{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-23T03:48:34.028","vulnerabilities":[{"cve":{"id":"CVE-2022-31047","sourceIdentifier":"security-advisories@github.com","published":"2022-06-14T21:15:16.050","lastModified":"2026-06-17T04:44:40.947","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"TYPO3 is an open source web content management system. Prior to versions 7.6.57 ELTS, 8.7.47 ELTS, 9.5.34 ELTS, 10.4.29, and 11.5.11, system internal credentials or keys (e.g. database credentials) can be logged as plaintext in exception handlers, when logging the complete exception stack trace. TYPO3 versions 7.6.57 ELTS, 8.7.47 ELTS, 9.5.34 ELTS, 10.4.29, 11.5.11 contain a fix for the problem."},{"lang":"es","value":"TYPO3 es un sistema de administración de contenidos web de código abierto. En versiones anteriores a 7.6.57 ELTS, 8.7.47 ELTS, 9.5.34 ELTS, 10.4.29 y 11.5.11, las credenciales o claves internas del sistema (por ejemplo, las credenciales de la base de datos) podían registrarse como texto plano en los manejadores de excepciones, cuando es registrado el seguimiento completo de la pila de excepciones. TYPO3 versiones 7.6.57 ELTS, 8.7.47 ELTS, 9.5.34 ELTS, 10.4.29, 11.5.11 contienen una corrección del problema"}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"TYPO3","product":"typo3","versions":[{"version":">= 7.0.0, < 7.6.57","status":"affected"},{"version":">= 8.0.0, < 8.7.47","status":"affected"},{"version":">= 9.0.0, < 9.5.34","status":"affected"},{"version":">= 10.0.0, < 10.4.29","status":"affected"},{"version":">= 11.0.0, < 11.5.11","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-23T14:05:23.839366Z","id":"CVE-2022-31047","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-532"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-209"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:elts:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.6.57","matchCriteriaId":"A15251A1-BC05-4C05-AED2-0E2CF75BB054"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:elts:*:*:*","versionStartIncluding":"8.0.0","versionEndExcluding":"8.7.47","matchCriteriaId":"CD542E1B-F3BA-4816-B97D-D877EFADA02D"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:elts:*:*:*","versionStartIncluding":"9.0.0","versionEndExcluding":"9.5.35","matchCriteriaId":"83732441-A020-4401-A274-067B95354BB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.0","versionEndExcluding":"10.4.29","matchCriteriaId":"272C6A8B-94DB-4A74-BB3A-24CD0486DFA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","versionStartIncluding":"11.0.0","versionEndExcluding":"11.5.11","matchCriteriaId":"772D645D-5158-416C-BF2C-74E5E43EF1DC"}]}]}],"references":[{"url":"https://github.com/TYPO3/typo3/commit/c93ea692e7dfef03b7c50fe5437487545bee4d6a","source":"security-advisories@github.com","tags":["Patch","Third Party Advisory"]},{"url":"https://github.com/TYPO3/typo3/security/advisories/GHSA-fh99-4pgr-8j99","source":"security-advisories@github.com","tags":["Third Party Advisory"]},{"url":"https://typo3.org/security/advisory/typo3-core-sa-2022-002","source":"security-advisories@github.com","tags":["Vendor Advisory"]},{"url":"https://github.com/TYPO3/typo3/commit/c93ea692e7dfef03b7c50fe5437487545bee4d6a","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://github.com/TYPO3/typo3/security/advisories/GHSA-fh99-4pgr-8j99","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://typo3.org/security/advisory/typo3-core-sa-2022-002","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}]}