Search for packages
| purl | pkg:composer/typo3/cms@7.6.32 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 2.8 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-c5c9-8c6m-727v
Aliases: CVE-2021-32768 |
Cross-Site Scripting via Rich-Text Content > ### Meta > * CVSS: `CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:F/RL:O/RC` (5.7) ### Problem Failing to properly parse, sanitize … | There are no reported fixed by versions. |
|
CVE-2021-32767
Aliases: GHSA-34fr-fhqr-7235 |
Inclusion of Sensitive Information in Log Files TYPO3 is an open source PHP based web content management system. User credentials … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2019-19849
|
Deserialization of Untrusted Data It has been discovered that the classes `QueryGenerator` and `QueryView` are vulnerable to insecure deserialization. One … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2021-32768
Aliases: GHSA-c5c9-8c6m-727v |
Cross-site Scripting TYPO3 is an open source PHP based web content management system released under the GNU GPL. sanitize and … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2018-6905
|
Cross-site Scripting The page module in TYPO3 is vulnerable to XSS via `$GLOBALS['TYPO3_CONF_VARS']['SYS']['sitename']`, as demonstrated by an admin entering a … |
Vulnerable Vulnerable |
|
CVE-2021-21338
Aliases: GHSA-4jhw-2p6j-5wmp |
URL Redirection to Untrusted Site (Open Redirect) Login Handling is susceptible to open redirection which allows attackers redirecting to arbitrary … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2020-26227
Aliases: GHSA-vqqx-jw6p-q3rf |
Cross-site Scripting TYPO3 is an open source PHP based web content management system. In TYPO3 the system extension Fluid (typo3/cms-fluid) … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2021-21370
Aliases: GHSA-x7hc-x7fm-f7qh |
Cross-site Scripting Content elements of type `_menu_` are vulnerable to cross-site scripting when their referenced items get previewed in the … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2019-19848
|
Path Traversal It has been discovered that the extraction of manually uploaded ZIP archives in Extension Manager is vulnerable to … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2021-21339
Aliases: GHSA-qx3w-4864-94ch |
Cleartext Storage of Sensitive Information User session identifiers are stored in cleartext - without processing of additional cryptographic hashing algorithms. … |
Vulnerable Vulnerable Vulnerable |
|
GHSA-3w22-wrwx-2r75
Aliases: CVE-2018-6905 |
Typo3 XSS Vulnerability The page module in TYPO3 before 8.7.11 has XSS via `$GLOBALS['TYPO3_CONF_VARS']['SYS']['sitename']`, as demonstrated by an admin entering … |
Vulnerable Vulnerable |
|
CVE-2022-23501
Aliases: GHSA-jfp7-79g7-89rf |
TYPO3 is an open source PHP based web content management system. In versions prior to 8.7.49, 9.5.38, 10.4.33, 11.5.20, and … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2022-36107
Aliases: GHSA-9c6w-55cp-5w25 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') TYPO3 is an open source PHP based web content management … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2022-31047
Aliases: GHSA-fh99-4pgr-8j99 |
Insertion of Sensitive Information into Log File TYPO3 is an open source web content management system. Prior to versions 7.6.57 … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2022-36105
Aliases: GHSA-m392-235j-9r7r |
Observable Discrepancy TYPO3 is an open source PHP based web content management system released under the GNU GPL. It has … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
GHSA-jg55-3q6h-2ccf
Aliases: CVE-2009-0816 |
Typo3 Backend XSS Vulnerability An Information Disclosure vulnerability in jumpUrl mechanism, used to track access on web pages and provided … | There are no reported fixed by versions. |
| Advisory | Summary | Aliases |
|---|---|---|
|
GHSA-f3wf-q4fj-3gxf
|
TYPO3 Denial of Service in Online Media Asset Handling Online Media Asset Handling (*`.youtube` and *`.vimeo` files) in the TYPO3 … | |
|
GHSA-g585-crjf-vhwq
|
TYPO3 Denial of Service in Frontend Record Registration TYPO3’s built-in record registration functionality (aka `basic shopping cart`) using recs URL … | |
|
GHSA-f777-f784-36gm
|
TYPO3 Security Misconfiguration in Install Tool Cookie It has been discovered that cookies created in the Install Tool are not … | |
|
GHSA-7q33-hxwj-7p8v
|
TYPO3 Cross-Site Scripting in Backend Modal Component Failing to properly encode user input, notifications shown in modal windows in the … | |
|
GHSA-6487-3qvg-8px9
|
TYPO3 Information Disclosure in Install Tool The Install Tool exposes the current TYPO3 version number to non-authenticated users. | |
|
GHSA-2rcw-9hrm-8q7q
|
TYPO3 Cross-Site Scripting in Frontend User Login Failing to properly encode user input, login status display is vulnerable to cross-site … | |
|
GHSA-8m6j-p5jv-v69w
|
TYPO3 Cross-Site Scripting in Online Media Asset Rendering Failing to properly encode user input, online media asset rendering (`*.youtube` and … | |
|
GMS-2018-98
|
Cross-site Scripting Cross-Site Scripting in Backend Modal Component. | |
|
GMS-2018-102
|
Uncontrolled Resource Consumption Denial of Service in Online Media Asset Handling. | |
|
GMS-2018-99
|
Cross-site Scripting Cross-Site Scripting in Frontend User Login. | |
|
GMS-2018-103
|
Uncontrolled Resource Consumption Denial of Service in Frontend Record Registration. | |
|
GMS-2018-97
|
Cross-site Scripting Cross-Site Scripting in Online Media Asset Rendering. | |
|
GMS-2018-101
|
Information Disclosure in Install Tool. | |
|
GMS-2018-100
|
Security Misconfiguration in Install Tool Cookie. |