Skip to content
OpenAdvisories

Package · Packagist

neos/neos

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.2
    GHSA-43cf-7f3h-38rg

    Privilege Escalation in TYPO3 Neos

    It has been discovered that TYPO3 Neos is vulnerable to Privilege Escalation. Logged in editors could access, create and modify content nodes that exist in the workspace of other editors.

    neos/neos Packagist
  • Medium 5.4
    CVE-2022-30429

    Neos CMS vulnerable to XSS in various backend modules

    Multiple cross-site scripting (XSS) vulnerabilities in Neos CMS allow attackers with the editor role or higher to inject arbitrary script or HTML code using the editor function, the deletion of assets, or a workspace title. The vulnerabilities were found in v…

    neos/neos Packagist
  • Medium —
    GHSA-jfxf-4frr-9j3q

    XSS in various backend modules due to (un)escaping in JS notification module

    The notification module displaying flash messages unscapes HTML coming from the server, resulting in XSS vulnerabilities with various names and labels of entities (eg. workspace title or media title). This however means you must be a logged in user with respe…

    neos/neos Packagist