Description
Backend users were able to insert arbitrary records and files into the TYPO3 clipboard without proper read permission checks, which allowed users to gather information about records and files they were not authorized to view. This issue affects TYPO3 CMS versions 10.4.0-13.4.30 and 14.0.0-14.3.2.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| TYPO3 | TYPO3 CMS | 10.4.0 – < 13.4.31, 14.0.0 – < 14.3.3 | 13.4.31 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | typo3/cms-backend | < 10.4.57 | 10.4.57 | GHSA-q93m-25xv-94hh |
| Packagist | typo3/cms-backend | >= 11.0.0, < 11.5.51 | 11.5.51 | GHSA-q93m-25xv-94hh |
| Packagist | typo3/cms-backend | >= 12.0.0, < 12.4.46 | 12.4.46 | GHSA-q93m-25xv-94hh |
| Packagist | typo3/cms-backend | >= 13.0.0, < 13.4.31 | 13.4.31 | GHSA-q93m-25xv-94hh |
| Packagist | typo3/cms-backend | >= 14.0.0, < 14.3.3 | 14.3.3 | GHSA-q93m-25xv-94hh |
| Packagist | typo3/cms-core | < 10.4.57 | 10.4.57 | GHSA-q93m-25xv-94hh |
| Packagist | typo3/cms-core | >= 11.0.0, < 11.5.51 | 11.5.51 | GHSA-q93m-25xv-94hh |
| Packagist | typo3/cms-core | >= 12.0.0, < 12.4.46 | 12.4.46 | GHSA-q93m-25xv-94hh |
| Packagist | typo3/cms-core | >= 13.0.0, < 13.4.31 | 13.4.31 | GHSA-q93m-25xv-94hh |
| Packagist | typo3/cms-core | >= 14.0.0, < 14.3.3 | 14.3.3 | GHSA-q93m-25xv-94hh |
Advisories 1
- WID-SEC-2026-1835 TYPO3 Core: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 9, 2026
References
- https://typo3.org/security/advisory/typo3-core-sa-2026-014 vendor-advisory
- Git commit of main branch patch
- Git commit of 13.4 branch patch