VulnerableCode Package Details - pkg:composer/typo3/cms-core@11.5.18

Vulnerabilities affecting this package (50)

Advisory	Summary	Fixed in package version
GHSA-mgj2-q8wp-29rr Aliases: CVE-2022-23502 GMS-2022-8135	TYPO3 CMS vulnerable to Insufficient Session Expiration after Password Reset ### Problem When users reset their password using the corresponding …	11.5.20 Vulnerable
GHSA-8c28-5mp7-v24h Aliases: CVE-2022-23500	TYPO3 CMS vulnerable to Denial of Service in Page Error Handling ### Problem Requesting invalid or non-existing resources via HTTP …	11.5.20 Vulnerable
GHSA-8w3p-qh3x-6gjr Aliases: CVE-2022-23504	TYPO3 CMS vulnerable to Sensitive Information Disclosure via YAML Placeholder Expressions in Site Configuration > ### CVSS: `CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:L/E:F/RL:O/RC:C` (5.3) ### …	11.5.20 Vulnerable
GHSA-jfp7-79g7-89rf Aliases: CVE-2022-23501	TYPO3 CMS vulnerable to Weak Authentication in Frontend Login ### Problem Restricting frontend login to specific users, organized in different …	11.5.20 Vulnerable
GHSA-c5wx-6c2c-f7rm Aliases: CVE-2022-23503	TYPO3 CMS vulnerable to Arbitrary Code Execution via Form Framework ### Problem Due to the lack of separating user-submitted data …	11.5.20 Vulnerable
GHSA-r4f8-f93x-5qh3 Aliases: CVE-2023-24814	TYPO3 is vulnerable to Cross-Site Scripting via frontend rendering > ### CVSS: `CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L/E:F/RL:O/RC:C` (8.2) ### Problem TYPO3 core component `GeneralUtility::getIndpEnv()` …	11.5.23 Vulnerable
GHSA-jq6g-4v5m-wm9r Aliases: CVE-2023-38499	Information Disclosure due to Out-of-scope Site Resolution > ### CVSS: `CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:F/RL:O/RC:C` (3.5) ### Problem In multi-site scenarios, enumerating the HTTP …	11.5.30 Vulnerable
GHSA-hwvq-2w67-rvxp Aliases: CVE-2026-47346	TYPO3 CMS has Broken Access Control in its Form Framework ### Problem Backend users with file write permissions were able …	There are no reported fixed by versions.
GHSA-pjpj-v387-x4vq Aliases: CVE-2026-11607	TYPO3 CMS has Broken Access Control in its Form Framework ### Problem Backend users with access to the Form Framework …	There are no reported fixed by versions.
GHSA-3v8v-4wg6-r7qh Aliases: CVE-2026-47343	TYPO3 CMS: Destructive Actions on File Mount Folders ### Problem Non-privileged backend users with file mount access were able to …	There are no reported fixed by versions.
GHSA-chm7-4vch-h8vr Aliases: CVE-2026-49742	TYPO3 CMS has Broken Access Control in its Media Module ### Problem Backend users with file download permissions were able …	There are no reported fixed by versions.
GHSA-f34x-rx2w-7pm3 Aliases: CVE-2026-47349	TYPO3 CMS has Broken Access Control in the Recycler Module ### Problem Backend users with access to the Recycler module …	There are no reported fixed by versions.
GHSA-3p42-w5ch-gg42 Aliases: CVE-2026-47347	TYPO3 CMS has an Open Redirect Vulnerability via Core Utilities ### Problem Applications that use `GeneralUtility::sanitizeLocalUrl` to allow only local …	There are no reported fixed by versions.
GHSA-2j54-93q2-3hjq Aliases: CVE-2026-47352	TYPO3 CMS has Broken Access Control in Backend API ### Problem Authenticated backend users were able to retrieve file metadata …	There are no reported fixed by versions.
GHSA-c78m-c52x-jgwp Aliases: CVE-2026-49740	TYPO3 CMS has Insecure Deserialization via Core API ### Problem TYPO3's cache frontend (`VariableFrontend`) and persistent key-value store (`Registry`) deserialized …	There are no reported fixed by versions.
GHSA-q93m-25xv-94hh Aliases: CVE-2026-47351	TYPO3 CMS: Broken Access Control in Media Module ### Problem Backend users were able to insert arbitrary records and files …	There are no reported fixed by versions.
GHSA-jf56-v8jc-jcc5 Aliases: CVE-2026-49738	TYPO3 CMS has Broken Access Control in its File Abstraction Layer ### Problem The path allowance check in `GeneralUtility::isAllowedAbsPath()` performed …	There are no reported fixed by versions.
CVE-2025-47937 Aliases: GHSA-x8pv-fgxp-8v3x	TYPO3 Allows Information Disclosure via DBAL Restriction Handling ### Problem When performing a database query involving multiple tables through the …	12.4.31 Vulnerable 13.4.12 Vulnerable
CVE-2023-38499 Aliases: GHSA-jq6g-4v5m-wm9r	Improper Access Control TYPO3 is an open source PHP based web content management system. Starting in version 9.4.0 and prior …	12.4.4 Vulnerable 11.5.30 Vulnerable 12.4.4 Vulnerable 11.5.30 Vulnerable
CVE-2022-23501 Aliases: GHSA-jfp7-79g7-89rf GMS-2022-8134	TYPO3 is an open source PHP based web content management system. In versions prior to 8.7.49, 9.5.38, 10.4.33, 11.5.20, and …	10.4.33 Vulnerable 11.5.20 Vulnerable 12.1.1 Vulnerable 10.4.33 Vulnerable 11.5.20 Vulnerable 12.1.1 Vulnerable
CVE-2025-47940 Aliases: GHSA-6frx-j292-c844	TYPO3 Allows Privilege Escalation to System Maintainer ### Problem Administrator-level backend users without system maintainer privileges can escalate their privileges …	12.4.31 Vulnerable 13.4.12 Vulnerable 12.4.31 Vulnerable 13.4.12 Vulnerable
CVE-2025-47939 Aliases: GHSA-9hq9-cr36-4wpj	TYPO3 Allows Unrestricted File Upload in File Abstraction Layer ### Problem By design, the file management module in TYPO3’s backend …	12.4.31 Vulnerable 13.4.12 Vulnerable 12.4.31 Vulnerable 13.4.12 Vulnerable
CVE-2022-23503 Aliases: GHSA-c5wx-6c2c-f7rm GMS-2022-8132	Improper Control of Generation of Code ('Code Injection') TYPO3 is an open source PHP based web content management system. Versions …	10.4.33 Vulnerable 11.5.20 Vulnerable 12.1.1 Vulnerable 10.4.33 Vulnerable 11.5.20 Vulnerable 12.1.1 Vulnerable
CVE-2024-34358 Aliases: GHSA-36g8-62qv-5957	TYPO3 vulnerable to an Uncontrolled Resource Consumption in the ShowImageController ### Problem The `ShowImageController` (_eID tx_cms_showpic_) lacks a cryptographic HMAC-signature …	11.5.37 Vulnerable 12.4.15 Vulnerable 13.1.1 Vulnerable 11.5.37 Vulnerable 12.4.15 Vulnerable 13.1.1 Vulnerable
CVE-2024-55892 Aliases: GHSA-2fx5-pggv-6jjr	TYPO3 Potential Open Redirect via Parsing Differences ### Problem Applications that use `TYPO3\CMS\Core\Http\Uri` to parse externally provided URLs (e.g., via …	12.4.25 Vulnerable 13.4.3 Vulnerable 12.4.25 Vulnerable 13.4.3 Vulnerable
CVE-2022-23500 Aliases: GHSA-8c28-5mp7-v24h GMS-2022-8130	Uncontrolled Recursion TYPO3 is an open source PHP based web content management system. In versions prior to 9.5.38, 10.4.33, 11.5.20, …	10.4.33 Vulnerable 11.5.20 Vulnerable 10.4.33 Vulnerable 11.5.20 Vulnerable
CVE-2024-22188 Aliases: GHSA-5w2h-59j3-8x5w	TYPO3 Install Tool vulnerable to Code Execution ### Problem Several settings in the Install Tool for configuring the path to …	11.5.35 Vulnerable 12.4.11 Vulnerable 13.0.1 Vulnerable 11.5.35 Vulnerable 12.4.11 Vulnerable 13.0.1 Vulnerable
CVE-2024-34357 Aliases: GHSA-hw6c-6gwq-3m3m	TYPO3 vulnerable to Cross-Site Scripting in the ShowImageController ### Problem Failing to properly encode user-controlled values in file entities, the …	11.5.37 Vulnerable 12.4.15 Vulnerable 13.1.1 Vulnerable 11.5.37 Vulnerable 12.4.15 Vulnerable 13.1.1 Vulnerable
CVE-2026-0859 Aliases: GHSA-7vp9-x248-9vr9	TYPO3 CMS Allows Insecure Deserialization via Mailer File Spool ### Problem Local platform users who can write to TYPO3’s mail‑file …	12.4.41 Vulnerable 14.0.2 Vulnerable 13.4.23 Vulnerable 12.4.41 Vulnerable 14.0.2 Vulnerable 13.4.23 Vulnerable
CVE-2023-24814 Aliases: GHSA-r4f8-f93x-5qh3	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') TYPO3 is a free and open source Content Management Framework …	12.2.0 Vulnerable 11.5.23 Vulnerable 10.4.36 Vulnerable 12.2.0 Vulnerable 11.5.23 Vulnerable 10.4.36 Vulnerable
CVE-2024-34356 Aliases: GHSA-v6mw-h7w6-59w3	TYPO3 vulnerable to Cross-Site Scripting in the Form Manager Module ### Problem The form manager backend module is vulnerable to …	11.5.37 Vulnerable 12.4.15 Vulnerable 13.1.1 Vulnerable 11.5.37 Vulnerable 12.4.15 Vulnerable 13.1.1 Vulnerable
CVE-2025-47938 Aliases: GHSA-3jrg-97f3-rqh9	TYPO3 Unverified Password Change for Backend Users ### Problem The backend user management interface allows password changes without requiring the …	12.4.31 Vulnerable 13.4.12 Vulnerable 12.4.31 Vulnerable 13.4.12 Vulnerable
GHSA-3jrg-97f3-rqh9 Aliases: CVE-2025-47938	TYPO3 Unverified Password Change for Backend Users ### Problem The backend user management interface allows password changes without requiring the …	12.4.31 Vulnerable 13.4.12 Vulnerable
GHSA-6frx-j292-c844 Aliases: CVE-2025-47940	TYPO3 Allows Privilege Escalation to System Maintainer ### Problem Administrator-level backend users without system maintainer privileges can escalate their privileges …	12.4.31 Vulnerable 13.4.12 Vulnerable
GHSA-9hq9-cr36-4wpj Aliases: CVE-2025-47939	TYPO3 Allows Unrestricted File Upload in File Abstraction Layer ### Problem By design, the file management module in TYPO3’s backend …	12.4.31 Vulnerable 13.4.12 Vulnerable
GHSA-x8pv-fgxp-8v3x Aliases: CVE-2025-47937	TYPO3 Allows Information Disclosure via DBAL Restriction Handling ### Problem When performing a database query involving multiple tables through the …	12.4.31 Vulnerable 13.4.12 Vulnerable
GHSA-2fx5-pggv-6jjr Aliases: CVE-2024-55892	TYPO3 Potential Open Redirect via Parsing Differences ### Problem Applications that use `TYPO3\CMS\Core\Http\Uri` to parse externally provided URLs (e.g., via …	12.4.25 Vulnerable 13.4.3 Vulnerable
GHSA-72jf-5fg5-3cw3 Aliases: CVE-2025-59013	TYPO3 CMS has an open‑redirect vulnerability An open‑redirect vulnerability in GeneralUtility::sanitizeLocalUrl of TYPO3 CMS 9.0.0–9.5.54, 10.0.0–10.4.53, 11.0.0–11.5.47, 12.0.0–12.4.36, and 13.0.0–13.4.17 …	12.4.37 Vulnerable 12.4.37 Vulnerable
GHSA-cvm2-5f78-g9m8 Aliases: CVE-2025-59016	TYPO3 CMS exposes sensitive information in an error message Error messages containing sensitive information in the File Abstraction Layer in …	12.4.37 Vulnerable 12.4.37 Vulnerable
GHSA-5w2h-59j3-8x5w Aliases: CVE-2024-22188	TYPO3 Install Tool vulnerable to Code Execution ### Problem Several settings in the Install Tool for configuring the path to …	11.5.35 Vulnerable 12.4.11 Vulnerable 11.5.35 Vulnerable
GHSA-wf85-8hx9-gj7c Aliases: CVE-2024-25120	TYPO3 vulnerable to Improper Access Control of Resources Referenced by t3:// URI Scheme ### Problem The TYPO3-specific [`t3://` URI scheme](https://docs.typo3.org/m/typo3/reference-typoscript/main/en-us/Functions/Typolink.html#resource-references) …	11.5.35 Vulnerable 12.4.11 Vulnerable 11.5.35 Vulnerable
GHSA-h47m-3f78-qp9g Aliases: CVE-2024-25119	TYPO3 Install Tool vulnerable to Information Disclosure of Encryption Key ### Problem The plaintext value of `$GLOBALS['SYS']['encryptionKey']` was displayed in …	11.5.35 Vulnerable 12.4.11 Vulnerable 11.5.35 Vulnerable
GHSA-w6x2-jg8h-p6mp Aliases: CVE-2023-30451	Path Traversal in TYPO3 File Abstraction Layer Storages ### Problem Configurable storages using the local driver of the File Abstraction …	11.5.35 Vulnerable 12.4.11 Vulnerable 11.5.35 Vulnerable
GHSA-38r2-5695-334w Aliases: CVE-2024-25118	TYPO3 Backend Forms vulnerable to Information Disclosure of Hashed Passwords ### Problem Password hashes were being reflected in the editing …	11.5.35 Vulnerable 12.4.11 Vulnerable 11.5.35 Vulnerable
GHSA-rj3x-wvc6-5j66 Aliases: CVE-2024-25121	TYPO3 vulnerable to Improper Access Control Persisting File Abstraction Layer Entities via Data Handler ### Problem Entities of the File …	11.5.35 Vulnerable 12.4.11 Vulnerable 11.5.35 Vulnerable
GHSA-36g8-62qv-5957 Aliases: CVE-2024-34358	TYPO3 vulnerable to an Uncontrolled Resource Consumption in the ShowImageController ### Problem The `ShowImageController` (_eID tx_cms_showpic_) lacks a cryptographic HMAC-signature …	11.5.37 Vulnerable 12.4.15 Vulnerable 13.1.1 Vulnerable 11.5.37 Vulnerable
GHSA-hw6c-6gwq-3m3m Aliases: CVE-2024-34357	TYPO3 vulnerable to Cross-Site Scripting in the ShowImageController ### Problem Failing to properly encode user-controlled values in file entities, the …	11.5.37 Vulnerable 12.4.15 Vulnerable 13.1.1 Vulnerable 11.5.37 Vulnerable
GHSA-v6mw-h7w6-59w3 Aliases: CVE-2024-34356	TYPO3 vulnerable to Cross-Site Scripting in the Form Manager Module ### Problem The form manager backend module is vulnerable to …	11.5.37 Vulnerable 12.4.15 Vulnerable 13.1.1 Vulnerable 11.5.37 Vulnerable
GHSA-3vmm-7h4j-69rm Aliases: CVE-2023-47127	TYPO3 vulnerable to Weak Authentication in Session Handling > ### CVSS: `CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N/E:X/RL:O/RC:C` (4.0) ### Problem Given that there are at …	11.5.33 Vulnerable 12.4.8 Vulnerable 11.5.33 Vulnerable
GHSA-7vp9-x248-9vr9 Aliases: CVE-2026-0859	TYPO3 CMS Allows Insecure Deserialization via Mailer File Spool ### Problem Local platform users who can write to TYPO3’s mail‑file …	14.0.2 Vulnerable 13.4.23 Vulnerable 12.4.41 Vulnerable

Next non-vulnerable version	13.4.34
Latest non-vulnerable version	14.3.6
Risk score	4.0