Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

TYPO3 — Vulnerabilities & Security Advisories 58

All 58 CVE vulnerabilities found in TYPO3, with AI-generated Chinese analysis, references, and POCs.

This page aggregates vulnerability data for the product TYPO3, a popular open-source content management system. It collects historical security disclosures related to this specific software, covering the period from its early releases through the most recent versions. Readers can use this resource to track the vendor's security advisories, analyze the prevalence of specific weakness classes such as cross-site scripting or SQL injection, and review the complete vulnerability history for the product. The aggregation provides a consolidated view of known issues, helping developers and security professionals assess risk, identify recurring patterns, and evaluate the security posture of TYPO3 deployments. By centralizing these records, the page serves as a reference for understanding how the software has evolved in terms of security patches and mitigation strategies over time.

Vendor: TYPO3

CVE ID Title CVSS Severity Published
CVE-2022-23503 TYPO3 vulnerable to Arbitrary Code Execution via Form Framework CWE-94 7.5 High 2022-12-14
CVE-2022-23502 TYPO3 contains Insufficient Session Expiration after Password Reset CWE-613 5.4 Medium 2022-12-14
CVE-2022-23501 TYPO3 vulnerable to Improper Authentication in Frontend Login CWE-287 5.9 Medium 2022-12-14
CVE-2022-23500 TYPO3 subject to Uncontrolled Recursion resulting in Denial of Service CWE-674 5.9 Medium 2022-12-14
CVE-2022-36105 User Enumeration via Response Timing in TYPO3 CWE-203 5.3 Medium 2022-09-13
CVE-2022-36106 Missing check for expiration time of password reset token in TYPO3 CWE-287 5.4 Medium 2022-09-13
CVE-2022-36107 Stored Cross-Site Scripting via FileDumpController CWE-79 6.5 Medium 2022-09-13
CVE-2022-36104 Denial of Service via Page Error Handling in TYPO3/cms CWE-770 5.9 Medium 2022-09-13
CVE-2022-36108 Cross-Site Scripting in typo3/cms-core CWE-79 6.5 Medium 2022-09-13
CVE-2022-31050 Insufficient Session Expiration in TYPO3 Admin Tool CWE-613 6.0 Medium 2022-06-14
CVE-2022-31048 Cross-Site Scripting in Form Framework CWE-79 5.4 Medium 2022-06-14
CVE-2022-31049 Cross-Site Scripting in Frontend Login Mailer CWE-79 5.4 Medium 2022-06-14
CVE-2022-31046 Information Disclosure via Export Module in TYPO3 CMS CWE-200 4.3 Medium 2022-06-14
CVE-2022-31047 Insertion of Sensitive Information into Log File in typo3/cms-core CWE-532 5.3 Medium 2022-06-14
CVE-2021-41113 Cross-Site-Request-Forgery in Backend URI Handling in Typo3 CWE-352 8.8 High 2021-10-05
CVE-2021-41114 HTTP Host Header Injection in Request Handling in Typo3 CWE-20 4.8 Medium 2021-10-05
CVE-2011-4904 TYPO3 输入验证错误漏洞 4.3 - 2019-11-06
CVE-2011-4903 TYPO3 跨站脚本漏洞 5.4 - 2019-11-06
CVE-2011-4902 TYPO3 输入验证错误漏洞 6.5 - 2019-11-06
CVE-2011-4901 TYPO3 信息泄露漏洞 6.5 - 2019-11-06
CVE-2011-4900 TYPO3 信息泄露漏洞 6.5 - 2019-11-06
CVE-2011-4632 TYPO3 跨站脚本漏洞 5.4 - 2019-11-06
CVE-2011-4631 TYPO3 跨站脚本漏洞 5.4 - 2019-11-06
CVE-2011-4630 TYPO3 跨站脚本漏洞 5.4 - 2019-11-06
CVE-2011-4629 TYPO3 跨站脚本漏洞 5.4 - 2019-11-06
CVE-2011-4628 TYPO3 授权问题漏洞 9.8 - 2019-11-06
CVE-2011-4627 TYPO3 信息泄露漏洞 6.5 - 2019-11-06
CVE-2011-4626 TYPO3 跨站脚本漏洞 5.4 - 2019-11-06

All 58 known CVE vulnerabilities affecting TYPO3 with full Chinese analysis, references, and POCs where available.