Security
فارسی
All products

typo3/cms-core

Composer · Package
130 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
TYPO3 CMS has Broken Access Control in its Form FrameworkCVE-2026-11607 · GHSA-PJPJ-V387-X4VQVersion ranges need review. typo3/cms-coretypo3/cms-form Composer High Fix reported
TYPO3 CMS: Broken Access Control in Media ModuleCVE-2026-47351 · GHSA-Q93M-25XV-94HHVersion ranges need review. typo3/cms-backendtypo3/cms-core Composer Medium Fix reported
TYPO3 CMS has Privilege Escalation & SQL Injection in its Form FrameworkCVE-2026-49741 · GHSA-JH32-V29G-68PQ typo3/cms-coretypo3/cms-form Composer High Fix reported
TYPO3 CMS has Broken Access Control in its Media ModuleCVE-2026-49742 · GHSA-CHM7-4VCH-H8VRVersion ranges need review. typo3/cms-coretypo3/cms-filelist Composer High Fix reported
TYPO3 CMS has Insecure Deserialization via Core APICVE-2026-49740 · GHSA-C78M-C52X-JGWPVersion ranges need review. typo3/cms-core Composer Medium Fix reported
TYPO3 CMS has Broken Access Control in its File Abstraction LayerCVE-2026-49738 · GHSA-JF56-V8JC-JCC5Version ranges need review. typo3/cms-core Composer Low Fix reported
TYPO3 CMS has Cross-Site Scripting in Indexed SearchCVE-2026-47348 · GHSA-CG75-QFG2-W9HJVersion ranges need review. typo3/cms-coretypo3/cms-indexed-search Composer Medium Fix reported
TYPO3 CMS has Broken Access Control in Backend APICVE-2026-47352 · GHSA-2J54-93Q2-3HJQVersion ranges need review. typo3/cms-backendtypo3/cms-core Composer Medium Fix reported
TYPO3 CMS has an Open Redirect Vulnerability via Core UtilitiesCVE-2026-47347 · GHSA-3P42-W5CH-GG42Version ranges need review. typo3/cms-core Composer Medium Fix reported
TYPO3 CMS: Destructive Actions on File Mount FoldersCVE-2026-47343 · GHSA-3V8V-4WG6-R7QHVersion ranges need review. typo3/cms-core Composer High Fix reported
TYPO3 CMS has Broken Access Control in its DataHandlerCVE-2026-47350 · GHSA-QCMW-6RM2-5X78Version ranges need review. typo3/cms-core Composer Medium Fix reported
TYPO3 CMS has Broken Access Control in the Recycler ModuleCVE-2026-47349 · GHSA-F34X-RX2W-7PM3Version ranges need review. typo3/cms-coretypo3/cms-recycler Composer Medium Fix reported
TYPO3 CMS has Broken Access Control in its Form FrameworkCVE-2026-47346 · GHSA-HWVQ-2W67-RVXPVersion ranges need review. typo3/cms-coretypo3/cms-form Composer High Fix reported
TYPO3 vulnerable to Cross-Site Scripting in the Form Manager ModuleCVE-2024-34356 · GHSA-V6MW-H7W6-59W3 typo3/cms-core Composer Medium Fix reported
TYPO3 vulnerable to an HTML Injection in the History ModuleCVE-2024-34355 · GHSA-XJWX-78X7-Q6JC typo3/cms-core Composer Low Fix reported
TYPO3 vulnerable to Cross-Site Scripting in the ShowImageControllerCVE-2024-34357 · GHSA-HW6C-6GWQ-3M3M typo3/cms-core Composer Medium Fix reported
TYPO3 vulnerable to an Uncontrolled Resource Consumption in the ShowImageControllerCVE-2024-34358 · GHSA-36G8-62QV-5957 typo3/cms-core Composer Medium Fix reported
TYPO3 vulnerable to Improper Access Control Persisting File Abstraction Layer Entities via Data HandlerCVE-2024-25121 · GHSA-RJ3X-WVC6-5J66 typo3/cms-core Composer High Fix reported
TYPO3 Install Tool vulnerable to Information Disclosure of Encryption KeyCVE-2024-25119 · GHSA-H47M-3F78-QP9G typo3/cms-core Composer Medium Fix reported
TYPO3 Backend Forms vulnerable to Information Disclosure of Hashed PasswordsCVE-2024-25118 · GHSA-38R2-5695-334W typo3/cms-core Composer Medium Fix reported