Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/typo3/cms@3.3.0
purl pkg:composer/typo3/cms@3.3.0
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 10.0
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-c22j-84c7-cm77
Aliases:
CVE-2009-0815
TYPO3 leaks a hash secret in an error message The jumpUrl mechanism in class.tslib_fe.php in TYPO3 3.3.x through 3.8.x, 4.0 … There are no reported fixed by versions.
CVE-2009-0816
Aliases:
GHSA-jg55-3q6h-2ccf
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Multiple cross-site scripting (XSS) vulnerabilities in the backend user interface … There are no reported fixed by versions.
GHSA-jg55-3q6h-2ccf
Aliases:
CVE-2009-0816
Typo3 Backend XSS Vulnerability An Information Disclosure vulnerability in jumpUrl mechanism, used to track access on web pages and provided … There are no reported fixed by versions.
This package is not known to fix any advisories.