Search for packages
Package details: pkg:composer/typo3/cms@7.0.0%2Balpha
purl pkg:composer/typo3/cms@7.0.0%2Balpha
Tags Ghost
Next non-vulnerable version 10.4.35
Latest non-vulnerable version 12.2.0
Risk
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-f6sb-d831-u3fh
Aliases:
TYPO3-CORE-SA-2016-021
Failing to properly encode user input, the page module is vulnerable to Cross-Site Scripting. A valid backend user account with permissions to edit plugins is needed to exploit this vulnerability.
7.6.11
Affected by 52 other vulnerabilities.
8.0.0
Affected by 122 other vulnerabilities.
8.3.1
Affected by 98 other vulnerabilities.
VCID-ky6n-ka2n-ayhu
Aliases:
TYPO3-CORE-SA-2016-022
Cache Flooding in Frontend Links with a valid cHash argument lead to newly generated page cache entries. Because the cHash is not bound to a specific page, attackers could use valid cHash arguments for multiple pages, leading to additional useless page cache entries. Depending on the number of pages in the system and the number of available valid links with a cHash, attackers could add a considerable amount of additional cache entries, which in the end exceed storage limits and thus could lead to the system not responding any more. This means the Cache Flooding attack potentially could lead to a successful Denial of Service (DoS) attack.
7.6.11
Affected by 52 other vulnerabilities.
8.0.0
Affected by 122 other vulnerabilities.
8.3.1
Affected by 98 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-07-01T18:10:15.734850+00:00 GitLab Importer Affected by VCID-f6sb-d831-u3fh https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms/TYPO3-CORE-SA-2016-021.yml 36.1.3
2025-07-01T18:10:15.708267+00:00 GitLab Importer Affected by VCID-ky6n-ka2n-ayhu https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms/TYPO3-CORE-SA-2016-022.yml 36.1.3