---

Security Advisories (RSS Feed)

Level	Info	Betroffene Versionen	Lösung
Medium May 14, 2024	TYPO3-CORE-SA-2024-010: Uncontrolled Resource Consumption in ShowImageController It has been discovered that TYPO3 CMS is susceptible to denial of service.	9.0.0-9.5.47 10.0.0-10.4.44 11.0.0-11.5.36 12.0.0-12.4.14 13.0.0-13.1.0	Update to TYPO3 versions 9.5.48 ELTS 10.4.45 ELTS 11.5.37 LTS 12.4.15 LTS 13.1.1 that fix the problem described.
Medium May 14, 2024	TYPO3-CORE-SA-2024-009: Cross-Site Scripting in ShowImageController It has been discovered that TYPO3 CMS is vulnerable to cross-site scripting.	9.0.0-9.5.47 10.0.0-10.4.44 11.0.0-11.5.36 12.0.0-12.4.14 13.0.0-13.1.0	Update to TYPO3 versions 9.5.48 ELTS 10.4.45 ELTS 11.5.37 LTS 12.4.15 LTS 13.1.1 that fix the problem described.
Medium May 14, 2024	TYPO3-CORE-SA-2024-008: Cross-Site Scripting in Form Manager Module It has been discovered that TYPO3 CMS is vulnerable to cross-site scripting.	9.0.0-9.5.47 10.0.0-10.4.44 11.0.0-11.5.36 12.0.0-12.4.14 13.0.0-13.1.0	Update to TYPO3 versions 9.5.48 ELTS 10.4.45 ELTS 11.5.37 LTS 12.4.15 LTS 13.1.1 that fix the problem described.
Low May 14, 2024	TYPO3-CORE-SA-2024-007: HTML Injection in History Module It has been discovered that TYPO3 CMS is vulnerable to HTML injection.	13.0.0-13.1.0	Update to TYPO3 version 13.1.1 that fixes the problem described.
Medium April 2, 2024	TYPO3-EXT-SA-2024-002: Authentication Bypass in "OpenID Connect Authentication" (oidc) It has been discovered that the extension "OpenID Connect Authentication" (oidc) is susceptible to Authentication Bypass.	2.0.0 and below	An updated version 2.1.0 is  available from the TYPO3 extension manager packagist and at   https://extensions.typo3.org/extension/download/oidc/2.1.0/zip Users of the extension are advised to update the extension as soon as possible.

weitere links zur Sicherheit von Typo3: Alle Security Advisories (RSS Feed) Einträge zeigen |TYPO3 CMS |TYPO3 Extensions |Public Service Announcements |

---

typo3-core
url ↓
t3tsbase ↓
t3tsbase_legacy ↓
php-version ↓
db-version ↓
mask ↓
news ↓
t3adminer ↓
ke_search ↓
fontawesome_provider ↓
powermail ↓
femanager ↓
gridelements ↓
simple_log404 ↓
translate_locallang ↓
typo3_console ↓
rte_ckeditor_image ↓
secure_downloads ↓
container ↓
extension_builder ↓
form_element_linked_checkbox ↓
numbered_pagination ↓
replacer ↓
rx_shariff ↓
solr ↓
solradmin ↓
typo3db_legacy ↓
be_secure_pw ↓
bootstrap_grids ↓
cookieman ↓
displaydownloads ↓
eventnews ↓
hcaptcha ↓
ke_search_premium ↓
mask_kesearch_indexer ↓
phpmyadmin ↓
proderm ↓
solr_file_indexer ↓
static_info_tables ↓
sys_action ↓
sysfilemetadata_addfields ↓
t3gurom ↓
t3massnahmen ↓
taskcenter ↓
threeme ↓
tscron ↓
tt_address ↓
yoast_seo ↓
SecurityInfos von Typo3.org:
p3
p1 | p7 | p9
p10
p1 | p2 | p4 | p7 | p9
p3
p1
p6 | p7 | p8 | p9 | p10
p4 | p5
9.5.47
https://www.leibniz-fli.de
11.2.3
7.4.33
MySQL 5.5.5-10.3.39-MariaDB-0ubuntu0.20.04.2
4.1.2
8.3.0
9.4.1
3.1.3
7.4.0-hotfixed-old-expressions-from-ts
9.5.0
9.5.48
https://www.zfa-jena.de
11.2.3
7.2.34.18
MySQL 5.7.35
4.1.2
5.8.6
10.4.37
https://www.dgphil.de
11.2.3
7.4.33
MySQL 5.5.5-10.5.23-MariaDB-0+deb11u1
6.6.0
8.5.2
10.0.0
3.6.0
6.3.2
2.8.0
9.11.0
1.6.4
10.1.20
10.4.37
https://www.timespin.de
11.1.26
7.4.3-4ubuntu2.22
MySQL 5.5.5-10.3.39-MariaDB-0ubuntu0.20.04.2
6.6.1
8.5.2
10.4.40
https://awothueringen.de
11.2.3
7.4.33
MySQL 5.5.5-10.3.39-MariaDB-0ubuntu0.20.04.2
6.2.2
8.6.0
10.0.0
4.1.1
2.1.1
6.0.1
10.4.45
https://www.idz-jena.de
11.2.3
7.4.33.5
MySQL 8.0.25
7.0.27
9.0.0
4.6.6
8.4.1
10.4.3
6.7.7
10.2.1
14.0.2
10.4.45
https://www.th-ern.net
11.2.3
7.4.33.5
MySQL 5.7.35
5.1.1
8.3.0
4.6.6
8.2.4
10.4.3
6.7.7
5.1.2
11.5.33
https://www.dentinox.de
11.2.3
7.4.33
MySQL 5.5.5-10.6.15-MariaDB-1:10.6.15+maria~deb11-log
11.0.0
11.0.0
11.0.0
2.8.0
2.0.1
11.5.33
https://www.innovent-jena.de
11.2.6
8.1.28
MySQL 10.5.23-MariaDB-0+deb11u1
8.0.5
11.2.0
5.0.4
1.0.3
10.7.3
3.0.3
11.5.5
11.5.35
https://www.kv-thueringen.de
11.2.3
7.4.33
MySQL 5.5.5-10.5.23-MariaDB-0+deb11u1
8.0.8
11.0.0
11.0.0
5.2.1
1.0.2
7.2.3
5.0.0
1.0.2
1.1.7
11.0.0
11.1.30
11.0.0
11.5.36
https://sgs-proderm.de
11.2.10
7.4.33
MySQL 5.5.5-10.3.39-MariaDB-0ubuntu0.20.04.2
9.4.0
12.0.1
4.6.6
1.1.2.TS-Patched
14.0.2
10.2.0
2.14.3
5.0.2
2.1.3
4.2.3
11.1.0
11.1.0
8.3.1
11.5.36
https://www.gurom.de
11.2.7
7.4.33
MySQL 5.5.5-10.5.23-MariaDB-0+deb11u1
8.3.9
12.0.1
1.0.3
7.2.3
1.1.2.TS-Patched
11.0.9
1.2.0
11.1.1
11.1.1
11.5.37
https://www.uniwind.org
11.2.3
8.1.28
MySQL 5.7.35
8.0.7
10.0.3
11.0.0
1.0.2
10.7.0
7.1.6
2.1.2
12.4.14
https://sgs-proderm.t3cm.com
12.2.0
8.2.16
8.3.10
12.0.1
1.0.3
1.2.0_TS-Patched
2.9.1
12.0.1
4.0.0
12.0.3
2.0.1
3.0.0
12.4.15
https://sgs-institut-fresenius.de
12.2.0
8.2.16
8.3.10
11.4.1
12.0.1
1.0.3
1.2.0_TS-Patched
2.9.1
12.0.1
4.0.0
12.0.2
2.0.1
12.4.15
https://www.varys.de
12.2.0
8.2.19
8.3.10
11.4.2
12.0.1
5.5.0
1.0.3
12.3.2
8.1.0
6.0.3
2.3.6
2.0.0
12.2.0