Vulnerabilities affecting this package (0)
| Vulnerability |
Summary |
Fixed by |
|
This package is not known to be affected by vulnerabilities.
|
Vulnerabilities fixed by this package (4)
| Vulnerability |
Summary |
Aliases |
|
VCID-5b39-566a-63b7
|
TYPO3 Information Disclosure Vulnerability
TYPO3 7.6.15 sends an http request to an index.php?loginProvider URI in cases with an https Referer, which allows remote attackers to obtain sensitive cleartext information by sniffing the network and reading the userident and username fields.
|
CVE-2017-6370
GHSA-87hc-phmj-rhgh
|
|
VCID-7yrw-wj9m-hkd4
|
Cross-site Scripting
XSS in TYPO3 CMS.
|
2017-02-28-2
|
|
VCID-a6c5-ytdy-3qh4
|
Cross-Site Scripting in TYPO3 CMS
Failing to properly encode user input, several places of the TYPO3 CMS are vulnerable to Cross-Site Scripting.
|
GHSA-5gr6-97fv-52cc
|
|
VCID-hwcz-r4cu-9fba
|
XSS Vulnerability
TYPO3 is vulnerable to Cross-Site Scripting.
|
TYPO3-CORE-SA-2017-003
|