It has been discovered that the extension "Varnishcache" (varnishcache) is susceptible to Insecure direct object reference.

It has been discovered that the extension "Bookdatabase" (extbookdatabase) is susceptible to Cross-Site Scripting.

It has been discovered that the extension "Kitodo.Presentation" (dlf) is susceptible to Server-side request forgery.

Components of TYPO3 CMS are based on PHP and are therefore not directly affected by the recent log4j vulnerabilities. However, additional services…

It has been discovered that TYPO3 CMS is susceptible to cache poisoning.

It has been discovered that the extension "Job Fair" (jobfair) is susceptible to Sensitive Data Exposure.

It has been discovered that the extension"pixx.io integration for TYPO3 (DAM)" (pixxio) is susceptible to Server-side request forgery, Remote Code…

It has been discovered that the extension "Code Highlight" (codehighlight) is susceptible to Denial of Service.

It has been discovered that the extension"Google for Jobs" (google_for_jobs) is susceptible to Cross-Site Scripting.

It has been discovered that TYPO3 CMS is vulnerable to HTTP header injection.