TYPO3-EXT-SA-2019-021: Cross Site Scripting in extension "File List" (file_list)
- Release Date: December 17, 2019
- Component Type: Third party extension. This extension is not a part of the TYPO3 default installation.
- …
TYPO3-EXT-SA-2019-020: CSRF in extension "Change password for frontend users" (fe_change_pwd)
- Release Date: December 17, 2019
- Component Type: Third party extension. This extension is not a part of the TYPO3 default installation.
- …
TYPO3-EXT-SA-2019-019: Multiple vulnerabilities in extension "MKSamlAuth" (mksamlauth)
- Release Date: December 17, 2019
- Component Type: Third party extension. This extension is not a part of the TYPO3 default installation.
- …
TYPO3 10.2.2, 9.5.13 and 8.7.30 security releases published
The TYPO3 Community announces the versions 10.2.2, 9.5.13 LTS and 8.7.30 LTS of the TYPO3 Enterprise Content Management System.
TYPO3-CORE-SA-2019-026: Insecure Deserialization in Query Generator & Query View
- Component Type: TYPO3 CMS
- Subcomponent: Query Generator & Query View (ext:lowlevel, ext:core)
- Release Date: December 17, 2019
- Vulnerability Type:…
TYPO3-CORE-SA-2019-025: SQL Injection in low-level Query Generator
- Component Type: TYPO3 CMS
- Subcomponent: Query Generator (ext:lowlevel)
- Release Date: December 17, 2019
- Vulnerability Type: SQL Injection
- …
TYPO3-CORE-SA-2019-024: Directory Traversal on ZIP extraction
- Component Type: TYPO3 CMS
- Subcomponent: Extension Manager (ext:extensionmanger)
- Release Date: December 17, 2019
- Vulnerability Type: Directory…
TYPO3-CORE-SA-2019-023: Cross-Site Scripting in Filelist Module
- Component Type: TYPO3 CMS
- Subcomponent: Filelist Module (ext:filelist)
- Release Date: December 17, 2019
- Vulnerability Type: Cross-Site Scripting
- …
TYPO3-CORE-SA-2019-022: Cross-Site Scripting in Link Handling
- Component Type: TYPO3 CMS
- Subcomponent: Link Handling (ext:core, ext:frontend)
- Release Date: December 17, 2019
- Vulnerability Type: Cross-Site…
TYPO3-CORE-SA-2019-021: Cross-Site Scripting in Form Framework validation handling
- Component Type: TYPO3 CMS
- Subcomponent: Form Framework (ext:form)
- Release Date: December 17, 2019
- Vulnerability Type: Cross-Site Scripting
- …