TYPO3 Projekte überwachen
TYPO3 12
Neueste Version: 12.4.45
TYPO3 13
Neueste Version: 13.4.35
TYPO3 14
Neueste Version: 14.3.7
Security Advisories
TYPO3-CORE-SA-2026-021: Broken Access Control in Backend and Install Tool
CVE-2026-19418 · 11.08.2026
TYPO3-CORE-SA-2026-019: Broken Access Control in Form Framework
CVE-2026-11607 · 09.06.2026
TYPO3-CORE-SA-2026-018: Insecure Deserialization in Core API
CVE-2026-49740 · 09.06.2026
TYPO3-CORE-SA-2026-017: Privilege Escalation & SQL Injection in Form Framework
CVE-2026-49741 · 09.06.2026
TYPO3-CORE-SA-2026-016: Broken Access Control in File Abstraction Layer
CVE-2026-49738 · 09.06.2026
TYPO3-CORE-SA-2026-015: Broken Access Control in Backend API
CVE-2026-47352 · 09.06.2026
TYPO3-CORE-SA-2026-014: Broken Access Control in Clipboard
CVE-2026-47351 · 09.06.2026
TYPO3-CORE-SA-2026-013: Broken Access Control in Media Module
CVE-2026-49742 · 09.06.2026
TYPO3-CORE-SA-2026-012: Broken Access Control in DataHandler
CVE-2026-47350 · 09.06.2026
TYPO3-CORE-SA-2026-011: Broken Access Control in Recycler
CVE-2026-47349 · 09.06.2026
TYPO3-CORE-SA-2026-010: Cross-Site Scripting in Indexed Search
CVE-2026-47348 · 09.06.2026
TYPO3-CORE-SA-2026-009: Open Redirect in TYPO3 CMS
CVE-2026-47347 · 09.06.2026
TYPO3-CORE-SA-2026-008: Broken Access Control in Form Framework
CVE-2026-47346 · 09.06.2026
TYPO3-CORE-SA-2026-007: Broken Access Control in File Abstraction Layer
CVE-2026-47343 · 09.06.2026
TYPO3 CMS Allows Insecure Deserialization via Mailer File Spool
CVE-2026-0859 · 13.01.2026
TYPO3 CMS exposes sensitive information in an error message
CVE-2025-59016 · 09.09.2025
TYPO3 CMS has an open‑redirect vulnerability
CVE-2025-59013 · 09.09.2025
TYPO3 CMS uses insufficient entropy when generating passwords
CVE-2025-59015 · 09.09.2025
TYPO3 Allows Privilege Escalation to System Maintainer
CVE-2025-47940 · 20.05.2025
TYPO3 Allows Unrestricted File Upload in File Abstraction Layer
CVE-2025-47939 · 20.05.2025
TYPO3 Unverified Password Change for Backend Users
CVE-2025-47938 · 20.05.2025
TYPO3 Allows Information Disclosure via DBAL Restriction Handling
CVE-2025-47937 · 20.05.2025
TYPO3 Potential Open Redirect via Parsing Differences
CVE-2024-55892 · 14.01.2025
TYPO3 Cross-Site Scripting in Form Framework validation handling
PKSA-yj7d-v8zz-m6nq · 30.05.2024
TYPO3 vulnerable to an Uncontrolled Resource Consumption in the ShowImageController
CVE-2024-34358 · 14.05.2024
TYPO3 vulnerable to Cross-Site Scripting in the ShowImageController
CVE-2024-34357 · 14.05.2024
TYPO3 vulnerable to Cross-Site Scripting in the Form Manager Module
CVE-2024-34356 · 14.05.2024
TYPO3 vulnerable to an HTML Injection in the History Module
CVE-2024-34355 · 14.05.2024
TYPO3 Install Tool vulnerable to Code Execution
CVE-2024-22188 · 13.02.2024
Path Traversal in TYPO3 File Abstraction Layer Storages
CVE-2023-30451 · 13.02.2024
TYPO3 vulnerable to Improper Access Control Persisting File Abstraction Layer Entities via Data Handler
CVE-2024-25121 · 13.02.2024
TYPO3 vulnerable to Improper Access Control of Resources Referenced by t3:// URI Scheme
CVE-2024-25120 · 13.02.2024
TYPO3 Install Tool vulnerable to Information Disclosure of Encryption Key
CVE-2024-25119 · 13.02.2024
TYPO3 Backend Forms vulnerable to Information Disclosure of Hashed Passwords
CVE-2024-25118 · 13.02.2024
TYPO3-CORE-SA-2023-006: Weak Authentication in Session Handling
CVE-2023-47127 · 14.11.2023
Information Disclosure due to Out-of-scope Site Resolution
CVE-2023-38499 · 25.07.2023
TYPO3-CORE-SA-2023-001: Persisted Cross-Site Scripting in Frontend Rendering
CVE-2023-24814 · 07.02.2023
TYPO3-CORE-SA-2022-017: By-passing Cross-Site Scripting Protection in HTML Sanitizer
CVE-2022-23499 · 13.12.2022
TYPO3-CORE-SA-2022-016: Sensitive Information Disclosure via YAML Placeholder Expressions in Site Configuration
CVE-2022-23504 · 13.12.2022
TYPO3-CORE-SA-2022-015: Arbitrary Code Execution via Form Framework
CVE-2022-23503 · 13.12.2022
TYPO3-CORE-SA-2022-014: Insufficient Session Expiration after Password Reset
CVE-2022-23502 · 13.12.2022
TYPO3-CORE-SA-2022-013: Weak Authentication in Frontend Login
CVE-2022-23501 · 13.12.2022
TYPO3-CORE-SA-2022-012: Denial of Service in Page Error Handling
CVE-2022-23500 · 13.12.2022
TYPO3-CORE-SA-2022-006: Denial of Service in Page Error Handling
CVE-2022-36104 · 13.09.2022
TYPO3-CORE-SA-2022-011: By-passing Cross-Site Scripting Protection in HTML Sanitizer
CVE-2022-36020 · 13.09.2022
TYPO3-CORE-SA-2022-010: Cross-Site Scripting in <f:asset.css> view helper
CVE-2022-36108 · 13.09.2022
TYPO3-CORE-SA-2022-009: Stored Cross-Site Scripting via FileDumpController
CVE-2022-36107 · 13.09.2022
TYPO3-CORE-SA-2022-008: Missing check for expiration time of password reset token for backend users
CVE-2022-36106 · 13.09.2022
TYPO3-CORE-SA-2022-007: User Enumeration via Response Timing
CVE-2022-36105 · 13.09.2022
TYPO3-CORE-SA-2022-005: Insufficient Session Expiration in Admin Tool
CVE-2022-31050 · 14.06.2022
TYPO3-CORE-SA-2022-004: Cross-Site Scripting in Frontend Login Mailer
CVE-2022-31049 · 14.06.2022
TYPO3-CORE-SA-2022-003: Cross-Site Scripting in Form Framework
CVE-2022-31048 · 14.06.2022
TYPO3-CORE-SA-2022-002: Information Disclosure via Exception Handling/Logger
CVE-2022-31047 · 14.06.2022
TYPO3-CORE-SA-2022-001: Information Disclosure via Export Module
CVE-2022-31046 · 14.06.2022
TYPO3 SQL injection vulnerability in the Extbase Framework
CVE-2013-1842 · 17.05.2022
TYPO3 Open redirect vulnerability in the Access tracking mechanism
CVE-2013-1843 · 17.05.2022
TYPO3 Improper Access Control vulnerability
CVE-2013-7081 · 17.05.2022
TYPO3 is vulnerable to Mass Assignment in the Extension table administration library
CVE-2013-7080 · 17.05.2022
TYPO3 Improper Access Management in the File Abstraction Layer
CVE-2013-4320 · 17.05.2022
TYPO3 Sensitive Information Disclosure via escapeStrForLike method
CVE-2010-5104 · 17.05.2022
TYPO3 Cross-site scripting (XSS) vulnerability in the Extbase Framework
CVE-2013-7078 · 17.05.2022
TYPO3 Cross-site scripting (XSS) vulnerability in the Backend User Administration Module
CVE-2013-7077 · 17.05.2022
TYPO3 API function vulnerable to Cross-site Scripting
CVE-2009-3633 · 02.05.2022
TYPO3 Unrestricted File Upload vulnerability
CVE-2008-2717 · 01.05.2022
TYPO3 is vulnerable to Information Disclosure in the HTML mailing API
CVE-2010-3673 · 21.04.2022
TYPO3-CORE-SA-2021-015: HTTP Host Header Injection in Request Handling
CVE-2021-41114 · 05.10.2021
TYPO3-CORE-SA-2021-014: Cross-Site-Request-Forgery in Backend URI Handling
CVE-2021-41113 · 05.10.2021
TYPO3-CORE-SA-2021-013: Cross-Site Scripting via Rich-Text Content
CVE-2021-32768 · 10.08.2021
TYPO3-CORE-SA-2021-012: Information Disclosure in User Authentication
CVE-2021-32767 · 20.07.2021
TYPO3-CORE-SA-2021-011: Cross-Site Scripting in Backend Grid View
CVE-2021-32669 · 20.07.2021
TYPO3-CORE-SA-2021-010: Cross-Site Scripting in Query Generator & Query View
CVE-2021-32668 · 20.07.2021
TYPO3-CORE-SA-2021-009: Cross-Site Scripting in Page Preview
CVE-2021-32667 · 20.07.2021
TYPO3-CORE-SA-2021-007: Cross-Site Scripting in Content Preview
CVE-2021-21340 · 16.03.2021
TYPO3-CORE-SA-2021-004: Cross-Site Scripting in Form Framework
CVE-2021-21358 · 16.03.2021
TYPO3-CORE-SA-2021-008: Cross-Site Scripting in Content Preview
CVE-2021-21370 · 16.03.2021
TYPO3-CORE-SA-2021-006: Cleartext storage of session identifier
CVE-2021-21339 · 16.03.2021
TYPO3-CORE-SA-2021-005: Denial of Service in Page Error Handling
CVE-2021-21359 · 16.03.2021
TYPO3-CORE-SA-2021-003: Broken Access Control in Form Framework
CVE-2021-21357 · 16.03.2021
TYPO3-CORE-SA-2021-002: Unrestricted File Upload in Form Framework
CVE-2021-21355 · 16.03.2021
TYPO3-CORE-SA-2021-001: Open Redirection in Login Handling
CVE-2021-21338 · 16.03.2021
TYPO3-CORE-SA-2020-012: XML External Entity in Dashboard Widget
CVE-2020-26229 · 17.11.2020
TYPO3-CORE-SA-2020-011: Cleartext storage of session identifier
CVE-2020-26228 · 17.11.2020
TYPO3-CORE-SA-2020-010: Cross-Site Scripting in Fluid view helpers
CVE-2020-26227 · 17.11.2020
TYPO3-CORE-SA-2020-008: Sensitive Information Disclosure
CVE-2020-15098 · 28.07.2020
TYPO3-CORE-SA-2020-007: Potential Privilege Escalation
CVE-2020-15099 · 28.07.2020
TYPO3-CORE-SA-2020-001: Information Disclosure in Password Reset
CVE-2020-11063 · 12.05.2020
TYPO3-CORE-SA-2020-006: Same-Site Request Forgery to Backend User Interface
CVE-2020-11069 · 12.05.2020
TYPO3-CORE-SA-2020-005: Insecure Deserialization in Backend User Settings
CVE-2020-11067 · 12.05.2020
TYPO3-CORE-SA-2020-004: Class destructors causing side-effects when being unserialized
CVE-2020-11066 · 12.05.2020
TYPO3-CORE-SA-2020-003: Cross-Site Scripting in Link Handling
CVE-2020-11065 · 12.05.2020
TYPO3-CORE-SA-2020-002: Cross-Site Scripting in Form Engine
CVE-2020-11064 · 12.05.2020
Insecure Deserialization in Query Generator & Query View
CVE-2019-19849 · 17.12.2019
SQL Injection in low-level Query Generator
CVE-2019-19850 · 17.12.2019
Directory Traversal on ZIP extraction
CVE-2019-19848 · 17.12.2019
Cross-Site Scripting in Filelist Module
PKSA-kgft-67y3-84tv · 17.12.2019
Possible Insecure Deserialization in Extbase Request Handling
PKSA-ngtt-95zk-116b · 17.12.2019
Cross-Site Scripting in Link Handling
PKSA-138z-v62j-p84r · 17.12.2019
Cross-Site Scripting in Form Framework validation handling
PKSA-4jxn-z7kk-hs67 · 17.12.2019
Possible deserialization side-effects in symfony/cache
CVE-2019-10912 · 25.06.2019
Insecure Deserialization in TYPO3 CMS
CVE-2019-12747 · 25.06.2019
Cross-Site Scripting in Link Handling
CVE-2019-12748 · 25.06.2019
Information Disclosure in Backend User Interface
PKSA-xxc6-f4fc-bhvm · 25.06.2019
Arbitrary Code Execution and Cross-Site Scripting in Backend API
PKSA-f5jr-dg29-ng7s · 25.06.2019
Broken Access Control in Import Module
PKSA-rfsn-q422-vhgz · 25.06.2019
Security Misconfiguration in Frontend Session Handling
PKSA-tdw8-rcwc-259v · 25.06.2019
Possible Arbitrary Code Execution in Image Processing
CVE-2019-11832 · 07.05.2019
Cross-Site Scripting in Fluid Engine
CVE-2020-15241 · 07.05.2019
Security Misconfiguration in User Session Handling
PKSA-44gr-w8s1-1nzt · 07.05.2019
Information Disclosure in Page Tree
PKSA-39st-t16f-w2cm · 07.05.2019
Information Disclosure in User Authentication
PKSA-6bzd-gjbs-96f6 · 07.05.2019
Cross-Site Scripting in Bootstrap CSS toolkit
CVE-2018-14041 · 22.01.2019
Cross-Site Scripting in Fluid ViewHelpers
PKSA-ctc9-m9tc-zx87 · 22.01.2019
Cross-Site Scripting in Form Framework
PKSA-3886-d5zt-qwrh · 22.01.2019
Information Disclosure of Installed Extensions
PKSA-t2bp-d8b3-sc74 · 22.01.2019
Broken Access Control in Localization Handling
PKSA-xy95-nkpr-w5rm · 22.01.2019
Security Misconfiguration for Backend User Accounts
PKSA-jktp-yswk-rrww · 22.01.2019
Cross-Site Scripting in Language Pack Handling
PKSA-zmbz-zt2r-qk52 · 22.01.2019
Arbitrary Code Execution via File List Module
PKSA-fnjs-nj4b-mz65 · 22.01.2019
Cross-Site Scripting in CKEditor
CVE-2018-17960 · 11.12.2018
Cross-Site Scripting in Frontend User Login
PKSA-8d3v-z4d4-n11g · 11.12.2018
Security Misconfiguration in Install Tool Cookie
PKSA-2q76-3mvw-8hk3 · 11.12.2018
Denial of Service in Frontend Record Registration
PKSA-q5ym-2n81-pfr3 · 11.12.2018
Cross-Site Scripting in Backend Modal Component
PKSA-yzt1-7625-ng3j · 11.12.2018
Cross-Site Scripting in Online Media Asset Rendering
PKSA-qszd-7zv5-3hkx · 11.12.2018
Denial of Service in Online Media Asset Handling
PKSA-rvt7-wnc1-w2gd · 11.12.2018
Information Disclosure in Install Tool
PKSA-sntp-fryn-mxq8 · 11.12.2018
Authentication Bypass in TYPO3 CMS
PKSA-f4p7-n9ff-b1y3 · 12.07.2018
Insecure Deserialization & Arbitrary Code Execution in TYPO3 CMS
PKSA-53xp-pxrc-sbvb · 12.07.2018
Privilege Escalation & SQL Injection in TYPO3 CMS
PKSA-jndc-1hrg-s597 · 12.07.2018
Insecure Deserialization in TYPO3 CMS
PKSA-nx6h-6z7h-64pg · 12.07.2018
Keine Security Advisories in dieser Auswahl.