Beveiligingsadvies

CVE-2025-59019

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-09-09 09:01:17
Laatst bijgewerkt 2025-09-11 20:44:40
Toegewezen door TYPO3
CVSS-score 5.3
Status PUBLISHED

Beschrijving

Missing authorization checks in the CSV download feature of TYPO3 CMS versions 11.0.0‑11.5.47, 12.0.0‑12.4.36, and 13.0.0‑13.4.17 allow backend users to disclose information from arbitrary database tables stored within the users' web mounts without having access to them.