Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/typo3/cms-core@7.6.51
purl pkg:composer/typo3/cms-core@7.6.51
Tags Ghost
Next non-vulnerable version 13.4.34
Latest non-vulnerable version 14.3.6
Risk score
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
CVE-2021-32767
Aliases:
GHSA-34fr-fhqr-7235
Inclusion of Sensitive Information in Log Files TYPO3 is an open source PHP based web content management system. User credentials …
9.5.28
Vulnerable
10.4.18
Vulnerable
11.3.1
Vulnerable
Vulnerabilities fixed by this package (5)

Advisory Summary Aliases
CVE-2021-21338
URL Redirection to Untrusted Site (Open Redirect) Login Handling is susceptible to open redirection which allows attackers redirecting to arbitrary … GHSA-4jhw-2p6j-5wmp
CVE-2021-21370
Cross-site Scripting TYPO3 content elements of type `_menu_` are vulnerable to cross-site scripting when their referenced items get previewed in … GHSA-x7hc-x7fm-f7qh
CVE-2021-21339
Cleartext Storage of Sensitive Information User session identifiers were stored in cleartext - without processing of additional cryptographic hashing algorithms. … GHSA-qx3w-4864-94ch
GHSA-4jhw-2p6j-5wmp
Open Redirection in Login Handling ### Problem It has been discovered that Login Handling is susceptible to open redirection which … CVE-2021-21338
GHSA-qx3w-4864-94ch
Cleartext storage of session identifier ### Problem User session identifiers were stored in cleartext - without processing of additional cryptographic … CVE-2021-21339