Advisory details:
gitlab / packagist/typo3/cms-core/CVE-2025-47939
| Advisory ID | gitlab/packagist/typo3/cms-core/CVE-2025-47939 |
| Aliases |
CVE-2025-47939
GHSA-9hq9-cr36-4wpj |
| Summary | TYPO3 Allows Unrestricted File Upload in File Abstraction Layer ### Problem By design, the file management module in TYPO3’s backend user interface has historically allowed the upload of any file type, with the exception of those that are directly executable in a web server context. This lack of restriction means it is possible to upload files that may be considered potentially harmful, such as executable binaries (e.g., `.exe` files), or files with inconsistent file extensions and MIME types (for example, a file incorrectly named with a `.png` extension but actually carrying the MIME type `application/zip`). Although such files are not directly executable through the web server, their presence can introduce indirect risks. For example, third-party services such as antivirus scanners or malware detection systems might flag or block access to the website for end users if suspicious files are found. This could negatively affect the availability or reputation of the site. ### Solution Update to TYPO3 versions 9.5.51 ELTS, 10.4.50 ELTS, 11.5.44 ELTS, 12.4.31 LTS, 13.4.12 LTS that fix the problem described. |
| Status | Published |
| Exploitability | 0.5 |
| Weighted Severity | 0.0 |
| Risk | |
| Affected and Fixed Packages | Package Details |
| Introduced and Fixed Package Commit Patches | Package Commit Patches Details |
| System | Score | Found at |
|---|---|---|
| cvssv3.1 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2025-47939.yml |
| Reference id | Reference type | URL |
|---|---|---|
| https://github.com/TYPO3-CMS/core | ||
| https://github.com/TYPO3-CMS/core/commit/c265beed6e2c01817c534a226e80e593400f8255 | ||
| https://typo3.org/security/advisory/typo3-core-sa-2025-014 | ||
| CVE-2025-47939 | https://nvd.nist.gov/vuln/detail/CVE-2025-47939 | |
| GHSA-9hq9-cr36-4wpj | https://github.com/advisories/GHSA-9hq9-cr36-4wpj | |
| GHSA-9hq9-cr36-4wpj | https://github.com/TYPO3/typo3/security/advisories/GHSA-9hq9-cr36-4wpj |
No EPSS data available for this advisory.
| Patch URL | |
|---|---|
| There are no known patches. | |
| Attack Vector (AV) | Attack Complexity (AC) | Privileges Required (PR) | User Interaction (UI) | Scope (S) | Confidentiality Impact (C) | Integrity Impact (I) | Availability Impact (A) |
|---|---|---|---|---|---|---|---|
network adjacent_network local physical |
low high |
none low high |
none required |
unchanged changed |
high low none |
high low none |
high low none |
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-20T14:08:07Z/
Decision: Track
Source URL: https://github.com/cisagov/vulnrichment/blob/develop/2025/47xxx/CVE-2025-47939.json
Source Advisory: vulnrichment/CVE-2025-47939
[{'Exploitation': 'none'},
{'Automatable': 'no'},
{'Technical Impact': 'partial'},
{'Mission Prevalence': 'minimal'},
{'Public Well-being Impact': 'material'},
{'Mission & Well-being': 'medium'}]