TYPO3 typo3

• CVE-2025-47941 High 7.2 TYPO3 Has Broken Authentication in Backend MFA 0.5%
• CVE-2025-47940 High 7.2 TYPO3 CMS Vulnerable to Privilege Escalation to System Maintainer 0.5%
• CVE-2025-47939 Medium 5.4 TYPO3 CMS Vulnerable to Unrestricted File Upload in File Abstraction Layer 0.2%
• CVE-2025-47938 Low 3.8 TYPO3 Vulnerable to Unverified Password Change for Backend Users 0.3%
• CVE-2025-47937 Low 3.7 TYPO3 Vulnerable to Information Disclosure via DBAL Restriction Handling 0.3%
• CVE-2025-47936 Low 3.3 TYPO3 Vulnerable to Server Side Request Forgery via Webhooks 0.3%
• CVE-2024-55892 Medium 4.8 Potential Open Redirect via Parsing Differences in TYPO3 0.2%
• CVE-2024-55893 Medium 4.3 TYPO3 Cross-Site Request Forgery in Log Module 0.3%
• CVE-2024-55894 Medium 4.3 TYPO3 Cross-Site Request Forgery in Backend User Module 0.3%
• CVE-2024-55920 Medium 4.3 Cross-Site Request Forgery in Dashboard Module in TYPO3 0.2%
• CVE-2024-55921 High 7.5 Cross-Site Request Forgery in Extension Manager Module in TYPO3 0.4%
• CVE-2024-55922 Medium 5.4 Cross-Site Request Forgery in Form Framework Module in TYPO3 0.2%
• CVE-2024-55923 Medium 4.3 Cross-Site Request Forgery in Indexed Search Module in TYPO3 0.2%
• CVE-2024-55924 High 8.0 Cross-Site Request Forgery in Scheduler Module in TYPO3 0.3%
• CVE-2024-55945 Medium 4.3 Cross-Site Request Forgery in DB Check Module in TYPO3 0.2%
• CVE-2024-55891 Low 3.1 Information Disclosure via Exception Handling/Logger in TYPO3 0.3%
• CVE-2024-47780 Low 3.1 Information Disclosure in TYPO3 Page Tree 0.3%
• CVE-2024-34358 Medium 5.3 TYPO3 vulnerable to an Uncontrolled Resource Consumption in the ShowImageController 0.5%
• CVE-2024-34357 Medium 5.4 TYPO3 vulnerable to Cross-Site Scripting in ShowImageController 0.5%
• CVE-2024-34356 Medium 5.4 TYPO3 vulnerable to Cross-Site Scripting in the Form Manager Module 0.5%
• CVE-2024-34355 Low 3.5 TYPO3 vulnerable to an HTML Injection in the History Module 0.6%
• CVE-2024-25118 Medium 4.3 Information Disclosure of Hashed Passwords in TYPO3 Backend Forms 0.6%
• CVE-2024-25119 Medium 4.9 Information Disclosure of Encryption Key in TYPO3 Install Tool 0.4%
• CVE-2024-25120 Medium 4.3 Improper Access Control of Resources Referenced by t3:// URI Scheme in TYPO3 0.5%
• CVE-2024-25121 High 7.1 Improper Access Control Persisting File Abstraction Layer Entities via Data Handler in TYPO3 0.5%
• CVE-2023-47126 Low 3.7 Information Disclosure in Install Tool in typo3/cms-install 0.7%
• CVE-2023-47127 Medium 4.2 Weak Authentication in Session Handling in typo3/cms-core 0.6%
• CVE-2023-38499 Low 3.7 typo3/cms-core Information Disclosure due to Out-of-scope Site Resolution 1.1%
• CVE-2023-24814 High 8.8 Persisted Cross-Site Scripting in Frontend Rendering in typo3 0.8%
• CVE-2022-23504 Medium 5.7 TYPO3 contains Sensitive Information Disclosure via YAML Placeholder Expressions in Site Configuration 0.5%
• CVE-2022-23503 High 7.5 TYPO3 vulnerable to Arbitrary Code Execution via Form Framework 0.8%
• CVE-2022-23502 Medium 5.4 TYPO3 contains Insufficient Session Expiration after Password Reset 0.4%
• CVE-2022-23501 Medium 5.9 TYPO3 vulnerable to Improper Authentication in Frontend Login 0.5%
• CVE-2022-23500 Medium 5.9 TYPO3 subject to Uncontrolled Recursion resulting in Denial of Service 0.7%
• CVE-2022-36105 Medium 5.3 User Enumeration via Response Timing in TYPO3 1.3%
• CVE-2022-36106 Medium 5.4 Missing check for expiration time of password reset token in TYPO3 0.9%
• CVE-2022-36107 Medium 6.5 Stored Cross-Site Scripting via FileDumpController 0.9%
• CVE-2022-36104 Medium 5.9 Denial of Service via Page Error Handling in TYPO3/cms 1.6%
• CVE-2022-36108 Medium 6.5 Cross-Site Scripting in typo3/cms-core 0.9%
• CVE-2022-31050 Medium 6.0 Insufficient Session Expiration in TYPO3 Admin Tool 1.3%
• CVE-2022-31048 Medium 5.4 Cross-Site Scripting in Form Framework 0.8%
• CVE-2022-31049 Medium 5.4 Cross-Site Scripting in Frontend Login Mailer 0.8%
• CVE-2022-31046 Medium 4.3 Information Disclosure via Export Module in TYPO3 CMS 0.6%
• CVE-2022-31047 Medium 5.3 Insertion of Sensitive Information into Log File in typo3/cms-core 1.1%
• CVE-2021-41113 High 8.8 Cross-Site-Request-Forgery in Backend URI Handling in Typo3 0.6%
• CVE-2021-41114 Medium 4.8 HTTP Host Header Injection in Request Handling in Typo3 1.2%