Vulnerabilities > Typo3 > Typo3 > 9.1.3
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-02-07 | CVE-2023-24814 | Cross-site Scripting vulnerability in Typo3 TYPO3 is a free and open source Content Management Framework released under the GNU General Public License. | 6.1 |
| 2022-12-14 | CVE-2022-23501 | Improper Authentication vulnerability in Typo3 TYPO3 is an open source PHP based web content management system. | 6.5 |
| 2021-07-20 | CVE-2021-32669 | Cross-site Scripting vulnerability in Typo3 TYPO3 is an open source PHP based web content management system. | 3.5 |
| 2021-07-20 | CVE-2021-32767 | Information Exposure Through Log Files vulnerability in Typo3 TYPO3 is an open source PHP based web content management system. | 3.5 |
| 2021-07-20 | CVE-2021-32667 | Cross-site Scripting vulnerability in Typo3 TYPO3 is an open source PHP based web content management system. | 3.5 |
| 2021-07-20 | CVE-2021-32668 | Cross-site Scripting vulnerability in Typo3 TYPO3 is an open source PHP based web content management system. | 3.5 |
| 2020-07-29 | CVE-2020-15099 | Improper Input Validation vulnerability in Typo3 In TYPO3 CMS greater than or equal to 9.0.0 and less than 9.5.20, and greater than or equal to 10.0.0 and less than 10.4.6, in a case where an attacker manages to generate a valid cryptographic message authentication code (HMAC-SHA1) - either by using a different existing vulnerability or in case the internal encryptionKey was exposed - it is possible to retrieve arbitrary files of a TYPO3 installation. | 6.8 |
| 2020-07-29 | CVE-2020-15098 | Use of a Broken or Risky Cryptographic Algorithm vulnerability in Typo3 In TYPO3 CMS greater than or equal to 9.0.0 and less than 9.5.20, and greater than or equal to 10.0.0 and less than 10.4.6, it has been discovered that an internal verification mechanism can be used to generate arbitrary checksums. | 6.5 |
| 2020-05-14 | CVE-2020-11069 | Unspecified vulnerability in Typo3 In TYPO3 CMS 9.0.0 through 9.5.16 and 10.0.0 through 10.4.1, it has been discovered that the backend user interface and install tool are vulnerable to a same-site request forgery. network typo3 | 6.8 |
| 2020-05-14 | CVE-2020-11066 | Unspecified vulnerability in Typo3 In TYPO3 CMS greater than or equal to 9.0.0 and less than 9.5.17 and greater than or equal to 10.0.0 and less than 10.4.2, calling unserialize() on malicious user-submitted content can lead to modification of dynamically-determined object attributes and result in triggering deletion of an arbitrary directory in the file system, if it is writable for the web server. | 10.0 |