Home

Description

Missing authorization checks in the Workspace Module of TYPO3 CMS versions 9.0.0‑9.5.54, 10.0.0‑10.4.53, 11.0.0‑11.5.47, 12.0.0‑12.4.36, and 13.0.0‑13.4.17 allow backend users to directly invoke the corresponding AJAX backend route to disclose sensitive information without having access.

PUBLISHED Reserved 2025-09-07 | Published 2025-09-09 | Updated 2025-09-11 | Assigner TYPO3




HIGH: 7.1CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Problem types

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

Product status

Default status
unaffected

9.0.0 (semver) before 9.5.55
affected

10.0.0 (semver) before 10.4.54
affected

11.0.0 (semver) before 11.5.48
affected

12.0.0 (semver) before 12.4.37
affected

13.0.0 (semver) before 13.4.18
affected

Credits

Oliver Hader reporter

Oliver Hader remediation developer

References

typo3.org/security/advisory/typo3-core-sa-2025-022 vendor-advisory

cve.org (CVE-2025-59018)

nvd.nist.gov (CVE-2025-59018)

Download JSON