Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/typo3/cms-core@11.5.16
purl pkg:composer/typo3/cms-core@11.5.16
Next non-vulnerable version 13.4.34
Latest non-vulnerable version 14.3.6
Risk score 4.0
Vulnerabilities affecting this package (50)
Advisory Summary Fixed in package version
GHSA-mgj2-q8wp-29rr
Aliases:
CVE-2022-23502
GMS-2022-8135
TYPO3 CMS vulnerable to Insufficient Session Expiration after Password Reset ### Problem When users reset their password using the corresponding …
11.5.20
Vulnerable
GHSA-8c28-5mp7-v24h
Aliases:
CVE-2022-23500
TYPO3 CMS vulnerable to Denial of Service in Page Error Handling ### Problem Requesting invalid or non-existing resources via HTTP …
11.5.20
Vulnerable
GHSA-8w3p-qh3x-6gjr
Aliases:
CVE-2022-23504
TYPO3 CMS vulnerable to Sensitive Information Disclosure via YAML Placeholder Expressions in Site Configuration > ### CVSS: `CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:L/E:F/RL:O/RC:C` (5.3) ### …
11.5.20
Vulnerable
GHSA-jfp7-79g7-89rf
Aliases:
CVE-2022-23501
TYPO3 CMS vulnerable to Weak Authentication in Frontend Login ### Problem Restricting frontend login to specific users, organized in different …
11.5.20
Vulnerable
GHSA-c5wx-6c2c-f7rm
Aliases:
CVE-2022-23503
TYPO3 CMS vulnerable to Arbitrary Code Execution via Form Framework ### Problem Due to the lack of separating user-submitted data …
11.5.20
Vulnerable
GHSA-r4f8-f93x-5qh3
Aliases:
CVE-2023-24814
TYPO3 is vulnerable to Cross-Site Scripting via frontend rendering > ### CVSS: `CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L/E:F/RL:O/RC:C` (8.2) ### Problem TYPO3 core component `GeneralUtility::getIndpEnv()` …
11.5.23
Vulnerable
GHSA-jq6g-4v5m-wm9r
Aliases:
CVE-2023-38499
Information Disclosure due to Out-of-scope Site Resolution > ### CVSS: `CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:F/RL:O/RC:C` (3.5) ### Problem In multi-site scenarios, enumerating the HTTP …
11.5.30
Vulnerable
GHSA-hwvq-2w67-rvxp
Aliases:
CVE-2026-47346
TYPO3 CMS has Broken Access Control in its Form Framework ### Problem Backend users with file write permissions were able … There are no reported fixed by versions.
GHSA-pjpj-v387-x4vq
Aliases:
CVE-2026-11607
TYPO3 CMS has Broken Access Control in its Form Framework ### Problem Backend users with access to the Form Framework … There are no reported fixed by versions.
GHSA-3v8v-4wg6-r7qh
Aliases:
CVE-2026-47343
TYPO3 CMS: Destructive Actions on File Mount Folders ### Problem Non-privileged backend users with file mount access were able to … There are no reported fixed by versions.
GHSA-chm7-4vch-h8vr
Aliases:
CVE-2026-49742
TYPO3 CMS has Broken Access Control in its Media Module ### Problem Backend users with file download permissions were able … There are no reported fixed by versions.
GHSA-f34x-rx2w-7pm3
Aliases:
CVE-2026-47349
TYPO3 CMS has Broken Access Control in the Recycler Module ### Problem Backend users with access to the Recycler module … There are no reported fixed by versions.
GHSA-3p42-w5ch-gg42
Aliases:
CVE-2026-47347
TYPO3 CMS has an Open Redirect Vulnerability via Core Utilities ### Problem Applications that use `GeneralUtility::sanitizeLocalUrl` to allow only local … There are no reported fixed by versions.
GHSA-2j54-93q2-3hjq
Aliases:
CVE-2026-47352
TYPO3 CMS has Broken Access Control in Backend API ### Problem Authenticated backend users were able to retrieve file metadata … There are no reported fixed by versions.
GHSA-c78m-c52x-jgwp
Aliases:
CVE-2026-49740
TYPO3 CMS has Insecure Deserialization via Core API ### Problem TYPO3's cache frontend (`VariableFrontend`) and persistent key-value store (`Registry`) deserialized … There are no reported fixed by versions.
GHSA-q93m-25xv-94hh
Aliases:
CVE-2026-47351
TYPO3 CMS: Broken Access Control in Media Module ### Problem Backend users were able to insert arbitrary records and files … There are no reported fixed by versions.
GHSA-jf56-v8jc-jcc5
Aliases:
CVE-2026-49738
TYPO3 CMS has Broken Access Control in its File Abstraction Layer ### Problem The path allowance check in `GeneralUtility::isAllowedAbsPath()` performed … There are no reported fixed by versions.
CVE-2025-47937
Aliases:
GHSA-x8pv-fgxp-8v3x
TYPO3 Allows Information Disclosure via DBAL Restriction Handling ### Problem When performing a database query involving multiple tables through the …
12.4.31
Vulnerable
13.4.12
Vulnerable
CVE-2023-38499
Aliases:
GHSA-jq6g-4v5m-wm9r
Improper Access Control TYPO3 is an open source PHP based web content management system. Starting in version 9.4.0 and prior …
12.4.4
Vulnerable
11.5.30
Vulnerable
12.4.4
Vulnerable
11.5.30
Vulnerable
CVE-2022-23501
Aliases:
GHSA-jfp7-79g7-89rf
GMS-2022-8134
TYPO3 is an open source PHP based web content management system. In versions prior to 8.7.49, 9.5.38, 10.4.33, 11.5.20, and …
10.4.33
Vulnerable
11.5.20
Vulnerable
12.1.1
Vulnerable
10.4.33
Vulnerable
11.5.20
Vulnerable
12.1.1
Vulnerable
CVE-2025-47940
Aliases:
GHSA-6frx-j292-c844
TYPO3 Allows Privilege Escalation to System Maintainer ### Problem Administrator-level backend users without system maintainer privileges can escalate their privileges …
12.4.31
Vulnerable
13.4.12
Vulnerable
12.4.31
Vulnerable
13.4.12
Vulnerable
CVE-2025-47939
Aliases:
GHSA-9hq9-cr36-4wpj
TYPO3 Allows Unrestricted File Upload in File Abstraction Layer ### Problem By design, the file management module in TYPO3’s backend …
12.4.31
Vulnerable
13.4.12
Vulnerable
12.4.31
Vulnerable
13.4.12
Vulnerable
CVE-2022-23503
Aliases:
GHSA-c5wx-6c2c-f7rm
GMS-2022-8132
Improper Control of Generation of Code ('Code Injection') TYPO3 is an open source PHP based web content management system. Versions …
10.4.33
Vulnerable
11.5.20
Vulnerable
12.1.1
Vulnerable
10.4.33
Vulnerable
11.5.20
Vulnerable
12.1.1
Vulnerable
CVE-2024-34358
Aliases:
GHSA-36g8-62qv-5957
TYPO3 vulnerable to an Uncontrolled Resource Consumption in the ShowImageController ### Problem The `ShowImageController` (_eID tx_cms_showpic_) lacks a cryptographic HMAC-signature …
11.5.37
Vulnerable
12.4.15
Vulnerable
13.1.1
Vulnerable
11.5.37
Vulnerable
12.4.15
Vulnerable
13.1.1
Vulnerable
CVE-2024-55892
Aliases:
GHSA-2fx5-pggv-6jjr
TYPO3 Potential Open Redirect via Parsing Differences ### Problem Applications that use `TYPO3\CMS\Core\Http\Uri` to parse externally provided URLs (e.g., via …
12.4.25
Vulnerable
13.4.3
Vulnerable
12.4.25
Vulnerable
13.4.3
Vulnerable
CVE-2022-23500
Aliases:
GHSA-8c28-5mp7-v24h
GMS-2022-8130
Uncontrolled Recursion TYPO3 is an open source PHP based web content management system. In versions prior to 9.5.38, 10.4.33, 11.5.20, …
10.4.33
Vulnerable
11.5.20
Vulnerable
10.4.33
Vulnerable
11.5.20
Vulnerable
CVE-2024-22188
Aliases:
GHSA-5w2h-59j3-8x5w
TYPO3 Install Tool vulnerable to Code Execution ### Problem Several settings in the Install Tool for configuring the path to …
11.5.35
Vulnerable
12.4.11
Vulnerable
13.0.1
Vulnerable
11.5.35
Vulnerable
12.4.11
Vulnerable
13.0.1
Vulnerable
CVE-2024-34357
Aliases:
GHSA-hw6c-6gwq-3m3m
TYPO3 vulnerable to Cross-Site Scripting in the ShowImageController ### Problem Failing to properly encode user-controlled values in file entities, the …
11.5.37
Vulnerable
12.4.15
Vulnerable
13.1.1
Vulnerable
11.5.37
Vulnerable
12.4.15
Vulnerable
13.1.1
Vulnerable
CVE-2026-0859
Aliases:
GHSA-7vp9-x248-9vr9
TYPO3 CMS Allows Insecure Deserialization via Mailer File Spool ### Problem Local platform users who can write to TYPO3’s mail‑file …
12.4.41
Vulnerable
14.0.2
Vulnerable
13.4.23
Vulnerable
12.4.41
Vulnerable
14.0.2
Vulnerable
13.4.23
Vulnerable
CVE-2023-24814
Aliases:
GHSA-r4f8-f93x-5qh3
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') TYPO3 is a free and open source Content Management Framework …
12.2.0
Vulnerable
11.5.23
Vulnerable
10.4.36
Vulnerable
12.2.0
Vulnerable
11.5.23
Vulnerable
10.4.36
Vulnerable
CVE-2024-34356
Aliases:
GHSA-v6mw-h7w6-59w3
TYPO3 vulnerable to Cross-Site Scripting in the Form Manager Module ### Problem The form manager backend module is vulnerable to …
11.5.37
Vulnerable
12.4.15
Vulnerable
13.1.1
Vulnerable
11.5.37
Vulnerable
12.4.15
Vulnerable
13.1.1
Vulnerable
CVE-2025-47938
Aliases:
GHSA-3jrg-97f3-rqh9
TYPO3 Unverified Password Change for Backend Users ### Problem The backend user management interface allows password changes without requiring the …
12.4.31
Vulnerable
13.4.12
Vulnerable
12.4.31
Vulnerable
13.4.12
Vulnerable
GHSA-3jrg-97f3-rqh9
Aliases:
CVE-2025-47938
TYPO3 Unverified Password Change for Backend Users ### Problem The backend user management interface allows password changes without requiring the …
12.4.31
Vulnerable
13.4.12
Vulnerable
GHSA-6frx-j292-c844
Aliases:
CVE-2025-47940
TYPO3 Allows Privilege Escalation to System Maintainer ### Problem Administrator-level backend users without system maintainer privileges can escalate their privileges …
12.4.31
Vulnerable
13.4.12
Vulnerable
GHSA-9hq9-cr36-4wpj
Aliases:
CVE-2025-47939
TYPO3 Allows Unrestricted File Upload in File Abstraction Layer ### Problem By design, the file management module in TYPO3’s backend …
12.4.31
Vulnerable
13.4.12
Vulnerable
GHSA-x8pv-fgxp-8v3x
Aliases:
CVE-2025-47937
TYPO3 Allows Information Disclosure via DBAL Restriction Handling ### Problem When performing a database query involving multiple tables through the …
12.4.31
Vulnerable
13.4.12
Vulnerable
GHSA-2fx5-pggv-6jjr
Aliases:
CVE-2024-55892
TYPO3 Potential Open Redirect via Parsing Differences ### Problem Applications that use `TYPO3\CMS\Core\Http\Uri` to parse externally provided URLs (e.g., via …
12.4.25
Vulnerable
13.4.3
Vulnerable
GHSA-72jf-5fg5-3cw3
Aliases:
CVE-2025-59013
TYPO3 CMS has an open‑redirect vulnerability An open‑redirect vulnerability in GeneralUtility::sanitizeLocalUrl of TYPO3 CMS 9.0.0–9.5.54, 10.0.0–10.4.53, 11.0.0–11.5.47, 12.0.0–12.4.36, and 13.0.0–13.4.17 …
12.4.37
Vulnerable
12.4.37
Vulnerable
GHSA-cvm2-5f78-g9m8
Aliases:
CVE-2025-59016
TYPO3 CMS exposes sensitive information in an error message Error messages containing sensitive information in the File Abstraction Layer in …
12.4.37
Vulnerable
12.4.37
Vulnerable
GHSA-5w2h-59j3-8x5w
Aliases:
CVE-2024-22188
TYPO3 Install Tool vulnerable to Code Execution ### Problem Several settings in the Install Tool for configuring the path to …
11.5.35
Vulnerable
12.4.11
Vulnerable
11.5.35
Vulnerable
GHSA-wf85-8hx9-gj7c
Aliases:
CVE-2024-25120
TYPO3 vulnerable to Improper Access Control of Resources Referenced by t3:// URI Scheme ### Problem The TYPO3-specific [`t3://` URI scheme](https://docs.typo3.org/m/typo3/reference-typoscript/main/en-us/Functions/Typolink.html#resource-references) …
11.5.35
Vulnerable
12.4.11
Vulnerable
11.5.35
Vulnerable
GHSA-h47m-3f78-qp9g
Aliases:
CVE-2024-25119
TYPO3 Install Tool vulnerable to Information Disclosure of Encryption Key ### Problem The plaintext value of `$GLOBALS['SYS']['encryptionKey']` was displayed in …
11.5.35
Vulnerable
12.4.11
Vulnerable
11.5.35
Vulnerable
GHSA-w6x2-jg8h-p6mp
Aliases:
CVE-2023-30451
Path Traversal in TYPO3 File Abstraction Layer Storages ### Problem Configurable storages using the local driver of the File Abstraction …
11.5.35
Vulnerable
12.4.11
Vulnerable
11.5.35
Vulnerable
GHSA-38r2-5695-334w
Aliases:
CVE-2024-25118
TYPO3 Backend Forms vulnerable to Information Disclosure of Hashed Passwords ### Problem Password hashes were being reflected in the editing …
11.5.35
Vulnerable
12.4.11
Vulnerable
11.5.35
Vulnerable
GHSA-rj3x-wvc6-5j66
Aliases:
CVE-2024-25121
TYPO3 vulnerable to Improper Access Control Persisting File Abstraction Layer Entities via Data Handler ### Problem Entities of the File …
11.5.35
Vulnerable
12.4.11
Vulnerable
11.5.35
Vulnerable
GHSA-36g8-62qv-5957
Aliases:
CVE-2024-34358
TYPO3 vulnerable to an Uncontrolled Resource Consumption in the ShowImageController ### Problem The `ShowImageController` (_eID tx_cms_showpic_) lacks a cryptographic HMAC-signature …
11.5.37
Vulnerable
12.4.15
Vulnerable
13.1.1
Vulnerable
11.5.37
Vulnerable
GHSA-hw6c-6gwq-3m3m
Aliases:
CVE-2024-34357
TYPO3 vulnerable to Cross-Site Scripting in the ShowImageController ### Problem Failing to properly encode user-controlled values in file entities, the …
11.5.37
Vulnerable
12.4.15
Vulnerable
13.1.1
Vulnerable
11.5.37
Vulnerable
GHSA-v6mw-h7w6-59w3
Aliases:
CVE-2024-34356
TYPO3 vulnerable to Cross-Site Scripting in the Form Manager Module ### Problem The form manager backend module is vulnerable to …
11.5.37
Vulnerable
12.4.15
Vulnerable
13.1.1
Vulnerable
11.5.37
Vulnerable
GHSA-3vmm-7h4j-69rm
Aliases:
CVE-2023-47127
TYPO3 vulnerable to Weak Authentication in Session Handling > ### CVSS: `CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N/E:X/RL:O/RC:C` (4.0) ### Problem Given that there are at …
11.5.33
Vulnerable
12.4.8
Vulnerable
11.5.33
Vulnerable
GHSA-7vp9-x248-9vr9
Aliases:
CVE-2026-0859
TYPO3 CMS Allows Insecure Deserialization via Mailer File Spool ### Problem Local platform users who can write to TYPO3’s mail‑file …
14.0.2
Vulnerable
13.4.23
Vulnerable
12.4.41
Vulnerable
Vulnerabilities fixed by this package (11)

Advisory Summary Aliases
GHSA-m392-235j-9r7r
TYPO3 CMS vulnerable to User Enumeration via Response Timing > ### Meta > * CVSS: `CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:F/RL:O/RC:C` (4.9) ### Problem It … CVE-2022-36105
GHSA-5959-4x58-r8c2
TYPO3 CMS missing check for expiration time of password reset token for backend users > ### Meta > * CVSS: … CVE-2022-36106
GHSA-47m6-46mj-p235
TYPO3 HTML Sanitizer Bypasses Cross-Site Scripting Protection > ### Meta > * CVSS: `CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:F/RL:O/RC:C` (5.7) ### Problem Due to a … CVE-2022-36020
GHSA-9c6w-55cp-5w25
TYPO3 CMS Stored Cross-Site Scripting via FileDumpController > ### Meta > * CVSS: `CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N/E:F/RL:O/RC:C` (5.0) ### Problem It has been … CVE-2022-36107
GHSA-fv2m-9249-qx85
TYPO3 CMS vulnerable to Cross-Site Scripting in <f:asset.css> view helper > ### Meta > * CVSS: `CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N/E:F/RL:O/RC:C` (4.1) ### Problem … CVE-2022-36108
GHSA-fffr-7x4x-f98q
TYPO3 CMS vulnerable to Denial of Service in Page Error Handling > ### Meta > * CVSS: `CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:F/RL:O/RC:C` (5.5) ### … CVE-2022-36104
CVE-2022-36108
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') TYPO3 is an open source PHP based web content management … GHSA-fv2m-9249-qx85
CVE-2022-36107
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') TYPO3 is an open source PHP based web content management … GHSA-9c6w-55cp-5w25
CVE-2022-36106
Improper Authentication TYPO3 is an open source PHP based web content management system released under the GNU GPL. It has … GHSA-5959-4x58-r8c2
CVE-2022-36105
Observable Discrepancy TYPO3 is an open source PHP based web content management system released under the GNU GPL. It has … GHSA-m392-235j-9r7r
GHSA-gqqf-g5r7-84vf
TYPO3 HTML Sanitizer Bypasses Cross-Site Scripting Protection > ### Meta > * CVSS: `CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:F/RL:O/RC:C` (5.7) ### Problem Due to a … GMS-2022-4096