Security Advisories

Alle Meldungen aus dem offiziellen TYPO3-Security-Feed, neueste zuerst. Der Schweregrad stammt aus den maschinenlesbaren Advisory-Datenbanken; wo er dort fehlt, bleibt er hier unbekannt.

Im Blick — Als einer der sechs wichtigsten Beiträge der Woche ausgewählt und oben im Slider gezeigt.SicherheitSchweregrad unbekannt
TYPO3-EXT-SA-2026-027: SQL Injection in extension "Forms Export" (frp_form_answers)
It has been discovered that the extension "Forms Export" (frp_form_answers) is vulnerable to SQL Injection.
TYPO3 Security Advisories 25.08.2026 TYPO3-EXT-SA-2026-027
Im Blick — Als einer der sechs wichtigsten Beiträge der Woche ausgewählt und oben im Slider gezeigt.SicherheitSchweregrad unbekannt
TYPO3-EXT-SA-2026-026: Broken Access Control in extension "Events 2" (events2)
It has been discovered that the extension "Events 2" (events2) is susceptible to two instances of Broken Access Control.
TYPO3 Security Advisories 25.08.2026 TYPO3-EXT-SA-2026-026
Im Blick — Als einer der sechs wichtigsten Beiträge der Woche ausgewählt und oben im Slider gezeigt.SicherheitSchweregrad unbekannt
TYPO3-EXT-SA-2026-025: Multiple Vulnerabilities in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)
It has been discovered that the extension "Apache Solr for TYPO3 - Enterprise Search" (solr) is vulnerable to Broken Access Control, Insecure Deserialization and Information Disclosure.
TYPO3 Security Advisories 25.08.2026 TYPO3-EXT-SA-2026-025
Im Blick — Als einer der sechs wichtigsten Beiträge der Woche ausgewählt und oben im Slider gezeigt.SicherheitSchweregrad unbekannt
TYPO3-EXT-SA-2026-024: Multiple vulnerabilities in extension "femanager" (femanager)
It has been discovered that the extension "femanager" (femanager) is vulnerable to Broken Access Control and Information Disclosure.
TYPO3 Security Advisories 25.08.2026 TYPO3-EXT-SA-2026-024
Im Blick — Als einer der sechs wichtigsten Beiträge der Woche ausgewählt und oben im Slider gezeigt.SicherheitSchweregrad unbekannt
TYPO3-EXT-SA-2026-023: Multiple vulnerabilities in extension "Event management and registration" (sf_event_mgt)
It has been discovered that the extension "Event management and registration" (sf_event_mgt) is vulnerable to Broken Access Control and Server-Side Template Injection (SSTI).
TYPO3 Security Advisories 25.08.2026 TYPO3-EXT-SA-2026-023
Im Blick — Als einer der sechs wichtigsten Beiträge der Woche ausgewählt und oben im Slider gezeigt.SicherheitSchweregrad unbekannt
TYPO3-EXT-SA-2026-022: Server-Side Template Injection (SSTI) in extension "powermail" (powermail)
It has been discovered that the extension "powermail" (powermail) is vulnerable to Server-Side Template Injection (SSTI).
TYPO3 Security Advisories 25.08.2026 TYPO3-EXT-SA-2026-022
SicherheitSchweregrad unbekannt
TYPO3-EXT-SA-2026-021: Broken Access Control in extension "Forum" (pforum)
It has been discovered that the extension "Forum" (pforum) is susceptible to Broken Access Control.
TYPO3 Security Advisories 25.08.2026 TYPO3-EXT-SA-2026-021
SicherheitSchweregrad unbekannt
TYPO3-EXT-SA-2026-020: Broken Access Control in extension "Industry Directory" (yellowpages2)
It has been discovered that the extension "Industry Directory" (yellowpages2) is susceptible to Broken Access Control.
TYPO3 Security Advisories 25.08.2026 TYPO3-EXT-SA-2026-020
SicherheitSchweregrad unbekannt
TYPO3-EXT-SA-2026-019: Broken Access Control in extension "Club Directory" (clubdirectory)
It has been discovered that the extension "Club Directory" (clubdirectory) is susceptible to Broken Access Control.
TYPO3 Security Advisories 25.08.2026 TYPO3-EXT-SA-2026-019
SicherheitSchweregrad unbekannt
TYPO3-EXT-SA-2026-018: Broken Access Control in extension "Telephone Directory" (telephonedirectory)
It has been discovered that the extension "Telephone Directory" (telephonedirectory) is susceptible to Broken Access Control.
TYPO3 Security Advisories 25.08.2026 TYPO3-EXT-SA-2026-018
SicherheitSchweregrad unbekannt
TYPO3-EXT-SA-2026-017: Path Traversal in extension "Mask" (mask)
It has been discovered that the extension "Mask" (mask) is vulnerable to Path Traversal.
TYPO3 Security Advisories 25.08.2026 TYPO3-EXT-SA-2026-017
SicherheitSchweregrad unbekannt
TYPO3-EXT-SA-2026-016: Information Disclosure in extension "Modules" (modules)
It has been discovered that the extension "Modules" (modules) is vulnerable to Information Disclosure.
TYPO3 Security Advisories 25.08.2026 TYPO3-EXT-SA-2026-016
SicherheitSchweregrad unbekannt
TYPO3-EXT-SA-2026-015: Multiple Vulnerabilities in extension "SYSSY - TYPO3 Monitoring & Security Checks" (syssy)
It has been discovered that the extension "SYSSY - TYPO3 Monitoring & Security Checks" (syssy) is vulnerable to Insufficient Session Expiration and Cleartext Transmission of Sensitive Information.
TYPO3 Security Advisories 25.08.2026 TYPO3-EXT-SA-2026-015
SicherheitSchweregrad unbekannt
TYPO3-EXT-SA-2026-014: Remote Code Execution in extension "HTML5 Video Player vs. Powermail" (html5videoplayer_powermail)
It has been discovered that the extension "HTML5 Video Player vs. Powermail" (html5videoplayer_powermail) is vulnerable to Remote Code Execution.
TYPO3 Security Advisories 25.08.2026 TYPO3-EXT-SA-2026-014
SicherheitSchweregrad unbekannt
TYPO3-CORE-SA-2026-021: Broken Access Control in Backend and Install Tool
It has been discovered that TYPO3 CMS is susceptible to broken access control.
TYPO3 Security Advisories 11.08.2026 TYPO3-CORE-SA-2026-021
SicherheitSchweregrad unbekannt
TYPO3-CORE-SA-2026-020: Unrestricted File Upload in Form Framework
It has been discovered that TYPO3 CMS is susceptible to security misconfiguration.
TYPO3 Security Advisories 14.07.2026 TYPO3-CORE-SA-2026-020
SicherheitSchweregrad unbekannt
TYPO3-CORE-SA-2026-005: Cleartext storage of Backend User Passwords
It has been discovered that TYPO3 CMS is susceptible to sensitive data exposure.
TYPO3 Security Advisories 21.04.2026 TYPO3-CORE-SA-2026-005
SicherheitSchweregrad unbekannt
TYPO3-EXT-SA-2026-007: Authentication Bypass in extension "E-Mail MFA Provider" (mfa_email)
It has been discovered that the extension "E-Mail MFA Provider" (mfa_email) is vulnerable to Authentication Bypass.
TYPO3 Security Advisories 17.03.2026 TYPO3-EXT-SA-2026-007
SicherheitSchweregrad unbekannt
TYPO3-EXT-SA-2026-006: Broken Access Control in extension "Redirect Tab" (redirect_tab)
It has been discovered that the extension "Redirect Tab" (redirect_tab) is vulnerable to Broken Access Control.
TYPO3 Security Advisories 17.03.2026 TYPO3-EXT-SA-2026-006
SicherheitSchweregrad unbekannt
TYPO3-EXT-SA-2026-005: Insecure Deserialization in extension "Mailqueue" (mailqueue)
It has been discovered that the extension "Mailqueue" (mailqueue) is vulnerable to insecure deserialization.
TYPO3 Security Advisories 17.03.2026 TYPO3-EXT-SA-2026-005
SicherheitSchweregrad unbekannt
TYPO3-EXT-SA-2026-004: Vulnerability in bundled package in extension "Amazon AWS SDK" (aws)
It has been discovered that the extension "Amazon AWS SDK" (aws) bundles a vulnerable version of “aws/aws-sdk-php“ which is susceptible to use of a Broken or Risky Cryptographic Algorithm.
TYPO3 Security Advisories 20.01.2026 TYPO3-EXT-SA-2026-004
SicherheitSchweregrad unbekannt
TYPO3-EXT-SA-2026-003: Vulnerability in bundled package in extension "Amazon Web Services (AWS) Toolbox" (aws_tools)
It has been discovered that the extension "Amazon Web Services (AWS) Toolbox" (aws_tools) bundles a vulnerable version of “aws/aws-sdk-php“ which is susceptible to use of a Broken or Risky
TYPO3 Security Advisories 20.01.2026 TYPO3-EXT-SA-2026-003
SicherheitSchweregrad unbekannt
TYPO3-EXT-SA-2026-002: Vulnerability in bundled package in extension "AWS SDK for PHP" (aws_sdk_php)
It has been discovered that the extension "AWS SDK for PHP" (aws_sdk_php) bundles a vulnerable version of “aws/aws-sdk-php“ which is susceptible to use of a Broken or Risky Cryptographic Algorithm.
TYPO3 Security Advisories 20.01.2026 TYPO3-EXT-SA-2026-002
SicherheitSchweregrad unbekannt
TYPO3-EXT-SA-2026-001: Insecure Deserialization in extension "Mailqueue" (mailqueue)
It has been discovered that the extension "Mailqueue" (mailqueue) is vulnerable to insecure deserialization.
TYPO3 Security Advisories 20.01.2026 TYPO3-EXT-SA-2026-001