Search for packages
Package details: pkg:composer/typo3/cms@4.0.13
purl pkg:composer/typo3/cms@4.0.13
Tags Ghost
Next non-vulnerable version 10.4.35
Latest non-vulnerable version 12.2.0
Risk 3.1
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-2kvs-ma3p-kkht
Aliases:
CVE-2009-3635
GHSA-hwrc-w5gg-f335
TYPO3 Install Tool Subcomponent Allows Access Using Only a Password's MD5 Hash as a Credential The Install Tool subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2.10, and 4.3.x before 4.3beta2 allows remote attackers to gain access by using only the password's md5 hash as a credential.
4.1.13
Affected by 0 other vulnerabilities.
4.2.10
Affected by 0 other vulnerabilities.
4.3.0-beta2
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-07-01T18:13:06.181427+00:00 GitLab Importer Affected by VCID-2kvs-ma3p-kkht https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms/CVE-2009-3635.yml 36.1.3
2025-07-01T14:31:51.861412+00:00 GHSA Importer Affected by VCID-2kvs-ma3p-kkht https://github.com/advisories/GHSA-hwrc-w5gg-f335 36.1.3