VulertSecurity VulertSecurity

Vulnerability Database · Packagist · typo3/cms-core · Version

typo3/cms-core v13.4.3

v13.4.3 is affected by 16 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to.

Critical 0 High 4 Medium 11 Low 1 Unrated 0

All typo3/cms-core versions & vulnerabilities → Search the database for this package →
Database updated 23/Oct/2026

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

typo3/cms-core v13.4.3 vulnerabilities

16 vulnerabilities cover typo3/cms-core v13.4.3. Scroll the table for all of them, or open the full list in the database.

Vulnerability Severity Fixed version Disclosed
CVE-2026-11607: TYPO3 CMS Form Framework Broken Access Control Vulnerability 7.6 high 10.4.57 12 Jun 2026
CVE-2026-47346: TYPO3 CMS Form Framework Broken Access Control Vulnerability 7.6 high 10.4.57 12 Jun 2026
CVE-2026-47343: TYPO3 CMS Vulnerability Allows Destructive Actions on File Mount Folders 7.2 high 10.4.57 12 Jun 2026
CVE-2026-49740: TYPO3 CMS Insecure Deserialization Vulnerability 6.3 medium 10.4.57 12 Jun 2026
CVE-2022-23501: TYPO3 CMS vulnerable to Weak Authentication in Frontend Login 5.9 medium 8.7.49 13 Dec 2022
CVE-2026-47349: TYPO3 CMS Recycler Module Broken Access Control Vulnerability 5.3 medium 10.4.57 12 Jun 2026
CVE-2026-47347: TYPO3 CMS Open Redirect Vulnerability in Core Utilities 5.3 medium 10.4.57 12 Jun 2026
CVE-2026-47350: TYPO3 CMS Broken Access Control Vulnerability 5.3 medium 13.4.31 12 Jun 2026
CVE-2026-47352: TYPO3 CMS Broken Access Control in Backend API 5.3 medium 10.4.57 12 Jun 2026
CVE-2026-47351: TYPO3 CMS Broken Access Control in Media Module 5.3 medium 10.4.57 12 Jun 2026
CVE-2010-3673: Information Disclosure in TYPO3 HTML Mailing API 5.3 medium 4.2.13 21 Apr 2022
CVE-2026-47348: TYPO3 CMS Indexed Search Cross-Site Scripting Vulnerability 5.1 medium 13.4.31 12 Jun 2026
TYPO3 Arbitrary File Read via Directory Traversal in typo3/cms-core 4.9 medium No fix published 25 Dec 2023
CVE-2026-49738: TYPO3 CMS File Abstraction Layer Broken Access Control Vulnerability 2.1 low 10.4.57 12 Jun 2026
Critical Access Control Vulnerability in TYPO3 CMS - GHSA-4f2f-jr2m-j7p4 N/A high 13.4.34 11 Aug 2026
CVE-2009-3633: TYPO3 CMS-Core API function vulnerable to Cross-site Scripting N/A medium No fix published 02 May 2022

Looking for another version, or everything Vulert holds for typo3/cms-core?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About typo3/cms-core v13.4.3

Is typo3/cms-core v13.4.3 vulnerable?

Yes. 16 vulnerabilities in the Vulert database cover typo3/cms-core v13.4.3: 0 critical, 4 high, 11 medium and 1 low. Each entry above names the fixed version to move to.

How do I monitor typo3/cms-core for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the typo3/cms-core version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.