Vulnerabilities in typo3

175 results
Vexday analysis

TYPO3 apresenta exposição mínima com apenas 1 CVE registrada na base, sem incidentes de exploração ativa (KEV) ou vulnerabilidades críticas. A fraqueza identificada é XSS (CWE-79), com risco não recente, mantendo o fornecedor em postura de baixo risco operacional no curto prazo.

CVE-2026-77130MEDIUMInsufficient Session Expiration in extension "SYSSY - TYPO3 Monitoring & Security Checks" (syssy)EPSS 0.2%CVE-2026-77133MEDIUMBroken Access Control in extension "femanager" (femanager)EPSS 0.2%CVE-2024-55920MEDIUMCross-Site Request Forgery in Dashboard Module in TYPO3EPSS 0.2%CVE-2024-55923MEDIUMCross-Site Request Forgery in Indexed Search Module in TYPO3EPSS 0.2%CVE-2024-55922MEDIUMCross-Site Request Forgery in Form Framework Module in TYPO3EPSS 0.2%CVE-2025-59015MEDIUMInsufficient Entropy in Password GenerationEPSS 0.2%CVE-2026-0859MEDIUMTYPO3 CMS Allows Insecure Deserialization via Mailer File SpoolEPSS 0.2%CVE-2025-59013MEDIUMOpen Redirect in TYPO3 CMSEPSS 0.2%CVE-2025-24856MEDIUMAn issue was discovered in the oidc (aka OpenID Connect Authentication) extension before 4.0.0 for TYPO3. The account linking logic allows aEPSS 0.2%CVE-2025-47939MEDIUMTYPO3 CMS Vulnerable to Unrestricted File Upload in File Abstraction LayerEPSS 0.2%CVE-2026-6553HIGHTYPO3 CMS Stores Cleartext Password in User Settings ModuleEPSS 0.2%CVE-2026-4202LOWBroken Access Control in extension "Redirect Tab"EPSS 0.2%CVE-2026-77131MEDIUMCleartext Transmission of Sensitive Information in extension "SYSSY - TYPO3 Monitoring & Security Checks" (syssy)EPSS 0.2%CVE-2026-0895MEDIUMInsecure Deserialization in extension "Mailqueue" (mailqueue)EPSS 0.1%CVE-2023-45023MEDIUMThe femanager extension 7 before 7.2.2 for TYPO3 has Incorrect Access Control: it lacks a check for permissions for the invitation componentEPSS 0.1%