Security Advisories

All Advisories

Subscribe to our Security Advisories Mailing List and receive Security Bulletins via E-Mail

Wed. 2nd September, 2020
TYPO3-EXT-SA-2020-017: Multiple vulnerabilities in extension "Event management and registration" (sf_event_mgt)

Categories: Development, Security

Advisory type: TYPO3 Extensions
Created by Torben Hansen

It has been discovered that the extension "Event management and registration" (sf_event_mgt) is susceptible to Information Disclosure and Broken…
Read more
Wed. 2nd September, 2020
TYPO3-EXT-SA-2020-016: Information Disclosure in extension "Localization Manager" (l10nmgr)

Categories: Development, Security

Advisory type: TYPO3 Extensions
Created by Torben Hansen

It has been discovered that the extension "Localization Manager" (l10nmgr) is susceptible to Information Disclosure.
Read more
Wed. 29th July, 2020
TYPO3-EXT-SA-2020-015: Cross-Site Scripting in extension "Kitodo.Presentation" (dlf)

Categories: Development, Security

Advisory type: TYPO3 Extensions
Created by Torben Hansen

It has been discovered that the extension "Kitodo.Presentation" (dlf) is susceptible to Cross-Site Scripting.
Read more
Tue. 28th July, 2020
TYPO3-CORE-SA-2020-008: Sensitive Information Disclosure

Categories: Development

Advisory type: TYPO3 CMS
Created by Oliver Hader

It has been discovered that TYPO3 CMS is susceptible to sensitive information disclosure.
Read more
Tue. 28th July, 2020
TYPO3-CORE-SA-2020-007: Potential Privilege Escalation

Categories: Development

Advisory type: TYPO3 CMS
Created by Oliver Hader

It has been discovered that TYPO3 CMS is susceptible to privilege escalation.
Read more
Tue. 28th July, 2020
TYPO3-EXT-SA-2020-014: Sensitive Information Disclosure in extension "Media Content Element" (mediace)

Categories: Development

Advisory type: TYPO3 Extensions
Created by Oliver Hader

It has been discovered that the extension "Media Content Element" (mediace) is susceptible to Sensitive Information Disclosure.
Read more
Tue. 28th July, 2020
TYPO3-PSA-2020-001: Critical vulnerability in legacy versions of TYPO3 CMS

Categories: Development

Advisory type: Public Service Announcements

It has been discovered that TYPO3 CMS is susceptible to sensitive information disclosure in previous TYPO3 versions which are not maintained by the…
Read more
Tue. 7th July, 2020
TYPO3-EXT-SA-2020-013: Multiple vulnerabilities in extension "mm_forum" (mm_forum)

Categories: Development, Security

Advisory type: TYPO3 Extensions
Created by Torben Hansen

It has been discovered that the extension "mm_forum" (mm_forum) is susceptible to Cross Site Scripting and CSRF.
Read more
Tue. 7th July, 2020
TYPO3-EXT-SA-2020-012: Cross-Site Scripting in extension "Google reCAPTCHA (v2/v3)" (jh_captcha)

Categories: Development, Security

Advisory type: TYPO3 Extensions
Created by Torben Hansen

It has been discovered that the extension "Google reCAPTCHA (v2/v3)" (jh_captcha) is susceptible to Cross-Site Scripting.
Read more
Tue. 7th July, 2020
TYPO3-EXT-SA-2020-011: Remote Code Execution in extension "Turn!" (turn)

Categories: Development, Security

Advisory type: TYPO3 Extensions
Created by Torben Hansen

It has been discovered that the extension "Turn!" (turn) is susceptible to Remote Code Execution.
Read more

Security Advisories

TYPO3-EXT-SA-2020-017: Multiple vulnerabilities in extension "Event management and registration" (sf_event_mgt)

TYPO3-EXT-SA-2020-016: Information Disclosure in extension "Localization Manager" (l10nmgr)

TYPO3-EXT-SA-2020-015: Cross-Site Scripting in extension "Kitodo.Presentation" (dlf)

TYPO3-CORE-SA-2020-008: Sensitive Information Disclosure

TYPO3-CORE-SA-2020-007: Potential Privilege Escalation

TYPO3-EXT-SA-2020-014: Sensitive Information Disclosure in extension "Media Content Element" (mediace)

TYPO3-PSA-2020-001: Critical vulnerability in legacy versions of TYPO3 CMS

TYPO3-EXT-SA-2020-013: Multiple vulnerabilities in extension "mm_forum" (mm_forum)

TYPO3-EXT-SA-2020-012: Cross-Site Scripting in extension "Google reCAPTCHA (v2/v3)" (jh_captcha)

TYPO3-EXT-SA-2020-011: Remote Code Execution in extension "Turn!" (turn)

Information

Downloads

Community

Popular links

Professional Content Management

Inspire people to share

A Community Effort

Do you have a question?

Security Advisories

Information

Downloads

Community

Popular links