Skip to content
OpenAdvisories

Package · Packagist

typo3/cms-recycler

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Medium 5.3
    CVE-2026-47349

    TYPO3 CMS - Broken Access Control in Recycler

    Backend users with access to the Recycler module were able to restore soft-deleted records on pages or for tables they were not authorized to modify. This issue affects TYPO3 CMS versions before 10.4.57, 11.0.0-11.5.50, 12.0.0-12.4.45, 13.0.0-13.4.30 and 14.0…

    TYPO3 TYPO3 CMS typo3/cms-core typo3/cms-recycler Web / CMS Packagist
  • High 7.1
    CVE-2025-59022

    TYPO3 CMS Allows Broken Access Control in Recycler Module

    Backend users who had access to the recycler module could delete arbitrary data from any database table defined in the TCA - regardless of whether they had permission to that particular table. This allowed attackers to purge and destroy critical site data, ef…

    TYPO3 TYPO3 CMS typo3/cms-recycler Web / CMS Packagist
  • Medium 5.3
    CVE-2025-59017

    Broken Access Control in Backend AJAX Routes

    Missing authorization checks in the Backend Routing of TYPO3 CMS versions 9.0.0‑9.5.54, 10.0.0‑10.4.53, 11.0.0‑11.5.47, 12.0.0‑12.4.36, and 13.0.0‑13.4.17 allow backend users to directly invoke AJAX backend routes without having access to the corresponding ba…

    TYPO3 TYPO3 CMS typo3/cms-backend typo3/cms-recycler Web / CMS Packagist