Skip to content
OpenAdvisories

Package · Packagist

typo3/cms-beuser

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 5.3
    CVE-2025-59017

    Broken Access Control in Backend AJAX Routes

    Missing authorization checks in the Backend Routing of TYPO3 CMS versions 9.0.0‑9.5.54, 10.0.0‑10.4.53, 11.0.0‑11.5.47, 12.0.0‑12.4.36, and 13.0.0‑13.4.17 allow backend users to directly invoke AJAX backend routes without having access to the corresponding ba…

    TYPO3 TYPO3 CMS typo3/cms-backend typo3/cms-recycler Web / CMS Packagist
  • Medium 4.3
    CVE-2024-55894

    TYPO3 Cross-Site Request Forgery in Backend User Module

    TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user interface functionality involving deep links. Specifically, this functionality is susceptible to Cross-Site Request Forgery (CSRF). Additiona…

    TYPO3 typo3 typo3/cms-beuser Web / CMS Packagist