Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 25
Reset filtersTYPO3 CMS has Broken Access Control in Backend API
TYPO3 CMS: Broken Access Control in Media Module
TYPO3 CMS Stores Cleartext Password in User Settings Module
TYPO3 CMS Allows Broken Access Control in Edit Document Controller
TYPO3 CSV download feature information disclosure
TYPO3 backend modules have Broken Access Control
TYPO3 Bookmark Toolbar vulnerable to denial of service
The TYPO3 CMS Backend has Broken Authentication in Backend MFA
Denial of Service in TYPO3 Bookmark Toolbar
Information Disclosure in TYPO3 Page Tree
TYPO3 cross-site scripting (XSS) vulnerability in the RemoveXSS function and the backend
TYPO3 Cross-site Scripting vulnerability in the file backend module
TYPO3 Cross-site Scripting vulnerability in the extension manager and backend forms
TYPO3 Backend Command Injection via Shell Metacharacters in Uploaded File Name
TYPO3 Backend vulnerable to Frame Hijacking
TYPO3 Backend vulnerable to Cross-site Scripting
TYPO3 Backend Discloses Encryption Key
TYPO3 is vulnerable to Information Disclosure on the backend
TYPO3 SQL injection vulnerability on the backend
TYPO3 Arbitrary Code Execution vulnerability on the backend
TYPO3 Open Redirection vulnerability on the backend
TYPO3 is vulnerable to Cross-Site Scripting (XSS) on the backend
Cross-Site Scripting in Content Preview (CType menu)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.