https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:53:45 +0000 https://cve.radiocsirt.org/vuln/certfr-2022-avi-1097 certfr-2022-avi-1097 https://cve.radiocsirt.org/vuln/certfr-2022-avi-1097 https://cve.radiocsirt.org/vuln/euvd-2026-232224 EUVD-2026-232224 https://cve.radiocsirt.org/vuln/euvd-2026-232224 https://cve.radiocsirt.org/vuln/fkie_cve-2022-23501 <p>TYPO3 is an open source PHP based web content management system. In versions prior to 8.7.49, 9.5.38, 10.4.33, 11.5.20, and 12.1.1 TYPO3 is vulnerable to Improper Authentication. Restricting frontend login to specific users, organized in different storage folders (partitions), can be bypassed. A potential attacker might use this ambiguity in usernames to get access to a different account - however, credentials must be known to the adversary. This issue is patched in versions 8.7.49 ELTS, 9.5.38 ELTS, 10.4.33, 11.5.20, 12.1.1.</p> <p>TYPO3 is an open source PHP based web content management system. In versions prior to 8.7.49, 9.5.38, 10.4.33, 11.5.20, and 12.1.1 TYPO3 is vulnerable to Improper Authentication. Restricting frontend login to specific users, organized in different storage folders (partitions), can be bypassed. A potential attacker might use this ambiguity in usernames to get access to a different account - however, credentials must be known to the adversary. This issue is patched in versions 8.7.49 ELTS, 9.5.38 ELTS, 10.4.33, 11.5.20, 12.1.1.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-23501 https://cve.radiocsirt.org/vuln/ghsa-jfp7-79g7-89rf <p><strong>Affected:</strong> Packagist: typo3/cms-core, Packagist: typo3/cms</p> <p>### Problem Restricting frontend login to specific users, organized in different storage folders (partitions), can be bypassed. A potential attacker might use this ambiguity in usernames to get access to a different account - however, credentials must be known to the adversary.</p> <p>### Solution Update to TYPO3 versions 8.7.49 ELTS, 9.5.38 ELTS, 10.4.33, 11.5.20, 12.1.1 that fix the problem described above.</p> <p>### References * [TYPO3-CORE-SA-2022-013](https://typo3.org/security/advisory/typo3-core-sa-2022-013)</p> <p><strong>Affected:</strong> Packagist: typo3/cms-core, Packagist: typo3/cms</p> <p>### Problem Restricting frontend login to specific users, organized in different storage folders (partitions), can be bypassed. A potential attacker might use this ambiguity in usernames to get access to a different account - however, credentials must be known to the adversary.</p> <p>### Solution Update to TYPO3 versions 8.7.49 ELTS, 9.5.38 ELTS, 10.4.33, 11.5.20, 12.1.1 that fix the problem described above.</p> <p>### References * [TYPO3-CORE-SA-2022-013](https://typo3.org/security/advisory/typo3-core-sa-2022-013)</p> https://cve.radiocsirt.org/vuln/ghsa-jfp7-79g7-89rf https://cve.radiocsirt.org/vuln/gsd-2022-23501 gsd-2022-23501 https://cve.radiocsirt.org/vuln/gsd-2022-23501 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2299 <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in TYPO3 Core ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial of Service Zustand herzustellen.</p> <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in TYPO3 Core ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial of Service Zustand herzustellen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2299