typo3/cms vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2012-1606Lowtypo3/cms: Typo3 Backend XSS Vulnerabilities CVE-2012-1608Mediumtypo3/cms: Typo3 API XSS Vulnerabilities CVE-2012-1605Mediumtypo3/cms: Typo3 Extbase Framework Unsafe Deserialization CVE-2013-7075Mediumtypo3/cms: TYPO3 vulnerable to Insecure Unserialize via Content Editing Wizards component CVE-2012-6146Mediumtypo3/cms: Typo3 Backend History Module Vulnerable to XSS CVE-2013-4321Hightypo3/cms: TYPO3 vulnerable to remote authenticated arbitrary code execution CVE-2013-4250Hightypo3/cms: TYPO3 doesn't properly check file extensions CVE-2014-3945Criticaltypo3/cms: TYPO3 vulnerable to authentication bypass via leveraging knowledge of password hash CVE-2014-3946Mediumtypo3/cms: Typo3 Information Disclosure CVE-2014-3944Mediumtypo3/cms: TYPO3 Improper Session Invalidation CVE-2014-9509Hightypo3/cms: Typo3 Vulnerable to Cache Poisoning CVE-2015-8756Mediumtypo3/cms: TYPO3 CMS indexed search Cross-site Scripting vulnerability CVE-2015-8759Mediumtypo3/cms: TYPO3 Cross-site Scripting vulnerability CVE-2015-8755Mediumtypo3/cms: Typo3 XSS Vulnerability CVE-2015-8760Mediumtypo3/cms: TYPO3 allows remote attackers to embed Flash videos from external domain CVE-2013-4701Highopenid/php-openid: PHP OpenID Library Denial of Service vulnerability CVE-2013-7073Mediumtypo3/cms: TYPO3 vulnerable to Information Disclosure via Content Editing Wizards component CVE-2014-9508Mediumtypo3/cms: Typo3 Open Redirect In Frontend Rendering CVE-2016-4056Mediumtypo3/cms: TYPO3 Backend component Cross-site scripting (XSS) vulnerability CVE-2010-5099Mediumtypo3/cms: TYPO3 Path Traversal vulnerability CVE-2010-5101Mediumtypo3/cms: TYPO3 Directory Traversal vulnerability CVE-2010-5103Mediumtypo3/cms: TYPO3 SQL Injection vulnerability CVE-2012-2112Mediumtypo3/cms: Typo3 Exception Handler XSS CVE-2012-3527Mediumtypo3/cms: TYPO3 allows remote authenticated backend users to unserialize arbitrary objects CVE-2012-3528Lowtypo3/cms: Typo3 Backend XSS Vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo