PT-2025-46649 · Typo3 · Typo3 Extension "Modules"

Thomas Deuling · Published 2025-11-12 · Updated 2025-11-13 · CVE-2025-12998

Positive Technologies (AI Summary)

CVSS v4.0

8.2

High

Base vector

AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions TYPO3 Extension "Modules" versions prior to 4.3.11 TYPO3 Extension "Modules" versions 5.0.0 through 5.7.3 TYPO3 Extension "Modules" versions 6.0.0 through 6.4.1 TYPO3 Extension "Modules" versions 7.0.0 through 7.5.4

Description An improper authentication issue exists in the TYPO3 Extension "Modules". The issue relates to authentication mechanisms within the extension.

Recommendations Update TYPO3 Extension "Modules" to version 4.3.11 or later. Update TYPO3 Extension "Modules" to version 5.7.4 or later. Update TYPO3 Extension "Modules" to version 6.4.2 or later. Update TYPO3 Extension "Modules" to version 7.5.5 or later.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2025-12998

GHSA-49QV-H8PM-73PF

Affected Products

Typo3 Extension "Modules"

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-12998 · Security Note
• https://osv.dev/vulnerability/GHSA-49qv-h8pm-73pf · Vendor Advisory
• https://gitlab.com/codingms/typo3-public/modules · Note
• https://gitlab.com/codingms/typo3-public/modules/-/commit/7fe0f9fbf2ea81343e4e8ede5a34c450c58d8ce1 · Note
• https://typo3.org/security/advisory/typo3-ext-sa-2025-015 · Note
• https://t.me/CVEtracker/37138 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1988767163813884184 · Twitter Post
• https://t.me/cveNotify/142522 · Telegram Post
• https://twitter.com/CVEnew/status/1988721737278640358 · Twitter Post