Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/typo3/cms-core@10.4.44
purl pkg:composer/typo3/cms-core@10.4.44
Tags Ghost
Next non-vulnerable version 13.4.34
Latest non-vulnerable version 14.3.6
Risk score 2.5
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-36g8-62qv-5957
Aliases:
CVE-2024-34358
TYPO3 vulnerable to an Uncontrolled Resource Consumption in the ShowImageController ### Problem The `ShowImageController` (_eID tx_cms_showpic_) lacks a cryptographic HMAC-signature … There are no reported fixed by versions.
GHSA-hw6c-6gwq-3m3m
Aliases:
CVE-2024-34357
TYPO3 vulnerable to Cross-Site Scripting in the ShowImageController ### Problem Failing to properly encode user-controlled values in file entities, the … There are no reported fixed by versions.
GHSA-v6mw-h7w6-59w3
Aliases:
CVE-2024-34356
TYPO3 vulnerable to Cross-Site Scripting in the Form Manager Module ### Problem The form manager backend module is vulnerable to … There are no reported fixed by versions.
This package is not known to fix any advisories.