Skip to main content
cve.nowby Sazabi
← Packagist
PackagistPackage

typo3/cms-frontend

4 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4
Registry
Packagist

Advisories 4

  • TYPO3 before 4.3.4 and 4.4.x before 4.4.1 contains insecure randomness during generation of a hash with the "forgot password" function.

    Affected: fixed in 4.3.4; from 4.4.0, fixed in 4.4.1.

  • TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Spam Abuse in the native form content element.

    Affected: fixed in 4.1.14; from 4.2.0, fixed in 4.2.13; from 4.3.0, fixed in 4.3.4; from 4.4.0, fixed in 4.4.1.

  • Cross-site scripting (XSS) vulnerability in the FORM content object in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before…

    Affected: from 4.2.0, fixed in 4.2.16; from 4.4.0, fixed in 4.4.5; from 4.3.0, fixed in 4.3.9.

  • Cross-site scripting (XSS) vulnerability in the click enlarge functionality in TYPO3 4.3.x before 4.3.9 and 4.4.x before 4.4.5 when the…

    Affected: from 4.3.0, fixed in 4.3.9; from 4.4.0, fixed in 4.4.5.