High
ghsa-45wj-jv2h-jwrf
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 129
Reset filters
Critical
ghsa-cc97-g92w-jm65
TYPO3 CMS Insecure Deserialization & Arbitrary Code Execution
High
ghsa-x4rj-f7m6-42c3
TYPO3 CMS Authentication Bypass vulnerability
Medium
CVE-2024-34358
TYPO3 vulnerable to an Uncontrolled Resource Consumption in the ShowImageController
Medium
CVE-2024-34357
TYPO3 vulnerable to Cross-Site Scripting in the ShowImageController
Medium
CVE-2024-34356
TYPO3 vulnerable to Cross-Site Scripting in the Form Manager Module
Low
CVE-2024-34355
TYPO3 vulnerable to an HTML Injection in the History Module
High
CVE-2024-22188
TYPO3 Install Tool vulnerable to Code Execution
Medium
CVE-2023-30451
Path Traversal in TYPO3 File Abstraction Layer Storages
High
CVE-2024-25121
TYPO3 vulnerable to Improper Access Control Persisting File Abstraction Layer Entities via Data Handler
Medium
CVE-2024-25120
TYPO3 vulnerable to Improper Access Control of Resources Referenced by t3:// URI Scheme
Medium
CVE-2024-25119
TYPO3 Install Tool vulnerable to Information Disclosure of Encryption Key
Medium
CVE-2024-25118
TYPO3 Backend Forms vulnerable to Information Disclosure of Hashed Passwords
Medium
CVE-2023-47127
TYPO3 vulnerable to Weak Authentication in Session Handling
Low
CVE-2023-38499
Information Disclosure due to Out-of-scope Site Resolution
High
CVE-2023-24814
TYPO3 is vulnerable to Cross-Site Scripting via frontend rendering
Medium
CVE-2022-23504
TYPO3 CMS vulnerable to Sensitive Information Disclosure via YAML Placeholder Expressions in Site Configuration
High
CVE-2022-23503
TYPO3 CMS vulnerable to Arbitrary Code Execution via Form Framework
Medium
CVE-2022-23502
TYPO3 CMS vulnerable to Insufficient Session Expiration after Password Reset
Medium
CVE-2022-23501
TYPO3 CMS vulnerable to Weak Authentication in Frontend Login
Medium
CVE-2022-23500
TYPO3 CMS vulnerable to Denial of Service in Page Error Handling
Medium
CVE-2022-36020
TYPO3 HTML Sanitizer Bypasses Cross-Site Scripting Protection
Medium
CVE-2022-36104
TYPO3 CMS vulnerable to Denial of Service in Page Error Handling
Medium
CVE-2022-36105
TYPO3 CMS vulnerable to User Enumeration via Response Timing
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.