Daniel Windloff

**Name of the Vulnerable Software and Affected Versions** TYPO3 versions 10.0.0 through 10.4.54 TYPO3 versions 11.0.0 through 11.5.48 TYPO3 versions 12.0.0 through 12.4.40 TYPO3 versions 13.0.0 through 13.4.22 TYPO3 versions 14.0.0 through 14.0.1 **Description** An issue exists where manipulation of the `defVals` parameter can bypass field-level access checks during record creation within the TYPO3 backend. Successful exploitation allows attackers to insert arbitrary data into restricted fields of a database table, provided the user already possesses write permissions for a limited set of fields. **Recommendations** TYPO3 versions 10.0.0 through 10.4.54 should be updated. TYPO3 versions 11.0.0 through 11.5.48 should be updated. TYPO3 versions 12.0.0 through 12.4.40 should be updated. TYPO3 versions 13.0.0 through 13.4.22 should be updated. TYPO3 versions 14.0.0 through 14.0.1 should be updated.

**Name of the Vulnerable Software and Affected Versions** TYPO3 CMS versions 10.0.0 through 10.4.54 TYPO3 CMS versions 11.0.0 through 11.5.48 TYPO3 CMS versions 12.0.0 through 12.4.40 TYPO3 CMS versions 13.0.0 through 13.4.22 TYPO3 CMS versions 14.0.0 through 14.0.1 **Description** Backend users with access to the recycler module could delete arbitrary data from any database table defined in the TCA, irrespective of their permissions for that specific table. This allowed attackers to purge and destroy critical site data, potentially rendering the website unavailable. The issue concerns the TYPO3 CMS recycler module and its interaction with the TCA (TypoScript Configuration Array). **Recommendations** TYPO3 CMS versions 10.0.0 through 10.4.54 should be updated to a newer, fixed version. TYPO3 CMS versions 11.0.0 through 11.5.48 should be updated to a newer, fixed version. TYPO3 CMS versions 12.0.0 through 12.4.40 should be updated to a newer, fixed version. TYPO3 CMS versions 13.0.0 through 13.4.22 should be updated to a newer, fixed version. TYPO3 CMS versions 14.0.0 through 14.0.1 should be updated to a newer, fixed version.

**Name of the Vulnerable Software and Affected Versions** TYPO3 versions prior to 8.7.30 TYPO3 versions 9.x prior to 9.5.12 TYPO3 versions 10.x prior to 10.2.2 **Description** An issue has been discovered in the classes QueryGenerator and QueryView, which are vulnerable to insecure deserialization. There are two exploitable scenarios: one requires the system extension ext:lowlevel (Backend Module: DB Check) to be installed, with a valid backend user having administrator privileges, and the other requires the system extension ext:sys action to be installed, with a valid backend user having limited privileges. **Recommendations** For versions prior to 8.7.30, update to version 8.7.30 or later. For versions 9.x prior to 9.5.12, update to version 9.5.12 or later. For versions 10.x prior to 10.2.2, update to version 10.2.2 or later.