Author: Helmut Hummel
TYPO3-CORE-SA-2016-022: Cache Flooding in TYPO3 Frontend
It has been discovered, that TYPO3 is vulnerable to Cache Flooding
Read moreTYPO3-EXT-SA-2016-021: Denial of Service in extension "Speaking URLs for TYPO3" (realurl)
It has been discovered that the extension "Speaking URLs for TYPO3" (realurl) is susceptible to Denial of Service.
TYPO3-CORE-SA-2016-020: Cross-Site Scripting in third party library mso/idna-convert
It has been discovered, that TYPO3 ships example code of mso/idna-convert library that is vulnerable to Cross-Site Scripting
TYPO3-CORE-SA-2016-019: Environment Variable Injection
It has been discovered, that PHP exposes the risk of Environment Variable Injection and TYPO3 is vulnerable through third party library guzzlehttp/guzzle
TYPO3-CORE-SA-2016-013: Missing Access Check in TYPO3 CMS
It has been discovered, that TYPO3 CMS lacks an access check for Extbase actions.
TYPO3-PSA-2016-002: Important Security-Bulletin Pre-Announcement
TYPO3 releases containing a fix for a critical vulnerability will be published Tuesday 24th of May at about 10:00 a.m. CEST (08:00 a.m. GMT).
TYPO3-PSA-2016-001: Critical vulnerabilities in ImageMagick
Multiple vulnerabilities in ImageMagick have been discovered, Remote Code Execution being one of them.
TYPO3-CORE-SA-2016-012: Privilege Escalation in TYPO3 CMS
It has been discovered, that TYPO3 CMS is vulnerable to Privilege Escalation.
TYPO3-CORE-SA-2016-010: Arbitrary File Disclosure in Form Component
It has been discovered, that TYPO3 Form Component is susceptible to Arbitrary File Disclosure.
TYPO3-CORE-SA-2016-009: Cross-Site Scripting in TYPO3 Backend
It has been discovered, that TYPO3 is susceptible to Cross-Site Scripting.