https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 16:56:44 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-252339 EUVD-2026-252339 https://cve.radiocsirt.org/vuln/euvd-2026-252339 https://cve.radiocsirt.org/vuln/fkie_cve-2025-59017 <p>Missing authorization checks in the Backend Routing of TYPO3 CMS versions 9.0.0‑9.5.54, 10.0.0‑10.4.53, 11.0.0‑11.5.47, 12.0.0‑12.4.36, and 13.0.0‑13.4.17 allow backend users to directly invoke AJAX backend routes without having access to the corresponding backend modules.</p> <p>Missing authorization checks in the Backend Routing of TYPO3 CMS versions 9.0.0‑9.5.54, 10.0.0‑10.4.53, 11.0.0‑11.5.47, 12.0.0‑12.4.36, and 13.0.0‑13.4.17 allow backend users to directly invoke AJAX backend routes without having access to the corresponding backend modules.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-59017 https://cve.radiocsirt.org/vuln/ghsa-2fhw-2j7m-mr4m <p><strong>Affected:</strong> Packagist: typo3/cms-workspaces, Packagist: typo3/cms-recycler, Packagist: typo3/cms-dashboard, Packagist: typo3/cms-beuser, Packagist: typo3/cms-backend</p> <p>Missing authorization checks in the Backend Routing of TYPO3 CMS versions 9.0.0‑9.5.54, 10.0.0‑10.4.53, 11.0.0‑11.5.47, 12.0.0‑12.4.36, and 13.0.0‑13.4.17 allow backend users to directly invoke AJAX backend routes without having access to the corresponding backend modules.</p> <p><strong>Affected:</strong> Packagist: typo3/cms-workspaces, Packagist: typo3/cms-recycler, Packagist: typo3/cms-dashboard, Packagist: typo3/cms-beuser, Packagist: typo3/cms-backend</p> <p>Missing authorization checks in the Backend Routing of TYPO3 CMS versions 9.0.0‑9.5.54, 10.0.0‑10.4.53, 11.0.0‑11.5.47, 12.0.0‑12.4.36, and 13.0.0‑13.4.17 allow backend users to directly invoke AJAX backend routes without having access to the corresponding backend modules.</p> https://cve.radiocsirt.org/vuln/ghsa-2fhw-2j7m-mr4m https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2001 <p>Ein entfernter anonymer oder authentisierter Angreifer kann mehrere Schwachstellen im TYPO3 Core ausnutzen, um Phishing-Angriffe durchzuführen, vertrauliche Informationen offenzulegen, Daten zu manipulieren, Sicherheitsmaßnahmen zu umgehen und einen Denial-of-Service-Zustand zu verursachen.</p> <p>Ein entfernter anonymer oder authentisierter Angreifer kann mehrere Schwachstellen im TYPO3 Core ausnutzen, um Phishing-Angriffe durchzuführen, vertrauliche Informationen offenzulegen, Daten zu manipulieren, Sicherheitsmaßnahmen zu umgehen und einen Denial-of-Service-Zustand zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2001