Most recent entries from all

certfr-2020-avi-442 — De multiples vulnérabilités ont été découvertes dans IBM Qradar. Elles permettent à un attaquant de provoquer une exécu…

2026-10-03T16:08:07.927318+00:00

certfr-2020-avi-442

cnvd-2020-47970

2026-10-03T16:08:07.927367+00:00

cnvd-2020-47970

EUVD-2026-42688

2026-10-03T16:08:07.927383+00:00

EUVD-2026-42688

fkie_cve-2020-15099

2026-10-03T16:08:07.927395+00:00

In TYPO3 CMS greater than or equal to 9.0.0 and less than 9.5.20, and greater than or equal to 10.0.0 and less than 10.4.6, in a case where an attacker manages to generate a valid cryptographic message authentication code (HMAC-SHA1) - either by using a different existing vulnerability or in case the internal encryptionKey was exposed - it is possible to retrieve arbitrary files of a TYPO3 installation. This includes the possibility to fetch typo3conf/LocalConfiguration.php, which again contains the encryptionKey as well as credentials of the database management system being used. In case a database server is directly accessible either via internet or in a shared hosting network, this allows the ability to completely retrieve, manipulate or delete database contents. This includes creating an administration user account - which can be used to trigger remote code execution by injecting custom extensions. This has been patched in versions 9.5.20 and 10.4.6.

GHSA-3x94-fv5h-5q2c — Exposure of Sensitive Information to an Unauthorized Actor in TYPO3 CMS

2026-10-03T16:08:07.927430+00:00

Affected: Packagist: typo3/cms-core, Packagist: typo3/cms

> ### Meta > * CVSS: `CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C` (7.5) > * CWE-20, CWE-200

### Problem In case an attacker manages to generate a valid cryptographic message authentication code (HMAC-SHA1) - either by using a different existing vulnerability or in case the internal _encryptionKey_ was exposed - it is possible to retrieve arbitrary files of a TYPO3 installation. This includes the possibility to fetch _typo3conf/LocalConfiguration.php_ which again contains the _encryptionKey_ as well as credentials of the database management system being used.

In case a database server is directly accessible either via internet or in a shared hosting network, this allows to completely retrieve, manipulate or delete database contents. This includes creating an administration user account - which can be used to trigger remote code execution by injecting custom extensions.

### Solution Update to TYPO3 versions 9.5.20 or 10.4.6 that fix the problem described.

### Credits Thanks to TYPO3 security team member Oliver Hader who reported and fixed the issue.

### References * [TYPO3-CORE-SA-2020-007](https://typo3.org/security/advisory/typo3-core-sa-2020-007)

gsd-2020-15099

2026-10-03T16:08:07.927472+00:00

gsd-2020-15099

WID-SEC-W-2026-0726 — TYPO3 Core: Mehrere Schwachstellen

2026-10-03T16:08:07.927485+00:00

Ein entfernter Angreifer kann mehrere Schwachstellen in TYPO3 Core ausnutzen, um Informationen offenzulegen und seine Rechte zu erweitern.