Security Advisories

All Advisories

Subscribe to our Security Advisories Mailing List and receive Security Bulletins via E-Mail

Tue. 17th November, 2020
TYPO3-CORE-SA-2020-009: Cross-Site Scripting through Fluid view helper arguments

Categories: Development, TYPO3 CMS

Advisory type: TYPO3 CMS
Created by Claus Due

It has been discovered that the Fluid Engine is vulnerable to cross-site scripting.
Read more
Tue. 17th November, 2020
TYPO3-EXT-SA-2020-020: Denial of Service in extension "Authenticator" (defbu_authenticator)

Categories: Development, Security

Advisory type: TYPO3 Extensions
Created by Torben Hansen

It has been discovered that the extension "Authenticator" (defbu_authenticator) is susceptible to Denial of Service.
Read more
Tue. 17th November, 2020
TYPO3-EXT-SA-2020-019: Sensitive Data Exposure in extension "View frontend statistics" (view_statistics)

Categories: Development, Security

Advisory type: TYPO3 Extensions
Created by Torben Hansen

It has been discovered that the extension "View frontend statistics" (view_statistics) is susceptible to Sensitive Data Exposure.
Read more
Tue. 17th November, 2020
TYPO3-EXT-SA-2020-018: Multiple vulnerabilities in extension "phpMyAdmin" (phpmyadmin)

Categories: Development, Security

Advisory type: TYPO3 Extensions
Created by Torben Hansen

It has been discovered that the extension "phpmyadmin" (phpmyadmin) is susceptible to SQL Injection and Cross-Site Scripting.
Read more
Wed. 2nd September, 2020
TYPO3-EXT-SA-2020-017: Multiple vulnerabilities in extension "Event management and registration" (sf_event_mgt)

Categories: Development, Security

Advisory type: TYPO3 Extensions
Created by Torben Hansen

It has been discovered that the extension "Event management and registration" (sf_event_mgt) is susceptible to Information Disclosure and Broken…
Read more
Wed. 2nd September, 2020
TYPO3-EXT-SA-2020-016: Information Disclosure in extension "Localization Manager" (l10nmgr)

Categories: Development, Security

Advisory type: TYPO3 Extensions
Created by Torben Hansen

It has been discovered that the extension "Localization Manager" (l10nmgr) is susceptible to Information Disclosure.
Read more
Wed. 29th July, 2020
TYPO3-EXT-SA-2020-015: Cross-Site Scripting in extension "Kitodo.Presentation" (dlf)

Categories: Development, Security

Advisory type: TYPO3 Extensions
Created by Torben Hansen

It has been discovered that the extension "Kitodo.Presentation" (dlf) is susceptible to Cross-Site Scripting.
Read more
Tue. 28th July, 2020
TYPO3-CORE-SA-2020-008: Sensitive Information Disclosure

Categories: Development

Advisory type: TYPO3 CMS
Created by Oliver Hader

It has been discovered that TYPO3 CMS is susceptible to sensitive information disclosure.
Read more
Tue. 28th July, 2020
TYPO3-CORE-SA-2020-007: Potential Privilege Escalation

Categories: Development

Advisory type: TYPO3 CMS
Created by Oliver Hader

It has been discovered that TYPO3 CMS is susceptible to privilege escalation.
Read more
Tue. 28th July, 2020
TYPO3-EXT-SA-2020-014: Sensitive Information Disclosure in extension "Media Content Element" (mediace)

Categories: Development

Advisory type: TYPO3 Extensions
Created by Oliver Hader

It has been discovered that the extension "Media Content Element" (mediace) is susceptible to Sensitive Information Disclosure.
Read more

Security Advisories

TYPO3-CORE-SA-2020-009: Cross-Site Scripting through Fluid view helper arguments

TYPO3-EXT-SA-2020-020: Denial of Service in extension "Authenticator" (defbu_authenticator)

TYPO3-EXT-SA-2020-019: Sensitive Data Exposure in extension "View frontend statistics" (view_statistics)

TYPO3-EXT-SA-2020-018: Multiple vulnerabilities in extension "phpMyAdmin" (phpmyadmin)

TYPO3-EXT-SA-2020-017: Multiple vulnerabilities in extension "Event management and registration" (sf_event_mgt)

TYPO3-EXT-SA-2020-016: Information Disclosure in extension "Localization Manager" (l10nmgr)

TYPO3-EXT-SA-2020-015: Cross-Site Scripting in extension "Kitodo.Presentation" (dlf)

TYPO3-CORE-SA-2020-008: Sensitive Information Disclosure

TYPO3-CORE-SA-2020-007: Potential Privilege Escalation

TYPO3-EXT-SA-2020-014: Sensitive Information Disclosure in extension "Media Content Element" (mediace)

Information

Downloads

Community

Popular links

Professional Content Management

Inspire people to share

A Community Effort

Certified Expertise

Do you have a question?

Security Advisories

Information

Downloads

Community

Popular links