Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 129
Reset filtersTYPO3 CMS Stored Cross-Site Scripting via FileDumpController
TYPO3 CMS vulnerable to Cross-Site Scripting in <f:asset.css> view helper
TYPO3 HTML Sanitizer Bypasses Cross-Site Scripting Protection
Insufficient Session Expiration in TYPO3's Admin Tool
Cross-Site Scripting in TYPO3's Frontend Login Mailer
Cross-Site Scripting in TYPO3's Form Framework
Insertion of Sensitive Information into Log File in typo3/cms-core
Information Disclosure via Export Module
TYPO3 Vulnerable to Insecure Deserialization
Typo3 Cross-Site Scripting in Link Handling
TYPO3 Image Processing susceptible to Code Execution
TYPO3 SQL Injection in low-level Query Generator
TYPO3 Insecure Deserialization in Query Generator & Query View
TYPO3 Directory Traversal on ZIP extraction
TYPO3 SQL injection vulnerability in the Extbase Framework
TYPO3 Open redirect vulnerability in the Access tracking mechanism
TYPO3 Improper Access Control vulnerability
TYPO3 is vulnerable to Mass Assignment in the Extension table administration library
TYPO3 Improper Access Management in the File Abstraction Layer
TYPO3 Sensitive Information Disclosure via escapeStrForLike method
TYPO3 Cross-site scripting (XSS) vulnerability in the Extbase Framework
TYPO3 Cross-site scripting (XSS) vulnerability in the Backend User Administration Module
TYPO3 API function vulnerable to Cross-site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.