TYPO3 Sicherheitshinweise

Hier finden Sie die aktuellen offiziellen Sicherheitshinweise des TYPO3-Projekts – automatisch aktualisiert und verlinkt auf die jeweiligen Originalbeiträge auf typo3.org. Nutzen Sie diese Übersicht, um zu prüfen, ob Ihre Installation oder eingesetzte Extensions betroffen sein könnten. Bei Fragen oder Handlungsbedarf steht der-BERGMANN gerne zur Verfügung.

It has been discovered that the extension "Content Element Selector" (ceselector) is vulnerable to Remote Code Execution.

It has been discovered that the extension "Address List" (tt_address) is vulnerable to SQL Injection.

It has been discovered that the extension "Faceted Search" (ke_search) is vulnerable to XML External Entity injection, Path Traversal and Information Disclosure.

It has been discovered that the extension "News system" (news) is vulnerable to SQL Injection.

It has been discovered that the extension "Frontend User Registration" (sf_register) is vulnerable to Broken Access Control.

It has been discovered that the extension "Site Crawler" (crawler) is vulnerable to Remote Code Execution.

It has been discovered that TYPO3 CMS is susceptible to sensitive data exposure.

It has been discovered that the extension "E-Mail MFA Provider" (mfa_email) is vulnerable to Authentication Bypass.

It has been discovered that the extension "Redirect Tab" (redirect_tab) is vulnerable to Broken Access Control.

It has been discovered that the extension "Mailqueue" (mailqueue) is vulnerable to insecure deserialization.

It has been discovered that the extension "Amazon AWS SDK" (aws) bundles a vulnerable version of “aws/aws-sdk-php“ which is susceptible to use of a Broken or Risky Cryptographic Algorithm.

It has been discovered that the extension "Amazon Web Services (AWS) Toolbox" (aws_tools) bundles a vulnerable version of “aws/aws-sdk-php“ which is susceptible to use of a Broken or Risky Cryptographic Algorithm.

It has been discovered that the extension "AWS SDK for PHP" (aws_sdk_php) bundles a vulnerable version of “aws/aws-sdk-php“ which is susceptible to use of a Broken or Risky Cryptographic Algorithm.

It has been discovered that the extension "Mailqueue" (mailqueue) is vulnerable to insecure deserialization.

It has been discovered that TYPO3 CMS is vulnerable to insecure deserialization.

It has been discovered that TYPO3 CMS is susceptible to broken access control.

It has been discovered that TYPO3 CMS is susceptible to broken access control.

It has been discovered that TYPO3 CMS is susceptible to broken access control.

It has been discovered that the extension "Single Sign-on with SAML" (md_saml) bundles a vulnerable version of “onelogin/php-saml“ which is susceptible to Authentication Bypass.

It has been discovered that the extension "Modules" (modules) is susceptible to Broken Authentication.

It has been discovered that the extension "Forms Export" (frp_form_answers) bundles a vulnerable version of "phpoffice/phpspreadsheet", which is susceptible to Server-Side Request Forgery.

It has been discovered that the extension "Base Excel" (base_excel) bundles a vulnerable version of “phpoffice/phpspreadsheet“ which is susceptible to Server-Side Request Forgery.

It has been discovered that the extension "Form to Database" (form_to_database) is susceptible to Cross-Site Scripting.

It has been discovered that TYPO3 CMS is susceptible to information disclosure.

It has been discovered that TYPO3 CMS is susceptible to information disclosure.

It has been discovered that TYPO3 CMS is susceptible to broken access control.

It has been discovered that TYPO3 CMS is susceptible to information disclosure.

It has been discovered that TYPO3 CMS is susceptible to insufficient entropy.

It has been discovered that TYPO3 CMS is susceptible to denial of service.

It has been discovered that TYPO3 CMS is susceptible to open redirect.