Security Advisory

CVE-2025-59019

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-09-09 09:01:17

Last updated 2025-09-11 20:44:40

Assigner TYPO3

State PUBLISHED

Description

Missing authorization checks in the CSV download feature of TYPO3 CMS versions 11.0.0‑11.5.47, 12.0.0‑12.4.36, and 13.0.0‑13.4.17 allow backend users to disclose information from arbitrary database tables stored within the users web mounts without having access to them.

← Browse all CVEs View on cve.org ↗