Security
فارسی
All products

typo3/cms-backend

Composer · Package
26 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
TYPO3 CMS: Broken Access Control in Media ModuleCVE-2026-47351 · GHSA-Q93M-25XV-94HHVersion ranges need review. typo3/cms-backendtypo3/cms-core Composer Medium Fix reported
TYPO3 CMS has Broken Access Control in Backend APICVE-2026-47352 · GHSA-2J54-93Q2-3HJQVersion ranges need review. typo3/cms-backendtypo3/cms-core Composer Medium Fix reported
TYPO3 CMS - Broken Access Control in Backend and Install ToolCVE-2026-19418 · GHSA-68JX-F42C-7599Version ranges need review. typo3/cms-backendtypo3/cms-core Composer High Fix reported
TYPO3 CMS Stores Cleartext Password in User Settings ModuleCVE-2026-6553 · GHSA-XVV6-P4WF-MVX7 typo3/cms-backend Composer High Fix reported
TYPO3 CMS Allows Broken Access Control in Edit Document ControllerCVE-2025-59020 · GHSA-5J7Q-WMH7-CQHG typo3/cms-backend Composer Medium Fix reported
TYPO3 CSV download feature information disclosureCVE-2025-59019 · GHSA-J8VM-7Q52-2M2M typo3/cms-backendtypo3/cms-recordlist Composer Medium Fix reported
TYPO3 backend modules have Broken Access ControlCVE-2025-59017 · GHSA-2FHW-2J7M-MR4M typo3/cms-backendtypo3/cms-beuser Composer Medium Fix reported
TYPO3 Bookmark Toolbar vulnerable to denial of serviceCVE-2025-59014 · GHSA-XRCQ-533Q-8RXW typo3/cms-backend Composer Medium Fix reported
The TYPO3 CMS Backend has Broken Authentication in Backend MFACVE-2025-47941 · GHSA-744G-7QM9-HJH9 typo3/cms-backend Composer High Fix reported
Denial of Service in TYPO3 Bookmark ToolbarCVE-2024-34537 · GHSA-FFCV-V6PW-QHRP typo3/cms-backend Composer Low Fix reported
Information Disclosure in TYPO3 Page TreeCVE-2024-47780 · GHSA-RF5M-H8Q9-9W6Q typo3/cms-backend Composer Low Fix reported
TYPO3 Cross-site Scripting vulnerability in the file backend moduleCVE-2008-5644 · GHSA-733V-22MG-7F8W typo3/cms-backend Composer Medium Fix reported
TYPO3 Backend vulnerable to Frame HijackingCVE-2009-3630 · GHSA-MG66-3X8X-R8G2 typo3/cms-backend Composer Medium Fix reported
TYPO3 Backend Command Injection via Shell Metacharacters in Uploaded File NameCVE-2009-3631 · GHSA-3CQW-PXGR-JHRM typo3/cms-backend Composer High Fix reported
TYPO3 Backend Discloses Encryption KeyCVE-2009-3628 · GHSA-2WGG-C8XC-7GG3 typo3/cms-backend Composer Medium Fix reported
TYPO3 Backend vulnerable to Cross-site ScriptingCVE-2009-3629 · GHSA-G857-P997-WX7W typo3/cms-backend Composer Low Fix reported
TYPO3 cross-site scripting (XSS) vulnerability in the RemoveXSS function and the backendCVE-2010-3715 · GHSA-MWQV-JFF6-5V62 typo3/cms-backend Composer Medium Fix reported
TYPO3 Cross-site Scripting vulnerability in the extension manager and backend formsCVE-2010-3659 · GHSA-JR79-65XR-Q7CX typo3/cms-backend Composer Medium Fix reported
TYPO3 SQL injection vulnerability on the backendCVE-2010-3662 · GHSA-4RVC-5HRH-QMWF typo3/cms-backend Composer High Fix reported
TYPO3 is vulnerable to Information Disclosure on the backendCVE-2010-3664 · GHSA-8XP9-99H5-4VCG typo3/cms-backend Composer Medium Fix reported