Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/15655?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/15655?format=api", "vulnerability_id": "VCID-4hsv-y3rz-e3a2", "summary": "Path Traversal in TYPO3 File Abstraction Layer Storages\n### Problem\nConfigurable storages using the local driver of the File Abstraction Layer (FAL) could be configured to access directories outside of the root directory of the corresponding project. The system setting in `BE/lockRootPath` was not evaluated by the file abstraction layer component. An administrator-level backend user account is required to exploit this vulnerability.\n\n### Solution\nUpdate to TYPO3 versions 8.7.57 ELTS, 9.5.46 ELTS, 10.4.43 ELTS, 11.5.35 LTS, 12.4.11 LTS, 13.0.1 that fix the problem described.\n\n#### ℹ️ **Strong security defaults - Manual actions required**\n\n_see [Important: #102800 changelog](https://docs.typo3.org/c/typo3/cms-core/main/en-us/Changelog/11.5.x/Important-102800-FileAbstractionLayerEnforcesAbsolutePathsToMatchProjectRootOrLockRootPath.html)_\n\nAssuming that a web project is located in the directory `/var/www/example.org` (the \"project root path\" for Composer-based projects) and the publicly accessible directory is located at `/var/www/example.org/public` (the \"public root path\"), accessing resources via the File Abstraction Layer component is limited to the mentioned directories.\n\nTo grant additional access to directories, they must be explicitly configured in the system settings of `$GLOBALS['TYPO3_CONF_VARS']['BE']['lockRootPath']` - either using the Install Tool or according to deployment techniques. The existing setting has been extended to support multiple directories configured as an array of strings.\n\nExample:\n```php\n$GLOBALS['TYPO3_CONF_VARS']['BE']['lockRootPath'] = [\n ‘/var/shared/documents/’,\n ‘/var/shared/images/’,\n];\n```\n\n❗ **Storages that reference directories not explicitly granted will be marked as \"offline\" internally - no resources can be used in the website's frontend and backend context.**\n\n### Credits\nThanks to TYPO3 core & security team members Oliver Hader and Benjamin Franzke who fixed the issue.\n\n### References\n* [TYPO3-CORE-SA-2024-001](https://typo3.org/security/advisory/typo3-core-sa-2024-001)", "aliases": [ { "alias": "CVE-2023-30451" }, { "alias": "GHSA-3gjc-mp82-fj4q" }, { "alias": "GHSA-w6x2-jg8h-p6mp" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/62043?format=api", "purl": "pkg:composer/typo3/cms@11.5.25", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@11.5.25" }, { "url": "http://public2.vulnerablecode.io/api/packages/62046?format=api", "purl": "pkg:composer/typo3/cms-core@11.5.25", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1r9g-c5rn-ukgb" }, { "vulnerability": "VCID-4t9s-p25a-cfas" }, { "vulnerability": "VCID-65ue-7jd9-23gf" }, { "vulnerability": "VCID-8d2m-1ffv-jqe1" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-gyyu-n3b1-zbcj" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-mud2-s4rc-fuf6" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-nubu-f1sc-gbes" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-xy6y-312d-rygj" }, { "vulnerability": "VCID-zn99-ywte-33g6" }, { "vulnerability": "VCID-zwgt-rm1f-6bf2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@11.5.25" }, { "url": "http://public2.vulnerablecode.io/api/packages/52866?format=api", "purl": "pkg:composer/typo3/cms-core@11.5.35", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1r9g-c5rn-ukgb" }, { "vulnerability": "VCID-4t9s-p25a-cfas" }, { "vulnerability": "VCID-65ue-7jd9-23gf" }, { "vulnerability": "VCID-8d2m-1ffv-jqe1" }, { "vulnerability": "VCID-gyyu-n3b1-zbcj" }, { "vulnerability": "VCID-mud2-s4rc-fuf6" }, { "vulnerability": "VCID-nubu-f1sc-gbes" }, { "vulnerability": "VCID-xy6y-312d-rygj" }, { "vulnerability": "VCID-zwgt-rm1f-6bf2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@11.5.35" }, { "url": "http://public2.vulnerablecode.io/api/packages/52870?format=api", "purl": "pkg:composer/typo3/cms-core@12.4.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1r9g-c5rn-ukgb" }, { "vulnerability": "VCID-4t9s-p25a-cfas" }, { "vulnerability": "VCID-65ue-7jd9-23gf" }, { "vulnerability": "VCID-8d2m-1ffv-jqe1" }, { "vulnerability": "VCID-gyyu-n3b1-zbcj" }, { "vulnerability": "VCID-jxw7-skw6-q7bg" }, { "vulnerability": "VCID-mud2-s4rc-fuf6" }, { "vulnerability": "VCID-nubu-f1sc-gbes" }, { "vulnerability": "VCID-xy6y-312d-rygj" }, { "vulnerability": "VCID-zwgt-rm1f-6bf2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@12.4.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/52873?format=api", "purl": "pkg:composer/typo3/cms-core@13.0.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1r9g-c5rn-ukgb" }, { "vulnerability": "VCID-4t9s-p25a-cfas" }, { "vulnerability": "VCID-65ue-7jd9-23gf" }, { "vulnerability": "VCID-8d2m-1ffv-jqe1" }, { "vulnerability": "VCID-gyyu-n3b1-zbcj" }, { "vulnerability": "VCID-jxw7-skw6-q7bg" }, { "vulnerability": "VCID-mud2-s4rc-fuf6" }, { "vulnerability": "VCID-nubu-f1sc-gbes" }, { "vulnerability": "VCID-xy6y-312d-rygj" }, { "vulnerability": "VCID-yxy9-ngwb-6qdm" }, { "vulnerability": "VCID-zwgt-rm1f-6bf2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@13.0.1" } ], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/62042?format=api", "purl": "pkg:composer/typo3/cms@11.5.24", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4hsv-y3rz-e3a2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@11.5.24" }, { "url": "http://public2.vulnerablecode.io/api/packages/29312?format=api", "purl": "pkg:composer/typo3/cms-core@8.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-12y5-7b81-wkfu" }, { "vulnerability": "VCID-21e8-x7mp-hugk" }, { "vulnerability": "VCID-28bf-jvah-zkhw" }, { "vulnerability": "VCID-2meq-x4kd-bbdn" }, { "vulnerability": "VCID-3gg5-1921-rbfs" }, { "vulnerability": "VCID-3n2r-awja-dug9" }, { "vulnerability": "VCID-3v4n-fzxa-bfaw" }, { "vulnerability": "VCID-4btk-jt5n-2ugf" }, { "vulnerability": "VCID-4hsv-y3rz-e3a2" }, { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-551q-gpyd-ffe8" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5mxm-88r9-hfey" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-5u4q-m66t-wqcj" }, { "vulnerability": "VCID-5z59-dn7p-xbc5" }, { "vulnerability": "VCID-6xmj-wbea-r7ex" }, { "vulnerability": "VCID-9g62-zd1x-3bdg" }, { "vulnerability": "VCID-9gpp-ez8w-rqav" }, { "vulnerability": "VCID-9x6r-56xm-n7h7" }, { "vulnerability": "VCID-9zqs-hjay-fkev" }, { "vulnerability": "VCID-a563-vtwa-hkbr" }, { "vulnerability": "VCID-axaf-45kr-kbfe" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-b81w-n2ne-z3ee" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-bnne-7p2q-eqd2" }, { "vulnerability": "VCID-cm14-t8uv-k3es" }, { "vulnerability": "VCID-d99v-v9cj-zfh2" }, { "vulnerability": "VCID-dj88-f3p8-cfbn" }, { "vulnerability": "VCID-dm97-51uu-r7gw" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-e268-wagv-sbex" }, { "vulnerability": "VCID-eajg-ctpd-2bby" }, { "vulnerability": "VCID-ebpa-58em-wqam" }, { "vulnerability": "VCID-ehzg-bzrd-kbcc" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-f1rq-qudk-zkf2" }, { "vulnerability": "VCID-f4bv-pzdy-dfcb" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-he5m-6wj4-rbhc" }, { "vulnerability": "VCID-hhmn-yz5p-xkap" }, { "vulnerability": "VCID-j77k-hjgx-5kc5" }, { "vulnerability": "VCID-k8af-cg9k-87a9" }, { "vulnerability": "VCID-m7w6-b2xu-6uee" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n1cb-8py6-bbhu" }, { "vulnerability": "VCID-n78p-x7hh-gqcf" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-pmzz-9rws-4ud5" }, { "vulnerability": "VCID-pss5-as4b-cyf2" }, { "vulnerability": "VCID-px44-19tj-h7aa" }, { "vulnerability": "VCID-q8hy-wjd9-nbgp" }, { "vulnerability": "VCID-qb4j-9tz7-m7a2" }, { "vulnerability": "VCID-rdrs-mhaw-b3ge" }, { "vulnerability": "VCID-rwqs-3ktq-qqbd" }, { "vulnerability": "VCID-s53a-f91p-huf4" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-sr3p-pdxy-4yhu" }, { "vulnerability": "VCID-stzu-sxe6-5yf5" }, { "vulnerability": "VCID-swnc-ke6h-ekew" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-tnjd-pyys-akav" }, { "vulnerability": "VCID-tw1y-t4qj-j3d1" }, { "vulnerability": "VCID-vxry-uvph-kbfd" }, { "vulnerability": "VCID-wea9-egep-h7g5" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xh7y-56vy-5ud8" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zkea-ge1t-z7gn" }, { "vulnerability": "VCID-zspb-bd6j-wyd2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/62518?format=api", "purl": "pkg:composer/typo3/cms-core@8.7.56", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4hsv-y3rz-e3a2" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@8.7.56" }, { "url": "http://public2.vulnerablecode.io/api/packages/29297?format=api", "purl": "pkg:composer/typo3/cms-core@9.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-12y5-7b81-wkfu" }, { "vulnerability": "VCID-21e8-x7mp-hugk" }, { "vulnerability": "VCID-28bf-jvah-zkhw" }, { "vulnerability": "VCID-2meq-x4kd-bbdn" }, { "vulnerability": "VCID-2mn6-mdmz-4yd9" }, { "vulnerability": "VCID-3gg5-1921-rbfs" }, { "vulnerability": "VCID-3n2r-awja-dug9" }, { "vulnerability": "VCID-3v4n-fzxa-bfaw" }, { "vulnerability": "VCID-461j-9hrc-gfbc" }, { "vulnerability": "VCID-4btk-jt5n-2ugf" }, { "vulnerability": "VCID-4hsv-y3rz-e3a2" }, { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-4mkw-tv16-jyca" }, { "vulnerability": "VCID-4t9s-p25a-cfas" }, { "vulnerability": "VCID-543x-cnbz-1kb9" }, { "vulnerability": "VCID-551q-gpyd-ffe8" }, { "vulnerability": "VCID-58js-jzm4-4fc7" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5kzs-ex81-bbaj" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-5u4q-m66t-wqcj" }, { "vulnerability": "VCID-5z59-dn7p-xbc5" }, { "vulnerability": "VCID-65ue-7jd9-23gf" }, { "vulnerability": "VCID-6a9t-8dmn-s3bv" }, { "vulnerability": "VCID-6xmj-wbea-r7ex" }, { "vulnerability": "VCID-7kjw-j8st-mqfr" }, { "vulnerability": "VCID-8d2m-1ffv-jqe1" }, { "vulnerability": "VCID-9g62-zd1x-3bdg" }, { "vulnerability": "VCID-9gpp-ez8w-rqav" }, { "vulnerability": "VCID-9jj4-ec9n-qbhs" }, { "vulnerability": "VCID-9x6r-56xm-n7h7" }, { "vulnerability": "VCID-9zqs-hjay-fkev" }, { "vulnerability": "VCID-a49c-fqrj-nbb3" }, { "vulnerability": "VCID-a563-vtwa-hkbr" }, { "vulnerability": "VCID-axaf-45kr-kbfe" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-ayw6-8pn4-17eb" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-bnne-7p2q-eqd2" }, { "vulnerability": "VCID-cm14-t8uv-k3es" }, { "vulnerability": "VCID-d8d1-sat6-muhe" }, { "vulnerability": "VCID-d99v-v9cj-zfh2" }, { "vulnerability": "VCID-dj88-f3p8-cfbn" }, { "vulnerability": "VCID-dm97-51uu-r7gw" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-e268-wagv-sbex" }, { "vulnerability": "VCID-e32h-8q61-hbgc" }, { "vulnerability": "VCID-eajg-ctpd-2bby" }, { "vulnerability": "VCID-ebpa-58em-wqam" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-f1rq-qudk-zkf2" }, { "vulnerability": "VCID-f4bv-pzdy-dfcb" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-he5m-6wj4-rbhc" }, { "vulnerability": "VCID-hhmn-yz5p-xkap" }, { "vulnerability": "VCID-k8af-cg9k-87a9" }, { "vulnerability": "VCID-kj9x-psfz-2ug1" }, { "vulnerability": "VCID-m7w6-b2xu-6uee" }, { "vulnerability": "VCID-mh4f-vtfj-hbb1" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-mud2-s4rc-fuf6" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n1cb-8py6-bbhu" }, { "vulnerability": "VCID-n78p-x7hh-gqcf" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-nubu-f1sc-gbes" }, { "vulnerability": "VCID-nxq4-m52q-yuh4" }, { "vulnerability": "VCID-p715-yexd-jfgc" }, { "vulnerability": "VCID-phgh-sd4m-zbdx" }, { "vulnerability": "VCID-pmzz-9rws-4ud5" }, { "vulnerability": "VCID-pss5-as4b-cyf2" }, { "vulnerability": "VCID-px44-19tj-h7aa" }, { "vulnerability": "VCID-q8hy-wjd9-nbgp" }, { "vulnerability": "VCID-qb4j-9tz7-m7a2" }, { "vulnerability": "VCID-qeus-f4wj-rubr" }, { "vulnerability": "VCID-qzyk-7877-27a3" }, { "vulnerability": "VCID-raxk-rm9v-hubn" }, { "vulnerability": "VCID-rdrs-mhaw-b3ge" }, { "vulnerability": "VCID-remd-55jh-r3g5" }, { "vulnerability": "VCID-rwqs-3ktq-qqbd" }, { "vulnerability": "VCID-s53a-f91p-huf4" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-sr3p-pdxy-4yhu" }, { "vulnerability": "VCID-stzu-sxe6-5yf5" }, { "vulnerability": "VCID-sw7v-fbjk-13hy" }, { "vulnerability": "VCID-swnc-ke6h-ekew" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-tnjd-pyys-akav" }, { "vulnerability": "VCID-tw1y-t4qj-j3d1" }, { "vulnerability": "VCID-u9bx-8e86-wbew" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vxry-uvph-kbfd" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-w13x-3rp9-wyej" }, { "vulnerability": "VCID-wea9-egep-h7g5" }, { "vulnerability": "VCID-wkm6-cgc8-bfa8" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xh7y-56vy-5ud8" }, { "vulnerability": "VCID-xtdg-uj46-rkcm" }, { "vulnerability": "VCID-xy6y-312d-rygj" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zkea-ge1t-z7gn" }, { "vulnerability": "VCID-zspb-bd6j-wyd2" }, { "vulnerability": "VCID-zw9b-6vkf-3fc6" }, { "vulnerability": "VCID-zwgt-rm1f-6bf2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/62519?format=api", "purl": "pkg:composer/typo3/cms-core@9.5.45", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4hsv-y3rz-e3a2" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.45" }, { "url": "http://public2.vulnerablecode.io/api/packages/37626?format=api", "purl": "pkg:composer/typo3/cms-core@10.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1yxw-saf5-wue7" }, { "vulnerability": "VCID-2mn6-mdmz-4yd9" }, { "vulnerability": "VCID-3n2r-awja-dug9" }, { "vulnerability": "VCID-4hsv-y3rz-e3a2" }, { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-4t9s-p25a-cfas" }, { "vulnerability": "VCID-543x-cnbz-1kb9" }, { "vulnerability": "VCID-58js-jzm4-4fc7" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5kzs-ex81-bbaj" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-5u4q-m66t-wqcj" }, { "vulnerability": "VCID-65ue-7jd9-23gf" }, { "vulnerability": "VCID-6a9t-8dmn-s3bv" }, { "vulnerability": "VCID-7kjw-j8st-mqfr" }, { "vulnerability": "VCID-8d2m-1ffv-jqe1" }, { "vulnerability": "VCID-8sdd-b1bn-cuhx" }, { "vulnerability": "VCID-a49c-fqrj-nbb3" }, { "vulnerability": "VCID-a89c-jvwa-6kh5" }, { "vulnerability": "VCID-av8u-rvzq-4fc7" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-cdjv-fp71-y3dv" }, { "vulnerability": "VCID-d8d1-sat6-muhe" }, { "vulnerability": "VCID-dhrm-uxuv-zfaj" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-e32h-8q61-hbgc" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-f963-qur3-2qb7" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gcnj-6qb6-pbgz" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-gyyu-n3b1-zbcj" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-he5m-6wj4-rbhc" }, { "vulnerability": "VCID-hhmn-yz5p-xkap" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-mud2-s4rc-fuf6" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-nubu-f1sc-gbes" }, { "vulnerability": "VCID-phgh-sd4m-zbdx" }, { "vulnerability": "VCID-qeus-f4wj-rubr" }, { "vulnerability": "VCID-qzyk-7877-27a3" }, { "vulnerability": "VCID-remd-55jh-r3g5" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-sw7v-fbjk-13hy" }, { "vulnerability": "VCID-swnc-ke6h-ekew" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-usmv-r64u-m7cb" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vwb2-a84s-5qak" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-w13x-3rp9-wyej" }, { "vulnerability": "VCID-xa4m-xpa9-v7h8" }, { "vulnerability": "VCID-xh7y-56vy-5ud8" }, { "vulnerability": "VCID-xy6y-312d-rygj" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zn99-ywte-33g6" }, { "vulnerability": "VCID-zwgt-rm1f-6bf2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@10.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/62520?format=api", "purl": "pkg:composer/typo3/cms-core@10.4.42", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4hsv-y3rz-e3a2" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@10.4.42" }, { "url": "http://public2.vulnerablecode.io/api/packages/37628?format=api", "purl": "pkg:composer/typo3/cms-core@11.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1r9g-c5rn-ukgb" }, { "vulnerability": "VCID-1yxw-saf5-wue7" }, { "vulnerability": "VCID-4hsv-y3rz-e3a2" }, { "vulnerability": "VCID-4jpa-6fqh-hbfg" }, { "vulnerability": "VCID-4t9s-p25a-cfas" }, { "vulnerability": "VCID-5jgb-dsyx-hyb4" }, { "vulnerability": "VCID-5paq-5frf-43ed" }, { "vulnerability": "VCID-65ue-7jd9-23gf" }, { "vulnerability": "VCID-6a9t-8dmn-s3bv" }, { "vulnerability": "VCID-8d2m-1ffv-jqe1" }, { "vulnerability": "VCID-8sdd-b1bn-cuhx" }, { "vulnerability": "VCID-a89c-jvwa-6kh5" }, { "vulnerability": "VCID-av8u-rvzq-4fc7" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-b6er-h7dm-3bev" }, { "vulnerability": "VCID-bajy-qbwq-fufn" }, { "vulnerability": "VCID-d8d1-sat6-muhe" }, { "vulnerability": "VCID-dhrm-uxuv-zfaj" }, { "vulnerability": "VCID-dsu7-jjjq-f3e1" }, { "vulnerability": "VCID-e32h-8q61-hbgc" }, { "vulnerability": "VCID-ekfd-wp8z-d7e1" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-gyyu-n3b1-zbcj" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-he5m-6wj4-rbhc" }, { "vulnerability": "VCID-mnz3-rj21-67ad" }, { "vulnerability": "VCID-mud2-s4rc-fuf6" }, { "vulnerability": "VCID-n15v-ta9h-6ffb" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-nubu-f1sc-gbes" }, { "vulnerability": "VCID-qeus-f4wj-rubr" }, { "vulnerability": "VCID-qzyk-7877-27a3" }, { "vulnerability": "VCID-remd-55jh-r3g5" }, { "vulnerability": "VCID-s55j-8hbt-akhn" }, { "vulnerability": "VCID-s64f-x81f-b7ce" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-t3jn-vwbx-u7cr" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-uyeu-a3xr-fkh4" }, { "vulnerability": "VCID-ve7g-8st5-wffb" }, { "vulnerability": "VCID-vwb2-a84s-5qak" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-w13x-3rp9-wyej" }, { "vulnerability": "VCID-xh7y-56vy-5ud8" }, { "vulnerability": "VCID-xy6y-312d-rygj" }, { "vulnerability": "VCID-y32z-2d3f-gkgw" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zn99-ywte-33g6" }, { "vulnerability": "VCID-zwgt-rm1f-6bf2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@11.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/62045?format=api", "purl": "pkg:composer/typo3/cms-core@11.5.24", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1r9g-c5rn-ukgb" }, { "vulnerability": "VCID-4hsv-y3rz-e3a2" }, { "vulnerability": "VCID-4t9s-p25a-cfas" }, { "vulnerability": "VCID-65ue-7jd9-23gf" }, { "vulnerability": "VCID-8d2m-1ffv-jqe1" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-gyyu-n3b1-zbcj" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-mud2-s4rc-fuf6" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-nubu-f1sc-gbes" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-xy6y-312d-rygj" }, { "vulnerability": "VCID-zn99-ywte-33g6" }, { "vulnerability": "VCID-zwgt-rm1f-6bf2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@11.5.24" }, { "url": "http://public2.vulnerablecode.io/api/packages/62521?format=api", "purl": "pkg:composer/typo3/cms-core@11.5.34", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1r9g-c5rn-ukgb" }, { "vulnerability": "VCID-4hsv-y3rz-e3a2" }, { "vulnerability": "VCID-4t9s-p25a-cfas" }, { "vulnerability": "VCID-65ue-7jd9-23gf" }, { "vulnerability": "VCID-8d2m-1ffv-jqe1" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-gyyu-n3b1-zbcj" }, { "vulnerability": "VCID-mud2-s4rc-fuf6" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-nubu-f1sc-gbes" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-xy6y-312d-rygj" }, { "vulnerability": "VCID-zwgt-rm1f-6bf2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@11.5.34" }, { "url": "http://public2.vulnerablecode.io/api/packages/55770?format=api", "purl": "pkg:composer/typo3/cms-core@12.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1r9g-c5rn-ukgb" }, { "vulnerability": "VCID-4hsv-y3rz-e3a2" }, { "vulnerability": "VCID-4t9s-p25a-cfas" }, { "vulnerability": "VCID-65ue-7jd9-23gf" }, { "vulnerability": "VCID-8d2m-1ffv-jqe1" }, { "vulnerability": "VCID-8sdd-b1bn-cuhx" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-gyyu-n3b1-zbcj" }, { "vulnerability": "VCID-h6y3-7gsq-skh2" }, { "vulnerability": "VCID-jxw7-skw6-q7bg" }, { "vulnerability": "VCID-mud2-s4rc-fuf6" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-nubu-f1sc-gbes" }, { "vulnerability": "VCID-qeus-f4wj-rubr" }, { "vulnerability": "VCID-qzyk-7877-27a3" }, { "vulnerability": "VCID-t1n7-eswt-73gw" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-vyvy-y3cw-hbgr" }, { "vulnerability": "VCID-w13x-3rp9-wyej" }, { "vulnerability": "VCID-xy6y-312d-rygj" }, { "vulnerability": "VCID-zdq2-dhb2-6kaq" }, { "vulnerability": "VCID-zn99-ywte-33g6" }, { "vulnerability": "VCID-zwgt-rm1f-6bf2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@12.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/62522?format=api", "purl": "pkg:composer/typo3/cms-core@12.4.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1r9g-c5rn-ukgb" }, { "vulnerability": "VCID-4hsv-y3rz-e3a2" }, { "vulnerability": "VCID-4t9s-p25a-cfas" }, { "vulnerability": "VCID-65ue-7jd9-23gf" }, { "vulnerability": "VCID-8d2m-1ffv-jqe1" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-gyyu-n3b1-zbcj" }, { "vulnerability": "VCID-jxw7-skw6-q7bg" }, { "vulnerability": "VCID-mud2-s4rc-fuf6" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-nubu-f1sc-gbes" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-xy6y-312d-rygj" }, { "vulnerability": "VCID-zwgt-rm1f-6bf2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@12.4.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/52872?format=api", "purl": "pkg:composer/typo3/cms-core@13.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1r9g-c5rn-ukgb" }, { "vulnerability": "VCID-4hsv-y3rz-e3a2" }, { "vulnerability": "VCID-4t9s-p25a-cfas" }, { "vulnerability": "VCID-65ue-7jd9-23gf" }, { "vulnerability": "VCID-8d2m-1ffv-jqe1" }, { "vulnerability": "VCID-axvk-13qf-tka7" }, { "vulnerability": "VCID-g4uc-qeb6-myed" }, { "vulnerability": "VCID-gv1b-xtv4-4yg3" }, { "vulnerability": "VCID-gyyu-n3b1-zbcj" }, { "vulnerability": "VCID-jxw7-skw6-q7bg" }, { "vulnerability": "VCID-mud2-s4rc-fuf6" }, { "vulnerability": "VCID-n7ng-zkkb-2qaz" }, { "vulnerability": "VCID-nubu-f1sc-gbes" }, { "vulnerability": "VCID-qeus-f4wj-rubr" }, { "vulnerability": "VCID-qzyk-7877-27a3" }, { "vulnerability": "VCID-taj6-zj2n-5kg8" }, { "vulnerability": "VCID-xy6y-312d-rygj" }, { "vulnerability": "VCID-yxy9-ngwb-6qdm" }, { "vulnerability": "VCID-zwgt-rm1f-6bf2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@13.0.0" } ], "references": [ { "reference_url": "http://packetstormsecurity.com/files/176274/TYPO3-11.5.24-Path-Traversal.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" }, { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://packetstormsecurity.com/files/176274/TYPO3-11.5.24-Path-Traversal.html" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-30451", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00403", "scoring_system": "epss", "scoring_elements": "0.60975", "published_at": "2026-05-12T12:55:00Z" }, { "value": "0.00403", "scoring_system": "epss", "scoring_elements": "0.60854", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00403", "scoring_system": "epss", "scoring_elements": "0.60883", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00403", "scoring_system": "epss", "scoring_elements": "0.60847", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00403", "scoring_system": "epss", "scoring_elements": "0.60896", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00403", "scoring_system": "epss", "scoring_elements": "0.60912", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00403", "scoring_system": "epss", "scoring_elements": "0.60933", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00403", "scoring_system": "epss", "scoring_elements": "0.6092", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00403", "scoring_system": "epss", "scoring_elements": "0.60901", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00403", "scoring_system": "epss", "scoring_elements": "0.60943", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00403", "scoring_system": "epss", "scoring_elements": "0.60948", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00403", "scoring_system": "epss", "scoring_elements": "0.60924", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.00403", "scoring_system": "epss", "scoring_elements": "0.60936", "published_at": "2026-04-26T12:55:00Z" }, { "value": "0.00403", "scoring_system": "epss", "scoring_elements": "0.60929", "published_at": "2026-04-29T12:55:00Z" }, { "value": "0.00403", "scoring_system": "epss", "scoring_elements": "0.60878", "published_at": "2026-05-05T12:55:00Z" }, { "value": "0.00403", "scoring_system": "epss", "scoring_elements": "0.60926", "published_at": "2026-05-07T12:55:00Z" }, { "value": "0.00403", "scoring_system": "epss", "scoring_elements": "0.60986", "published_at": "2026-05-09T12:55:00Z" }, { "value": "0.00403", "scoring_system": "epss", "scoring_elements": "0.60949", "published_at": "2026-05-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-30451" }, { "reference_url": "https://github.com/TYPO3-CMS/core", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3-CMS/core" }, { "reference_url": "https://github.com/TYPO3/typo3", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3/typo3" }, { "reference_url": "https://github.com/TYPO3/typo3/commit/205115cca3d67594a12d0195c937da0e51eb494a", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3/typo3/commit/205115cca3d67594a12d0195c937da0e51eb494a" }, { "reference_url": "https://github.com/TYPO3/typo3/commit/78fb9287a2f0487c39288070cb0493a5265f1789", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3/typo3/commit/78fb9287a2f0487c39288070cb0493a5265f1789" }, { "reference_url": "https://github.com/TYPO3/typo3/commit/accf537c7379b4359bc0f957c4d0c07baddd710a", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3/typo3/commit/accf537c7379b4359bc0f957c4d0c07baddd710a" }, { "reference_url": "https://github.com/TYPO3/typo3/security/advisories/GHSA-w6x2-jg8h-p6mp", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3/typo3/security/advisories/GHSA-w6x2-jg8h-p6mp" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-30451", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" }, { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-30451" }, { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2024-001", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://typo3.org/security/advisory/typo3-core-sa-2024-001" }, { "reference_url": "https://github.com/advisories/GHSA-3gjc-mp82-fj4q", "reference_id": "GHSA-3gjc-mp82-fj4q", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-3gjc-mp82-fj4q" }, { "reference_url": "https://github.com/advisories/GHSA-w6x2-jg8h-p6mp", "reference_id": "GHSA-w6x2-jg8h-p6mp", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-w6x2-jg8h-p6mp" } ], "weaknesses": [ { "cwe_id": 22, "name": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", "description": "The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory." }, { "cwe_id": 1035, "name": "OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017." }, { "cwe_id": 937, "name": "OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013." } ], "exploits": [], "severity_range_score": "4.0 - 6.9", "exploitability": "0.5", "weighted_severity": "6.2", "risk_score": 3.1, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-4hsv-y3rz-e3a2" }