CVE-2025-12998 | THREATINT

Description

Improper Authentication vulnerability in TYPO3 Extension "Modules" codingms/modules.This issue affects Extension "Modules": before 4.3.11, from 5.0.0 before 5.7.4, from 6.0.0 before 6.4.2, from 7.0.0 before 7.5.5.

PUBLISHED Reserved 2025-11-11 | Published 2025-11-12 | Updated 2025-11-12 | Assigner TYPO3

HIGH: 8.2CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Problem types

CWE-287 Improper Authentication

Product status

Default status

unaffected

Any version before 4.3.11

affected

5.0.0 (semver) before 5.7.4

affected

6.0.0 (semver) before 6.4.2

affected

7.0.0 (semver) before 7.5.5

affected

Credits

Thomas Deuling reporter

References

typo3.org/security/advisory/typo3-ext-sa-2025-015

cve.org (CVE-2025-12998)

nvd.nist.gov (CVE-2025-12998)

Download JSON