PT-2025-22142 · Typo3 · Typo3

Alexander Künzl · Published 2025-05-20 · Updated 2025-05-25 · CVE-2025-47940

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions TYPO3 versions 10.0.0 through 10.4.49 ELTS TYPO3 versions 11.0.0 through 11.5.43 ELTS TYPO3 versions 12.0.0 through 12.4.30 LTS TYPO3 versions 13.0.0 through 13.4.11 LTS

Description The issue allows administrator-level backend users without system maintainer privileges to escalate their privileges and gain system maintainer access. Exploiting this requires a valid administrator account.

Recommendations For versions 10.0.0 through 10.4.49 ELTS, update to version 10.4.50 ELTS. For versions 11.0.0 through 11.5.43 ELTS, update to version 11.5.44 ELTS. For versions 12.0.0 through 12.4.30 LTS, update to version 12.4.31 LTS. For versions 13.0.0 through 13.4.11 LTS, update to version 13.4.12 LTS.

Exploit

Fix

LPE

Weakness Enumeration

CWE-283

Related Identifiers

BDU:2025-05967

CVE-2025-47940

GHSA-6FRX-J292-C844

Affected Products

Typo3

References · 14

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/47xxx/CVE-2025-47940.json · Exploit
• https://github.com/TYPO3/typo3/security/advisories/GHSA-6frx-j292-c844 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-05967 · Security Note
• https://typo3.org/security/advisory/typo3-core-sa-2025-016 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-47940 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-47940 · Security Note
• https://osv.dev/vulnerability/GHSA-6frx-j292-c844 · Vendor Advisory
• https://github.com/TYPO3-CMS/core · Note
• https://github.com/TYPO3-CMS/core/commit/a659cc8c0ae05c44dd7f01d13629cdd2d0b7219b · Note
• https://t.me/latest_high_impact_cve/2426 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1924851213620617595 · Twitter Post
• https://twitter.com/cracbot/status/1926594151178440885 · Twitter Post
• https://docs.typo3.org/m/typo3/reference-coreapi/main/en-us/ApiOverview/DataHandler/Introduction/Index.html#introduction · Note
• https://twitter.com/CVEnew/status/1924837281476579717 · Twitter Post