https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 04:04:34 +0000 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0121 certfr-2024-avi-0121 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0121 https://cve.radiocsirt.org/vuln/euvd-2026-234984 EUVD-2026-234984 https://cve.radiocsirt.org/vuln/euvd-2026-234984 https://cve.radiocsirt.org/vuln/fkie_cve-2024-25120 <p>TYPO3 is an open source PHP based web content management system released under the GNU GPL. The TYPO3-specific `t3://` URI scheme could be used to access resources outside of the users&#39; permission scope. This encompassed files, folders, pages, and records (although only if a valid link-handling configuration was provided). Exploiting this vulnerability requires a valid backend user account. Users are advised to update to TYPO3 versions 8.7.57 ELTS, 9.5.46 ELTS, 10.4.43 ELTS, 11.5.35 LTS, 12.4.11 LTS, 13.0.1 that fix the problem described. There are no known workarounds for this issue.</p> <p>TYPO3 is an open source PHP based web content management system released under the GNU GPL. The TYPO3-specific `t3://` URI scheme could be used to access resources outside of the users&#39; permission scope. This encompassed files, folders, pages, and records (although only if a valid link-handling configuration was provided). Exploiting this vulnerability requires a valid backend user account. Users are advised to update to TYPO3 versions 8.7.57 ELTS, 9.5.46 ELTS, 10.4.43 ELTS, 11.5.35 LTS, 12.4.11 LTS, 13.0.1 that fix the problem described. There are no known workarounds for this issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-25120 https://cve.radiocsirt.org/vuln/ghsa-wf85-8hx9-gj7c <p><strong>Affected:</strong> Packagist: typo3/cms-core</p> <p>### Problem The TYPO3-specific [`t3://` URI scheme](https://docs.typo3.org/m/typo3/reference-typoscript/main/en-us/Functions/Typolink.html#resource-references) could be used to access resources outside of the users&#39; permission scope. This encompassed files, folders, pages, and records (although only if a valid link-handling configuration was provided). Exploiting this vulnerability requires a valid backend user account.</p> <p>### Solution Update to TYPO3 versions 8.7.57 ELTS, 9.5.46 ELTS, 10.4.43 ELTS, 11.5.35 LTS, 12.4.11 LTS, 13.0.1 that fix the problem described.</p> <p>### Credits Thanks to Richie Lee who reported this issue and to TYPO3 core &amp; security team member Benjamin Franzke who fixed the issue.</p> <p>### References * [TYPO3-CORE-SA-2024-005](https://typo3.org/security/advisory/typo3-core-sa-2024-005)</p> <p><strong>Affected:</strong> Packagist: typo3/cms-core</p> <p>### Problem The TYPO3-specific [`t3://` URI scheme](https://docs.typo3.org/m/typo3/reference-typoscript/main/en-us/Functions/Typolink.html#resource-references) could be used to access resources outside of the users&#39; permission scope. This encompassed files, folders, pages, and records (although only if a valid link-handling configuration was provided). Exploiting this vulnerability requires a valid backend user account.</p> <p>### Solution Update to TYPO3 versions 8.7.57 ELTS, 9.5.46 ELTS, 10.4.43 ELTS, 11.5.35 LTS, 12.4.11 LTS, 13.0.1 that fix the problem described.</p> <p>### Credits Thanks to Richie Lee who reported this issue and to TYPO3 core &amp; security team member Benjamin Franzke who fixed the issue.</p> <p>### References * [TYPO3-CORE-SA-2024-005](https://typo3.org/security/advisory/typo3-core-sa-2024-005)</p> https://cve.radiocsirt.org/vuln/ghsa-wf85-8hx9-gj7c https://cve.radiocsirt.org/vuln/gsd-2024-25120 gsd-2024-25120 https://cve.radiocsirt.org/vuln/gsd-2024-25120 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0357 <p>Ein entfernter, authentifizierter Angreifer kann mehrere Schwachstellen in TYPO3 Core und TYPO3 Extension ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen oder vertrauliche Informationen offenzulegen.</p> <p>Ein entfernter, authentifizierter Angreifer kann mehrere Schwachstellen in TYPO3 Core und TYPO3 Extension ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen oder vertrauliche Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0357