Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/typo3/cms-core@8.5.0
purl pkg:composer/typo3/cms-core@8.5.0
Tags Ghost
Next non-vulnerable version 13.4.34
Latest non-vulnerable version 14.3.6
Risk score 3.4
Vulnerabilities affecting this package (5)
Advisory Summary Fixed in package version
GHSA-45wj-jv2h-jwrf

TYPO3 CMS Privilege Escalation and SQL Injection Failing to properly dissociate system related configuration from user generated configuration, the Form …
8.7.17
Vulnerable
GHSA-4459-qrcc-vfcf

TYPO3 Cross-Site Scripting in Form Framework Failing to properly encode user input, frontend forms handled by the form framework (system …
8.7.23
Vulnerable
GHSA-96jg-pmc4-cx39

TYPO3 CMS Insecure Deserialization It has been discovered that the Form Framework (system extension `form`) is vulnerable to Insecure Deserialization …
8.7.17
Vulnerable
GMS-2018-84

Insecure Deserialization in TYPO3 CMS.
9.3.2
Vulnerable
8.7.17
Vulnerable
GMS-2018-83

Privilege Escalation & SQL Injection in TYPO3 CMS.
9.3.2
Vulnerable
8.7.17
Vulnerable
This package is not known to fix any advisories.