Security Advisories

Alle Meldungen aus dem offiziellen TYPO3-Security-Feed, neueste zuerst. Der Schweregrad stammt aus den maschinenlesbaren Advisory-Datenbanken; wo er dort fehlt, bleibt er hier unbekannt.

SicherheitHoch
TYPO3-CORE-SA-2026-007: Broken Access Control in File Abstraction Layer
It has been discovered that TYPO3 CMS is susceptible to broken access control.
TYPO3 Security Advisories 09.06.2026 TYPO3-CORE-SA-2026-007
SicherheitMittel
TYPO3-CORE-SA-2026-006: By-passing Cross-Site Scripting Protection in HTML Sanitizer
It has been discovered that TYPO3 CMS is vulnerable to cross-site scripting.
TYPO3 Security Advisories 09.06.2026 TYPO3-CORE-SA-2026-006
SicherheitKritisch
TYPO3-EXT-SA-2026-013: Remote Code Execution in extension "Content Element Selector" (ceselector)
It has been discovered that the extension "Content Element Selector" (ceselector) is vulnerable to Remote Code Execution.
TYPO3 Security Advisories 19.05.2026 TYPO3-EXT-SA-2026-013
SicherheitHoch
TYPO3-EXT-SA-2026-012: SQL Injection in extension "Address List" (tt_address)
It has been discovered that the extension "Address List" (tt_address) is vulnerable to SQL Injection.
TYPO3 Security Advisories 19.05.2026 TYPO3-EXT-SA-2026-012
SicherheitMittel
TYPO3-EXT-SA-2026-011: Multiple vulnerabilities in extension "Faceted Search" (ke_search)
It has been discovered that the extension "Faceted Search" (ke_search) is vulnerable to XML External Entity injection, Path Traversal and Information Disclosure.
TYPO3 Security Advisories 19.05.2026 TYPO3-EXT-SA-2026-011
SicherheitHoch
TYPO3-EXT-SA-2026-010: SQL Injection in extension "News system" (news)
It has been discovered that the extension "News system" (news) is vulnerable to SQL Injection.
TYPO3 Security Advisories 19.05.2026 TYPO3-EXT-SA-2026-010
SicherheitMittel
TYPO3-EXT-SA-2026-009: Broken Access Control in extension "Frontend User Registration" (sf_register)
It has been discovered that the extension "Frontend User Registration" (sf_register) is vulnerable to Broken Access Control.
TYPO3 Security Advisories 19.05.2026 TYPO3-EXT-SA-2026-009
SicherheitHoch
TYPO3-EXT-SA-2026-008: Remote Code Execution in extension "Site Crawler" (crawler)
It has been discovered that the extension "Site Crawler" (crawler) is vulnerable to Remote Code Execution.
TYPO3 Security Advisories 19.05.2026 TYPO3-EXT-SA-2026-008
SicherheitSchweregrad unbekannt
TYPO3-CORE-SA-2026-005: Cleartext storage of Backend User Passwords
It has been discovered that TYPO3 CMS is susceptible to sensitive data exposure.
TYPO3 Security Advisories 21.04.2026 TYPO3-CORE-SA-2026-005
SicherheitSchweregrad unbekannt
TYPO3-EXT-SA-2026-007: Authentication Bypass in extension "E-Mail MFA Provider" (mfa_email)
It has been discovered that the extension "E-Mail MFA Provider" (mfa_email) is vulnerable to Authentication Bypass.
TYPO3 Security Advisories 17.03.2026 TYPO3-EXT-SA-2026-007
SicherheitSchweregrad unbekannt
TYPO3-EXT-SA-2026-006: Broken Access Control in extension "Redirect Tab" (redirect_tab)
It has been discovered that the extension "Redirect Tab" (redirect_tab) is vulnerable to Broken Access Control.
TYPO3 Security Advisories 17.03.2026 TYPO3-EXT-SA-2026-006
SicherheitSchweregrad unbekannt
TYPO3-EXT-SA-2026-005: Insecure Deserialization in extension "Mailqueue" (mailqueue)
It has been discovered that the extension "Mailqueue" (mailqueue) is vulnerable to insecure deserialization.
TYPO3 Security Advisories 17.03.2026 TYPO3-EXT-SA-2026-005
SicherheitSchweregrad unbekannt
TYPO3-EXT-SA-2026-004: Vulnerability in bundled package in extension "Amazon AWS SDK" (aws)
It has been discovered that the extension "Amazon AWS SDK" (aws) bundles a vulnerable version of “aws/aws-sdk-php“ which is susceptible to use of a Broken or Risky Cryptographic Algorithm.
TYPO3 Security Advisories 20.01.2026 TYPO3-EXT-SA-2026-004
SicherheitSchweregrad unbekannt
TYPO3-EXT-SA-2026-003: Vulnerability in bundled package in extension "Amazon Web Services (AWS) Toolbox" (aws_tools)
It has been discovered that the extension "Amazon Web Services (AWS) Toolbox" (aws_tools) bundles a vulnerable version of “aws/aws-sdk-php“ which is susceptible to use of a Broken or Risky
TYPO3 Security Advisories 20.01.2026 TYPO3-EXT-SA-2026-003
SicherheitSchweregrad unbekannt
TYPO3-EXT-SA-2026-002: Vulnerability in bundled package in extension "AWS SDK for PHP" (aws_sdk_php)
It has been discovered that the extension "AWS SDK for PHP" (aws_sdk_php) bundles a vulnerable version of “aws/aws-sdk-php“ which is susceptible to use of a Broken or Risky Cryptographic Algorithm.
TYPO3 Security Advisories 20.01.2026 TYPO3-EXT-SA-2026-002
SicherheitSchweregrad unbekannt
TYPO3-EXT-SA-2026-001: Insecure Deserialization in extension "Mailqueue" (mailqueue)
It has been discovered that the extension "Mailqueue" (mailqueue) is vulnerable to insecure deserialization.
TYPO3 Security Advisories 20.01.2026 TYPO3-EXT-SA-2026-001