typo3 Vulnerability Advisory Catalog

Total 340 security vulnerabilities recorded for typo3 software and firmware.

← Back to All Vendors
Component: typo3

TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user interface functionality involvin...

📅 2025-01-14
CVSS 4.3 Dossier →
Component: typo3

TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user interface functionality involvin...

📅 2025-01-14
CVSS 4.3 Dossier →
Component: typo3

TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user interface functionality involvin...

📅 2025-01-14
CVSS 4.3 Dossier →
Component: typo3

TYPO3 is a free and open source Content Management Framework. Applications that use `TYPO3\CMS\Core\Http\Uri` to parse externally provided URLs (e.g.,...

📅 2025-01-14
CVSS 4.8 Dossier →
Component: typo3

TYPO3 is a free and open source Content Management Framework. It has been discovered that the install tool password has been logged as plaintext in ca...

📅 2025-01-14
CVSS 3.1 Dossier →
Component: typo3

TYPO3 before 13.3.1 allows denial of service (interface error) in the Bookmark Toolbar (ext:backend), exploitable by an administrator-level backend us...

📅 2024-10-28
CVSS 4.9 Dossier →
Component: typo3

TYPO3 is a free and open source Content Management Framework. Backend users could see items in the backend page tree without having access if the moun...

📅 2024-10-08
CVSS 3.1 Dossier →
Component: typo3

TYPO3 is an enterprise content management system. Starting in version 9.0.0 and prior to versions 9.5.48 ELTS, 10.4.45 ELTS, 11.5.37 LTS, 12.4.15 LTS,...

📅 2024-05-14
CVSS 5.3 Dossier →
Component: typo3

TYPO3 is an enterprise content management system. Starting in version 9.0.0 and prior to versions 9.5.48 ELTS, 10.4.45 ELTS, 11.5.37 LTS, 12.4.15 LTS,...

📅 2024-05-14
CVSS 5.4 Dossier →
Component: typo3

TYPO3 is an enterprise content management system. Starting in version 9.0.0 and prior to versions 9.5.48 ELTS, 10.4.45 ELTS, 11.5.37 LTS, 12.4.15 LTS,...

📅 2024-05-14
CVSS 5.4 Dossier →
Component: typo3

TYPO3 is an enterprise content management system. Starting in version 13.0.0 and prior to version 13.1.1, the history backend module is vulnerable to ...

📅 2024-05-14
CVSS 3.5 Dossier →
Component: typo3

TYPO3 before 13.0.1 allows an authenticated admin user (with system maintainer privileges) to execute arbitrary shell commands (with the privileges of...

📅 2024-03-05
CVSS 7.2 Dossier →
Component: typo3

TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected versions of TYPO3 entities of the File Abstrac...

📅 2024-02-13
CVSS 7.1 Dossier →
Component: typo3

TYPO3 is an open source PHP based web content management system released under the GNU GPL. The TYPO3-specific `t3://` URI scheme could be used to acc...

📅 2024-02-13
CVSS 4.3 Dossier →
Component: typo3

TYPO3 is an open source PHP based web content management system released under the GNU GPL. The plaintext value of `$GLOBALS['SYS']['encryptionKey']` ...

📅 2024-02-13
CVSS 4.9 Dossier →
Component: typo3

TYPO3 is an open source PHP based web content management system released under the GNU GPL. Password hashes were being reflected in the editing forms ...

📅 2024-02-13
CVSS 4.3 Dossier →
Component: typo3

In TYPO3 11.5.24, the filelist component allows attackers (who have access to the administrator panel) to read arbitrary files via directory traversal...

📅 2023-12-25
CVSS 4.9 Dossier →
Component: typo3

TYPO3 is an open source PHP based web content management system released under the GNU GPL. In typo3 installations there are always at least two diffe...

📅 2023-11-14
CVSS 4.2 Dossier →
Component: typo3

TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected versions the login screen of the standalone in...

📅 2023-11-14
CVSS 3.7 Dossier →
Component: html_sanitizer

TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected versions DOM processing instructions are not h...

📅 2023-11-14
CVSS 4.7 Dossier →
Component: html_sanitizer

TYPO3 HTML Sanitizer is an HTML sanitizer, written in PHP, aiming to provide cross-site-scripting-safe markup based on explicitly allowed tags, attrib...

📅 2023-07-25
CVSS 4.7 Dossier →
Component: typo3

TYPO3 is an open source PHP based web content management system. Starting in version 9.4.0 and prior to versions 9.5.42 ELTS, 10.4.39 ELTS, 11.5.30, a...

📅 2023-07-25
CVSS 3.7 Dossier →
Component: typo3

TYPO3 is a free and open source Content Management Framework released under the GNU General Public License. In affected versions the TYPO3 core compon...

📅 2023-02-07
CVSS 8.8 Dossier →
Component: typo3

TYPO3 is an open source PHP based web content management system. Versions prior to 9.5.38, 10.4.33, 11.5.20, and 12.1.1 are subject to Sensitive Infor...

📅 2022-12-14
CVSS 5.7 Dossier →
Page 2 of 15 (340 Total Records)