typo3/cms vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2012-3529Lowtypo3/cms: Typo3 Backend Configuration XSS Vulnerability CVE-2012-3530Mediumtypo3/cms: Typo3 API XSS Vulnerability CVE-2012-3531Mediumtypo3/cms: Typo3 Install Tool XSS Vulnerability CVE-2012-6144Mediumtypo3/cms: Typo3 Backend History Module Vulnerable to SQL Injection CVE-2012-6148Lowtypo3/cms: Typo3 Function Menu API XSS Vulnerability CVE-2012-6145Lowtypo3/cms: Typo3 Backend History Module Vulnerable to XSS CVE-2012-6147Lowtypo3/cms: Typo3 Backend API XSS Vulnerability CVE-2013-7074Lowtypo3/cms: TYPO3 Cross-Site Scripting (XSS) vulnerabilities in Content Editing Wizards component CVE-2017-14251Hightypo3/cms: TYPO3 Arbitrary Code Execution CVE-2014-3941Mediumtypo3/cms: Typo3 Host Header Spoofing Vulnerability CVE-2014-3943Lowtypo3/cms: Typo3 XSS Vulnerabilities CVE-2014-3942Hightypo3/cms: TYPO3 Color Picker Wizard component allows remote authenticated editors to execute arbitrary PHP code CVE-2018-6905Mediumtypo3/cms: Typo3 XSS Vulnerability CVE-2015-5956Lowtypo3/cms: TYPO3 cross-site scripting (XSS)CVE-2017-6370Mediumtypo3/cms: TYPO3 Information Disclosure Vulnerability CVE-2013-7341Mediummoodle/moodle: Moodle cross-site scripting (XSS) vulnerabilities CVE-2010-1153Hightypo3/cms: TYPO3 PHP remote file inclusion vulnerability CVE-2009-3635Mediumtypo3/cms: TYPO3 Install Tool Subcomponent Allows Access Using Only a Password's MD5 Hash as a Credential CVE-2009-0816Mediumtypo3/cms: Typo3 Backend XSS Vulnerability CVE-2009-0815Mediumtypo3/cms: TYPO3 leaks a hash secret in an error message CVE-2009-0258Hightypo3/cms: Indexed Search Engine for TYPO3 Command Execution via Metacharacter Injection CVE-2009-0256Hightypo3/cms: Authentication library in TYPO3 vulnerable to session fixation CVE-2005-4875Hightypo3/cms: TYPO3 Reveals Sensitive Information via Direct Request to `misc/phpcheck/`CVE-2011-3583Criticaltypo3/cms: Typo3 SQL injection due to faulty prepared statements CVE-2011-4903Mediumtypo3/cms: Typo3 XSS in RemoveXSS function

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo