Search for packages
| purl | pkg:composer/typo3/cms-core@8.7.47 |
| Tags | Ghost |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2022-36107
Aliases: GHSA-9c6w-55cp-5w25 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') TYPO3 is an open source PHP based web content management … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2022-36105
Aliases: GHSA-m392-235j-9r7r |
Observable Discrepancy TYPO3 is an open source PHP based web content management system released under the GNU GPL. It has … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
GHSA-gqqf-g5r7-84vf
Aliases: GMS-2022-4096 |
TYPO3 HTML Sanitizer Bypasses Cross-Site Scripting Protection > ### Meta > * CVSS: `CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:F/RL:O/RC:C` (5.7) ### Problem Due to a … | There are no reported fixed by versions. |
| Advisory | Summary | Aliases |
|---|---|---|
|
GHSA-8gmv-9hwg-w89g
|
Information Disclosure via Export Module > ### Meta > * CVSS: `CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:F/RL:O/RC:C` (4.0) ### Problem The export functionality fails to … |
CVE-2022-31046
|
|
GHSA-3r95-23jp-mhvg
|
Cross-Site Scripting in TYPO3's Form Framework > ### Meta > * CVSS: `CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N/E:F/RL:O/RC:C` (4.9) ### Problem It has been discovered … |
CVE-2022-31048
|
|
GHSA-fh99-4pgr-8j99
|
Insertion of Sensitive Information into Log File in typo3/cms-core > ### Meta > * CVSS: `CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C` (4.9) ### Problem It … |
CVE-2022-31047
|