Vulnerabilities

TI-2021-11781 CVE-2021-31777 · GHSA-5v5h-4w2g-gxxc

The dce (aka Dynamic Content Element) extension 2.2.0 through 2.6.x before 2.6.2, and…

LOW 25

The dce (aka Dynamic Content Element) extension 2.2.0 through 2.6.x before 2.6.2, and 2.7.x before 2.7.1, for TYPO3 allows SQL Injection via a backend user account.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01406 Published 2021-04-28 Fixed in 2.6.2 CWE-89

TI-2014-06848 CVE-2014-8328 · GHSA-v4vm-gj2x-6qhm

The default configuration in the Dynamic Content Elements (dce) extension before 0.11.5…

LOW 27

The default configuration in the Dynamic Content Elements (dce) extension before 0.11.5 for TYPO3 allows remote attackers to obtain sensitive installation environment information by reading the update check request.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01583 Published 2020-02-03 Fixed in 0.11.5 CWE-200

Vulnerabilities

Filters

The dce (aka Dynamic Content Element) extension 2.2.0 through 2.6.x before 2.6.2, and…

The default configuration in the Dynamic Content Elements (dce) extension before 0.11.5…