Typo3 Vulnérabilités

Chronologie

L'année dernière

Version

4.3.039
4.3.138
4.3.238
4.5.137
4.5.237

Contre-mesures

Official Fix169
Temporary Fix0
Workaround1
Unavailable7
Not Defined23

Exploitabilité

High19
Functional0
Proof-of-Concept27
Unproven7
Not Defined147

Vecteur d'accès

Not Defined0
Physical0
Local1
Adjacent0
Network199

Authentification

Not Defined0
High6
Low88
None106

Interaction de l'utilisateur

Not Defined0
Required89
None111

C3BM Index

L'année dernière

CVSSv3 Base

≤10
≤20
≤30
≤422
≤561
≤657
≤729
≤822
≤96
≤103

CVSSv3 Temp

≤10
≤20
≤31
≤425
≤571
≤662
≤721
≤811
≤98
≤101

VulDB

≤10
≤20
≤32
≤437
≤564
≤640
≤728
≤823
≤94
≤102

NVD

≤10
≤20
≤30
≤41
≤53
≤621
≤723
≤86
≤95
≤104

CNA

≤10
≤20
≤30
≤42
≤59
≤68
≤73
≤80
≤93
≤100

Fournisseur

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 jour

<1k0
<2k1
<5k25
<10k78
<25k84
<50k12
<100k0
≥100k0

Exploiter aujourd'hui

<1k170
<2k13
<5k9
<10k8
<25k0
<50k0
<100k0
≥100k0

Exploiter le volume du marché

L'année dernière

🔴 CTI Activités

Affected Versions (466): 0.1.2, 0.3, 0.3.1, 0.3.2, 0.3.3, 0.3.4, 0.3.5, 0.4, 0.4.1, 1.0, 1.1, 1.1.09, 1.2, 1.3, 1.4, 1.5, 1.5.1, 1.5.2, 2, 2.1, 2.1.1, 2.1.2, 2.1.3, 3.0, 3.3, 3.5, 3.6, 3.7, 3.7.1, 3.8, 3.8.1, 4.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.5, 4.0.6, 4.0.7, 4.0.8, 4.0.9, 4.0.11, 4.0.12, 4.0.13, 4.1, 4.1.1, 4.1.2, 4.1.3, 4.1.4, 4.1.5, 4.1.6, 4.1.7, 4.1.8, 4.1.9, 4.1.11, 4.1.12, 4.1.13, 4.2, 4.2.1, 4.2.2, 4.2.3, 4.2.4, 4.2.5, 4.2.6, 4.2.7, 4.2.8, 4.2.9, 4.2.11, 4.2.12, 4.2.13, 4.2.14, 4.2.15, 4.3, 4.3.1, 4.3.2, 4.3.3, 4.3.4, 4.3.5, 4.3.6, 4.3.7, 4.3.8, 4.3.9, 4.3.11, 4.3.12, 4.4, 4.4.1, 4.4.2, 4.4.3, 4.4.4, 4.4.5, 4.4.6, 4.4.7, 4.4.8, 4.4.9, 4.4.11, 4.4.12, 4.4.13, 4.4.14, 4.5, 4.5.1, 4.5.2, 4.5.3, 4.5.4, 4.5.5, 4.5.6, 4.5.7, 4.5.8, 4.5.9, 4.5.11, 4.5.12, 4.5.13, 4.5.14, 4.5.15, 4.5.16, 4.5.17, 4.5.18, 4.5.19, 4.5.21, 4.5.22, 4.5.23, 4.5.24, 4.5.25, 4.5.26, 4.5.27, 4.5.28, 4.5.29, 4.5.31, 4.5.32, 4.5.33, 4.6, 4.6.1, 4.6.2, 4.6.3, 4.6.4, 4.6.5, 4.6.6, 4.6.7, 4.6.8, 4.6.9, 4.6.11, 4.7, 4.7.1, 4.7.2, 4.7.3, 4.7.4, 4.7.5, 4.7.6, 4.7.7, 4.7.8, 4.7.9, 4.7.11, 4.7.12, 4.7.13, 4.7.14, 4.7.15, 4.7.16, 4.7.17, 4.7.18, 4.10, 4.11, 6, 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, 6.0.7, 6.0.8, 6.0.9, 6.0.11, 6.0.12, 6.0.13, 6.1, 6.1.1, 6.1.2, 6.1.3, 6.1.4, 6.1.5, 6.1.6, 6.1.7, 6.1.8, 6.2, 6.2.1, 6.2.2, 6.2.3, 6.2.4, 6.2.5, 6.2.6, 6.2.7, 6.2.8, 6.2.9, 6.2.11, 6.2.12, 6.2.13, 6.2.14, 6.2.15, 6.2.16, 6.2.17, 6.2.18, 6.2.19, 6.2.21, 6.2.22, 6.2.23, 6.2.24, 6.2.25, 6.2.26, 6.2.27, 6.2.28, 6.2.29, 6.2.31, 6.2.32, 6.2.33, 6.2.34, 6.2.35, 6.2.36, 6.2.37, 6.2.38, 6.2.39, 6.2.41, 6.2.42, 6.2.43, 6.2.44, 6.2.45, 6.2.46, 6.2.47, 6.2.48, 6.2.49, 6.2.51, 6.2.52, 6.2.53, 6.2.54, 6.2.55, 6.2.56, 7, 7.0, 7.0.1, 7.1, 7.2, 7.2.1, 7.2.2, 7.2.3, 7.2.4, 7.2.5, 7.2.6, 7.2.7, 7.2.8, 7.2.9, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.6.2, 7.6.3, 7.6.4, 7.6.5, 7.6.6, 7.6.7, 7.6.8, 7.6.9, 7.6.11, 7.6.12, 7.6.13, 7.6.14, 7.6.15, 7.6.16, 7.6.17, 7.6.18, 7.6.19, 7.6.21, 7.6.22, 7.6.23, 7.6.24, 7.6.25, 7.6.26, 7.6.27, 7.6.28, 7.6.29, 7.6.31, 7.6.32, 7.6.33, 7.6.34, 7.6.35, 7.6.36, 7.6.37, 7.6.38, 7.6.39, 7.6.41, 7.6.42, 7.6.43, 7.6.44, 7.6.45, 7.6.46, 7.6.47, 7.6.48, 7.6.49, 7.6.51, 7.6.52, 7.6.53, 7.6.54, 7.6.55, 7.6.56, 7.6.56 ELTS, 7.6.57, 7.6.58 ELTS, 8.1, 8.1.1, 8.7, 8.7.1, 8.7.2, 8.7.3, 8.7.4, 8.7.5, 8.7.6, 8.7.7, 8.7.8, 8.7.9, 8.7.11, 8.7.12, 8.7.13, 8.7.14, 8.7.15, 8.7.16, 8.7.17, 8.7.18, 8.7.19, 8.7.21, 8.7.22, 8.7.23, 8.7.24, 8.7.25, 8.7.26, 8.7.27, 8.7.28, 8.7.29, 8.7.31, 8.7.32, 8.7.33, 8.7.34, 8.7.35, 8.7.36, 8.7.37, 8.7.38, 8.7.39, 8.7.41, 8.7.42, 8.7.43, 8.7.44, 8.7.45, 8.7.46, 8.7.46 ELTS, 8.7.47, 8.7.48 ELTS, 9.5, 9.5.1, 9.5.2, 9.5.3, 9.5.4, 9.5.5, 9.5.6, 9.5.7, 9.5.8, 9.5.9, 9.5.11, 9.5.12, 9.5.13, 9.5.14, 9.5.15, 9.5.16, 9.5.17, 9.5.18, 9.5.19, 9.5.21, 9.5.22, 9.5.23, 9.5.24, 9.5.25, 9.5.26, 9.5.27, 9.5.28, 9.5.29, 9.5.31, 9.5.32, 9.5.33, 9.5.33 ELTS, 9.5.34, 9.5.35, 9.5.36, 9.5.37 ELTS, 9.5.42 ELTS, 10.2, 10.2.1, 10.4, 10.4.1, 10.4.2, 10.4.3, 10.4.4, 10.4.5, 10.4.6, 10.4.7, 10.4.8, 10.4.9, 10.4.11, 10.4.12, 10.4.13, 10.4.14, 10.4.15, 10.4.16, 10.4.17, 10.4.18, 10.4.19, 10.4.21, 10.4.22, 10.4.23, 10.4.24, 10.4.25, 10.4.26, 10.4.27, 10.4.28, 10.4.28 ELTS, 10.4.29, 10.4.31, 10.4.32, 10.4.39 ELTS, 11.0, 11.1, 11.2, 11.3, 11.5, 11.5.1, 11.5.2, 11.5.3, 11.5.4, 11.5.5, 11.5.6, 11.5.7, 11.5.8, 11.5.9, 11.5.11, 11.5.12, 11.5.13, 11.5.14, 11.5.15, 11.5.16, 11.5.17, 11.5.18, 11.5.19, 11.5.21, 11.5.22, 11.5.23, 11.5.24, 11.5.25, 11.5.26, 11.5.27, 11.5.28, 11.5.29, 12.4, 12.4.1, 12.4.2, 12.4.3, 12.4.4, 12.4.5, 12.4.6, 12.4.7

Link to Product Website: https://typo3.org/

Type de logiciel: Content Management System

PubliéBaseTempVulnérabilité0dayAujourd'huiExpConCTICVE
14/02/20247.26.9TYPO3 Install Tool Privilege Escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2024-22188
13/02/20246.36.0TYPO3 Persisting File Abstraction Layer elévation de privilèges$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2024-25121
13/02/20244.34.2TYPO3 Backend Forms divulgation de l'information$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2024-25118
13/02/20243.83.7TYPO3 Install Tool divulgation de l'information$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2024-25119
13/02/20244.34.2TYPO3 t3 Scheme elévation de privilèges$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2024-25120
25/12/20233.83.7TYPO3 edit directory traversal$5k-$25k$5k-$25kNot DefinedNot Defined0.04CVE-2023-30451
14/11/20235.05.0TYPO3 cross site scripting$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2023-47125
14/11/20234.24.2TYPO3 Standalone Install Tool divulgation de l'information$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-47126
14/11/20234.94.8TYPO3 authentification faible$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2023-47127
26/07/20235.05.0TYPO3 HTML Sanitizer cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-38500
26/07/20234.24.2TYPO3 divulgation de l'information$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-38499
07/02/20236.56.4TYPO3 getIndpEnv cross site scripting$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2023-24814
14/09/20225.45.3TYPO3 View Help f:asset.css cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-36108
14/09/20225.15.1TYPO3 FileDumpController cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-36107
14/09/20225.55.4TYPO3 Password Reset Link authentification faible$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-36106
14/09/20225.35.2TYPO3 User Authentication divulgation de l'information$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2022-36105
14/09/20225.75.7TYPO3 Error Message dénie de service$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-36104
15/06/20224.44.4TYPO3 Form Framework cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2022-31048
15/06/20224.24.1TYPO3 Exception divulgation de l'information$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-31047
15/06/20225.35.2TYPO3 Backend User Interface authentification faible$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-31050
15/06/20224.44.4TYPO3 Email cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-31049
15/06/20224.34.2TYPO3 Export divulgation de l'information$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-31046
06/10/20214.84.7TYPO3 HTTP Host Header elévation de privilèges$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-41114
06/10/20217.17.0TYPO3 Deep Link Sharing cross site request forgery$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-41113
21/07/20213.53.4TYPO3 Grid cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-32669

175 plus d'entrées ne sont pas affichées

Do you want to use VulDB in your project?

Use the official API to access entries easily!