Typo3 Vulnerabilità

Sequenza temporale

L'anno scorso

Versione

4.3.039
4.3.138
4.3.238
4.5.137
4.5.237

Contromisure

Official Fix169
Temporary Fix0
Workaround1
Unavailable7
Not Defined23

Sfruttabilità

High19
Functional0
Proof-of-Concept27
Unproven7
Not Defined147

Accesso al vettore

Not Defined0
Physical0
Local1
Adjacent0
Network199

Autenticazione

Not Defined0
High6
Low88
None106

Interazione dell'utente

Not Defined0
Required89
None111

C3BM Index

L'anno scorso

CVSSv3 Base

≤10
≤20
≤30
≤422
≤561
≤657
≤729
≤822
≤96
≤103

CVSSv3 Temp

≤10
≤20
≤31
≤425
≤571
≤662
≤721
≤811
≤98
≤101

VulDB

≤10
≤20
≤32
≤437
≤564
≤640
≤728
≤823
≤94
≤102

NVD

≤10
≤20
≤30
≤41
≤53
≤621
≤723
≤86
≤95
≤104

CNA

≤10
≤20
≤30
≤42
≤59
≤68
≤73
≤80
≤93
≤100

Fornitore

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 giorni

<1k0
<2k1
<5k25
<10k78
<25k84
<50k12
<100k0
≥100k0

Exploiter aujourd'hui

<1k169
<2k14
<5k8
<10k9
<25k0
<50k0
<100k0
≥100k0

Sfrutta il volume del mercato

L'anno scorso

🔴 CTI Attività

Affected Versions (466): 0.1.2, 0.3, 0.3.1, 0.3.2, 0.3.3, 0.3.4, 0.3.5, 0.4, 0.4.1, 1.0, 1.1, 1.1.09, 1.2, 1.3, 1.4, 1.5, 1.5.1, 1.5.2, 2, 2.1, 2.1.1, 2.1.2, 2.1.3, 3.0, 3.3, 3.5, 3.6, 3.7, 3.7.1, 3.8, 3.8.1, 4.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.5, 4.0.6, 4.0.7, 4.0.8, 4.0.9, 4.0.11, 4.0.12, 4.0.13, 4.1, 4.1.1, 4.1.2, 4.1.3, 4.1.4, 4.1.5, 4.1.6, 4.1.7, 4.1.8, 4.1.9, 4.1.11, 4.1.12, 4.1.13, 4.2, 4.2.1, 4.2.2, 4.2.3, 4.2.4, 4.2.5, 4.2.6, 4.2.7, 4.2.8, 4.2.9, 4.2.11, 4.2.12, 4.2.13, 4.2.14, 4.2.15, 4.3, 4.3.1, 4.3.2, 4.3.3, 4.3.4, 4.3.5, 4.3.6, 4.3.7, 4.3.8, 4.3.9, 4.3.11, 4.3.12, 4.4, 4.4.1, 4.4.2, 4.4.3, 4.4.4, 4.4.5, 4.4.6, 4.4.7, 4.4.8, 4.4.9, 4.4.11, 4.4.12, 4.4.13, 4.4.14, 4.5, 4.5.1, 4.5.2, 4.5.3, 4.5.4, 4.5.5, 4.5.6, 4.5.7, 4.5.8, 4.5.9, 4.5.11, 4.5.12, 4.5.13, 4.5.14, 4.5.15, 4.5.16, 4.5.17, 4.5.18, 4.5.19, 4.5.21, 4.5.22, 4.5.23, 4.5.24, 4.5.25, 4.5.26, 4.5.27, 4.5.28, 4.5.29, 4.5.31, 4.5.32, 4.5.33, 4.6, 4.6.1, 4.6.2, 4.6.3, 4.6.4, 4.6.5, 4.6.6, 4.6.7, 4.6.8, 4.6.9, 4.6.11, 4.7, 4.7.1, 4.7.2, 4.7.3, 4.7.4, 4.7.5, 4.7.6, 4.7.7, 4.7.8, 4.7.9, 4.7.11, 4.7.12, 4.7.13, 4.7.14, 4.7.15, 4.7.16, 4.7.17, 4.7.18, 4.10, 4.11, 6, 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, 6.0.7, 6.0.8, 6.0.9, 6.0.11, 6.0.12, 6.0.13, 6.1, 6.1.1, 6.1.2, 6.1.3, 6.1.4, 6.1.5, 6.1.6, 6.1.7, 6.1.8, 6.2, 6.2.1, 6.2.2, 6.2.3, 6.2.4, 6.2.5, 6.2.6, 6.2.7, 6.2.8, 6.2.9, 6.2.11, 6.2.12, 6.2.13, 6.2.14, 6.2.15, 6.2.16, 6.2.17, 6.2.18, 6.2.19, 6.2.21, 6.2.22, 6.2.23, 6.2.24, 6.2.25, 6.2.26, 6.2.27, 6.2.28, 6.2.29, 6.2.31, 6.2.32, 6.2.33, 6.2.34, 6.2.35, 6.2.36, 6.2.37, 6.2.38, 6.2.39, 6.2.41, 6.2.42, 6.2.43, 6.2.44, 6.2.45, 6.2.46, 6.2.47, 6.2.48, 6.2.49, 6.2.51, 6.2.52, 6.2.53, 6.2.54, 6.2.55, 6.2.56, 7, 7.0, 7.0.1, 7.1, 7.2, 7.2.1, 7.2.2, 7.2.3, 7.2.4, 7.2.5, 7.2.6, 7.2.7, 7.2.8, 7.2.9, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.6.2, 7.6.3, 7.6.4, 7.6.5, 7.6.6, 7.6.7, 7.6.8, 7.6.9, 7.6.11, 7.6.12, 7.6.13, 7.6.14, 7.6.15, 7.6.16, 7.6.17, 7.6.18, 7.6.19, 7.6.21, 7.6.22, 7.6.23, 7.6.24, 7.6.25, 7.6.26, 7.6.27, 7.6.28, 7.6.29, 7.6.31, 7.6.32, 7.6.33, 7.6.34, 7.6.35, 7.6.36, 7.6.37, 7.6.38, 7.6.39, 7.6.41, 7.6.42, 7.6.43, 7.6.44, 7.6.45, 7.6.46, 7.6.47, 7.6.48, 7.6.49, 7.6.51, 7.6.52, 7.6.53, 7.6.54, 7.6.55, 7.6.56, 7.6.56 ELTS, 7.6.57, 7.6.58 ELTS, 8.1, 8.1.1, 8.7, 8.7.1, 8.7.2, 8.7.3, 8.7.4, 8.7.5, 8.7.6, 8.7.7, 8.7.8, 8.7.9, 8.7.11, 8.7.12, 8.7.13, 8.7.14, 8.7.15, 8.7.16, 8.7.17, 8.7.18, 8.7.19, 8.7.21, 8.7.22, 8.7.23, 8.7.24, 8.7.25, 8.7.26, 8.7.27, 8.7.28, 8.7.29, 8.7.31, 8.7.32, 8.7.33, 8.7.34, 8.7.35, 8.7.36, 8.7.37, 8.7.38, 8.7.39, 8.7.41, 8.7.42, 8.7.43, 8.7.44, 8.7.45, 8.7.46, 8.7.46 ELTS, 8.7.47, 8.7.48 ELTS, 9.5, 9.5.1, 9.5.2, 9.5.3, 9.5.4, 9.5.5, 9.5.6, 9.5.7, 9.5.8, 9.5.9, 9.5.11, 9.5.12, 9.5.13, 9.5.14, 9.5.15, 9.5.16, 9.5.17, 9.5.18, 9.5.19, 9.5.21, 9.5.22, 9.5.23, 9.5.24, 9.5.25, 9.5.26, 9.5.27, 9.5.28, 9.5.29, 9.5.31, 9.5.32, 9.5.33, 9.5.33 ELTS, 9.5.34, 9.5.35, 9.5.36, 9.5.37 ELTS, 9.5.42 ELTS, 10.2, 10.2.1, 10.4, 10.4.1, 10.4.2, 10.4.3, 10.4.4, 10.4.5, 10.4.6, 10.4.7, 10.4.8, 10.4.9, 10.4.11, 10.4.12, 10.4.13, 10.4.14, 10.4.15, 10.4.16, 10.4.17, 10.4.18, 10.4.19, 10.4.21, 10.4.22, 10.4.23, 10.4.24, 10.4.25, 10.4.26, 10.4.27, 10.4.28, 10.4.28 ELTS, 10.4.29, 10.4.31, 10.4.32, 10.4.39 ELTS, 11.0, 11.1, 11.2, 11.3, 11.5, 11.5.1, 11.5.2, 11.5.3, 11.5.4, 11.5.5, 11.5.6, 11.5.7, 11.5.8, 11.5.9, 11.5.11, 11.5.12, 11.5.13, 11.5.14, 11.5.15, 11.5.16, 11.5.17, 11.5.18, 11.5.19, 11.5.21, 11.5.22, 11.5.23, 11.5.24, 11.5.25, 11.5.26, 11.5.27, 11.5.28, 11.5.29, 12.4, 12.4.1, 12.4.2, 12.4.3, 12.4.4, 12.4.5, 12.4.6, 12.4.7

Link to Product Website: https://typo3.org/

Tipo di software: Content Management System

Data di pubblicazioneBaseTempVulnerabilità0dayOggiSfrConCTICVE
14/02/20247.26.9TYPO3 Install Tool Privilege Escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2024-22188
13/02/20246.36.0TYPO3 Persisting File Abstraction Layer escalazione di privilegi$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2024-25121
13/02/20244.34.2TYPO3 Backend Forms rivelazione di un 'informazione$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2024-25118
13/02/20243.83.7TYPO3 Install Tool rivelazione di un 'informazione$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2024-25119
13/02/20244.34.2TYPO3 t3 Scheme escalazione di privilegi$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2024-25120
25/12/20233.83.7TYPO3 edit directory traversal$5k-$25k$5k-$25kNot DefinedNot Defined0.04CVE-2023-30451
14/11/20235.05.0TYPO3 cross site scripting$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2023-47125
14/11/20234.24.2TYPO3 Standalone Install Tool rivelazione di un 'informazione$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-47126
14/11/20234.94.8TYPO3 autenticazione debole$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2023-47127
26/07/20235.05.0TYPO3 HTML Sanitizer cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-38500
26/07/20234.24.2TYPO3 rivelazione di un 'informazione$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-38499
07/02/20236.56.4TYPO3 getIndpEnv cross site scripting$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2023-24814
14/09/20225.45.3TYPO3 View Help f:asset.css cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-36108
14/09/20225.15.1TYPO3 FileDumpController cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-36107
14/09/20225.55.4TYPO3 Password Reset Link autenticazione debole$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-36106
14/09/20225.35.2TYPO3 User Authentication rivelazione di un 'informazione$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2022-36105
14/09/20225.75.7TYPO3 Error Message denial of service$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-36104
15/06/20224.44.4TYPO3 Form Framework cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2022-31048
15/06/20224.24.1TYPO3 Exception rivelazione di un 'informazione$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-31047
15/06/20225.35.2TYPO3 Backend User Interface autenticazione debole$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-31050
15/06/20224.44.4TYPO3 Email cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-31049
15/06/20224.34.2TYPO3 Export rivelazione di un 'informazione$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-31046
06/10/20214.84.7TYPO3 HTTP Host Header escalazione di privilegi$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-41114
06/10/20217.17.0TYPO3 Deep Link Sharing cross site request forgery$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-41113
21/07/20213.53.4TYPO3 Grid cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-32669

175 non vengono visualizzate più voci

Want to stay up to date on a daily basis?

Enable the mail alert feature now!