WID-SEC-W-2023-2883

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

TYPO3 Core: Mehrere Schwachstellen

view advisory published 2023-11-13

Ein Angreifer kann mehrere Schwachstellen in TYPO3 Core ausnutzen, um Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder einen Cross-Site-Scripting-Angriff durchzuführen.

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2023-47127USmedium5.4—
TYPO3 is an open source PHP based web content management system released under the GNU GPL. In typo3 installations there are always at least two different sites. Eg. first.example.…
CVE-2023-47126USmedium5.3—
TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected versions the login screen of the standalone install tool discloses the full…
CVE-2023-47125USmedium6.1Exploit
TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected versions DOM processing instructions are not handled correctly. This allows…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan