Feed live

TYPO3 vulnerabilities - every known CVE across core and extensions

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

TYPO3 is widely deployed by European enterprises and public-sector sites, where its extension ecosystem is the most frequent source of newly disclosed CVEs.

Total CVEs tracked

347,123

All time

Critical · Active

11,966

CVSS ≥ 9.0

New · 14 days

2,726

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 31–60 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-47936	low	3.3/10	TYPO3 Vulnerable to Server Side Request Forgery via Webhooks	May 20, 2025 1y ago
CVE-2024-55892	medium	4.8/10	Potential Open Redirect via Parsing Differences in TYPO3	Jan 14, 2025 1y ago
CVE-2024-55893	medium	4.3/10	TYPO3 Cross-Site Request Forgery in Log Module	Jan 14, 2025 1y ago
CVE-2024-55894	medium	4.3/10	TYPO3 Cross-Site Request Forgery in Backend User Module	Jan 14, 2025 1y ago
CVE-2024-55920	medium	4.3/10	Cross-Site Request Forgery in Dashboard Module in TYPO3	Jan 14, 2025 1y ago
CVE-2024-55921	high	7.5/10	Cross-Site Request Forgery in Extension Manager Module in TYPO3	Jan 14, 2025 1y ago
CVE-2024-55922	medium	5.4/10	Cross-Site Request Forgery in Form Framework Module in TYPO3	Jan 14, 2025 1y ago
CVE-2024-55923	medium	4.3/10	Cross-Site Request Forgery in Indexed Search Module in TYPO3	Jan 14, 2025 1y ago
CVE-2024-55924	high	8.0/10	Cross-Site Request Forgery in Scheduler Module in TYPO3	Jan 14, 2025 1y ago
CVE-2024-55945	medium	4.3/10	Cross-Site Request Forgery in DB Check Module in TYPO3	Jan 14, 2025 1y ago
CVE-2024-55891	low	3.1/10	Information Disclosure via Exception Handling/Logger in TYPO3	Jan 14, 2025 1y ago
CVE-2024-47780	low	3.1/10	Information Disclosure in TYPO3 Page Tree	Oct 8, 2024 1y ago
CVE-2024-34358	medium	5.3/10	TYPO3 vulnerable to an Uncontrolled Resource Consumption in the ShowImageController	May 14, 2024 2y ago
CVE-2024-34357	medium	5.4/10	TYPO3 vulnerable to Cross-Site Scripting in ShowImageController	May 14, 2024 2y ago
CVE-2024-34356	medium	5.4/10	TYPO3 vulnerable to Cross-Site Scripting in the Form Manager Module	May 14, 2024 2y ago
CVE-2024-34355	low	3.5/10	TYPO3 vulnerable to an HTML Injection in the History Module	May 14, 2024 2y ago
CVE-2024-25118	medium	4.3/10	Information Disclosure of Hashed Passwords in TYPO3 Backend Forms	Feb 13, 2024 2y ago
CVE-2024-25119	medium	4.9/10	Information Disclosure of Encryption Key in TYPO3 Install Tool	Feb 13, 2024 2y ago
CVE-2024-25120	medium	4.3/10	Improper Access Control of Resources Referenced by t3:// URI Scheme in TYPO3	Feb 13, 2024 2y ago
CVE-2024-25121	high	7.1/10	Improper Access Control Persisting File Abstraction Layer Entities via Data Handler in TYPO3	Feb 13, 2024 2y ago
CVE-2023-47126	low	3.7/10	Information Disclosure in Install Tool in typo3/cms-install	Nov 14, 2023 2y ago
CVE-2023-47127	medium	4.2/10	Weak Authentication in Session Handling in typo3/cms-core	Nov 14, 2023 2y ago
CVE-2023-38499	low	3.7/10	typo3/cms-core Information Disclosure due to Out-of-scope Site Resolution	Jul 25, 2023 3y ago
CVE-2023-24814	high	8.8/10	Persisted Cross-Site Scripting in Frontend Rendering in typo3	Feb 7, 2023 3y ago
CVE-2022-23504	medium	5.7/10	TYPO3 contains Sensitive Information Disclosure via YAML Placeholder Expressions in Site Configuration	Dec 14, 2022 3y ago
CVE-2022-23503	high	7.5/10	TYPO3 vulnerable to Arbitrary Code Execution via Form Framework	Dec 14, 2022 3y ago
CVE-2022-23502	medium	5.4/10	TYPO3 contains Insufficient Session Expiration after Password Reset	Dec 14, 2022 3y ago
CVE-2022-23501	medium	5.9/10	TYPO3 vulnerable to Improper Authentication in Frontend Login	Dec 14, 2022 3y ago
CVE-2022-23500	medium	5.9/10	TYPO3 subject to Uncontrolled Recursion resulting in Denial of Service	Dec 14, 2022 3y ago
CVE-2022-36105	medium	5.3/10	User Enumeration via Response Timing in TYPO3	Sep 13, 2022 3y ago