Vulnerabilidades em TYPO3

175 resultados
Análise Vexday

O ecossistema de vulnerabilidades do TYPO3 acumula 141 CVEs catalogadas, com 24 registros surgidos nos últimos 90 dias, o que indica um ritmo contínuo de descobertas que merece acompanhamento. Nenhuma das vulnerabilidades está listada no catálogo CISA KEV e não há PoCs públicas conhecidas, colocando a taxa de exploração ativa abaixo da média geral do catálogo — um indicador favorável, mas não suficiente para reduzir a vigilância. A falha mais comum é CWE-79 (Cross-Site Scripting), padrão que exige atenção especial em implementações que aceitam entrada de usuários sem sanitização adequada. A CVE mais perigosa atualmente rastreada é CVE-2026-46725, com score EPSS de 0,0231, sugerindo probabilidade de exploração ainda baixa, mas que deve ser monitorada dado o contexto das 2 vulnerabilidades de severidade crítica presentes no portfólio.

CVE-2024-55924HIGHCross-Site Request Forgery in Scheduler Module in TYPO3EPSS 0.3%CVE-2026-56094MEDIUMInformation Disclosure in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)EPSS 0.3%CVE-2026-4208HIGHAuthentication Bypass in extension "E-Mail MFA Provider" (mfa_email)EPSS 0.3%CVE-2026-77127MEDIUMInformation Disclosure in extension "Modules" (modules)EPSS 0.3%CVE-2026-15305MEDIUMTYPO3 CMS - Unrestricted File Upload in Form FrameworkEPSS 0.3%CVE-2026-47346HIGHTYPO3 CMS - Broken Access Control in Form FrameworkEPSS 0.3%CVE-2026-56095HIGHInsecure Deserialization in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)EPSS 0.2%CVE-2026-77146HIGHBroken Access Control in extension "femanager" (femanager)EPSS 0.2%CVE-2024-55894MEDIUMTYPO3 Cross-Site Request Forgery in Backend User ModuleEPSS 0.2%CVE-2024-55893MEDIUMTYPO3 Cross-Site Request Forgery in Log ModuleEPSS 0.2%CVE-2026-49741HIGHTYPO3 CMS - Privilege Escalation & SQL Injection in Form FrameworkEPSS 0.2%CVE-2026-56093MEDIUMBroken Access Control in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)EPSS 0.2%CVE-2024-55892MEDIUMPotential Open Redirect via Parsing Differences in TYPO3EPSS 0.2%CVE-2026-77141HIGHBroken Access Control in extension "Club Directory" (clubdirectory)EPSS 0.2%CVE-2026-77143HIGHBroken Access Control in extension "Forum" (pforum)EPSS 0.2%CVE-2026-77140HIGHBroken Access Control in extension "Telephone Directory" (telephonedirectory)EPSS 0.2%CVE-2026-77142HIGHBroken Access Control in extension "Industry Directory" (yellowpages2)EPSS 0.2%CVE-2026-77135HIGHInformation Disclosure in extension "femanager" (femanager)EPSS 0.2%CVE-2026-77134HIGHBroken Access Control in extension "femanager" (femanager)EPSS 0.2%CVE-2026-47349MEDIUMTYPO3 CMS - Broken Access Control in RecyclerEPSS 0.2%