[MEDIUM] TYPO3 Potential Open Redirect via Parsing Differences

PKSA-3gg2-48j5-46ky CVE-2024-55892 GHSA-2fx5-pggv-6jjr

Affected version: >=13.0.0,<=13.4.2|>=12.0.0,<=12.4.24|>=11.0.0,<=11.5.41|>=10.0.0,<=10.4.47|>=9.0.0,<=9.5.48

Reported by:
GitHub

[MEDIUM] TYPO3 vulnerable to an Uncontrolled Resource Consumption in the ShowImageController

PKSA-tm11-834c-1wbq CVE-2024-34358 GHSA-36g8-62qv-5957

Affected version: >=13.0.0,<=13.1.0|>=12.0.0,<=12.4.14|>=11.0.0,<=11.5.36|>=10.0.0,<=10.4.44|>=9.0.0,<=9.5.47

Reported by:
GitHub

[MEDIUM] TYPO3 vulnerable to Cross-Site Scripting in the ShowImageController

PKSA-443h-dk5w-qm2g CVE-2024-34357 GHSA-hw6c-6gwq-3m3m

Affected version: >=13.0.0,<=13.1.0|>=12.0.0,<=12.4.14|>=11.0.0,<=11.5.36|>=10.0.0,<=10.4.44|>=9.0.0,<=9.5.47

Reported by:
GitHub

[MEDIUM] TYPO3 vulnerable to Cross-Site Scripting in the Form Manager Module

PKSA-8vkj-4d3h-x586 CVE-2024-34356 GHSA-v6mw-h7w6-59w3

Affected version: >=13.0.0,<=13.1.0|>=12.0.0,<=12.4.14|>=11.0.0,<=11.5.36|>=10.0.0,<=10.4.44|>=9.0.0,<=9.5.47

Reported by:
GitHub