Search for packages
purl | pkg:composer/typo3/cms@7.6.15 |
Vulnerability | Summary | Fixed by |
---|---|---|
VCID-5b39-566a-63b7
Aliases: CVE-2017-6370 GHSA-87hc-phmj-rhgh |
TYPO3 Information Disclosure Vulnerability TYPO3 7.6.15 sends an http request to an index.php?loginProvider URI in cases with an https Referer, which allows remote attackers to obtain sensitive cleartext information by sniffing the network and reading the userident and username fields. |
Affected by 0 other vulnerabilities. |
Vulnerability | Summary | Aliases |
---|---|---|
VCID-2m7w-zfua-u7b9 | TYPO3 Remote Code Execution in third party library swiftmailer TYPO3 uses the package swiftmailer/swiftmailer for mail actions. This package is known to be vulnerable to Remote Code Execution. |
GHSA-g4pf-3jvq-2gcw
|
VCID-htsn-wq8h-qbgp | Code Injection Remote Code Execution in third party library swiftmailer. |
2017-01-03-1
|