GitHub Advisoryadvisory · Packagist
GHSA-qcmw-6rm2-5x78 TYPO3 CMS has Broken Access Control in its DataHandler
MEDIUM
Official page ↗
- Aliases
- CVE-2026-47350
- Ecosystem
- Packagist
- Packages
- typo3/cms-core
- Severity
- Moderate
- CVSS vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
- Weaknesses
- CWE-862
- Reviewed
- 2026-06-12
Affected packages
• Packagist typo3/cms-core: >= 13.0.0, < 13.4.31 → fixed in 13.4.31
• Packagist typo3/cms-core: >= 14.0.0, < 14.3.3 → fixed in 14.3.3
Description
Problem
Backend users were able to move records to a different page without having edit permissions on the source page.
Solution
Update to TYPO3 versions 13.4.31 LTS, 14.3.3 LTS that fix the problem described.
Credits
TYPO3 CMS thanks Hyunseo Shin for reporting this issue, and TYPO3 security team member Torben Hansen for fixing it.
Resources
• TYPO3-CORE-SA-2026-012
Related
Alias · CVE (1)
- CVE-2026-47350 Backend users were able to move records to a different page without having edit permissions on the source page. vulnerability
Weakness · CWE (1)
- CWE-862 Missing Authorization weakness
References
- https://github.com/TYPO3/typo3/security/advisories/GHSA-qcmw-6rm2-5x78 web
- https://nvd.nist.gov/vuln/detail/CVE-2026-47350 advisory
- https://github.com/TYPO3/typo3/commit/195356996a60e40aeb2cd3e45a5f5c8940d5e116 web
- https://github.com/TYPO3/typo3/commit/c9898d2e67608eda78f8bd1f06ee9cf05a872a56 web
- https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2026-47350.yaml web
- https://github.com/TYPO3/typo3 package
- https://typo3.org/security/advisory/typo3-core-sa-2026-012 web