Typo3 vulnerabilities
198 CVEs and advisories name Typo3 as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-55922Cross-Site Request Forgery in Form Framework Module in TYPO3
- CVE-2024-55923Cross-Site Request Forgery in Indexed Search Module in TYPO3
- CVE-2024-55924Cross-Site Request Forgery in Scheduler Module in TYPO3
- CVE-2024-55945Cross-Site Request Forgery in DB Check Module in TYPO3
- CVE-2024-55891Information Disclosure via Exception Handling/Logger in TYPO3
- CVE-2024-47780Information Disclosure in TYPO3 Page Tree
- CVE-2024-34358TYPO3 vulnerable to an Uncontrolled Resource Consumption in the ShowImageController
- CVE-2024-34357TYPO3 vulnerable to Cross-Site Scripting in ShowImageController
- CVE-2024-34356TYPO3 vulnerable to Cross-Site Scripting in the Form Manager Module
- CVE-2024-34355TYPO3 vulnerable to an HTML Injection in the History Module
- CVE-2024-25118Information Disclosure of Hashed Passwords in TYPO3 Backend Forms
- CVE-2024-25119Information Disclosure of Encryption Key in TYPO3 Install Tool
- CVE-2024-25120Improper Access Control of Resources Referenced by t3:// URI Scheme in TYPO3
- CVE-2024-25121Improper Access Control Persisting File Abstraction Layer Entities via Data Handler in TYPO3
- CVE-2023-47125By-passing Cross-Site Scripting Protection in HTML Sanitizer
- CVE-2023-47126Information Disclosure in Install Tool in typo3/cms-install
- CVE-2023-47127Weak Authentication in Session Handling in typo3/cms-core
- CVE-2023-38500By-passing Cross-Site Scripting Protection in HTML Sanitizer
- CVE-2023-38499typo3/cms-core Information Disclosure due to Out-of-scope Site Resolution
- CVE-2023-37905Cross-site Scripting (XSS) in Source Mode of Editor in ckeditor-wordcount-plugin
- CVE-2023-24814Persisted Cross-Site Scripting in Frontend Rendering in typo3
- CVE-2022-23504TYPO3 contains Sensitive Information Disclosure via YAML Placeholder Expressions in Site Configuration
- CVE-2022-23503TYPO3 vulnerable to Arbitrary Code Execution via Form Framework
- CVE-2022-23502TYPO3 contains Insufficient Session Expiration after Password Reset
- CVE-2022-23501TYPO3 vulnerable to Improper Authentication in Frontend Login
- CVE-2022-23500TYPO3 subject to Uncontrolled Recursion resulting in Denial of Service
- CVE-2022-23499Cross-Site Scripting Protection bypass in HTML Sanitizer
- CVE-2022-36105User Enumeration via Response Timing in TYPO3
- CVE-2022-36106Missing check for expiration time of password reset token in TYPO3
- CVE-2022-36107Stored Cross-Site Scripting via FileDumpController