Security Advisories

All Advisories

Subscribe to our Security Advisories Mailing List and receive Security Bulletins via E-Mail

Tue. 16th March, 2021
TYPO3-CORE-SA-2021-001: Open Redirection in Login Handling

Categories: Development, TYPO3 CMS

Advisory type: TYPO3 CMS
Created by Oliver Hader

It has been discovered that TYPO3 CMS is susceptible to open redirection.
Read more
Tue. 16th March, 2021
TYPO3-EXT-SA-2021-003: Cross-Site Scripting in extension "Aimeos shop and e-commerce framework" (aimeos)

Categories: Development, Security

Advisory type: TYPO3 Extensions
Created by Torben Hansen

It has been discovered that the extension"Aimeos shop and e-commerce framework" (aimeos) is susceptible to Cross-Site Scripting.
Read more
Tue. 16th March, 2021
TYPO3-EXT-SA-2021-002: Denial of Service in extension "Code Highlight" (codehighlight)

Categories: Development, Security

Advisory type: TYPO3 Extensions
Created by Torben Hansen

It has been discovered that the extension "Code Highlight" (codehighlight) is susceptible to Denial of Service.
Read more
Tue. 16th March, 2021
TYPO3-EXT-SA-2021-001: SQL Injection in extension "VHS: Fluid ViewHelpers" (vhs)

Categories: Development, Security

Advisory type: TYPO3 Extensions
Created by Torben Hansen

It has been discovered that the extension "VHS: Fluid ViewHelpers" (vhs) is susceptible to SQL Injection.
Read more
Tue. 17th November, 2020
TYPO3-PSA-2020-003: Mitigation of Cross-Site Scripting Vulnerabilities in File Upload Handling

Categories: Development, TYPO3 CMS

Advisory type: Public Service Announcements
Created by Oliver Hader

Repeating and refining public service announcement TYPO3-PSA-2019-010.
Read more
Tue. 17th November, 2020
TYPO3-PSA-2020-002: Protecting Install Tool with Sudo Mode

Categories: Development, TYPO3 CMS

Advisory type: Public Service Announcements
Created by Oliver Hader

Accessing Install Tool via TYPO3 Backend requires password verification - known as Sudo Mode.
Read more
Tue. 17th November, 2020
TYPO3-CORE-SA-2020-012: XML External Entity in Dashboard Widget

Categories: Development, TYPO3 CMS

Advisory type: TYPO3 CMS
Created by Oliver Hader

It has been discovered that TYPO3 CMS is susceptible to XML external entity processing.
Read more
Tue. 17th November, 2020
TYPO3-CORE-SA-2020-011: Cleartext storage of session identifier

Categories: Development, TYPO3 CMS

Advisory type: TYPO3 CMS
Created by Oliver Hader

It has been discovered that TYPO3 CMS is susceptible to sensitive data exposure.
Read more
Tue. 17th November, 2020
TYPO3-CORE-SA-2020-010: Cross-Site Scripting in Fluid view helpers

Categories: Development, TYPO3 CMS

Advisory type: TYPO3 CMS
Created by Oliver Hader

It has been discovered that TYPO3 CMS is vulnerable to cross-site scripting..
Read more
Tue. 17th November, 2020
TYPO3-CORE-SA-2020-009: Cross-Site Scripting through Fluid view helper arguments

Categories: Development, TYPO3 CMS

Advisory type: TYPO3 CMS
Created by Claus Due

It has been discovered that the Fluid Engine is vulnerable to cross-site scripting.
Read more

Security Advisories

TYPO3-CORE-SA-2021-001: Open Redirection in Login Handling

TYPO3-EXT-SA-2021-003: Cross-Site Scripting in extension "Aimeos shop and e-commerce framework" (aimeos)

TYPO3-EXT-SA-2021-002: Denial of Service in extension "Code Highlight" (codehighlight)

TYPO3-EXT-SA-2021-001: SQL Injection in extension "VHS: Fluid ViewHelpers" (vhs)

TYPO3-PSA-2020-003: Mitigation of Cross-Site Scripting Vulnerabilities in File Upload Handling

TYPO3-PSA-2020-002: Protecting Install Tool with Sudo Mode

TYPO3-CORE-SA-2020-012: XML External Entity in Dashboard Widget

TYPO3-CORE-SA-2020-011: Cleartext storage of session identifier

TYPO3-CORE-SA-2020-010: Cross-Site Scripting in Fluid view helpers

TYPO3-CORE-SA-2020-009: Cross-Site Scripting through Fluid view helper arguments

Information

Downloads

Community

Popular links

Professional Content Management

Inspire people to share

A Community Effort

Do you have a question?

Security Advisories

Information

Downloads

Community

Popular links