https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 16:08:15 +0000 https://cve.radiocsirt.org/vuln/certfr-2020-avi-442 certfr-2020-avi-442 https://cve.radiocsirt.org/vuln/certfr-2020-avi-442 https://cve.radiocsirt.org/vuln/cnvd-2020-47970 cnvd-2020-47970 https://cve.radiocsirt.org/vuln/cnvd-2020-47970 https://cve.radiocsirt.org/vuln/euvd-2026-42688 EUVD-2026-42688 https://cve.radiocsirt.org/vuln/euvd-2026-42688 https://cve.radiocsirt.org/vuln/fkie_cve-2020-15099 <p>In TYPO3 CMS greater than or equal to 9.0.0 and less than 9.5.20, and greater than or equal to 10.0.0 and less than 10.4.6, in a case where an attacker manages to generate a valid cryptographic message authentication code (HMAC-SHA1) - either by using a different existing vulnerability or in case the internal encryptionKey was exposed - it is possible to retrieve arbitrary files of a TYPO3 installation. This includes the possibility to fetch typo3conf/LocalConfiguration.php, which again contains the encryptionKey as well as credentials of the database management system being used. In case a database server is directly accessible either via internet or in a shared hosting network, this allows the ability to completely retrieve, manipulate or delete database contents. This includes creating an administration user account - which can be used to trigger remote code execution by injecting custom extensions. This has been patched in versions 9.5.20 and 10.4.6.</p> <p>In TYPO3 CMS greater than or equal to 9.0.0 and less than 9.5.20, and greater than or equal to 10.0.0 and less than 10.4.6, in a case where an attacker manages to generate a valid cryptographic message authentication code (HMAC-SHA1) - either by using a different existing vulnerability or in case the internal encryptionKey was exposed - it is possible to retrieve arbitrary files of a TYPO3 installation. This includes the possibility to fetch typo3conf/LocalConfiguration.php, which again contains the encryptionKey as well as credentials of the database management system being used. In case a database server is directly accessible either via internet or in a shared hosting network, this allows the ability to completely retrieve, manipulate or delete database contents. This includes creating an administration user account - which can be used to trigger remote code execution by injecting custom extensions. This has been patched in versions 9.5.20 and 10.4.6.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-15099 https://cve.radiocsirt.org/vuln/ghsa-3x94-fv5h-5q2c <p><strong>Affected:</strong> Packagist: typo3/cms-core, Packagist: typo3/cms</p> <p>&gt; ### Meta &gt; * CVSS: `CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C` (7.5) &gt; * CWE-20, CWE-200</p> <p>### Problem In case an attacker manages to generate a valid cryptographic message authentication code (HMAC-SHA1) - either by using a different existing vulnerability or in case the internal _encryptionKey_ was exposed - it is possible to retrieve arbitrary files of a TYPO3 installation. This includes the possibility to fetch _typo3conf/LocalConfiguration.php_ which again contains the _encryptionKey_ as well as credentials of the database management system being used.</p> <p>In case a database server is directly accessible either via internet or in a shared hosting network, this allows to completely retrieve, manipulate or delete database contents. This includes creating an administration user account - which can be used to trigger remote code execution by injecting custom extensions.</p> <p>### Solution Update to TYPO3 versions 9.5.20 or 10.4.6 that fix the problem described.</p> <p>### Credits Thanks to TYPO3 security team member Oliver Hader who reported and fixed the issue.</p> <p>### References * [TYPO3-CORE-SA-2020-007](https://typo3.org/security/advisory/typo3-core-sa-2020-007)</p> <p><strong>Affected:</strong> Packagist: typo3/cms-core, Packagist: typo3/cms</p> <p>&gt; ### Meta &gt; * CVSS: `CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C` (7.5) &gt; * CWE-20, CWE-200</p> <p>### Problem In case an attacker manages to generate a valid cryptographic message authentication code (HMAC-SHA1) - either by using a different existing vulnerability or in case the internal _encryptionKey_ was exposed - it is possible to retrieve arbitrary files of a TYPO3 installation. This includes the possibility to fetch _typo3conf/LocalConfiguration.php_ which again contains the _encryptionKey_ as well as credentials of the database management system being used.</p> <p>In case a database server is directly accessible either via internet or in a shared hosting network, this allows to completely retrieve, manipulate or delete database contents. This includes creating an administration user account - which can be used to trigger remote code execution by injecting custom extensions.</p> <p>### Solution Update to TYPO3 versions 9.5.20 or 10.4.6 that fix the problem described.</p> <p>### Credits Thanks to TYPO3 security team member Oliver Hader who reported and fixed the issue.</p> <p>### References * [TYPO3-CORE-SA-2020-007](https://typo3.org/security/advisory/typo3-core-sa-2020-007)</p> https://cve.radiocsirt.org/vuln/ghsa-3x94-fv5h-5q2c https://cve.radiocsirt.org/vuln/gsd-2020-15099 gsd-2020-15099 https://cve.radiocsirt.org/vuln/gsd-2020-15099 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0726 <p>Ein entfernter Angreifer kann mehrere Schwachstellen in TYPO3 Core ausnutzen, um Informationen offenzulegen und seine Rechte zu erweitern.</p> <p>Ein entfernter Angreifer kann mehrere Schwachstellen in TYPO3 Core ausnutzen, um Informationen offenzulegen und seine Rechte zu erweitern.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0726