Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-59018
6.5
MEDIUMCVSS v3
Published
September 9, 2025
Affected
1 project
Assigned by
f4fb688c-4412-4426-b4b8-421ecf27b14a
Severity scale
010
Description
Missing authorization checks in the Workspace Module of TYPO3 CMS versions 9.0.0‑9.5.54, 10.0.0‑10.4.53, 11.0.0‑11.5.47, 12.0.0‑12.4.36, and 13.0.0‑13.4.17 allow backend users to directly invoke the corresponding AJAX backend route to disclose sensitive information without having access.
TYPO3/typo3
GitHubThe TYPO3 Core - Enterprise Content Management System. Synchronized mirror of https://review.typo3.org/q/project:Packages/TYPO3.CMS
GitHubThe TYPO3 Core - Enterprise Content Management System. Synchronized mirror of https://review.typo3.org/q/project:Packages/TYPO3.CMS>= 9.0.0, < 9.5.55, >= 10.0.0, < 10.4.54, >= 11.0.0, < 11.5.48, >= 12.0.0, < 12.4.37, >= 13.0.0, < 13.4.18NVD