Author: [No title]
TYPO3-CORE-SA-2019-007: Cross-Site Scripting in Form Framework
It has been discovered, that TYPO3 CMS is vulnerable to cross-site scripting.
Read moreTYPO3-CORE-SA-2019-006: Cross-Site Scripting in Bootstrap CSS toolkit
It has been discovered, that TYPO3 CMS is vulnerable to cross-site scripting.
TYPO3-CORE-SA-2019-005: Cross-Site Scripting in Fluid ViewHelpers
It has been discovered, that TYPO3 CMS is vulnerable to cross-site scripting.
TYPO3-CORE-SA-2019-004: Cross-Site Scripting in Language Pack Handling
It has been discovered, that TYPO3 CMS is vulnerable to cross-site scripting.
TYPO3-CORE-SA-2019-003: Broken Access Control in Localization Handling
It has been discovered, that TYPO3 CMS is susceptible to broken access control.
TYPO3-CORE-SA-2019-002: Security Misconfiguration for Backend User Accounts
It has been discovered, that TYPO3 CMS is susceptible to security misconfiguration.
TYPO3-CORE-SA-2019-001: Information Disclosure of Installed Extensions
It has been discovered, that TYPO3 CMS is susceptible to information disclosure.
TYPO3-PSA-2019-001: Possible Arbitrary Code Execution in CommandUtility API
It has been discovered that TYPO3 CMS can be vulnerable to arbitrary code execution.
TYPO3-PSA-2019-002: Username and Email Address Enumeration
It has been discovered, that usernames and email addresses may be enumerated with brute-force techniques, when using validators in order to ensure a unique username or email address.
TYPO3-PSA-2019-003: Cross-Site Scripting in Flash component (ELTS)
It has been discovered, that TYPO3 CMS is vulnerable to cross-site scripting.