p PatchFirst

PatchFirst · Latest vulnerabilities

typo3/cms-workspaces vulnerabilities

Vulnerabilities published for typo3/cms-workspaces in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerabilities: 2

  1. CVE-2025-59018

    High · CVSS 7.1EPSS 0.29%Fix available

    Information Disclosure in Workspaces Module

    Missing authorization checks in the Workspace Module of TYPO3 CMS versions 9.0.0‑9.5.54, 10.0.0‑10.4.53, 11.0.0‑11.5.47, 12.0.0‑12.4.36, and 13.0.0‑13.4.17 allow backend users to directly invoke the corresponding AJAX backend route to disclose sensitive information without having access.

    typo3/cms-workspaces typo3/cms-workspaces typo3/cms-workspaces typo3/cms-workspaces typo3/cms-workspacesPHP
    • Update to 12.4.37
    • Update to 13.4.18
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

  2. CVE-2025-59017

    Medium · CVSS 5.3EPSS 0.3%Fix available

    Broken Access Control in Backend AJAX Routes

    Missing authorization checks in the Backend Routing of TYPO3 CMS versions 9.0.0‑9.5.54, 10.0.0‑10.4.53, 11.0.0‑11.5.47, 12.0.0‑12.4.36, and 13.0.0‑13.4.17 allow backend users to directly invoke AJAX backend routes without having access to the corresponding backend modules.

    typo3/cms-workspaces typo3/cms-workspaces typo3/cms-workspaces typo3/cms-workspaces typo3/cms-workspacesPHP
    • Update to 12.4.37
    • Update to 13.4.18
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →