Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: TYPO3 CMS 13.4.31, 14.3.3 Clear all filters
TI-2026-34926 CVE-2026-47351 · GHSA-q93m-25xv-94hh

TYPO3 CMS - Broken Access Control in Clipboard

Priority LOW 24

Backend users were able to insert arbitrary records and files into the TYPO3 clipboard without proper read permission checks, which allowed users to gather information about records and files they were not authorized to…

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00238 Published 2026-06-09 Fixed in 13.4.31, 14.3.3 +3 CWE-200
TI-2026-34925 CVE-2026-47350 · GHSA-qcmw-6rm2-5x78

TYPO3 CMS - Broken Access Control in DataHandler

Priority LOW 24

Backend users were able to move records to a different page without having edit permissions on the source page.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00238 Published 2026-06-09 Fixed in 13.4.31, 14.3.3 CWE-862
TI-2026-34923 CVE-2026-47348 · GHSA-cg75-qfg2-w9hj

TYPO3 CMS - Cross-Site Scripting in Indexed Search

Priority LOW 23

Editors with access to create or modify page content were able to include HTML markup in page titles that were stored in the search index without sanitization.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00269 Published 2026-06-09 Fixed in 13.4.31, 14.3.3 CWE-79