Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: TYPO3 CMS 12.4.37, 13.4.18 Clear all filters
TI-2025-36662 CVE-2025-59019 · GHSA-j8vm-7q52-2m2m

Information Disclosure via CSV Download

Priority LOW 24

Missing authorization checks in the CSV download feature of TYPO3 CMS versions 11.0.0‑11.5.47, 12.0.0‑12.4.36, and 13.0.0‑13.4.17 allow backend users to disclose information from arbitrary database tables stored within t…

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00235 Published 2025-09-09 Fixed in 12.4.37, 13.4.18 +1 CWE-200
TI-2025-36658 CVE-2025-59015 · GHSA-p5jq-5383-qvc7

Insufficient Entropy in Password Generation

Priority LOW 27

A deterministic three‑character prefix in the Password Generation component of TYPO3 CMS versions 12.0.0–12.4.36 and 13.0.0–13.4.17 reduces entropy, allowing attackers to carry out brute‑force attacks more quickly.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00187 Published 2025-09-09 Fixed in 12.4.37, 13.4.18 CWE-331