Search for packages
| purl | pkg:composer/typo3/cms@8.7.40 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2021-32767
Aliases: GHSA-34fr-fhqr-7235 |
Inclusion of Sensitive Information in Log Files TYPO3 is an open source PHP based web content management system. User credentials … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2021-32669
Aliases: GHSA-rgcg-28xm-8mmw |
Cross-site Scripting TYPO3 contains a cross-site scripting vulnerability. When settings for `_backend layouts_` are not properly encoded, the corresponding grid … |
Vulnerable Vulnerable |
|
CVE-2021-32668
Aliases: GHSA-6mh3-j5r5-2379 |
Cross-site Scripting TYPO3 contains a cross-site scripting vulnerability. When error messages are not properly encoded, the components `_QueryGenerator_` and `_QueryView_` … |
Vulnerable Vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
CVE-2021-21357
|
Path Traversal Due to improper input validation, attackers can by-pass restrictions of predefined options and submit arbitrary data in the … |
GHSA-3vg7-jw9m-pc3f
|
|
CVE-2021-21338
|
URL Redirection to Untrusted Site (Open Redirect) Login Handling is susceptible to open redirection which allows attackers redirecting to arbitrary … |
GHSA-4jhw-2p6j-5wmp
|
|
CVE-2021-21370
|
Cross-site Scripting Content elements of type `_menu_` are vulnerable to cross-site scripting when their referenced items get previewed in the … |
GHSA-x7hc-x7fm-f7qh
|
|
CVE-2021-21339
|
Cleartext Storage of Sensitive Information User session identifiers are stored in cleartext - without processing of additional cryptographic hashing algorithms. … |
GHSA-qx3w-4864-94ch
|
|
CVE-2021-21355
|
Unrestricted Upload of File with Dangerous Type Due to the lack of ensuring file extensions belong to configured allowed mime-types, … |
GHSA-2r6j-862c-m2v2
|