TYPO3 vulnerabilities
Every vulnerability this feed holds for TYPO3, merged from five public registers and ordered by what warrants attention first — exploited in the wild, then CVSS, then recency.
7 vulnerabilities tracked.
- 8.8 The actions linked in the emails of the extension (e.g.
- 7.1 Backend actions and ajax routes of the mail module do not check whether the backend user has access to the page of the requested mail or…
- 6.9 The click tracking middleware does not validate the authentication code of a recipient if the code is omitted.
- 5.3 The click tracking middleware accepts an arbitrary target URL and redirects to it.
- 5.3 Saving the configuration of the mail backend module writes submitted settings to the page TSconfig without restricting them to the…
- 5.3 Content of external URL mails, their stylesheets and images to embed is fetched by the server without validating the target host.
- 5.1 The HTML content of mails and tracked URLs are rendered unescaped in the backend module.
What this covers
This feed accumulates forward from the day it started storing records, and a name search that finds nothing here is also looked up against the registers directly — so an older advisory resolves even when it predates the corpus. It is still a reading view, not a substitute for the vendor's own advisory, and absence from this page is not a statement that TYPO3 is free of vulnerabilities.
Query this from an agent over MCP · Check a lockfile by version
Other vendors tracked here
Microsoft Google Red Hat n/a Apache Software Foundation MediaTek, Inc. Linux Apple Gitea WAVLINK Dell Eclipse Foundation vim jpadilla Huawei WSO2 AM System Unknown py-pdf vercel nodejs PostgreSQL Control Web Panel aws