Skip to content
OpenAdvisories
Unscored DTSA-193-1 2 CVEs

typo3 - several vulnerabilities

Published Feb 10, 2009 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 5.0 typo3-src 4.2.5-1+lenny1

Vulnerabilities 2

  • Medium —
    CVE-2009-0815 Public exploit EPSS 42%

    TYPO3 leaks a hash secret in an error message

    The jumpUrl mechanism in class.tslib_fe.php in TYPO3 3.3.x through 3.8.x, 4.0 before 4.0.12, 4.1 before 4.1.10, 4.2 before 4.2.6, and 4.3alpha1 leaks a hash secret (juHash) in an error message, which allows remote attackers to read arbitrary files by includin…

    typo3/cms Packagist
  • Medium —
    CVE-2009-0816

    Typo3 Backend XSS Vulnerability

    Multiple cross-site scripting (XSS) vulnerabilities in the backend user interface in TYPO3 3.3.x through 3.8.x, 4.0 before 4.0.12, 4.1 before 4.1.10, 4.2 before 4.2.6, and 4.3alpha1 allow remote attackers to inject arbitrary web script or HTML via unspecified…

    typo3/cms Packagist