| Package | Affected versions | Patched versions |
|---|---|---|
| typo3/cms | ≥ 7.6.0, < 7.6.10≥ 8.0.0, < 8.2.1 | 7.6.108.2.1 |
Make sure to not expose the vendor directory to the publicly accessible document root. In composer managed installation, make sure to configure a dedicated web folder. In general it is recommended to not expose the complete typo3_src sources folder in the document root.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free