| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2025-47938 | TYPO3 Vulnerable to Unverified Password Change for Backend Users | TYPO3 | typo3 | Low | 3.8 | 2025-05-20 13:49:39 | Deep Dive |
| CVE-2025-47937 | TYPO3 Vulnerable to Information Disclosure via DBAL Restriction Handling | TYPO3 | typo3 | Low | 3.7 | 2025-05-20 13:47:49 | Deep Dive |
| CVE-2025-47936 | TYPO3 Vulnerable to Server Side Request Forgery via Webhooks | TYPO3 | typo3 | Low | 3.3 | 2025-05-20 13:23:53 | Deep Dive |
| CVE-2025-24856 | TYPO3 安全漏洞 | TYPO3 | oidc | Medium | 4.2 | 2025-03-16 00:00:00 | Deep Dive |
| CVE-2024-55892 | Potential Open Redirect via Parsing Differences in TYPO3 | TYPO3 | typo3 | Medium | 4.8 | 2025-01-14 20:01:56 | Deep Dive |
| CVE-2024-55893 | TYPO3 Cross-Site Request Forgery in Log Module | TYPO3 | typo3 | Medium | 4.3 | 2025-01-14 20:00:15 | Deep Dive |
| CVE-2024-55894 | TYPO3 Cross-Site Request Forgery in Backend User Module | TYPO3 | typo3 | Medium | 4.3 | 2025-01-14 19:57:28 | Deep Dive |
| CVE-2024-55920 | Cross-Site Request Forgery in Dashboard Module in TYPO3 | TYPO3 | typo3 | Medium | 4.3 | 2025-01-14 19:55:42 | Deep Dive |
| CVE-2024-55921 | Cross-Site Request Forgery in Extension Manager Module in TYPO3 | TYPO3 | typo3 | High | 7.5 | 2025-01-14 19:36:32 | Deep Dive |
| CVE-2024-55922 | Cross-Site Request Forgery in Form Framework Module in TYPO3 | TYPO3 | typo3 | Medium | 5.4 | 2025-01-14 19:23:17 | Deep Dive |
| CVE-2024-55923 | Cross-Site Request Forgery in Indexed Search Module in TYPO3 | TYPO3 | typo3 | Medium | 4.3 | 2025-01-14 19:20:11 | Deep Dive |
| CVE-2024-55924 | Cross-Site Request Forgery in Scheduler Module in TYPO3 | TYPO3 | typo3 | High | 8.0 | 2025-01-14 19:16:47 | Deep Dive |
| CVE-2024-55945 | Cross-Site Request Forgery in DB Check Module in TYPO3 | TYPO3 | typo3 | Medium | 4.3 | 2025-01-14 19:14:34 | Deep Dive |
| CVE-2024-55891 | Information Disclosure via Exception Handling/Logger in TYPO3 | TYPO3 | typo3 | Low | 3.1 | 2025-01-14 19:11:59 | Deep Dive |
| CVE-2024-47780 | Information Disclosure in TYPO3 Page Tree | TYPO3 | typo3 | Low | 3.1 | 2024-10-08 17:57:22 | Deep Dive |
| CVE-2024-34358 | TYPO3 vulnerable to an Uncontrolled Resource Consumption in the ShowImageController | TYPO3 | typo3 | Medium | 5.3 | 2024-05-14 14:26:36 | Deep Dive |
| CVE-2024-34357 | TYPO3 vulnerable to Cross-Site Scripting in ShowImageController | TYPO3 | typo3 | Medium | 5.4 | 2024-05-14 14:13:12 | Deep Dive |
| CVE-2024-34356 | TYPO3 vulnerable to Cross-Site Scripting in the Form Manager Module | TYPO3 | typo3 | Medium | 5.4 | 2024-05-14 14:05:20 | Deep Dive |
| CVE-2024-34355 | TYPO3 vulnerable to an HTML Injection in the History Module | TYPO3 | typo3 | Low | 3.5 | 2024-05-14 14:01:33 | Deep Dive |
| CVE-2024-25118 | Information Disclosure of Hashed Passwords in TYPO3 Backend Forms | TYPO3 | typo3 | Medium | 4.3 | 2024-02-13 22:19:23 | Deep Dive |