Security Advisories - typo3/cms

typo3/cms Security Advisories for 7.6.0 (38)

[MEDIUM] Typo3 XSS Vulnerability

PKSA-5qtp-bmj9-5zqr CVE-2015-8755 GHSA-56f9-5563-m2h7

Affected version: >=7.0,<7.6.1|>=6.2,<6.2.16

Reported by:
GitHub
[HIGH] TYPO3 Arbitrary Code Execution

PKSA-pt33-g1gs-b8wt CVE-2017-14251 GHSA-fh4q-hxrw-cjqq

Affected version: >=8.0.0,<8.7.5|>=7.6.0,<7.6.22

Reported by:
GitHub
[MEDIUM] Typo3 XSS Vulnerability

PKSA-j487-wgb6-g37w CVE-2018-6905 GHSA-3w22-wrwx-2r75

Affected version: <9.2.0

Reported by:
GitHub
Information Disclosure in Install Tool

PKSA-t1pf-cbfj-xyc5

Affected version: >=7.0.0,<7.6.32|>=8.0.0,<8.7.21|>=9.0.0,<9.5.2

Reported by:
FriendsOfPHP/security-advisories
Denial of Service in Online Media Asset Handling

PKSA-41jf-hqcz-2mxn

Affected version: >=7.0.0,<7.6.32|>=8.0.0,<8.7.21|>=9.0.0,<9.5.2

Reported by:
FriendsOfPHP/security-advisories
Cross-Site Scripting in Online Media Asset Rendering

PKSA-94ws-swjq-dm6m

Affected version: >=7.0.0,<7.6.32|>=8.0.0,<8.7.21|>=9.0.0,<9.5.2

Reported by:
FriendsOfPHP/security-advisories
Cross-Site Scripting in Backend Modal Component

PKSA-qzm7-ztqf-vx98

Affected version: >=7.0.0,<7.6.32|>=8.0.0,<8.7.21|>=9.0.0,<9.5.2

Reported by:
FriendsOfPHP/security-advisories
Denial of Service in Frontend Record Registration

PKSA-6wyc-z3gy-thx1

Affected version: >=7.0.0,<7.6.32|>=8.0.0,<8.7.21

Reported by:
FriendsOfPHP/security-advisories
Security Misconfiguration in Install Tool Cookie

PKSA-99fq-1t5c-yckv

Affected version: >=7.0.0,<7.6.32|>=8.0.0,<8.7.21|>=9.0.0,<9.5.2

Reported by:
FriendsOfPHP/security-advisories
Cross-Site Scripting in Frontend User Login

PKSA-j1v4-rzqw-fkx7

Affected version: >=7.0.0,<7.6.32|>=8.0.0,<8.7.21|>=9.0.0,<9.5.2

Reported by:
FriendsOfPHP/security-advisories
Insecure Deserialization & Arbitrary Code Execution in TYPO3 CMS

PKSA-z3s2-rzbm-sz8q

Affected version: >=7.0.0,<7.6.30|>=8.0.0,<8.7.17|>=9.0.0,<9.3.2

Reported by:
FriendsOfPHP/security-advisories
Authentication Bypass in TYPO3 CMS

PKSA-b9qm-1gk1-gg53

Affected version: >=7.0.0,<7.6.30|>=8.0.0,<8.7.17|>=9.0.0,<9.3.2

Reported by:
FriendsOfPHP/security-advisories
Information Disclosure in TYPO3 CMS

PKSA-mnvr-nmxv-xndp

Affected version: >=7.6.0,<7.6.22|>=8.0.0,<8.1.0|>=8.1.0,<8.2.0|>=8.2.0,<8.3.0|>=8.3.0,<8.4.0|>=8.4.0,<8.5.0|>=8.5.0,<8.6.0|>=8.6.0,<8.7.0|>=8.7.0,<8.7.5

Reported by:
FriendsOfPHP/security-advisories
Information Disclosure in TYPO3 CMS

PKSA-k469-q3x3-m5wx

Affected version: >=7.6.0,<7.6.22|>=8.0.0,<8.1.0|>=8.1.0,<8.2.0|>=8.2.0,<8.3.0|>=8.3.0,<8.4.0|>=8.4.0,<8.5.0|>=8.5.0,<8.6.0|>=8.6.0,<8.7.0|>=8.7.0,<8.7.5

Reported by:
FriendsOfPHP/security-advisories
Arbitrary Code Execution in TYPO3 CMS

PKSA-ycd2-g5rr-5v84

Affected version: >=7.6.0,<7.6.22|>=8.0.0,<8.1.0|>=8.1.0,<8.2.0|>=8.2.0,<8.3.0|>=8.3.0,<8.4.0|>=8.4.0,<8.5.0|>=8.5.0,<8.6.0|>=8.6.0,<8.7.0|>=8.7.0,<8.7.5

Reported by:
FriendsOfPHP/security-advisories
Cross-Site Scripting in TYPO3 CMS

PKSA-v896-gj2z-rpdn

Affected version: >=7.6.0,<7.6.16|>=8.0.0,<8.1.0|>=8.1.0,<8.2.0|>=8.2.0,<8.3.0|>=8.3.0,<8.4.0|>=8.4.0,<8.5.0|>=8.5.0,<8.6.0|>=8.6.0,<8.6.1

Reported by:
FriendsOfPHP/security-advisories
Remote Code Execution in third party library swiftmailer

PKSA-y99p-vnsv-h8zb

Affected version: >=6.2.0,<6.2.30|>=7.6.0,<7.6.15|>=8.0.0,<8.1.0|>=8.1.0,<8.2.0|>=8.2.0,<8.3.0|>=8.3.0,<8.4.0|>=8.4.0,<8.5.0|>=8.5.0,<8.5.1

Reported by:
FriendsOfPHP/security-advisories
Insecure Unserialize in TYPO3 Backend

PKSA-p9pn-ckkr-j9gj

Affected version: >=6.2.0,<6.2.29|>=7.6.0,<7.6.13|>=8.0.0,<8.1.0|>=8.1.0,<8.2.0|>=8.2.0,<8.3.0|>=8.3.0,<8.4.0|>=8.4.0,<8.4.1

Reported by:
FriendsOfPHP/security-advisories
Path Traversal in TYPO3 Core

PKSA-ycv6-vk58-crph

Affected version: >=6.2.0,<6.2.29|>=7.6.0,<7.6.13|>=8.0.0,<8.1.0|>=8.1.0,<8.2.0|>=8.2.0,<8.3.0|>=8.3.0,<8.4.0|>=8.4.0,<8.4.1

Reported by:
FriendsOfPHP/security-advisories
Cache Flooding in TYPO3 Frontend

PKSA-5nxh-6dvz-pwx2

Affected version: >=6.2.0,<6.2.27|>=7.6.0,<7.6.11|>=8.0.0,<8.1.0|>=8.1.0,<8.2.0|>=8.2.0,<8.3.0|>=8.3.0,<8.3.1

Reported by:
FriendsOfPHP/security-advisories
Cross-Site Scripting in TYPO3 Backend

PKSA-p1xw-bm9t-9mgz

Affected version: >=6.2.0,<6.2.27|>=7.6.0,<7.6.11|>=8.0.0,<8.1.0|>=8.1.0,<8.2.0|>=8.2.0,<8.3.0|>=8.3.0,<8.3.1

Reported by:
FriendsOfPHP/security-advisories
Cross-Site Scripting vulnerability in typolinks

PKSA-qkq5-q75r-wn3g

Affected version: >=6.2.0,<6.2.26|>=7.6.0,<7.6.10|>=8.0.0,<8.1.0|>=8.1.0,<8.2.0|>=8.2.0,<8.2.1

Reported by:
FriendsOfPHP/security-advisories
Information Disclosure in TYPO3 Backend

PKSA-q6zv-zcsh-21h8

Affected version: >=6.2.0,<6.2.26|>=7.6.0,<7.6.10|>=8.0.0,<8.1.0|>=8.1.0,<8.2.0|>=8.2.0,<8.2.1

Reported by:
FriendsOfPHP/security-advisories
Cross-Site Scripting in TYPO3 Backend

PKSA-h9f8-fcdd-y5cz

Affected version: >=6.2.0,<6.2.26|>=7.6.0,<7.6.10|>=8.0.0,<8.1.0|>=8.1.0,<8.2.0|>=8.2.0,<8.2.1

Reported by:
FriendsOfPHP/security-advisories
Cross-Site Scripting in third party library mso/idna-convert

PKSA-7xg5-dg5x-pjsz

Affected version: >=7.6.0,<7.6.10|>=8.0.0,<8.1.0|>=8.1.0,<8.2.0|>=8.2.0,<8.2.1

Reported by:
FriendsOfPHP/security-advisories
Insecure Unserialize in TYPO3 Import/Export

PKSA-8qyh-77q4-9nh2

Affected version: >=6.2.0,<6.2.26|>=7.6.0,<7.6.10|>=8.0.0,<8.1.0|>=8.1.0,<8.2.0|>=8.2.0,<8.2.1

Reported by:
FriendsOfPHP/security-advisories
SQL Injection in TYPO3 Frontend Login

PKSA-b4tx-8wsn-x1b1

Affected version: >=6.2.0,<6.2.26|>=7.6.0,<7.6.10

Reported by:
FriendsOfPHP/security-advisories
Missing Access Check in TYPO3 CMS

PKSA-6w93-8p38-vgt5

Affected version: >=6.2.0,<6.2.25|>=7.6.0,<7.6.8|>=8.0.0,<8.1.1|>=8.1.0,<8.1.1

Reported by:
FriendsOfPHP/security-advisories
Privilege Escalation in TYPO3 CMS

PKSA-3s1d-fjtc-fcqw

Affected version: >=6.2.0,<6.2.20|>=7.6.0,<7.6.5|>=8.0.0,<8.0.1

Reported by:
FriendsOfPHP/security-advisories
Authentication Bypass in TYPO3 CMS

PKSA-prb5-15dp-gbwb

Affected version: >=6.2.0,<6.2.20|>=7.6.0,<7.6.5|>=8.0.0,<8.0.1

Reported by:
FriendsOfPHP/security-advisories
Cross-Site Scripting in TYPO3 Backend

PKSA-yr4d-8qdk-2g3v

Affected version: >=6.2.0,<6.2.20|>=7.6.0,<7.6.5|>=8.0.0,<8.0.1

Reported by:
FriendsOfPHP/security-advisories
XML External Entity (XXE) Processing in TYPO3 Core

PKSA-smvw-xwn8-cj9h

Affected version: >=6.2.0,<6.2.19|>=7.6.0,<7.6.4

Reported by:
FriendsOfPHP/security-advisories
Denial of Service attack possibility in TYPO3 component Indexed Search

PKSA-g4rd-ftcg-mjm7

Affected version: >=6.2.0,<6.2.19|>=7.6.0,<7.6.4

Reported by:
FriendsOfPHP/security-advisories
Cross-Site Scripting in TYPO3 component CSS styled content

PKSA-ry96-ymk5-v9rd

Affected version: >=6.2.0,<6.2.19|>=7.6.0,<7.6.4

Reported by:
FriendsOfPHP/security-advisories
Cross-Site Scripting in link validator component

PKSA-xpn2-bkrt-rhyf

Affected version: >=6.2.0,<6.2.18|>=7.6.0,<7.6.3

Reported by:
FriendsOfPHP/security-advisories
Cross-Site Scripting vulnerability in typolinks

PKSA-m77p-d7vq-9f8t

Affected version: >=6.2.0,<6.2.16|>=7.0.0,<7.1.0|>=7.1.0,<7.2.0|>=7.2.0,<7.3.0|>=7.3.0,<7.4.0|>=7.4.0,<7.5.0|>=7.5.0,<7.6.0|>=7.6.0,<7.6.1

Reported by:
FriendsOfPHP/security-advisories
Multiple Cross-Site Scripting vulnerabilities in TYPO3 backend

PKSA-ndcf-67nc-gxt9

Affected version: >=6.2.0,<6.2.16|>=7.0.0,<7.1.0|>=7.1.0,<7.2.0|>=7.2.0,<7.3.0|>=7.3.0,<7.4.0|>=7.4.0,<7.5.0|>=7.5.0,<7.6.0|>=7.6.0,<7.6.1

Reported by:
FriendsOfPHP/security-advisories
Multiple Cross-Site Scripting vulnerabilities in frontend

PKSA-p5kg-j47t-6hk4

Affected version: >=6.2.0,<6.2.16|>=7.0.0,<7.1.0|>=7.1.0,<7.2.0|>=7.2.0,<7.3.0|>=7.3.0,<7.4.0|>=7.4.0,<7.5.0|>=7.5.0,<7.6.0|>=7.6.0,<7.6.1

Reported by:
FriendsOfPHP/security-advisories

typo3/cms Security Advisories for 7.6.0 (38)

[MEDIUM] Typo3 XSS Vulnerability

[HIGH] TYPO3 Arbitrary Code Execution

[MEDIUM] Typo3 XSS Vulnerability