effects in `symfony/cache`.","references":[{"reference_url":"https://typo3.org/security/advisory/typo3-core-sa-2019-016/","reference_id":"","reference_type":"","scores":[],"url":"https://typo3.org/security/advisory/typo3-core-sa-2019-016/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/58252?format=json","purl":"pkg:composer/typo3/cms@9.5.8","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.8"}],"aliases":["GMS-2019-190"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-7xv1-78u7-xufp"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/40505?format=json","vulnerability_id":"VCID-953t-q1cr-zyd6","summary":"Cross-site Scripting\nCross-Site Scripting in Backend Modal Component.","references":[{"reference_url":"https://typo3.org/security/advisory/typo3-core-sa-2018-007/","reference_id":"","reference_type":"","scores":[],"url":"https://typo3.org/security/advisory/typo3-core-sa-2018-007/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/57074?format=json","purl":"pkg:composer/typo3/cms@9.5.2","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.2"}],"aliases":["GMS-2018-98"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-953t-q1cr-zyd6"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/40960?format=json","vulnerability_id":"VCID-9adx-p876-kyb5","summary":"Information Disclosure in User Authentication.","references":[{"reference_url":"https://typo3.org/security/advisory/typo3-core-sa-2019-010/","reference_id":"","reference_type":"","scores":[],"url":"https://typo3.org/security/advisory/typo3-core-sa-2019-010/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/57974?format=json","purl":"pkg:composer/typo3/cms@9.5.6","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.6"}],"aliases":["GMS-2019-184"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-9adx-p876-kyb5"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/41234?format=json","vulnerability_id":"VCID-a1g9-pyz5-9fca","summary":"Cross-site Scripting\nTYPO3 contains a cross-site scripting vulnerability. When _Page TSconfig_ settings are not properly encoded, corresponding page preview module (`_Web>View_`) is vulnerable to persistent cross-site scripting. A valid backend user account is needed to exploit this vulnerability. TYPO3 contain a patch for this issue.","references":[{"reference_url":"https://typo3.org/security/advisory/typo3-core-sa-2021-009","reference_id":"","reference_type":"","scores":[],"url":"https://typo3.org/security/advisory/typo3-core-sa-2021-009"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-32667","reference_id":"CVE-2021-32667","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-32667"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/58457?format=json","purl":"pkg:composer/typo3/cms@10.4.18","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2rhr-8vaz-hqfj"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@10.4.18"},{"url":"http://public2.vulnerablecode.io/api/packages/58458?format=json","purl":"pkg:composer/typo3/cms@11.3.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2rhr-8vaz-hqfj"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@11.3.1"}],"aliases":["CVE-2021-32667","GHSA-8mq9-fqv8-59wf"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-a1g9-pyz5-9fca"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/40086?format=json","vulnerability_id":"VCID-abjx-8v46-d7d8","summary":"Improper Authentication\nAuthentication Bypass in TYPO3 CMS.","references":[{"reference_url":"https://typo3.org/security/advisory/typo3-core-sa-2018-001/","reference_id":"","reference_type":"","scores":[],"url":"https://typo3.org/security/advisory/typo3-core-sa-2018-001/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/56095?format=json","purl":"pkg:composer/typo3/cms@9.3.2","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.3.2"}],"aliases":["GMS-2018-93"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-abjx-8v46-d7d8"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/40634?format=json","vulnerability_id":"VCID-am6s-67bm-77dr","summary":"Cross-site Scripting\nCross-Site Scripting in Bootstrap CSS toolkit.","references":[{"reference_url":"https://typo3.org/security/advisory/typo3-core-sa-2019-006/","reference_id":"","reference_type":"","scores":[],"url":"https://typo3.org/security/advisory/typo3-core-sa-2019-006/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/56436?format=json","purl":"pkg:composer/typo3/cms@9.5.4","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.4"}],"aliases":["GMS-2019-176"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-am6s-67bm-77dr"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/41120?format=json","vulnerability_id":"VCID-cvk2-93hm-gkhx","summary":"Improper Access Control\nBroken Access Control in Import Module.","references":[{"reference_url":"https://typo3.org/security/advisory/typo3-core-sa-2019-017/","reference_id":"","reference_type":"","scores":[],"url":"https://typo3.org/security/advisory/typo3-core-sa-2019-017/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/58252?format=json","purl":"pkg:composer/typo3/cms@9.5.8","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.8"}],"aliases":["GMS-2019-191"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-cvk2-93hm-gkhx"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/40497?format=json","vulnerability_id":"VCID-dsqm-9q3e-dudw","summary":"Uncontrolled Resource Consumption\nDenial of Service in Online Media Asset Handling.","references":[{"reference_url":"https://typo3.org/security/advisory/typo3-core-sa-2018-011/","reference_id":"","reference_type":"","scores":[],"url":"https://typo3.org/security/advisory/typo3-core-sa-2018-011/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/57074?format=json","purl":"pkg:composer/typo3/cms@9.5.2","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.2"}],"aliases":["GMS-2018-102"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-dsqm-9q3e-dudw"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/40496?format=json","vulnerability_id":"VCID-emqq-kwjg-3kfk","summary":"Cross-site Scripting\nCross-Site Scripting in CKEditor.","references":[{"reference_url":"https://typo3.org/security/advisory/typo3-core-sa-2018-005/","reference_id":"","reference_type":"","scores":[],"url":"https://typo3.org/security/advisory/typo3-core-sa-2018-005/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/57074?format=json","purl":"pkg:composer/typo3/cms@9.5.2","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.2"}],"aliases":["GMS-2018-104"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-emqq-kwjg-3kfk"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/41127?format=json","vulnerability_id":"VCID-fut7-bb1f-37g7","summary":"Cross-site Scripting\nCross-Site Scripting in Link Handling.","references":[{"reference_url":"https://typo3.org/security/advisory/typo3-core-sa-2019-015/","reference_id":"","reference_type":"","scores":[],"url":"https://typo3.org/security/advisory/typo3-core-sa-2019-015/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/58252?format=json","purl":"pkg:composer/typo3/cms@9.5.8","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.8"}],"aliases":["GMS-2019-186"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-fut7-bb1f-37g7"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/40507?format=json","vulnerability_id":"VCID-hp99-ncuh-6ugv","summary":"Cross-site Scripting\nCross-Site Scripting in Frontend User Login.","references":[{"reference_url":"https://typo3.org/security/advisory/typo3-core-sa-2018-008/","reference_id":"","reference_type":"","scores":[],"url":"https://typo3.org/security/advisory/typo3-core-sa-2018-008/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/57074?format=json","purl":"pkg:composer/typo3/cms@9.5.2","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.2"}],"aliases":["GMS-2018-99"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-hp99-ncuh-6ugv"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/41236?format=json","vulnerability_id":"VCID-j8hk-bqnb-gycp","summary":"Cross-site Scripting\nTYPO3 contains a cross-site scripting vulnerability. When error messages are not properly encoded, the components `_QueryGenerator_` and `_QueryView_` are vulnerable to both reflected and persistent cross-site scripting. A valid backend user account having administrator privileges is needed to exploit this vulnerability. TYPO3 contain a patch for this issue.","references":[{"reference_url":"https://typo3.org/security/advisory/typo3-core-sa-2021-010","reference_id":"","reference_type":"","scores":[],"url":"https://typo3.org/security/advisory/typo3-core-sa-2021-010"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-32668","reference_id":"CVE-2021-32668","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-32668"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/58457?format=json","purl":"pkg:composer/typo3/cms@10.4.18","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2rhr-8vaz-hqfj"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@10.4.18"},{"url":"http://public2.vulnerablecode.io/api/packages/58458?format=json","purl":"pkg:composer/typo3/cms@11.3.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2rhr-8vaz-hqfj"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@11.3.1"}],"aliases":["CVE-2021-32668","GHSA-6mh3-j5r5-2379"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-j8hk-bqnb-gycp"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/40089?format=json","vulnerability_id":"VCID-je4q-svfw-hqda","summary":"Insecure Deserialization in TYPO3 CMS.","references":[{"reference_url":"https://typo3.org/security/advisory/typo3-core-sa-2018-004/","reference_id":"","reference_type":"","scores":[],"url":"https://typo3.org/security/advisory/typo3-core-sa-2018-004/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/56095?format=json","purl":"pkg:composer/typo3/cms@9.3.2","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.3.2"}],"aliases":["GMS-2018-96"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-je4q-svfw-hqda"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/40511?format=json","vulnerability_id":"VCID-jq5y-7h9g-mufa","summary":"Information Disclosure in Install Tool.","references":[{"reference_url":"https://typo3.org/security/advisory/typo3-core-sa-2018-010/","reference_id":"","reference_type":"","scores":[],"url":"https://typo3.org/security/advisory/typo3-core-sa-2018-010/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/57074?format=json","purl":"pkg:composer/typo3/cms@9.5.2","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.2"}],"aliases":["GMS-2018-101"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-jq5y-7h9g-mufa"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/40968?format=json","vulnerability_id":"VCID-k5t3-28es-h3ez","summary":"Improper Input Validation\nTYPO3 allows remote code execution because it does not properly configure the applications used for image processing, as demonstrated by `ImageMagick` or `GraphicsMagick`.","references":[{"reference_url":"https://typo3.org/security/advisory/typo3-core-sa-2019-012/","reference_id":"","reference_type":"","scores":[],"url":"https://typo3.org/security/advisory/typo3-core-sa-2019-012/"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11832","reference_id":"CVE-2019-11832","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11832"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/57974?format=json","purl":"pkg:composer/typo3/cms@9.5.6","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.6"}],"aliases":["CVE-2019-11832"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-k5t3-28es-h3ez"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/40617?format=json","vulnerability_id":"VCID-khpm-e1xb-hydb","summary":"Information Disclosure of Installed Extensions.","references":[{"reference_url":"https://typo3.org/security/advisory/typo3-core-sa-2019-001/","reference_id":"","reference_type":"","scores":[],"url":"https://typo3.org/security/advisory/typo3-core-sa-2019-001/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/56436?format=json","purl":"pkg:composer/typo3/cms@9.5.4","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.4"}],"aliases":["GMS-2019-172"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-khpm-e1xb-hydb"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/40087?format=json","vulnerability_id":"VCID-njsj-bwjq-fyap","summary":"Insecure Deserialization & Arbitrary Code Execution in TYPO3 CMS.","references":[{"reference_url":"https://typo3.org/security/advisory/typo3-core-sa-2018-002/","reference_id":"","reference_type":"","scores":[],"url":"https://typo3.org/security/advisory/typo3-core-sa-2018-002/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/56095?format=json","purl":"pkg:composer/typo3/cms@9.3.2","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.3.2"}],"aliases":["GMS-2018-94"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-njsj-bwjq-fyap"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/41128?format=json","vulnerability_id":"VCID-nney-azbc-pucg","summary":"Information Disclosure in Backend User Interface.","references":[{"reference_url":"https://typo3.org/security/advisory/typo3-core-sa-2019-014/","reference_id":"","reference_type":"","scores":[],"url":"https://typo3.org/security/advisory/typo3-core-sa-2019-014/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/58252?format=json","purl":"pkg:composer/typo3/cms@9.5.8","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.8"}],"aliases":["GMS-2019-185"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-nney-azbc-pucg"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/40639?format=json","vulnerability_id":"VCID-pmvp-twk2-jqe4","summary":"Security Misconfiguration for Backend User Accounts.","references":[{"reference_url":"https://typo3.org/security/advisory/typo3-core-sa-2019-002/","reference_id":"","reference_type":"","scores":[],"url":"https://typo3.org/security/advisory/typo3-core-sa-2019-002/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/56436?format=json","purl":"pkg:composer/typo3/cms@9.5.4","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.4"}],"aliases":["GMS-2019-173"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-pmvp-twk2-jqe4"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/41160?format=json","vulnerability_id":"VCID-qv14-m93d-jyd9","summary":"Cross-site Scripting\nTYPO3 allows XSS.","references":[{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2019-12748","reference_id":"CVE-2019-12748","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-12748"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/58252?format=json","purl":"pkg:composer/typo3/cms@9.5.8","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.8"}],"aliases":["CVE-2019-12748"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-qv14-m93d-jyd9"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/40440?format=json","vulnerability_id":"VCID-qxab-9uwr-yqhv","summary":"Cross-site Scripting\nCKEditor allows user-assisted XSS involving a source-mode paste.","references":[{"reference_url":"https://ckeditor.com/blog/CKEditor-4.11-with-emoji-dropdown-and-auto-link-on-typing-released/","reference_id":"","reference_type":"","scores":[],"url":"https://ckeditor.com/blog/CKEditor-4.11-with-emoji-dropdown-and-auto-link-on-typing-released/"},{"reference_url":"https://ckeditor.com/cke4/release/CKEditor-4.11.0","reference_id":"","reference_type":"","scores":[],"url":"https://ckeditor.com/cke4/release/CKEditor-4.11.0"},{"reference_url":"https://typo3.org/security/advisory/typo3-core-sa-2018-005","reference_id":"","reference_type":"","scores":[],"url":"https://typo3.org/security/advisory/typo3-core-sa-2018-005"},{"reference_url":"https://web.archive.org/web/20200227030123/http://www.securityfocus.com/bid/109205","reference_id":"","reference_type":"","scores":[],"url":"https://web.archive.org/web/20200227030123/http://www.securityfocus.com/bid/109205"},{"reference_url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","reference_id":"","reference_type":"","scores":[],"url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2018-17960","reference_id":"CVE-2018-17960","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-17960"},{"reference_url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2018-17960.yaml","reference_id":"CVE-2018-17960.YAML","reference_type":"","scores":[],"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2018-17960.yaml"},{"reference_url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2018-17960.yaml","reference_id":"CVE-2018-17960.YAML","reference_type":"","scores":[],"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2018-17960.yaml"},{"reference_url":"https://github.com/advisories/GHSA-g68x-vvqq-pvw3","reference_id":"GHSA-g68x-vvqq-pvw3","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-g68x-vvqq-pvw3"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/57074?format=json","purl":"pkg:composer/typo3/cms@9.5.2","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.2"}],"aliases":["CVE-2018-17960","GHSA-g68x-vvqq-pvw3"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-qxab-9uwr-yqhv"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/40966?format=json","vulnerability_id":"VCID-ru6w-m6q6-27gn","summary":"Cross-site Scripting\nCross-Site Scripting in Fluid Engine.","references":[{"reference_url":"https://typo3.org/security/advisory/typo3-core-sa-2019-013/","reference_id":"","reference_type":"","scores":[],"url":"https://typo3.org/security/advisory/typo3-core-sa-2019-013/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/57974?format=json","purl":"pkg:composer/typo3/cms@9.5.6","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.6"}],"aliases":["GMS-2019-180"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-ru6w-m6q6-27gn"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/41235?format=json","vulnerability_id":"VCID-sdjb-gp4t-vbgt","summary":"Cross-site Scripting\nTYPO3 is an open source PHP based web content management system. have a cross-site scripting vulnerability. When settings for _backend layouts_ are not properly encoded, the corresponding grid view is vulnerable to persistent cross-site scripting. A valid backend user account is needed to exploit this vulnerability. TYPO3 contain a patch for this vulnerability.","references":[{"reference_url":"https://typo3.org/security/advisory/typo3-core-sa-2021-011","reference_id":"","reference_type":"","scores":[],"url":"https://typo3.org/security/advisory/typo3-core-sa-2021-011"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-32669","reference_id":"CVE-2021-32669","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-32669"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/58457?format=json","purl":"pkg:composer/typo3/cms@10.4.18","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2rhr-8vaz-hqfj"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@10.4.18"},{"url":"http://public2.vulnerablecode.io/api/packages/58458?format=json","purl":"pkg:composer/typo3/cms@11.3.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2rhr-8vaz-hqfj"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@11.3.1"}],"aliases":["CVE-2021-32669","GHSA-rgcg-28xm-8mmw"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-sdjb-gp4t-vbgt"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/40959?format=json","vulnerability_id":"VCID-sdsa-mh76-kqch","summary":"Security Misconfiguration in User Session Handling.","references":[{"reference_url":"https://typo3.org/security/advisory/typo3-core-sa-2019-011/","reference_id":"","reference_type":"","scores":[],"url":"https://typo3.org/security/advisory/typo3-core-sa-2019-011/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/57974?format=json","purl":"pkg:composer/typo3/cms@9.5.6","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.6"}],"aliases":["GMS-2019-181"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-sdsa-mh76-kqch"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/40636?format=json","vulnerability_id":"VCID-u259-2sxq-tbct","summary":"Cross-site Scripting\nCross-Site Scripting in Fluid `ViewHelpers`.","references":[{"reference_url":"https://typo3.org/security/advisory/typo3-core-sa-2019-005/","reference_id":"","reference_type":"","scores":[],"url":"https://typo3.org/security/advisory/typo3-core-sa-2019-005/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/56436?format=json","purl":"pkg:composer/typo3/cms@9.5.4","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.4"}],"aliases":["GMS-2019-175"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-u259-2sxq-tbct"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/41233?format=json","vulnerability_id":"VCID-uq77-aax5-k7d8","summary":"Inclusion of Sensitive Information in Log Files\nTYPO3 is an open source PHP based web content management system. User credentials may been logged as plain-text. This occurs when explicitly using log level debug, which is not the default configuration. TYPO3 contain a patch for this vulnerability.","references":[{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-32767","reference_id":"CVE-2021-32767","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-32767"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/58456?format=json","purl":"pkg:composer/typo3/cms@9.5.28","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2rhr-8vaz-hqfj"},{"vulnerability":"VCID-j8hk-bqnb-gycp"},{"vulnerability":"VCID-sdjb-gp4t-vbgt"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.28"},{"url":"http://public2.vulnerablecode.io/api/packages/58457?format=json","purl":"pkg:composer/typo3/cms@10.4.18","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2rhr-8vaz-hqfj"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@10.4.18"},{"url":"http://public2.vulnerablecode.io/api/packages/58458?format=json","purl":"pkg:composer/typo3/cms@11.3.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2rhr-8vaz-hqfj"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@11.3.1"}],"aliases":["CVE-2021-32767","GHSA-34fr-fhqr-7235"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-uq77-aax5-k7d8"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/39555?format=json","vulnerability_id":"VCID-vq15-t92r-5bhx","summary":"Cross-site Scripting\nThe page module in TYPO3 is vulnerable to XSS via `$GLOBALS['TYPO3_CONF_VARS']['SYS']['sitename']`, as demonstrated by an admin entering a crafted site name during the installation process.","references":[{"reference_url":"https://forge.typo3.org/issues/84191","reference_id":"","reference_type":"","scores":[],"url":"https://forge.typo3.org/issues/84191"},{"reference_url":"http://www.securitytracker.com/id/1040755","reference_id":"","reference_type":"","scores":[],"url":"http://www.securitytracker.com/id/1040755"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2018-6905","reference_id":"CVE-2018-6905","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-6905"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/55354?format=json","purl":"pkg:composer/typo3/cms@9.1.0","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.1.0"}],"aliases":["CVE-2018-6905"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-vq15-t92r-5bhx"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/40620?format=json","vulnerability_id":"VCID-vw2r-g8yy-eyf4","summary":"Code Injection\nArbitrary Code Execution via File List Module.","references":[{"reference_url":"https://typo3.org/security/advisory/typo3-core-sa-2019-008/","reference_id":"","reference_type":"","scores":[],"url":"https://typo3.org/security/advisory/typo3-core-sa-2019-008/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/56436?format=json","purl":"pkg:composer/typo3/cms@9.5.4","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.4"}],"aliases":["GMS-2019-178"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-vw2r-g8yy-eyf4"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/40088?format=json","vulnerability_id":"VCID-w1wb-mq2y-dfca","summary":"Privilege Escalation & SQL Injection in TYPO3 CMS.","references":[{"reference_url":"https://typo3.org/security/advisory/typo3-core-sa-2018-003/","reference_id":"","reference_type":"","scores":[],"url":"https://typo3.org/security/advisory/typo3-core-sa-2018-003/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/56095?format=json","purl":"pkg:composer/typo3/cms@9.3.2","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.3.2"}],"aliases":["GMS-2018-95"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-w1wb-mq2y-dfca"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/40958?format=json","vulnerability_id":"VCID-x5x1-w7yv-eye9","summary":"Code Injection\nPossible Arbitrary Code Execution in Image Processing.","references":[{"reference_url":"https://typo3.org/security/advisory/typo3-core-sa-2019-012/","reference_id":"","reference_type":"","scores":[],"url":"https://typo3.org/security/advisory/typo3-core-sa-2019-012/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/57974?format=json","purl":"pkg:composer/typo3/cms@9.5.6","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.6"}],"aliases":["GMS-2019-182"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-x5x1-w7yv-eye9"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/41124?format=json","vulnerability_id":"VCID-y7ds-p5r2-yuhq","summary":"Security Misconfiguration in Frontend Session Handling.","references":[{"reference_url":"https://typo3.org/security/advisory/typo3-core-sa-2019-018/","reference_id":"","reference_type":"","scores":[],"url":"https://typo3.org/security/advisory/typo3-core-sa-2019-018/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/58252?format=json","purl":"pkg:composer/typo3/cms@9.5.8","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.8"}],"aliases":["GMS-2019-187"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-y7ds-p5r2-yuhq"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/40503?format=json","vulnerability_id":"VCID-yz6t-ge1y-qfgr","summary":"Security Misconfiguration in Install Tool Cookie.","references":[{"reference_url":"https://typo3.org/security/advisory/typo3-core-sa-2018-009/","reference_id":"","reference_type":"","scores":[],"url":"https://typo3.org/security/advisory/typo3-core-sa-2018-009/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/57074?format=json","purl":"pkg:composer/typo3/cms@9.5.2","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.2"}],"aliases":["GMS-2018-100"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-yz6t-ge1y-qfgr"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/40627?format=json","vulnerability_id":"VCID-zmwv-gwq3-fkej","summary":"Cross-site Scripting\nCross-Site Scripting in Form Framework.","references":[{"reference_url":"https://typo3.org/security/advisory/typo3-core-sa-2019-007/","reference_id":"","reference_type":"","scores":[],"url":"https://typo3.org/security/advisory/typo3-core-sa-2019-007/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/56436?format=json","purl":"pkg:composer/typo3/cms@9.5.4","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.5.4"}],"aliases":["GMS-2019-177"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-zmwv-gwq3-fkej"}],"fixing_vulnerabilities":[],"risk_score":null,"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@9.0.0"}