TYPO3 TYPO3 vulnerabilities

CVEs per yearBy the year they were published

1. 201912
2. 20212
3. 202215
4. 20234
5. 20249
6. 202516

Newest CVEs

• CVE-2025-47941

  TYPO3 Has Broken Authentication in Backend MFA

  TYPO3 · typo3

  High7.2
• CVE-2025-47940

  TYPO3 CMS Vulnerable to Privilege Escalation to System Maintainer

  TYPO3 · typo3

  High7.2
• CVE-2025-47939

  TYPO3 CMS Vulnerable to Unrestricted File Upload in File Abstraction Layer

  TYPO3 · typo3

  Medium5.4
• CVE-2025-47938

  TYPO3 Vulnerable to Unverified Password Change for Backend Users

  TYPO3 · typo3

  Low3.8
• CVE-2025-47937

  TYPO3 Vulnerable to Information Disclosure via DBAL Restriction Handling

  TYPO3 · typo3

  Low3.7
• CVE-2025-47936

  TYPO3 Vulnerable to Server Side Request Forgery via Webhooks

  TYPO3 · typo3

  Low3.3
• CVE-2024-55892

  Potential Open Redirect via Parsing Differences in TYPO3

  TYPO3 · typo3

  Medium4.8
• CVE-2024-55893

  TYPO3 Cross-Site Request Forgery in Log Module

  TYPO3 · typo3

  Medium4.3
• CVE-2024-55894

  TYPO3 Cross-Site Request Forgery in Backend User Module

  TYPO3 · typo3

  Medium4.3
• CVE-2024-55920

  Cross-Site Request Forgery in Dashboard Module in TYPO3

  TYPO3 · typo3

  Medium4.3