GCVE - cpe:2.3:a:dated_news_project:dated

Approved changes feed: RSS · Atom

cpe:2.3:a:dated_news_project:dated_news:*:*:*:*:*:typo3:*:*

part: a version: * update: *

Vendor	Dated News Project (`98a1def9-1eb0-511d-8950-a2f3eff38f80`)
Product	Dated News (`e6389529-94c5-56ba-b51b-d0f150e9ea38`)
Edition	*
Language	*
Software edition	*
Target software	typo3
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/dacyberpunk/dated_news`	purl2cpe	2026-06-01 10:14:56.597637

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-36792`	vulnerable	2026-06-08 05:32:52.529603	Details available The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 has incorrect Access Control for confirming various applications. Published: 2021-08-13T16:08:07.000Z Updated: 2024-08-04T01:01:59.269Z Open on db.gcve.eu Reference links https://typo3.org/help/security-advisories/security https://typo3.org/security/advisory/typo3-ext-sa-2021-013	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-36791`	vulnerable	2026-06-08 05:32:52.529295	Details available The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows Information Disclosure of application registration data. Published: 2021-08-13T16:06:59.000Z Updated: 2024-08-04T01:01:59.210Z Open on db.gcve.eu Reference links https://typo3.org/help/security-advisories/security https://typo3.org/security/advisory/typo3-ext-sa-2021-013	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-36790`	vulnerable	2026-06-08 05:32:52.528828	Details available The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows XSS. Published: 2021-08-13T16:06:04.000Z Updated: 2024-08-04T01:01:59.786Z Open on db.gcve.eu Reference links https://typo3.org/help/security-advisories/security https://typo3.org/security/advisory/typo3-ext-sa-2021-013	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-36789`	vulnerable	2026-06-08 05:32:52.528422	Details available The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows SQL Injection. Published: 2021-08-13T16:05:05.000Z Updated: 2024-08-04T01:01:59.070Z Open on db.gcve.eu Reference links https://typo3.org/help/security-advisories/security https://typo3.org/security/advisory/typo3-ext-sa-2021-013	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Dated News

Notes

PURL mappings

Vulnerability references

Contribute