https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 08:30:37 +0000 https://cve.radiocsirt.org/vuln/certfr-2022-avi-549 certfr-2022-avi-549 https://cve.radiocsirt.org/vuln/certfr-2022-avi-549 https://cve.radiocsirt.org/vuln/euvd-2026-234042 EUVD-2026-234042 https://cve.radiocsirt.org/vuln/euvd-2026-234042 https://cve.radiocsirt.org/vuln/fkie_cve-2022-31047 <p>TYPO3 is an open source web content management system. Prior to versions 7.6.57 ELTS, 8.7.47 ELTS, 9.5.34 ELTS, 10.4.29, and 11.5.11, system internal credentials or keys (e.g. database credentials) can be logged as plaintext in exception handlers, when logging the complete exception stack trace. TYPO3 versions 7.6.57 ELTS, 8.7.47 ELTS, 9.5.34 ELTS, 10.4.29, 11.5.11 contain a fix for the problem.</p> <p>TYPO3 is an open source web content management system. Prior to versions 7.6.57 ELTS, 8.7.47 ELTS, 9.5.34 ELTS, 10.4.29, and 11.5.11, system internal credentials or keys (e.g. database credentials) can be logged as plaintext in exception handlers, when logging the complete exception stack trace. TYPO3 versions 7.6.57 ELTS, 8.7.47 ELTS, 9.5.34 ELTS, 10.4.29, 11.5.11 contain a fix for the problem.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-31047 https://cve.radiocsirt.org/vuln/ghsa-fh99-4pgr-8j99 <p><strong>Affected:</strong> Packagist: typo3/cms-core, Packagist: typo3/cms</p> <p>&gt; ### Meta &gt; * CVSS: `CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C` (4.9)</p> <p>### Problem It has been discovered that system internal credentials or keys (e.g. database credentials) have been logged as plaintext in exception handlers, when logging the complete exception stack trace.</p> <p>### Solution Update to TYPO3 versions 7.6.57 ELTS, 8.7.47 ELTS, 9.5.35 ELTS, 10.4.29, 11.5.11 that fix the problem described above.</p> <p>### Credits Thanks to Marco Huber who reported this issue and to TYPO3 security member Torben Hansen who fixed the issue.</p> <p>### References * [TYPO3-CORE-SA-2022-002](https://typo3.org/security/advisory/typo3-core-sa-2022-002)</p> <p><strong>Affected:</strong> Packagist: typo3/cms-core, Packagist: typo3/cms</p> <p>&gt; ### Meta &gt; * CVSS: `CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C` (4.9)</p> <p>### Problem It has been discovered that system internal credentials or keys (e.g. database credentials) have been logged as plaintext in exception handlers, when logging the complete exception stack trace.</p> <p>### Solution Update to TYPO3 versions 7.6.57 ELTS, 8.7.47 ELTS, 9.5.35 ELTS, 10.4.29, 11.5.11 that fix the problem described above.</p> <p>### Credits Thanks to Marco Huber who reported this issue and to TYPO3 security member Torben Hansen who fixed the issue.</p> <p>### References * [TYPO3-CORE-SA-2022-002](https://typo3.org/security/advisory/typo3-core-sa-2022-002)</p> https://cve.radiocsirt.org/vuln/ghsa-fh99-4pgr-8j99 https://cve.radiocsirt.org/vuln/gsd-2022-31047 gsd-2022-31047 https://cve.radiocsirt.org/vuln/gsd-2022-31047