There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Cross-site scripting (XSS) vulnerability in the errorAction method in the ActionController base class in
    the Extbase Framework in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0
    through 6.1.6, when the Rewritten Property Mapper is enabled, allows remote attackers to inject arbitrary
    web script or HTML via unspecified input, which is returned in an error message. NOTE: this might be the
    same vulnerability as CVE-2013-7072. (CVE-2013-7078)

在 TYPO3 (內容管理系統) 中發現數個弱點。此更新可解決跨網站指令碼、資訊洩漏、大量指派、開放重新導向及不安全的未序列化弱點，並對應至 TYPO3-CORE-SA-2013-004。

已发现在内容管理系统 TYPO3 中存在多个漏洞。此更新解决了跨站脚本、信息泄露、mass assignment、开放重定向和非安全反序列化漏洞，与 TYPO3-CORE-SA-2013-004 对应。

コンテンツ管理システムの TYPO3 で、複数の脆弱性が見つかりました。この更新では、クロスサイトスクリプティング、情報漏洩、大量の割り当て、オープンリダイレクション、および安全でないシリアル化解除に関する脆弱性に対処しています。また、これは TYPO3-CORE-SA-2013-004 に関連しています。

Several vulnerabilities were discovered in TYPO3, a content management system. This update addresses cross-site scripting, information disclosure, mass assignment, open redirection and insecure unserialize vulnerabilities and corresponds to TYPO3-CORE-SA-2013-004.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
433134	SCA: security update for typo3/cms-core (GHSA-qj69-chjp-g4f5)	Tenable Self-Hosted Container Security	SCA Checks	2025/8/12	2026/7/2	medium
433134	SCA: security update for typo3/cms-core (GHSA-qj69-chjp-g4f5)	Tenable Cloud Security	SCA Checks	2025/8/12	2026/7/2	medium
71782	Debian DSA-2834-1 : typo3-src - 數個弱點	Nessus	Debian Local Security Checks	2014/1/2	2021/1/11	medium
71782	Debian DSA-2834-1：typo3-src - 多个漏洞	Nessus	Debian Local Security Checks	2014/1/2	2021/1/11	medium
71782	Debian DSA-2834-1 : typo3-src - 複数の脆弱性	Nessus	Debian Local Security Checks	2014/1/2	2021/1/11	medium
71782	Debian DSA-2834-1 : typo3-src - several vulnerabilities	Nessus	Debian Local Security Checks	2014/1/2	2021/1/11	medium

检测

插件搜索

medium

medium

medium

medium

medium

medium