GitHub Advisoryadvisory · Packagist

GHSA-6frx-j292-c844 TYPO3 Allows Privilege Escalation to System Maintainer

HIGH Published 2025-05-20 Modified 2025-05-20 Official page ↗
Aliases
CVE-2025-47940
Ecosystem
Packagist
Packages
typo3/cms-core
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-283
Reviewed
2025-05-20

Affected packages

• Packagist typo3/cms-core: >= 10.4.0, < 10.4.50 → fixed in 10.4.50 • Packagist typo3/cms-core: >= 11.0.0, < 11.5.44 → fixed in 11.5.44 • Packagist typo3/cms-core: >= 12.0.0, < 12.4.31 → fixed in 12.4.31 • Packagist typo3/cms-core: >= 13.0.0, < 13.4.12 → fixed in 13.4.12

Description

Problem Administrator-level backend users without system maintainer privileges can escalate their privileges and gain system maintainer access. Exploiting this vulnerability requires a valid administrator account. Solution Update to TYPO3 versions 10.4.50 ELTS, 11.5.44 ELTS, 12.4.31 LTS, 13.4.12 LTS that fix the problem described. Credits Thanks to Alexander Künzl for reporting this issue, and to TYPO3 core & security team member Oliver Hader for fixing it.

Related

Alias · CVE (1)

  • CVE-2025-47940 TYPO3 is an open source, PHP based web content management system. vulnerability

Weakness · CWE (1)

  • CWE-283 Unverified Ownership weakness

References