Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
freebsdFreeBSDD9E154C9-7DE9-11ED-ADCA-080027D3A315
HistoryDec 13, 2022 - 12:00 a.m.

typo3 -- multiple vulnerabilities

2022-12-1300:00:00
vuxml.freebsd.org
14
typo3
vulnerabilities
denial of service
weak authentication
session expiration
code execution
information disclosure
html sanitizer
yaml placeholder expressions
cross-site scripting protection

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

36.9%

JSON

TYPO3 reports:

TYPO3-CORE-SA-2022-012: Denial of Service in Page Error Handling.
TYPO3-CORE-SA-2022-013: Weak Authentication in Frontend Login.
TYPO3-CORE-SA-2022-014: Insufficient Session Expiration after Password Reset.
TYPO3-CORE-SA-2022-015: Arbitrary Code Execution via Form Framework.
TYPO3-CORE-SA-2022-016: Sensitive Information Disclosure via YAML Placeholder Expressions in Site Configuration.
TYPO3-CORE-SA-2022-017: By-passing Cross-Site Scripting Protection in HTML Sanitizer.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchtypo3-11-php81< 11.5.20UNKNOWN
FreeBSDanynoarchtypo3-12-php81< 12.1.2UNKNOWN

Related

nessus 7
osv 17
github 6
veracode 6
cve 6
nvd 6
friendsofphp 12
ubuntucve 5
prion 6
openvas 6
cvelist 6
nessus
nessus
FreeBSD : typo3 -- multiple vulnerabilities (d9e154c9-7de9-11ed-adca-080027d3a315)
2022-12-17 00:00:00
TYPO3 8.0.0 < 8.7.49 ELTS / 9.0.0 < 9.5.38 ELTS / 10.0.0 < 10.4.33 / 11.0.0 < 11.5.20 / 12.0.0 < 12.1.1 XSS (TYPO3-CORE-SA-2022-017)
2022-12-13 00:00:00
TYPO3 8.0.0 < 8.7.49 ELTS / 9.0.0 < 9.5.38 ELTS / 10.0.0 < 10.4.33 / 11.0.0 < 11.5.20 / 12.0.0 < 12.1.1 (TYPO3-CORE-SA-2022-013)
2022-12-13 00:00:00
osv
osv
TYPO3 HTML Sanitizer vulnerable to Cross-Site Scripting
2022-12-13 16:59:12
TYPO3 CMS vulnerable to Weak Authentication in Frontend Login
2022-12-13 17:04:02
BIT-typo3-2022-23503
2024-03-06 11:09:53
github
github
TYPO3 CMS vulnerable to Weak Authentication in Frontend Login
2022-12-13 17:04:02
TYPO3 CMS vulnerable to Insufficient Session Expiration after Password Reset
2022-12-13 17:06:07
TYPO3 CMS vulnerable to Arbitrary Code Execution via Form Framework
2022-12-13 17:11:46
veracode
veracode
Insufficient Session Expiration
2022-12-15 05:35:10
Information Disclosure
2022-12-15 05:42:44
Denial Of Service (DoS)
2022-12-14 07:17:22
cve
cve
CVE-2022-23502
2022-12-14 08:15:10
CVE-2022-23503
2022-12-14 08:15:10
CVE-2022-23501
2022-12-14 08:15:10
nvd
nvd
CVE-2022-23502
2022-12-14 08:15:10
CVE-2022-23501
2022-12-14 08:15:10
CVE-2022-23504
2022-12-14 08:15:10
friendsofphp
friendsofphp
TYPO3-CORE-SA-2022-017: By-passing Cross-Site Scripting Protection in HTML Sanitizer
2022-12-13 09:19:37
TYPO3-CORE-SA-2022-016: Sensitive Information Disclosure via YAML Placeholder Expressions in Site Configuration
2022-12-13 09:19:27
TYPO3-CORE-SA-2022-013: Weak Authentication in Frontend Login
2022-12-13 09:18:59
ubuntucve
ubuntucve
CVE-2022-23503
2022-12-14 00:00:00
CVE-2022-23501
2022-12-14 00:00:00
CVE-2022-23502
2022-12-14 00:00:00
prion
prion
Authentication flaw
2022-12-14 08:15:00
Information disclosure
2022-12-14 08:15:00
Code injection
2022-12-14 08:15:00
openvas
openvas
TYPO3 Weak Authentication Vulnerability (TYPO3-CORE-SA-2022-013)
2022-12-14 00:00:00
TYPO3 Sensitive Information Disclosure Vulnerability (TYPO3-CORE-SA-2022-016)
2022-12-14 00:00:00
TYPO3 Arbitrary Code Execution Vulnerability (TYPO3-CORE-SA-2022-015)
2022-12-14 00:00:00
cvelist
cvelist
CVE-2022-23504 TYPO3 contains Sensitive Information Disclosure via YAML Placeholder Expressions in Site Configuration
2022-12-14 07:58:05
CVE-2022-23503 TYPO3 vulnerable to Arbitrary Code Execution via Form Framework
2022-12-14 07:51:03
CVE-2022-23502 TYPO3 contains Insufficient Session Expiration after Password Reset
2022-12-14 07:34:21

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

36.9%

JSON
Related for D9E154C9-7DE9-11ED-ADCA-080027D3A315
nessus7osv17github6veracode6cve6nvd6friendsofphp12ubuntucve5prion6openvas6cvelist6