Skip to content
OpenAdvisories
Medium WID-SEC-2025-2001 7 CVEs

TYPO3 Core: Mehrere Schwachstellen

Published Sep 8, 2025 · Updated Sep 9, 2025 · Revision 2 · de-DE

Vendor: TYPO3 Product: Core Platform: Windows

Summary

Ein entfernter anonymer oder authentisierter Angreifer kann mehrere Schwachstellen im TYPO3 Core ausnutzen, um Phishing-Angriffe durchzuführen, vertrauliche Informationen offenzulegen, Daten zu manipulieren, Sicherheitsmaßnahmen zu umgehen und einen Denial-of-Service-Zustand zu verursachen.

Product

TYPO3 ist ein freies Content-Management-System, basierend auf der Scriptsprache PHP und einer SQL-Datenbank. Über zahlreiche Extensions kann der Funktionsumfang der Core-Installation individuell erweitert werden.

Vulnerabilities 7

  • High 7.1
    CVE-2025-59018

    Information Disclosure in Workspaces Module

    Missing authorization checks in the Workspace Module of TYPO3 CMS versions 9.0.0‑9.5.54, 10.0.0‑10.4.53, 11.0.0‑11.5.47, 12.0.0‑12.4.36, and 13.0.0‑13.4.17 allow backend users to directly invoke the corresponding AJAX backend route to disclose sensitive infor…

    TYPO3 TYPO3 CMS typo3/cms-workspaces Web / CMS Packagist
  • Medium 6.3
    CVE-2025-59015

    Insufficient Entropy in Password Generation

    A deterministic three‑character prefix in the Password Generation component of TYPO3 CMS versions 12.0.0–12.4.36 and 13.0.0–13.4.17 reduces entropy, allowing attackers to carry out brute‑force attacks more quickly.

    TYPO3 TYPO3 CMS typo3/cms-core Web / CMS Packagist
  • Medium 5.3
    CVE-2025-59013

    Open Redirect in TYPO3 CMS

    An open‑redirect vulnerability in GeneralUtility::sanitizeLocalUrl of TYPO3 CMS 9.0.0–9.5.54, 10.0.0–10.4.53, 11.0.0–11.5.47, 12.0.0–12.4.36, and 13.0.0–13.4.17 allows an attacker to redirect users to arbitrary external sites, enabling phishing attacks by sup…

    TYPO3 TYPO3 CMS typo3/cms-core Web / CMS Packagist
  • Medium 5.3
    CVE-2025-59016

    Information Disclosure via File Abstraction Layer

    Error messages containing sensitive information in the File Abstraction Layer in TYPO3 CMS versions 9.0.0-9.5.54, 10.0.0-10.4.53, 11.0.0-11.5.47, 12.0.0-12.4.36, and 13.0.0-13.4.17 allow backend users to disclose full file paths via failed low-level file-syst…

    TYPO3 TYPO3 CMS typo3/cms-core Web / CMS Packagist
  • Medium 5.3
    CVE-2025-59017

    Broken Access Control in Backend AJAX Routes

    Missing authorization checks in the Backend Routing of TYPO3 CMS versions 9.0.0‑9.5.54, 10.0.0‑10.4.53, 11.0.0‑11.5.47, 12.0.0‑12.4.36, and 13.0.0‑13.4.17 allow backend users to directly invoke AJAX backend routes without having access to the corresponding ba…

    TYPO3 TYPO3 CMS typo3/cms-backend typo3/cms-recycler Web / CMS Packagist
  • Medium 5.3
    CVE-2025-59019

    Information Disclosure via CSV Download

    Missing authorization checks in the CSV download feature of TYPO3 CMS versions 11.0.0‑11.5.47, 12.0.0‑12.4.36, and 13.0.0‑13.4.17 allow backend users to disclose information from arbitrary database tables stored within the users' web mounts without having acc…

    TYPO3 TYPO3 CMS typo3/cms-backend typo3/cms-recordlist Web / CMS Packagist
  • Medium 5.1
    CVE-2025-59014

    Denial of Service in TYPO3 Bookmark Toolbar

    An uncaught exception in the Bookmark Toolbar of TYPO3 CMS versions 11.0.0–11.5.47, 12.0.0–12.4.36, and 13.0.0–13.4.17 lets administrator‑level backend users trigger a denial‑of‑service condition in the backend user interface by saving manipulated data in the…

    TYPO3 TYPO3 CMS typo3/cms-backend Web / CMS Packagist

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2025-27227, EUVD-2025-27226, EUVD-2025-27232, EUVD-2025-27231, EUVD-2025-27230, EUVD-2025-27229, EUVD-2025-27228

  2. #1

    Initiale Fassung

References