Typo3 vulnerabilities
198 CVEs and advisories name Typo3 as an affected vendor, newest first. Follow it as a feed.
- CVE-2022-36104Denial of Service via Page Error Handling in TYPO3/cms
- CVE-2022-36108Cross-Site Scripting in typo3/cms-core
- CVE-2022-36020Bypass of Cross-Site Scripting Protection in typo3/html-sanitizer
- CVE-2022-31050Insufficient Session Expiration in TYPO3 Admin Tool
- CVE-2022-31048Cross-Site Scripting in Form Framework
- CVE-2022-31049Cross-Site Scripting in Frontend Login Mailer
- CVE-2022-31046Information Disclosure via Export Module in TYPO3 CMS
- CVE-2022-31047Insertion of Sensitive Information into Log File in typo3/cms-core
- CVE-2021-41113Cross-Site-Request-Forgery in Backend URI Handling in Typo3
- CVE-2021-41114HTTP Host Header Injection in Request Handling in Typo3
- CVE-2021-32768Cross-Site Scripting via Rich-Text Content
- CVE-2021-32767Information Disclosure in User Authentication
- CVE-2021-32669Cross-Site Scripting in Backend Grid View
- CVE-2021-32668Cross-Site Scripting in Query Generator & Query View
- CVE-2021-32667Cross-Site Scripting in Page Preview
- CVE-2021-21359Denial of Service in Page Error Handling
- CVE-2021-21370Cross-Site Scripting in Content Preview (CType menu)
- CVE-2021-21339Cleartext storage of session identifier
- CVE-2021-21340Cross-Site Scripting in Content Preview
- CVE-2021-21355Unrestricted File Upload in Form Framework
- CVE-2021-21357Broken Access Control in Form Framework
- CVE-2021-21358Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in typo3/cms-form
- CVE-2021-21338Open Redirection in Login Handling
- CVE-2020-26229XML External Entity in Dashboard Widget
- CVE-2020-26228Cleartext storage of session identifier
- CVE-2020-26227Cross-Site Scripting in Fluid view helpers
- CVE-2020-26216Cross-Site Scripting in TYPO3 Fluid
- CVE-2020-15241Cross-Site Scripting in TYPO3 Fluid Engine
- CVE-2020-15098Missing Required Cryptographic Step Leading to Sensitive Information Disclosure in TYPO3 CMS
- CVE-2020-15099Exposure of Sensitive Information to an Unauthorized Actor in TYPO3 CMS