{"url":"http://public2.vulnerablecode.io/api/packages/80271?format=json","purl":"pkg:composer/typo3/cms@12.1.1","type":"composer","namespace":"typo3","name":"cms","version":"12.1.1","qualifiers":{},"subpath":"","is_vulnerable":true,"next_non_vulnerable_version":"12.2.0","latest_non_vulnerable_version":"12.2.0","affected_by_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/16366?format=json","vulnerability_id":"VCID-vyvy-y3cw-hbgr","summary":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')\nTYPO3 is a free and open source Content Management Framework released under the GNU General Public License. In affected versions the TYPO3 core component `GeneralUtility::getIndpEnv()` uses the unfiltered server environment variable `PATH_INFO`, which allows attackers to inject malicious content. In combination with the TypoScript setting `config.absRefPrefix=auto`, attackers can inject malicious HTML code to pages that have not been rendered and cached, yet. As a result, injected values would be cached and delivered to other website visitors (persisted cross-site scripting). Individual code which relies on the resolved value of `GeneralUtility::getIndpEnv('SCRIPT_NAME')` and corresponding usages (as shown below) is vulnerable as well. Additional investigations confirmed that at least Apache web server deployments using CGI (FPM, FCGI/FastCGI, and similar) are affected. However, there still might be the risk that other scenarios like nginx, IIS, or Apache/mod_php is vulnerable. The usage of server environment variable `PATH_INFO` has been removed from corresponding processings in `GeneralUtility::getIndpEnv()`. Besides that, the public property `TypoScriptFrontendController::$absRefPrefix` is encoded for both being used as a URI component and for being used as a prefix in an HTML context. This mitigates the cross-site scripting vulnerability. Users are advised to update to TYPO3 versions 8.7.51 ELTS, 9.5.40 ELTS, 10.4.35 LTS, 11.5.23 LTS and 12.2.0 which fix this problem. For users who are unable to patch in a timely manner the TypoScript setting `config.absRefPrefix` should at least be set to a static path value, instead of using auto - e.g. `config.absRefPrefix=/`. This workaround **does not fix all aspects of the vulnerability**, and is just considered to be an intermediate mitigation to the most prominent manifestation.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2023-24814","reference_id":"","reference_type":"","scores":[{"value":"0.00867","scoring_system":"epss","scoring_elements":"0.75197","published_at":"2026-04-18T12:55:00Z"},{"value":"0.00867","scoring_system":"epss","scoring_elements":"0.7534","published_at":"2026-05-14T12:55:00Z"},{"value":"0.00867","scoring_system":"epss","scoring_elements":"0.75284","published_at":"2026-05-12T12:55:00Z"},{"value":"0.00867","scoring_system":"epss","scoring_elements":"0.75277","published_at":"2026-05-11T12:55:00Z"},{"value":"0.00867","scoring_system":"epss","scoring_elements":"0.75295","published_at":"2026-05-09T12:55:00Z"},{"value":"0.00867","scoring_system":"epss","scoring_elements":"0.7527","published_at":"2026-05-07T12:55:00Z"},{"value":"0.00867","scoring_system":"epss","scoring_elements":"0.75241","published_at":"2026-05-05T12:55:00Z"},{"value":"0.00867","scoring_system":"epss","scoring_elements":"0.75119","published_at":"2026-04-07T12:55:00Z"},{"value":"0.00867","scoring_system":"epss","scoring_elements":"0.75153","published_at":"2026-04-13T12:55:00Z"},{"value":"0.00867","scoring_system":"epss","scoring_elements":"0.75165","published_at":"2026-04-12T12:55:00Z"},{"value":"0.00867","scoring_system":"epss","scoring_elements":"0.75187","published_at":"2026-04-11T12:55:00Z"},{"value":"0.00867","scoring_system":"epss","scoring_elements":"0.7519","published_at":"2026-04-16T12:55:00Z"},{"value":"0.00867","scoring_system":"epss","scoring_elements":"0.75232","published_at":"2026-04-29T12:55:00Z"},{"value":"0.00867","scoring_system":"epss","scoring_elements":"0.75228","published_at":"2026-04-26T12:55:00Z"},{"value":"0.00867","scoring_system":"epss","scoring_elements":"0.75225","published_at":"2026-04-24T12:55:00Z"},{"value":"0.00867","scoring_system":"epss","scoring_elements":"0.75186","published_at":"2026-04-21T12:55:00Z"},{"value":"0.01074","scoring_system":"epss","scoring_elements":"0.7774","published_at":"2026-04-04T12:55:00Z"},{"value":"0.01074","scoring_system":"epss","scoring_elements":"0.77713","published_at":"2026-04-02T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2023-24814"},{"reference_url":"https://docs.typo3.org/m/typo3/reference-typoscript/main/en-us/Setup/Config/Index.html#absrefprefix","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-10T21:01:14Z/"}],"url":"https://docs.typo3.org/m/typo3/reference-typoscript/main/en-us/Setup/Config/Index.html#absrefprefix"},{"reference_url":"https://github.com/TYPO3/typo3","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/TYPO3/typo3"},{"reference_url":"https://github.com/TYPO3/typo3/blob/v11.5.22/typo3/sysext/core/Classes/Utility/GeneralUtility.php#L2481-L2484","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-10T21:01:14Z/"}],"url":"https://github.com/TYPO3/typo3/blob/v11.5.22/typo3/sysext/core/Classes/Utility/GeneralUtility.php#L2481-L2484"},{"reference_url":"https://github.com/TYPO3/typo3/blob/v11.5.22/typo3/sysext/frontend/Classes/Controller/TypoScriptFrontendController.php#L2547-L2549","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-10T21:01:14Z/"}],"url":"https://github.com/TYPO3/typo3/blob/v11.5.22/typo3/sysext/frontend/Classes/Controller/TypoScriptFrontendController.php#L2547-L2549"},{"reference_url":"https://github.com/TYPO3/typo3/commit/0005a6fd86ab97eff8bf2e3a5828bf0e7cb6263a","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-10T21:01:14Z/"}],"url":"https://github.com/TYPO3/typo3/commit/0005a6fd86ab97eff8bf2e3a5828bf0e7cb6263a"},{"reference_url":"https://typo3.org/security/advisory/typo3-core-sa-2023-001","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-10T21:01:14Z/"}],"url":"https://typo3.org/security/advisory/typo3-core-sa-2023-001"},{"reference_url":"https://typo3.org/security/advisory/typo3-psa-2023-001","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-10T21:01:14Z/"}],"url":"https://typo3.org/security/advisory/typo3-psa-2023-001"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2023-24814","reference_id":"CVE-2023-24814","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-24814"},{"reference_url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2023-24814.yaml","reference_id":"CVE-2023-24814.YAML","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2023-24814.yaml"},{"reference_url":"https://github.com/advisories/GHSA-r4f8-f93x-5qh3","reference_id":"GHSA-r4f8-f93x-5qh3","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-r4f8-f93x-5qh3"},{"reference_url":"https://github.com/TYPO3/typo3/security/advisories/GHSA-r4f8-f93x-5qh3","reference_id":"GHSA-r4f8-f93x-5qh3","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L"},{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-10T21:01:14Z/"}],"url":"https://github.com/TYPO3/typo3/security/advisories/GHSA-r4f8-f93x-5qh3"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/55791?format=json","purl":"pkg:composer/typo3/cms@12.2.0","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@12.2.0"}],"aliases":["CVE-2023-24814","GHSA-r4f8-f93x-5qh3"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-vyvy-y3cw-hbgr"}],"fixing_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/52854?format=json","vulnerability_id":"VCID-8sdd-b1bn-cuhx","summary":"TYPO3 CMS vulnerable to Insufficient Session Expiration after Password Reset\n### Problem\nWhen users reset their password using the corresponding password recovery functionality, existing sessions for that particular user account were not revoked. This applied to both frontend user sessions and backend user sessions.\n\n### Solution\nUpdate to TYPO3 versions 10.4.33, 11.5.20, 12.1.1 that fix the problem described above.\n\n### References\n* [TYPO3-CORE-SA-2022-014](https://typo3.org/security/advisory/typo3-core-sa-2022-014)","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-23502","reference_id":"","reference_type":"","scores":[{"value":"0.00151","scoring_system":"epss","scoring_elements":"0.35383","published_at":"2026-05-14T12:55:00Z"},{"value":"0.00151","scoring_system":"epss","scoring_elements":"0.35766","published_at":"2026-04-07T12:55:00Z"},{"value":"0.00151","scoring_system":"epss","scoring_elements":"0.35816","published_at":"2026-04-08T12:55:00Z"},{"value":"0.00151","scoring_system":"epss","scoring_elements":"0.35839","published_at":"2026-04-09T12:55:00Z"},{"value":"0.00151","scoring_system":"epss","scoring_elements":"0.35846","published_at":"2026-04-11T12:55:00Z"},{"value":"0.00151","scoring_system":"epss","scoring_elements":"0.35806","published_at":"2026-04-12T12:55:00Z"},{"value":"0.00151","scoring_system":"epss","scoring_elements":"0.35783","published_at":"2026-04-13T12:55:00Z"},{"value":"0.00151","scoring_system":"epss","scoring_elements":"0.35822","published_at":"2026-04-16T12:55:00Z"},{"value":"0.00151","scoring_system":"epss","scoring_elements":"0.3581","published_at":"2026-04-18T12:55:00Z"},{"value":"0.00151","scoring_system":"epss","scoring_elements":"0.35761","published_at":"2026-04-21T12:55:00Z"},{"value":"0.00151","scoring_system":"epss","scoring_elements":"0.35528","published_at":"2026-04-24T12:55:00Z"},{"value":"0.00151","scoring_system":"epss","scoring_elements":"0.35497","published_at":"2026-04-26T12:55:00Z"},{"value":"0.00151","scoring_system":"epss","scoring_elements":"0.3541","published_at":"2026-04-29T12:55:00Z"},{"value":"0.00151","scoring_system":"epss","scoring_elements":"0.35294","published_at":"2026-05-05T12:55:00Z"},{"value":"0.00151","scoring_system":"epss","scoring_elements":"0.35362","published_at":"2026-05-07T12:55:00Z"},{"value":"0.00151","scoring_system":"epss","scoring_elements":"0.35385","published_at":"2026-05-09T12:55:00Z"},{"value":"0.00151","scoring_system":"epss","scoring_elements":"0.35291","published_at":"2026-05-11T12:55:00Z"},{"value":"0.00151","scoring_system":"epss","scoring_elements":"0.35314","published_at":"2026-05-12T12:55:00Z"},{"value":"0.00151","scoring_system":"epss","scoring_elements":"0.35906","published_at":"2026-04-02T12:55:00Z"},{"value":"0.00151","scoring_system":"epss","scoring_elements":"0.35936","published_at":"2026-04-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-23502"},{"reference_url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2022-23502.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2022-23502.yaml"},{"reference_url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2022-23502.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2022-23502.yaml"},{"reference_url":"https://github.com/TYPO3/typo3","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/TYPO3/typo3"},{"reference_url":"https://github.com/TYPO3/typo3/commit/d9ffbf24fcc62068033ebb3912538347bd380a6c","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/TYPO3/typo3/commit/d9ffbf24fcc62068033ebb3912538347bd380a6c"},{"reference_url":"https://github.com/TYPO3/typo3/security/advisories/GHSA-mgj2-q8wp-29rr","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-21T18:47:27Z/"}],"url":"https://github.com/TYPO3/typo3/security/advisories/GHSA-mgj2-q8wp-29rr"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23502","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23502"},{"reference_url":"https://typo3.org/security/advisory/typo3-core-sa-2022-014","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://typo3.org/security/advisory/typo3-core-sa-2022-014"},{"reference_url":"https://github.com/advisories/GHSA-mgj2-q8wp-29rr","reference_id":"GHSA-mgj2-q8wp-29rr","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-mgj2-q8wp-29rr"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/80269?format=json","purl":"pkg:composer/typo3/cms@10.4.33","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-vyvy-y3cw-hbgr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@10.4.33"},{"url":"http://public2.vulnerablecode.io/api/packages/80270?format=json","purl":"pkg:composer/typo3/cms@11.5.20","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-vyvy-y3cw-hbgr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@11.5.20"},{"url":"http://public2.vulnerablecode.io/api/packages/80271?format=json","purl":"pkg:composer/typo3/cms@12.1.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-vyvy-y3cw-hbgr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@12.1.1"}],"aliases":["CVE-2022-23502","GHSA-mgj2-q8wp-29rr","GMS-2022-8135"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-8sdd-b1bn-cuhx"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/52839?format=json","vulnerability_id":"VCID-t1n7-eswt-73gw","summary":"TYPO3 CMS vulnerable to Arbitrary Code Execution via Form Framework\n### Problem\nDue to the lack of separating user-submitted data from the internal configuration in the Form Designer backend module, it was possible to inject code instructions to be processed and executed via TypoScript as PHP code.\n\nThe existence of individual TypoScript instructions for a particular form item (known as [`formDefinitionOverrides`](https://docs.typo3.org/c/typo3/cms-form/main/en-us/I/Concepts/FrontendRendering/Index.html#form-element-properties)) and a valid backend user account with access to the form module are needed to exploit this vulnerability.\n\n### Solution\nUpdate to TYPO3 versions 8.7.49 ELTS, 9.5.38 ELTS, 10.4.33, 11.5.20, 12.1.1 that fix the problem described above.\n\n### References\n* [TYPO3-CORE-SA-2022-015](https://typo3.org/security/advisory/typo3-core-sa-2022-015)","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-23503","reference_id":"","reference_type":"","scores":[{"value":"0.00517","scoring_system":"epss","scoring_elements":"0.66891","published_at":"2026-05-14T12:55:00Z"},{"value":"0.00517","scoring_system":"epss","scoring_elements":"0.6667","published_at":"2026-04-07T12:55:00Z"},{"value":"0.00517","scoring_system":"epss","scoring_elements":"0.66719","published_at":"2026-04-08T12:55:00Z"},{"value":"0.00517","scoring_system":"epss","scoring_elements":"0.66734","published_at":"2026-04-09T12:55:00Z"},{"value":"0.00517","scoring_system":"epss","scoring_elements":"0.66754","published_at":"2026-04-11T12:55:00Z"},{"value":"0.00517","scoring_system":"epss","scoring_elements":"0.6674","published_at":"2026-04-12T12:55:00Z"},{"value":"0.00517","scoring_system":"epss","scoring_elements":"0.66711","published_at":"2026-04-13T12:55:00Z"},{"value":"0.00517","scoring_system":"epss","scoring_elements":"0.66745","published_at":"2026-04-16T12:55:00Z"},{"value":"0.00517","scoring_system":"epss","scoring_elements":"0.66759","published_at":"2026-04-18T12:55:00Z"},{"value":"0.00517","scoring_system":"epss","scoring_elements":"0.66743","published_at":"2026-04-21T12:55:00Z"},{"value":"0.00517","scoring_system":"epss","scoring_elements":"0.66768","published_at":"2026-04-24T12:55:00Z"},{"value":"0.00517","scoring_system":"epss","scoring_elements":"0.66781","published_at":"2026-04-26T12:55:00Z"},{"value":"0.00517","scoring_system":"epss","scoring_elements":"0.66778","published_at":"2026-04-29T12:55:00Z"},{"value":"0.00517","scoring_system":"epss","scoring_elements":"0.66748","published_at":"2026-05-05T12:55:00Z"},{"value":"0.00517","scoring_system":"epss","scoring_elements":"0.66793","published_at":"2026-05-07T12:55:00Z"},{"value":"0.00517","scoring_system":"epss","scoring_elements":"0.66833","published_at":"2026-05-09T12:55:00Z"},{"value":"0.00517","scoring_system":"epss","scoring_elements":"0.66807","published_at":"2026-05-11T12:55:00Z"},{"value":"0.00517","scoring_system":"epss","scoring_elements":"0.66827","published_at":"2026-05-12T12:55:00Z"},{"value":"0.00517","scoring_system":"epss","scoring_elements":"0.66671","published_at":"2026-04-02T12:55:00Z"},{"value":"0.00517","scoring_system":"epss","scoring_elements":"0.66697","published_at":"2026-04-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-23503"},{"reference_url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2022-23503.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2022-23503.yaml"},{"reference_url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2022-23503.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2022-23503.yaml"},{"reference_url":"https://github.com/TYPO3/typo3","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/TYPO3/typo3"},{"reference_url":"https://github.com/TYPO3/typo3/commit/1302e88565821f2159e08b5d818d28de17ecc830","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/TYPO3/typo3/commit/1302e88565821f2159e08b5d818d28de17ecc830"},{"reference_url":"https://github.com/TYPO3/typo3/security/advisories/GHSA-c5wx-6c2c-f7rm","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-18T18:23:57Z/"}],"url":"https://github.com/TYPO3/typo3/security/advisories/GHSA-c5wx-6c2c-f7rm"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23503","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23503"},{"reference_url":"https://typo3.org/security/advisory/typo3-core-sa-2022-015","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://typo3.org/security/advisory/typo3-core-sa-2022-015"},{"reference_url":"https://github.com/advisories/GHSA-c5wx-6c2c-f7rm","reference_id":"GHSA-c5wx-6c2c-f7rm","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-c5wx-6c2c-f7rm"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/80269?format=json","purl":"pkg:composer/typo3/cms@10.4.33","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-vyvy-y3cw-hbgr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@10.4.33"},{"url":"http://public2.vulnerablecode.io/api/packages/80270?format=json","purl":"pkg:composer/typo3/cms@11.5.20","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-vyvy-y3cw-hbgr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@11.5.20"},{"url":"http://public2.vulnerablecode.io/api/packages/80271?format=json","purl":"pkg:composer/typo3/cms@12.1.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-vyvy-y3cw-hbgr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@12.1.1"}],"aliases":["CVE-2022-23503","GHSA-c5wx-6c2c-f7rm","GMS-2022-8132"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-t1n7-eswt-73gw"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/52786?format=json","vulnerability_id":"VCID-w13x-3rp9-wyej","summary":"TYPO3 CMS vulnerable to Sensitive Information Disclosure via YAML Placeholder Expressions in Site Configuration\n> ### CVSS: `CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:L/E:F/RL:O/RC:C` (5.3)\n\n### Problem\nDue to the lack of handling user-submitted [YAML placeholder expressions](https://docs.typo3.org/m/typo3/reference-coreapi/main/en-us/Configuration/Yaml/YamlApi.html#custom-placeholder-processing) in the site configuration backend module, attackers could expose sensitive internal information, such as system configuration or HTTP request messages of other website visitors.\n\nA valid backend user account having administrator privileges is needed to exploit this vulnerability.\n\n### Solution\nUpdate to TYPO3 versions 9.5.38 ELTS, 10.4.33, 11.5.20, 12.1.1 that fix the problem described above.\n\n### Credits\nThanks to TYPO3 core & security team member Oliver Hader who reported and fixed the issue.\n\n### References\n* [TYPO3-CORE-SA-2022-016](https://typo3.org/security/advisory/typo3-core-sa-2022-016)","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-23504","reference_id":"","reference_type":"","scores":[{"value":"0.00313","scoring_system":"epss","scoring_elements":"0.54544","published_at":"2026-05-14T12:55:00Z"},{"value":"0.00313","scoring_system":"epss","scoring_elements":"0.5448","published_at":"2026-04-04T12:55:00Z"},{"value":"0.00313","scoring_system":"epss","scoring_elements":"0.54448","published_at":"2026-04-24T12:55:00Z"},{"value":"0.00313","scoring_system":"epss","scoring_elements":"0.54501","published_at":"2026-04-08T12:55:00Z"},{"value":"0.00313","scoring_system":"epss","scoring_elements":"0.54495","published_at":"2026-04-09T12:55:00Z"},{"value":"0.00313","scoring_system":"epss","scoring_elements":"0.54506","published_at":"2026-04-11T12:55:00Z"},{"value":"0.00313","scoring_system":"epss","scoring_elements":"0.54489","published_at":"2026-04-12T12:55:00Z"},{"value":"0.00313","scoring_system":"epss","scoring_elements":"0.54468","published_at":"2026-04-13T12:55:00Z"},{"value":"0.00313","scoring_system":"epss","scoring_elements":"0.54507","published_at":"2026-04-16T12:55:00Z"},{"value":"0.00313","scoring_system":"epss","scoring_elements":"0.5451","published_at":"2026-04-18T12:55:00Z"},{"value":"0.00313","scoring_system":"epss","scoring_elements":"0.54487","published_at":"2026-04-21T12:55:00Z"},{"value":"0.00313","scoring_system":"epss","scoring_elements":"0.54464","published_at":"2026-04-26T12:55:00Z"},{"value":"0.00313","scoring_system":"epss","scoring_elements":"0.54442","published_at":"2026-04-29T12:55:00Z"},{"value":"0.00313","scoring_system":"epss","scoring_elements":"0.54392","published_at":"2026-05-05T12:55:00Z"},{"value":"0.00313","scoring_system":"epss","scoring_elements":"0.54435","published_at":"2026-05-07T12:55:00Z"},{"value":"0.00313","scoring_system":"epss","scoring_elements":"0.54491","published_at":"2026-05-09T12:55:00Z"},{"value":"0.00313","scoring_system":"epss","scoring_elements":"0.5445","published_at":"2026-05-11T12:55:00Z"},{"value":"0.00313","scoring_system":"epss","scoring_elements":"0.54476","published_at":"2026-05-12T12:55:00Z"},{"value":"0.00313","scoring_system":"epss","scoring_elements":"0.54457","published_at":"2026-04-02T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-23504"},{"reference_url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2022-23504.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2022-23504.yaml"},{"reference_url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2022-23504.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2022-23504.yaml"},{"reference_url":"https://github.com/TYPO3/typo3","reference_id":"","reference_type":"","scores":[{"value":"5.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/TYPO3/typo3"},{"reference_url":"https://github.com/TYPO3/typo3/commit/d1e627ff7eef07bd94c53db861e85977b203900a","reference_id":"","reference_type":"","scores":[{"value":"5.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/TYPO3/typo3/commit/d1e627ff7eef07bd94c53db861e85977b203900a"},{"reference_url":"https://github.com/TYPO3/typo3/security/advisories/GHSA-8w3p-qh3x-6gjr","reference_id":"","reference_type":"","scores":[{"value":"5.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:L"},{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-21T19:21:01Z/"}],"url":"https://github.com/TYPO3/typo3/security/advisories/GHSA-8w3p-qh3x-6gjr"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23504","reference_id":"","reference_type":"","scores":[{"value":"5.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23504"},{"reference_url":"https://typo3.org/security/advisory/typo3-core-sa-2022-016","reference_id":"","reference_type":"","scores":[{"value":"5.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://typo3.org/security/advisory/typo3-core-sa-2022-016"},{"reference_url":"https://github.com/advisories/GHSA-8w3p-qh3x-6gjr","reference_id":"GHSA-8w3p-qh3x-6gjr","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-8w3p-qh3x-6gjr"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/80269?format=json","purl":"pkg:composer/typo3/cms@10.4.33","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-vyvy-y3cw-hbgr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@10.4.33"},{"url":"http://public2.vulnerablecode.io/api/packages/80270?format=json","purl":"pkg:composer/typo3/cms@11.5.20","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-vyvy-y3cw-hbgr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@11.5.20"},{"url":"http://public2.vulnerablecode.io/api/packages/80271?format=json","purl":"pkg:composer/typo3/cms@12.1.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-vyvy-y3cw-hbgr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@12.1.1"}],"aliases":["CVE-2022-23504","GHSA-8w3p-qh3x-6gjr","GMS-2022-8131"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-w13x-3rp9-wyej"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/52556?format=json","vulnerability_id":"VCID-yj9g-uz1a-jkf2","summary":"TYPO3 HTML Sanitizer vulnerable to Cross-Site Scripting\n### Problem\nDue to a parsing issue in the upstream package [`masterminds/html5`](https://packagist.org/packages/masterminds/html5), malicious markup used in a sequence with special HTML CDATA sections cannot be filtered and sanitized. This allows bypassing the cross-site scripting mechanism of [`typo3/html-sanitizer`](https://packagist.org/packages/typo3/html-sanitizer).\n\nBesides that, the upstream package `masterminds/html5` provides HTML raw text elements (`script`, `style`, `noframes`, `noembed` and `iframe`) as DOMText nodes, which were not processed and sanitized further. None of the mentioned elements were defined in the default builder configuration, that's why only custom behaviors, using one of those tag names, were vulnerable to cross-site scripting.\n\n### Solution\nUpdate to `typo3/html-sanitizer` versions 1.5.0 or 2.1.1 that fix the problem described.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-23499","reference_id":"","reference_type":"","scores":[{"value":"0.00234","scoring_system":"epss","scoring_elements":"0.46301","published_at":"2026-04-02T12:55:00Z"},{"value":"0.00234","scoring_system":"epss","scoring_elements":"0.463","published_at":"2026-05-14T12:55:00Z"},{"value":"0.00234","scoring_system":"epss","scoring_elements":"0.46228","published_at":"2026-05-12T12:55:00Z"},{"value":"0.00234","scoring_system":"epss","scoring_elements":"0.46198","published_at":"2026-05-11T12:55:00Z"},{"value":"0.00234","scoring_system":"epss","scoring_elements":"0.46256","published_at":"2026-05-09T12:55:00Z"},{"value":"0.00234","scoring_system":"epss","scoring_elements":"0.46235","published_at":"2026-05-07T12:55:00Z"},{"value":"0.00234","scoring_system":"epss","scoring_elements":"0.4617","published_at":"2026-05-05T12:55:00Z"},{"value":"0.00234","scoring_system":"epss","scoring_elements":"0.46264","published_at":"2026-04-29T12:55:00Z"},{"value":"0.00234","scoring_system":"epss","scoring_elements":"0.46306","published_at":"2026-04-24T12:55:00Z"},{"value":"0.00234","scoring_system":"epss","scoring_elements":"0.46325","published_at":"2026-04-21T12:55:00Z"},{"value":"0.00234","scoring_system":"epss","scoring_elements":"0.4638","published_at":"2026-04-18T12:55:00Z"},{"value":"0.00234","scoring_system":"epss","scoring_elements":"0.46383","published_at":"2026-04-16T12:55:00Z"},{"value":"0.00234","scoring_system":"epss","scoring_elements":"0.46326","published_at":"2026-04-13T12:55:00Z"},{"value":"0.00234","scoring_system":"epss","scoring_elements":"0.46317","published_at":"2026-04-26T12:55:00Z"},{"value":"0.00234","scoring_system":"epss","scoring_elements":"0.46345","published_at":"2026-04-11T12:55:00Z"},{"value":"0.00234","scoring_system":"epss","scoring_elements":"0.46322","published_at":"2026-04-09T12:55:00Z"},{"value":"0.00234","scoring_system":"epss","scoring_elements":"0.46266","published_at":"2026-04-07T12:55:00Z"},{"value":"0.00234","scoring_system":"epss","scoring_elements":"0.46321","published_at":"2026-04-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-23499"},{"reference_url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2022-23499.yaml","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2022-23499.yaml"},{"reference_url":"https://github.com/TYPO3/html-sanitizer","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/TYPO3/html-sanitizer"},{"reference_url":"https://github.com/TYPO3/html-sanitizer/pull/105","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/TYPO3/html-sanitizer/pull/105"},{"reference_url":"https://github.com/TYPO3/html-sanitizer/pull/106","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/TYPO3/html-sanitizer/pull/106"},{"reference_url":"https://github.com/TYPO3/html-sanitizer/releases/tag/v1.5.0","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/TYPO3/html-sanitizer/releases/tag/v1.5.0"},{"reference_url":"https://github.com/TYPO3/html-sanitizer/releases/tag/v2.1.1","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/TYPO3/html-sanitizer/releases/tag/v2.1.1"},{"reference_url":"https://github.com/TYPO3/html-sanitizer/security/advisories/GHSA-hvwx-qh2h-xcfj","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/TYPO3/html-sanitizer/security/advisories/GHSA-hvwx-qh2h-xcfj"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23499","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23499"},{"reference_url":"https://typo3.org/security/advisory/typo3-core-sa-2022-017","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://typo3.org/security/advisory/typo3-core-sa-2022-017"},{"reference_url":"https://github.com/advisories/GHSA-hvwx-qh2h-xcfj","reference_id":"GHSA-hvwx-qh2h-xcfj","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-hvwx-qh2h-xcfj"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/80269?format=json","purl":"pkg:composer/typo3/cms@10.4.33","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-vyvy-y3cw-hbgr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@10.4.33"},{"url":"http://public2.vulnerablecode.io/api/packages/80270?format=json","purl":"pkg:composer/typo3/cms@11.5.20","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-vyvy-y3cw-hbgr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@11.5.20"},{"url":"http://public2.vulnerablecode.io/api/packages/80271?format=json","purl":"pkg:composer/typo3/cms@12.1.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-vyvy-y3cw-hbgr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@12.1.1"}],"aliases":["CVE-2022-23499","GHSA-hvwx-qh2h-xcfj","GMS-2022-8136"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-yj9g-uz1a-jkf2"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/52642?format=json","vulnerability_id":"VCID-zdq2-dhb2-6kaq","summary":"TYPO3 CMS vulnerable to Weak Authentication in Frontend Login\n### Problem\nRestricting frontend login to specific users, organized in different storage folders (partitions), can be bypassed. A potential attacker might use this ambiguity in usernames to get access to a different account - however, credentials must be known to the adversary.\n\n### Solution\nUpdate to TYPO3 versions 8.7.49 ELTS, 9.5.38 ELTS, 10.4.33, 11.5.20, 12.1.1 that fix the problem described above.\n\n### References\n* [TYPO3-CORE-SA-2022-013](https://typo3.org/security/advisory/typo3-core-sa-2022-013)","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-23501","reference_id":"","reference_type":"","scores":[{"value":"0.00229","scoring_system":"epss","scoring_elements":"0.45632","published_at":"2026-05-14T12:55:00Z"},{"value":"0.00229","scoring_system":"epss","scoring_elements":"0.45744","published_at":"2026-04-04T12:55:00Z"},{"value":"0.00229","scoring_system":"epss","scoring_elements":"0.45693","published_at":"2026-04-07T12:55:00Z"},{"value":"0.00229","scoring_system":"epss","scoring_elements":"0.45749","published_at":"2026-04-08T12:55:00Z"},{"value":"0.00229","scoring_system":"epss","scoring_elements":"0.45745","published_at":"2026-04-09T12:55:00Z"},{"value":"0.00229","scoring_system":"epss","scoring_elements":"0.45768","published_at":"2026-04-11T12:55:00Z"},{"value":"0.00229","scoring_system":"epss","scoring_elements":"0.45738","published_at":"2026-04-21T12:55:00Z"},{"value":"0.00229","scoring_system":"epss","scoring_elements":"0.45746","published_at":"2026-04-13T12:55:00Z"},{"value":"0.00229","scoring_system":"epss","scoring_elements":"0.45795","published_at":"2026-04-16T12:55:00Z"},{"value":"0.00229","scoring_system":"epss","scoring_elements":"0.4579","published_at":"2026-04-18T12:55:00Z"},{"value":"0.00229","scoring_system":"epss","scoring_elements":"0.45668","published_at":"2026-04-24T12:55:00Z"},{"value":"0.00229","scoring_system":"epss","scoring_elements":"0.45677","published_at":"2026-04-26T12:55:00Z"},{"value":"0.00229","scoring_system":"epss","scoring_elements":"0.45618","published_at":"2026-04-29T12:55:00Z"},{"value":"0.00229","scoring_system":"epss","scoring_elements":"0.45512","published_at":"2026-05-05T12:55:00Z"},{"value":"0.00229","scoring_system":"epss","scoring_elements":"0.45575","published_at":"2026-05-07T12:55:00Z"},{"value":"0.00229","scoring_system":"epss","scoring_elements":"0.45593","published_at":"2026-05-09T12:55:00Z"},{"value":"0.00229","scoring_system":"epss","scoring_elements":"0.45535","published_at":"2026-05-11T12:55:00Z"},{"value":"0.00229","scoring_system":"epss","scoring_elements":"0.45561","published_at":"2026-05-12T12:55:00Z"},{"value":"0.00229","scoring_system":"epss","scoring_elements":"0.45724","published_at":"2026-04-02T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-23501"},{"reference_url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2022-23501.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2022-23501.yaml"},{"reference_url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2022-23501.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2022-23501.yaml"},{"reference_url":"https://github.com/TYPO3/typo3","reference_id":"","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/TYPO3/typo3"},{"reference_url":"https://github.com/TYPO3/typo3/commit/28be9cdb3fed02ce4cfc6fa2d39f7d8e2266eced","reference_id":"","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/TYPO3/typo3/commit/28be9cdb3fed02ce4cfc6fa2d39f7d8e2266eced"},{"reference_url":"https://github.com/TYPO3/typo3/security/advisories/GHSA-jfp7-79g7-89rf","reference_id":"","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-21T18:48:00Z/"}],"url":"https://github.com/TYPO3/typo3/security/advisories/GHSA-jfp7-79g7-89rf"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23501","reference_id":"","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23501"},{"reference_url":"https://typo3.org/security/advisory/typo3-core-sa-2022-013","reference_id":"","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://typo3.org/security/advisory/typo3-core-sa-2022-013"},{"reference_url":"https://github.com/advisories/GHSA-jfp7-79g7-89rf","reference_id":"GHSA-jfp7-79g7-89rf","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-jfp7-79g7-89rf"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/80269?format=json","purl":"pkg:composer/typo3/cms@10.4.33","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-vyvy-y3cw-hbgr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@10.4.33"},{"url":"http://public2.vulnerablecode.io/api/packages/80270?format=json","purl":"pkg:composer/typo3/cms@11.5.20","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-vyvy-y3cw-hbgr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@11.5.20"},{"url":"http://public2.vulnerablecode.io/api/packages/80271?format=json","purl":"pkg:composer/typo3/cms@12.1.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-vyvy-y3cw-hbgr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@12.1.1"}],"aliases":["CVE-2022-23501","GHSA-jfp7-79g7-89rf","GMS-2022-8134"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-zdq2-dhb2-6kaq"}],"risk_score":"4.0","resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@12.1.1"}