Search for packages
| purl | pkg:composer/typo3/cms@9.5.28 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 2.8 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-c5c9-8c6m-727v
Aliases: CVE-2021-32768 |
Cross-Site Scripting via Rich-Text Content > ### Meta > * CVSS: `CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:F/RL:O/RC` (5.7) ### Problem Failing to properly parse, sanitize … |
Vulnerable |
|
CVE-2021-32768
Aliases: GHSA-c5c9-8c6m-727v |
Cross-site Scripting TYPO3 is an open source PHP based web content management system released under the GNU GPL. sanitize and … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2021-32667
Aliases: GHSA-8mq9-fqv8-59wf |
Cross-site Scripting TYPO3 contains a cross-site scripting vulnerability. When `_Page` `TSconfig_` settings are not properly encoded, corresponding page preview module … |
Vulnerable Vulnerable |
|
CVE-2021-32669
Aliases: GHSA-rgcg-28xm-8mmw |
Cross-site Scripting TYPO3 contains a cross-site scripting vulnerability. When settings for `_backend layouts_` are not properly encoded, the corresponding grid … |
Vulnerable Vulnerable |
|
CVE-2021-32668
Aliases: GHSA-6mh3-j5r5-2379 |
Cross-site Scripting TYPO3 contains a cross-site scripting vulnerability. When error messages are not properly encoded, the components `_QueryGenerator_` and `_QueryView_` … |
Vulnerable Vulnerable |
|
CVE-2022-23501
Aliases: GHSA-jfp7-79g7-89rf |
TYPO3 is an open source PHP based web content management system. In versions prior to 8.7.49, 9.5.38, 10.4.33, 11.5.20, and … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2022-36107
Aliases: GHSA-9c6w-55cp-5w25 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') TYPO3 is an open source PHP based web content management … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2022-23503
Aliases: GHSA-c5wx-6c2c-f7rm |
Improper Control of Generation of Code ('Code Injection') TYPO3 is an open source PHP based web content management system. Versions … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2022-23500
Aliases: GHSA-8c28-5mp7-v24h |
Uncontrolled Recursion TYPO3 is an open source PHP based web content management system. In versions prior to 9.5.38, 10.4.33, 11.5.20, … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2022-31047
Aliases: GHSA-fh99-4pgr-8j99 |
Insertion of Sensitive Information into Log File TYPO3 is an open source web content management system. Prior to versions 7.6.57 … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2023-24814
Aliases: GHSA-r4f8-f93x-5qh3 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') TYPO3 is a free and open source Content Management Framework … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2022-36105
Aliases: GHSA-m392-235j-9r7r |
Observable Discrepancy TYPO3 is an open source PHP based web content management system released under the GNU GPL. It has … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
GHSA-jg55-3q6h-2ccf
Aliases: CVE-2009-0816 |
Typo3 Backend XSS Vulnerability An Information Disclosure vulnerability in jumpUrl mechanism, used to track access on web pages and provided … | There are no reported fixed by versions. |
| Advisory | Summary | Aliases |
|---|---|---|
|
GHSA-8mq9-fqv8-59wf
|
Cross-Site Scripting in Page Preview > ### Meta > * CVSS: `CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N/E:F/RL:O/RC` (5.0) ### Problem Failing to properly encode _Page … |
CVE-2021-32667
|
|
GHSA-rgcg-28xm-8mmw
|
Cross-Site Scripting in Backend Grid View ### Problem Failing to properly encode settings for _backend layouts_, the corresponding grid view … |
CVE-2021-32669
|
|
GHSA-34fr-fhqr-7235
|
Information Disclosure in User Authentication > ### Meta > * CVSS: `AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C` (4.9) ### Problem It has been discovered that … |
CVE-2021-32767
|
|
GHSA-6mh3-j5r5-2379
|
Cross-Site Scripting in Query Generator & Query View > ### Meta > * CVSS: `CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N/E:F/RL:O/RC:C` (4.5) ### Problem Failing to … |
CVE-2021-32668
|
|
CVE-2021-32767
|
Inclusion of Sensitive Information in Log Files TYPO3 is an open source PHP based web content management system. User credentials … |
GHSA-34fr-fhqr-7235
|