DeutschShown in its original language — a full translation is planned for a future version.
TYPO3 Core: Mehrere Schwachstellen
view advisory published 2025-05-19
Ein Angreifer kann mehrere Schwachstellen in TYPO3 Core ausnutzen, um Dateien zu manipulieren, Informationen auszuspähen, Sicherheitsvorkehrungen zu umgehen, einen Denial-of-Service auszulösen oder seine Privilegien zu erweitern.
01
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-47941US | —OT elevated | — | ||
TYPO3 is an open source, PHP based web content management system. In versions on the 12.x branch prior to 12.4.31 LTS and the 13.x branch prior to 13.4.2 LTS, the multifactor authe… | ||||
| CVE-2025-47940US | — | — | ||
TYPO3 is an open source, PHP based web content management system. Starting in version 10.0.0 and prior to versions 10.4.50 ELTS, 11.5.44 ELTS, 12.4.31 LTS, and 13.4.12 LTS, adminis… | ||||
| CVE-2025-47939US | — | — | ||
TYPO3 is an open source, PHP based web content management system. By design, the file management module in TYPO3’s backend user interface has historically allowed the upload of any… | ||||
| CVE-2025-47938US | low3.8 | — | ||
TYPO3 is an open source, PHP based web content management system. Starting in version 9.0.0 and prior to versions 9.5.51 ELTS, 10.4.50 ELTS, 11.5.44 ELTS, 12.4.31 LTS, and 13.4.12… | ||||
| CVE-2025-47937US | medium5.3OT elevated | — | ||
TYPO3 is an open source, PHP based web content management system. Starting in version 9.0.0 and prior to versions 9.5.51 ELTS, 10.4.50 ELTS, 11.5.44 ELTS, 12.4.31 LTS, and 13.4.12… | ||||
| CVE-2025-47936US | medium4.4 | — | ||
TYPO3 is an open source, PHP based web content management system. In versions on the 12.x branch prior to 12.4.31 LTS and the 13.x branch prior to 13.4.2 LTS, Webhooks are inherent… | ||||
02
references
External citations — patches, advisories, analysis.
- Typo3 Release Notes vom 2025-05-19external
- Typo3 Security Advisory vom 2025-05-19external
- Typo3 Security Advisory vom 2025-05-19external
- Typo3 Security Advisory vom 2025-05-19external
- Typo3 Security Advisory vom 2025-05-19external
- Typo3 Security Advisory vom 2025-05-19external
- Typo3 Security Advisory vom 2025-05-19external
- WID-SEC-W-2025-1106 - CSAF Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan