Search for packages
| purl | pkg:composer/typo3/cms-core@9.5.45 |
| Tags | Ghost |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-5w2h-59j3-8x5w
Aliases: CVE-2024-22188 |
TYPO3 Install Tool vulnerable to Code Execution ### Problem Several settings in the Install Tool for configuring the path to … | There are no reported fixed by versions. |
|
GHSA-wf85-8hx9-gj7c
Aliases: CVE-2024-25120 |
TYPO3 vulnerable to Improper Access Control of Resources Referenced by t3:// URI Scheme ### Problem The TYPO3-specific [`t3://` URI scheme](https://docs.typo3.org/m/typo3/reference-typoscript/main/en-us/Functions/Typolink.html#resource-references) … | There are no reported fixed by versions. |
|
GHSA-h47m-3f78-qp9g
Aliases: CVE-2024-25119 |
TYPO3 Install Tool vulnerable to Information Disclosure of Encryption Key ### Problem The plaintext value of `$GLOBALS['SYS']['encryptionKey']` was displayed in … | There are no reported fixed by versions. |
|
GHSA-w6x2-jg8h-p6mp
Aliases: CVE-2023-30451 |
Path Traversal in TYPO3 File Abstraction Layer Storages ### Problem Configurable storages using the local driver of the File Abstraction … | There are no reported fixed by versions. |
|
GHSA-38r2-5695-334w
Aliases: CVE-2024-25118 |
TYPO3 Backend Forms vulnerable to Information Disclosure of Hashed Passwords ### Problem Password hashes were being reflected in the editing … | There are no reported fixed by versions. |
|
GHSA-rj3x-wvc6-5j66
Aliases: CVE-2024-25121 |
TYPO3 vulnerable to Improper Access Control Persisting File Abstraction Layer Entities via Data Handler ### Problem Entities of the File … | There are no reported fixed by versions. |