typo3/cms-core vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
GHSA-95QM-3XP7-VFJ5Mediumtypo3/cms-core: TYPO3 Cross-Site Scripting in Form Framework validation handlingGHSA-X428-565F-8XJ2Hightypo3/cms-core: TYPO3 Arbitrary Code Execution and Cross-Site Scripting in Backend APIGHSA-G776-759R-PF6XMediumtypo3/cms-core: TYPO3 Broken Access Control in Import ModuleGHSA-82VP-JR39-4J2JHightypo3/cms-core: TYPO3 Security Misconfiguration in Frontend Session HandlingGHSA-RV8R-8MH5-5376Mediumtypo3/cms-core: TYPO3 Information Disclosure in Backend User InterfaceGHSA-WJ85-RG5G-V8JMMediumtypo3/cms-core: TYPO3 Information Disclosure in User AuthenticationGHSA-P2H4-7FP3-CMH8Mediumtypo3/cms-core: TYPO3 Disclosure of Information about Installed ExtensionsGHSA-WVVP-JWF5-QCPCMediumtypo3/cms-core: TYPO3 Information Disclosure in Page TreeGHSA-XMGR-JFF3-FCFVMediumtypo3/cms-core: TYPO3 Security Misconfiguration in User Session HandlingGHSA-4459-QRCC-VFCFMediumtypo3/cms-core: TYPO3 Cross-Site Scripting in Form FrameworkGHSA-76R3-M635-P3VCMediumtypo3/cms-core: TYPO3 Cross-Site Scripting in Language Pack HandlingGHSA-F9HR-7CFQ-MJG2Hightypo3/cms-core: TYPO3 Arbitrary Code Execution via File List ModuleGHSA-9RX9-7FMH-GJ3GMediumtypo3/cms-core: TYPO3 Broken Access Control in Localization HandlingGHSA-22Q7-CG4R-P9MXMediumtypo3/cms-core: TYPO3 Cross-Site Scripting in Fluid ViewHelpersGHSA-RXC9-F2X6-QH4WHightypo3/cms-core: TYPO3 Security Misconfiguration for Backend User AccountsGHSA-HJX5-V9XG-7H25Hightypo3/cms-core: TYPO3 Denial of Service in Frontend Record RegistrationGHSA-29M4-MX89-3MJGMediumtypo3/cms-core: TYPO3 Denial of Service in Online Media Asset HandlingGHSA-66C2-7G4P-WX4PMediumtypo3/cms-core: TYPO3 Information Disclosure in Install ToolGHSA-PPVG-HW62-6PH9Hightypo3/cms-core: TYPO3 Security Misconfiguration in Install Tool CookieGHSA-8C25-VJ2W-P72JMediumtypo3/cms-core: TYPO3 Cross-Site Scripting in Frontend User LoginGHSA-G4C9-QFVW-FMR4Mediumtypo3/cms-core: TYPO3 Cross-Site Scripting in Backend Modal ComponentGHSA-96JG-PMC4-CX39Hightypo3/cms-core: TYPO3 CMS Insecure DeserializationGHSA-WG8H-GXF4-G4GHMediumtypo3/cms-core: TYPO3 Cross-Site Scripting in Online Media Asset RenderingGHSA-45WJ-JV2H-JWRFHightypo3/cms-core: TYPO3 CMS Privilege Escalation and SQL InjectionGHSA-CC97-G92W-JM65Criticaltypo3/cms-core: TYPO3 CMS Insecure Deserialization & Arbitrary Code Execution

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo