Skip to content
OpenAdvisories

Package · Packagist

typo3/cms-recordlist

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2025-59019

    Information Disclosure via CSV Download

    Missing authorization checks in the CSV download feature of TYPO3 CMS versions 11.0.0‑11.5.47, 12.0.0‑12.4.36, and 13.0.0‑13.4.17 allow backend users to disclose information from arbitrary database tables stored within the users' web mounts without having acc…

    TYPO3 TYPO3 CMS typo3/cms-backend typo3/cms-recordlist Web / CMS Packagist