{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/30341?format=json","vulnerability_id":"VCID-5pry-8rnc-ubbh","summary":"The TYPO3 CMS Backend has Broken Authentication in Backend MFA\n### Problem\nThe multifactor authentication (MFA) dialog presented during backend login can be bypassed due to insufficient enforcement of access restrictions on all backend routes.\n\nSuccessful exploitation requires valid backend user credentials, as MFA can only be bypassed after successful authentication.\n\n### Solution\nUpdate to TYPO3 versions 12.4.31 LTS, 13.4.12 LTS that fix the problem described.\n\n### Credits\nThanks to Jens Jacobsen and Y. Kahveci for reporting this issue, and to TYPO3 security team member Torben Hansen for fixing it.","aliases":[{"alias":"CVE-2025-47941"},{"alias":"GHSA-744g-7qm9-hjh9"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/71117?format=json","purl":"pkg:composer/typo3/cms-backend@12.4.31","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@12.4.31"},{"url":"http://public2.vulnerablecode.io/api/packages/71118?format=json","purl":"pkg:composer/typo3/cms-backend@13.4.12","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@13.4.12"}],"affected_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/67360?format=json","purl":"pkg:composer/typo3/cms-backend@12.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-716n-jhj7-ebhh"},{"vulnerability":"VCID-buz5-hzv3-97hp"},{"vulnerability":"VCID-g8t4-khh5-cqey"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"},{"vulnerability":"VCID-ymvw-ev1y-8fa3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@12.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/719175?format=json","purl":"pkg:composer/typo3/cms-backend@12.1.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-716n-jhj7-ebhh"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"},{"vulnerability":"VCID-ymvw-ev1y-8fa3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@12.1.0"},{"url":"http://public2.vulnerablecode.io/api/packages/719176?format=json","purl":"pkg:composer/typo3/cms-backend@12.1.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-716n-jhj7-ebhh"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"},{"vulnerability":"VCID-ymvw-ev1y-8fa3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@12.1.1"},{"url":"http://public2.vulnerablecode.io/api/packages/719177?format=json","purl":"pkg:composer/typo3/cms-backend@12.1.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-716n-jhj7-ebhh"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"},{"vulnerability":"VCID-ymvw-ev1y-8fa3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@12.1.2"},{"url":"http://public2.vulnerablecode.io/api/packages/719178?format=json","purl":"pkg:composer/typo3/cms-backend@12.1.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-716n-jhj7-ebhh"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"},{"vulnerability":"VCID-ymvw-ev1y-8fa3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@12.1.3"},{"url":"http://public2.vulnerablecode.io/api/packages/719179?format=json","purl":"pkg:composer/typo3/cms-backend@12.2.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-716n-jhj7-ebhh"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"},{"vulnerability":"VCID-ymvw-ev1y-8fa3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@12.2.0"},{"url":"http://public2.vulnerablecode.io/api/packages/719180?format=json","purl":"pkg:composer/typo3/cms-backend@12.3.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-716n-jhj7-ebhh"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"},{"vulnerability":"VCID-ymvw-ev1y-8fa3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@12.3.0"},{"url":"http://public2.vulnerablecode.io/api/packages/719181?format=json","purl":"pkg:composer/typo3/cms-backend@12.4.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-716n-jhj7-ebhh"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"},{"vulnerability":"VCID-ymvw-ev1y-8fa3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@12.4.0"},{"url":"http://public2.vulnerablecode.io/api/packages/719182?format=json","purl":"pkg:composer/typo3/cms-backend@12.4.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-716n-jhj7-ebhh"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"},{"vulnerability":"VCID-ymvw-ev1y-8fa3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@12.4.1"},{"url":"http://public2.vulnerablecode.io/api/packages/719183?format=json","purl":"pkg:composer/typo3/cms-backend@12.4.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-716n-jhj7-ebhh"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"},{"vulnerability":"VCID-ymvw-ev1y-8fa3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@12.4.2"},{"url":"http://public2.vulnerablecode.io/api/packages/719184?format=json","purl":"pkg:composer/typo3/cms-backend@12.4.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-716n-jhj7-ebhh"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"},{"vulnerability":"VCID-ymvw-ev1y-8fa3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@12.4.3"},{"url":"http://public2.vulnerablecode.io/api/packages/719185?format=json","purl":"pkg:composer/typo3/cms-backend@12.4.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-716n-jhj7-ebhh"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"},{"vulnerability":"VCID-ymvw-ev1y-8fa3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@12.4.4"},{"url":"http://public2.vulnerablecode.io/api/packages/719186?format=json","purl":"pkg:composer/typo3/cms-backend@12.4.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-716n-jhj7-ebhh"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"},{"vulnerability":"VCID-ymvw-ev1y-8fa3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@12.4.5"},{"url":"http://public2.vulnerablecode.io/api/packages/719187?format=json","purl":"pkg:composer/typo3/cms-backend@12.4.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-716n-jhj7-ebhh"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"},{"vulnerability":"VCID-ymvw-ev1y-8fa3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@12.4.6"},{"url":"http://public2.vulnerablecode.io/api/packages/719188?format=json","purl":"pkg:composer/typo3/cms-backend@12.4.7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-716n-jhj7-ebhh"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"},{"vulnerability":"VCID-ymvw-ev1y-8fa3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@12.4.7"},{"url":"http://public2.vulnerablecode.io/api/packages/719189?format=json","purl":"pkg:composer/typo3/cms-backend@12.4.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-716n-jhj7-ebhh"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"},{"vulnerability":"VCID-ymvw-ev1y-8fa3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@12.4.8"},{"url":"http://public2.vulnerablecode.io/api/packages/719190?format=json","purl":"pkg:composer/typo3/cms-backend@12.4.9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-716n-jhj7-ebhh"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"},{"vulnerability":"VCID-ymvw-ev1y-8fa3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@12.4.9"},{"url":"http://public2.vulnerablecode.io/api/packages/719191?format=json","purl":"pkg:composer/typo3/cms-backend@12.4.10","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-716n-jhj7-ebhh"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"},{"vulnerability":"VCID-ymvw-ev1y-8fa3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@12.4.10"},{"url":"http://public2.vulnerablecode.io/api/packages/719192?format=json","purl":"pkg:composer/typo3/cms-backend@12.4.11","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-716n-jhj7-ebhh"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"},{"vulnerability":"VCID-ymvw-ev1y-8fa3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@12.4.11"},{"url":"http://public2.vulnerablecode.io/api/packages/719193?format=json","purl":"pkg:composer/typo3/cms-backend@12.4.12","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-716n-jhj7-ebhh"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"},{"vulnerability":"VCID-ymvw-ev1y-8fa3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@12.4.12"},{"url":"http://public2.vulnerablecode.io/api/packages/719194?format=json","purl":"pkg:composer/typo3/cms-backend@12.4.13","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-716n-jhj7-ebhh"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"},{"vulnerability":"VCID-ymvw-ev1y-8fa3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@12.4.13"},{"url":"http://public2.vulnerablecode.io/api/packages/719195?format=json","purl":"pkg:composer/typo3/cms-backend@12.4.14","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-716n-jhj7-ebhh"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"},{"vulnerability":"VCID-ymvw-ev1y-8fa3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@12.4.14"},{"url":"http://public2.vulnerablecode.io/api/packages/719196?format=json","purl":"pkg:composer/typo3/cms-backend@12.4.15","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-716n-jhj7-ebhh"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"},{"vulnerability":"VCID-ymvw-ev1y-8fa3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@12.4.15"},{"url":"http://public2.vulnerablecode.io/api/packages/719197?format=json","purl":"pkg:composer/typo3/cms-backend@12.4.16","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-716n-jhj7-ebhh"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"},{"vulnerability":"VCID-ymvw-ev1y-8fa3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@12.4.16"},{"url":"http://public2.vulnerablecode.io/api/packages/719198?format=json","purl":"pkg:composer/typo3/cms-backend@12.4.17","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-716n-jhj7-ebhh"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"},{"vulnerability":"VCID-ymvw-ev1y-8fa3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@12.4.17"},{"url":"http://public2.vulnerablecode.io/api/packages/719199?format=json","purl":"pkg:composer/typo3/cms-backend@12.4.18","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-716n-jhj7-ebhh"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"},{"vulnerability":"VCID-ymvw-ev1y-8fa3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@12.4.18"},{"url":"http://public2.vulnerablecode.io/api/packages/719200?format=json","purl":"pkg:composer/typo3/cms-backend@12.4.19","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-716n-jhj7-ebhh"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"},{"vulnerability":"VCID-ymvw-ev1y-8fa3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@12.4.19"},{"url":"http://public2.vulnerablecode.io/api/packages/719201?format=json","purl":"pkg:composer/typo3/cms-backend@12.4.20","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-716n-jhj7-ebhh"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"},{"vulnerability":"VCID-ymvw-ev1y-8fa3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@12.4.20"},{"url":"http://public2.vulnerablecode.io/api/packages/42032?format=json","purl":"pkg:composer/typo3/cms-backend@12.4.21","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@12.4.21"},{"url":"http://public2.vulnerablecode.io/api/packages/764784?format=json","purl":"pkg:composer/typo3/cms-backend@12.4.22","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@12.4.22"},{"url":"http://public2.vulnerablecode.io/api/packages/764785?format=json","purl":"pkg:composer/typo3/cms-backend@12.4.23","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@12.4.23"},{"url":"http://public2.vulnerablecode.io/api/packages/764786?format=json","purl":"pkg:composer/typo3/cms-backend@12.4.24","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@12.4.24"},{"url":"http://public2.vulnerablecode.io/api/packages/764787?format=json","purl":"pkg:composer/typo3/cms-backend@12.4.25","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@12.4.25"},{"url":"http://public2.vulnerablecode.io/api/packages/764788?format=json","purl":"pkg:composer/typo3/cms-backend@12.4.26","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@12.4.26"},{"url":"http://public2.vulnerablecode.io/api/packages/764789?format=json","purl":"pkg:composer/typo3/cms-backend@12.4.27","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@12.4.27"},{"url":"http://public2.vulnerablecode.io/api/packages/764790?format=json","purl":"pkg:composer/typo3/cms-backend@12.4.28","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@12.4.28"},{"url":"http://public2.vulnerablecode.io/api/packages/764791?format=json","purl":"pkg:composer/typo3/cms-backend@12.4.29","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@12.4.29"},{"url":"http://public2.vulnerablecode.io/api/packages/764792?format=json","purl":"pkg:composer/typo3/cms-backend@12.4.30","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@12.4.30"},{"url":"http://public2.vulnerablecode.io/api/packages/44286?format=json","purl":"pkg:composer/typo3/cms-backend@13.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-716n-jhj7-ebhh"},{"vulnerability":"VCID-buz5-hzv3-97hp"},{"vulnerability":"VCID-g8t4-khh5-cqey"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"},{"vulnerability":"VCID-ymvw-ev1y-8fa3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@13.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/719202?format=json","purl":"pkg:composer/typo3/cms-backend@13.0.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-716n-jhj7-ebhh"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"},{"vulnerability":"VCID-ymvw-ev1y-8fa3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@13.0.1"},{"url":"http://public2.vulnerablecode.io/api/packages/719203?format=json","purl":"pkg:composer/typo3/cms-backend@13.1.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-716n-jhj7-ebhh"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"},{"vulnerability":"VCID-ymvw-ev1y-8fa3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@13.1.0"},{"url":"http://public2.vulnerablecode.io/api/packages/719204?format=json","purl":"pkg:composer/typo3/cms-backend@13.1.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-716n-jhj7-ebhh"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"},{"vulnerability":"VCID-ymvw-ev1y-8fa3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@13.1.1"},{"url":"http://public2.vulnerablecode.io/api/packages/719205?format=json","purl":"pkg:composer/typo3/cms-backend@13.2.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-716n-jhj7-ebhh"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"},{"vulnerability":"VCID-ymvw-ev1y-8fa3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@13.2.1"},{"url":"http://public2.vulnerablecode.io/api/packages/719206?format=json","purl":"pkg:composer/typo3/cms-backend@13.3.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-716n-jhj7-ebhh"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"},{"vulnerability":"VCID-ymvw-ev1y-8fa3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@13.3.0"},{"url":"http://public2.vulnerablecode.io/api/packages/42029?format=json","purl":"pkg:composer/typo3/cms-backend@13.3.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@13.3.1"},{"url":"http://public2.vulnerablecode.io/api/packages/764793?format=json","purl":"pkg:composer/typo3/cms-backend@13.4.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@13.4.0"},{"url":"http://public2.vulnerablecode.io/api/packages/764794?format=json","purl":"pkg:composer/typo3/cms-backend@13.4.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@13.4.1"},{"url":"http://public2.vulnerablecode.io/api/packages/764795?format=json","purl":"pkg:composer/typo3/cms-backend@13.4.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@13.4.2"},{"url":"http://public2.vulnerablecode.io/api/packages/764796?format=json","purl":"pkg:composer/typo3/cms-backend@13.4.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@13.4.3"},{"url":"http://public2.vulnerablecode.io/api/packages/764797?format=json","purl":"pkg:composer/typo3/cms-backend@13.4.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@13.4.4"},{"url":"http://public2.vulnerablecode.io/api/packages/764798?format=json","purl":"pkg:composer/typo3/cms-backend@13.4.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@13.4.5"},{"url":"http://public2.vulnerablecode.io/api/packages/764799?format=json","purl":"pkg:composer/typo3/cms-backend@13.4.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@13.4.6"},{"url":"http://public2.vulnerablecode.io/api/packages/764800?format=json","purl":"pkg:composer/typo3/cms-backend@13.4.7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@13.4.7"},{"url":"http://public2.vulnerablecode.io/api/packages/764801?format=json","purl":"pkg:composer/typo3/cms-backend@13.4.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@13.4.8"},{"url":"http://public2.vulnerablecode.io/api/packages/764802?format=json","purl":"pkg:composer/typo3/cms-backend@13.4.9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@13.4.9"},{"url":"http://public2.vulnerablecode.io/api/packages/764803?format=json","purl":"pkg:composer/typo3/cms-backend@13.4.10","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@13.4.10"},{"url":"http://public2.vulnerablecode.io/api/packages/764804?format=json","purl":"pkg:composer/typo3/cms-backend@13.4.11","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5pry-8rnc-ubbh"},{"vulnerability":"VCID-sjs5-c9c4-dfc6"},{"vulnerability":"VCID-uvfp-uq3t-6ffg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-backend@13.4.11"}],"references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2025-47941","reference_id":"","reference_type":"","scores":[{"value":"0.00276","scoring_system":"epss","scoring_elements":"0.51104","published_at":"2026-05-15T12:55:00Z"},{"value":"0.00276","scoring_system":"epss","scoring_elements":"0.51092","published_at":"2026-04-12T12:55:00Z"},{"value":"0.00276","scoring_system":"epss","scoring_elements":"0.51076","published_at":"2026-04-13T12:55:00Z"},{"value":"0.00276","scoring_system":"epss","scoring_elements":"0.51115","published_at":"2026-04-16T12:55:00Z"},{"value":"0.00276","scoring_system":"epss","scoring_elements":"0.51121","published_at":"2026-04-18T12:55:00Z"},{"value":"0.00276","scoring_system":"epss","scoring_elements":"0.51098","published_at":"2026-04-21T12:55:00Z"},{"value":"0.00276","scoring_system":"epss","scoring_elements":"0.51046","published_at":"2026-04-24T12:55:00Z"},{"value":"0.00276","scoring_system":"epss","scoring_elements":"0.51054","published_at":"2026-04-26T12:55:00Z"},{"value":"0.00276","scoring_system":"epss","scoring_elements":"0.51014","published_at":"2026-04-29T12:55:00Z"},{"value":"0.00276","scoring_system":"epss","scoring_elements":"0.50946","published_at":"2026-05-05T12:55:00Z"},{"value":"0.00276","scoring_system":"epss","scoring_elements":"0.50997","published_at":"2026-05-07T12:55:00Z"},{"value":"0.00276","scoring_system":"epss","scoring_elements":"0.51028","published_at":"2026-05-09T12:55:00Z"},{"value":"0.00276","scoring_system":"epss","scoring_elements":"0.50985","published_at":"2026-05-11T12:55:00Z"},{"value":"0.00276","scoring_system":"epss","scoring_elements":"0.51015","published_at":"2026-05-12T12:55:00Z"},{"value":"0.00276","scoring_system":"epss","scoring_elements":"0.51093","published_at":"2026-05-14T12:55:00Z"},{"value":"0.00276","scoring_system":"epss","scoring_elements":"0.51034","published_at":"2026-04-02T12:55:00Z"},{"value":"0.00276","scoring_system":"epss","scoring_elements":"0.51058","published_at":"2026-04-04T12:55:00Z"},{"value":"0.00276","scoring_system":"epss","scoring_elements":"0.51016","published_at":"2026-04-07T12:55:00Z"},{"value":"0.00276","scoring_system":"epss","scoring_elements":"0.51073","published_at":"2026-04-08T12:55:00Z"},{"value":"0.00276","scoring_system":"epss","scoring_elements":"0.51069","published_at":"2026-04-09T12:55:00Z"},{"value":"0.00276","scoring_system":"epss","scoring_elements":"0.51113","published_at":"2026-04-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2025-47941"},{"reference_url":"https://github.com/TYPO3-CMS/backend","reference_id":"","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/TYPO3-CMS/backend"},{"reference_url":"https://github.com/TYPO3-CMS/backend/commit/034f589029952084771c5f98d42ed0f69f9a7ead","reference_id":"","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/TYPO3-CMS/backend/commit/034f589029952084771c5f98d42ed0f69f9a7ead"},{"reference_url":"https://github.com/TYPO3/typo3/security/advisories/GHSA-744g-7qm9-hjh9","reference_id":"","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-05-20T14:31:58Z/"}],"url":"https://github.com/TYPO3/typo3/security/advisories/GHSA-744g-7qm9-hjh9"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2025-47941","reference_id":"","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-47941"},{"reference_url":"https://typo3.org/security/advisory/typo3-core-sa-2025-015","reference_id":"","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-05-20T14:31:58Z/"}],"url":"https://typo3.org/security/advisory/typo3-core-sa-2025-015"},{"reference_url":"https://github.com/advisories/GHSA-744g-7qm9-hjh9","reference_id":"GHSA-744g-7qm9-hjh9","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-744g-7qm9-hjh9"}],"weaknesses":[{"cwe_id":288,"name":"Authentication Bypass Using an Alternate Path or Channel","description":"A product requires authentication, but the product has an alternate path or channel that does not require authentication."},{"cwe_id":937,"name":"OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013."},{"cwe_id":1035,"name":"OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017."}],"exploits":[],"severity_range_score":"7.0 - 8.9","exploitability":"0.5","weighted_severity":"8.0","risk_score":4.0,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-5pry-8rnc-ubbh"}