Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 312
Reset filtersXML External Entity (XXE) Processing in TYPO3 Core
Cross-Site Scripting (XSS) in TYPO3 component Backend
TYPO3 Cross-Site Scripting (XSS) in form component
TYPO3 Cross-Site Scripting in legacy form component
TYPO3 Cross-Site Scripting in link validator component
TYPO3 Multiple Cross-Site Scripting vulnerabilities in frontend
TYPO3 SQL Injection in dbal
Cross-Site Scripting in TYPO3 component Indexed Search
TYPO3 is susceptible to Cross-Site Flashing
Multiple Cross-Site Scripting vulnerabilities in TYPO3 backend
TYPO3 Frontend vulnerable to Unauthenticated Path Disclosure
TYPO3 Brute Force Protection Bypass in backend login
TYPO3 Information Disclosure Vulnerability Exploitable by Editors
TYPO3 Cross-Site Scripting Vulnerability Exploitable by Editors
TYPO3 frontend login vulnerable to Session Fixation
TYPO3 may allow editors to change, create, or delete metadata of files not within their file mounts
TYPO3 possible cache poisoning on the homepage when anchors are used
ExtJS JavaScript framework used in TYPO3 vulnerable to Cross-site Scripting
TYPO3 Arbitrary Shell Execution in Swiftmailer library
TYPO3 Possible Insecure Deserialization in Extbase Request Handling
TYPO3 Cross-Site Scripting in Filelist Module
TYPO3 Cross-Site Scripting in Link Handling
TYPO3 Cross-Site Scripting in Form Framework validation handling
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.