Skip to content
OpenAdvisories
High · 8.2 CVE-2025-12998 EUVD-2025-124903GHSA-49qv-h8pm-73pf

Broken Authentication in extension “Modules” (modules)

Published Nov 12, 2025 · Updated Nov 12, 2025 · Assigned by TYPO3

Description

Improper Authentication vulnerability in TYPO3 Extension "Modules" codingms/modules.This issue affects Extension "Modules": before 4.3.11, from 5.0.0 before 5.7.4, from 6.0.0 before 6.4.2, from 7.0.0 before 7.5.5.

Affected products

VendorProductAffectedFixed
TYPO3 Extension "Modules" < 4.3.11, 5.0.0 – < 5.7.4, 6.0.0 – < 6.4.2, 7.0.0 – < 7.5.5 4.3.11

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist codingms/modules < 4.3.11 4.3.11 GHSA-49qv-h8pm-73pf
Packagist codingms/modules >= 5.0.0, < 5.7.4 5.7.4 GHSA-49qv-h8pm-73pf
Packagist codingms/modules >= 7.0.0, < 7.5.5 7.5.5 GHSA-49qv-h8pm-73pf
Packagist codingms/modules >= 6.0.0, < 6.4.2 6.4.2 GHSA-49qv-h8pm-73pf

Advisories 1

References