{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-23T01:06:49.485","vulnerabilities":[{"cve":{"id":"CVE-2022-31049","sourceIdentifier":"security-advisories@github.com","published":"2022-06-14T21:15:16.183","lastModified":"2026-06-17T04:44:41.210","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"TYPO3 is an open source web content management system. Prior to versions 9.5.34 ELTS, 10.4.29, and 11.5.11, user submitted content was used without being properly encoded in HTML emails sent to users. The actually affected components were mail clients used to view those messages. TYPO3 versions 9.5.34 ELTS, 10.4.29, and 11.5.11 contain a fix for the problem."},{"lang":"es","value":"TYPO3 es un sistema de administración de contenidos web de código abierto. En versiones anteriores a 9.5.34 ELTS, 10.4.29 y 11.5.11, los contenidos enviados por los usuarios son usados sin ser codificados correctamente en los correos electrónicos HTML enviados a los usuarios. Los componentes realmente afectados eran los clientes de correo usados para visualizar esos mensajes. TYPO3 versiones 9.5.34 ELTS, 10.4.29 y 11.5.11 contienen una corrección del problema"}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"TYPO3","product":"typo3","versions":[{"version":">= 9.0.0, < 9.5.34","status":"affected"},{"version":">= 10.0.0, < 10.4.29","status":"affected"},{"version":">= 11.0.0, < 11.5.11","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-23T14:05:18.598722Z","id":"CVE-2022-31049","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:elts:*:*:*","versionStartIncluding":"9.0.0","versionEndExcluding":"9.5.35","matchCriteriaId":"83732441-A020-4401-A274-067B95354BB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.0","versionEndExcluding":"10.4.29","matchCriteriaId":"272C6A8B-94DB-4A74-BB3A-24CD0486DFA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","versionStartIncluding":"11.0.0","versionEndExcluding":"11.5.11","matchCriteriaId":"772D645D-5158-416C-BF2C-74E5E43EF1DC"}]}]}],"references":[{"url":"https://github.com/TYPO3/typo3/commit/da611775f92102d7602713003f4c79606c8a445d","source":"security-advisories@github.com","tags":["Patch","Third Party Advisory"]},{"url":"https://github.com/TYPO3/typo3/security/advisories/GHSA-h4mx-xv96-2jgm","source":"security-advisories@github.com","tags":["Third Party Advisory"]},{"url":"https://typo3.org/security/advisory/typo3-core-sa-2022-004","source":"security-advisories@github.com","tags":["Vendor Advisory"]},{"url":"https://github.com/TYPO3/typo3/commit/da611775f92102d7602713003f4c79606c8a445d","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://github.com/TYPO3/typo3/security/advisories/GHSA-h4mx-xv96-2jgm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://typo3.org/security/advisory/typo3-core-sa-2022-004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}]}