Typo3

Changing backend users' passwords via the user settings module results in storing the cleartext password in the uc and u

TYPO3's mail‑file spool deserialization flaw lets local users with write access to the spool directory craft a malicious

Backend users who had access to the recycler module could delete arbitrary data from any database table defined in the T

Backend users with access to the redirects module and write permission on the sys_redirect table were able to read, crea

By exploiting the defVals parameter, attackers could bypass field‑level access checks during record creation in the TYPO