Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/typo3/cms@6.0.14
purl pkg:composer/typo3/cms@6.0.14
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
GHSA-5479-gqqr-f9gj
Aliases:
CVE-2014-9509
Typo3 Vulnerable to Cache Poisoning **Problem Description:** A request URL with arbitrary arguments, but still pointing to the home page … There are no reported fixed by versions.
Vulnerabilities fixed by this package (5)

Advisory Summary Aliases
GHSA-55g3-fjwm-w2c8
TYPO3 Color Picker Wizard component allows remote authenticated editors to execute arbitrary PHP code The Color Picker Wizard component in … CVE-2014-3942
CVE-2014-3943
Typo3 XSS Vulnerabilities Multiple cross-site scripting (XSS) vulnerabilities in unspecified backend components in TYPO3 4.5.0 before 4.5.34, 4.7.0 before 4.7.19, … GHSA-qqh2-h6gw-6x8x
CVE-2014-3941
Typo3 Host Header Spoofing Vulnerability TYPO3 4.5.0 before 4.5.34, 4.7.0 before 4.7.19, 6.0.0 before 6.0.14, 6.1.0 before 6.1.9, and 6.2.0 … GHSA-594h-cx6w-p4jf
GHSA-qqh2-h6gw-6x8x
Typo3 XSS Vulnerabilities Multiple cross-site scripting (XSS) vulnerabilities in unspecified backend components in TYPO3 4.5.0 before 4.5.34, 4.7.0 before 4.7.19, … CVE-2014-3943
GHSA-594h-cx6w-p4jf
Typo3 Host Header Spoofing Vulnerability TYPO3 4.5.0 before 4.5.34, 4.7.0 before 4.7.19, 6.0.0 before 6.0.14, 6.1.0 before 6.1.9, and 6.2.0 … CVE-2014-3941