Skip to main content
cve.nowby Sazabi
← Packagist
PackagistPackage

typo3/cms-beuser

2 known vulnerabilities (2 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2 · 2 medium
Registry
Packagist

Advisories 2

  • CVE-2025-59017Medium 5.3

    Broken Access Control in Backend AJAX Routes

    Affected: from 9.0.0, fixed in 9.5.55; from 10.0.0, fixed in 10.4.54; from 11.0.0, fixed in 11.5.48; from 12.0.0, fixed in 12.4.37; from 13.0.0, fixed in 13.4.18; from 13.0.0, fixed in 13.4.18; from 12.0.0, fixed in 12.4.37; from 11.0.0, fixed in 12.4.37; from 10.0.0, fixed in 12.4.37; from 9.0.0, fixed in 12.4.37.

  • CVE-2024-55894Medium 4.3

    TYPO3 Cross-Site Request Forgery in Backend User Module

    Affected: from 10.0.0, fixed in 10.4.48; from 11.0.0, fixed in 11.5.42; from 12.0.0, fixed in 12.4.25; from 13.0.0, fixed in 13.4.3.