Search for packages
| purl | pkg:composer/typo3/cms-core@10.4.49 |
| Tags | Ghost |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-3jrg-97f3-rqh9
Aliases: CVE-2025-47938 |
TYPO3 Unverified Password Change for Backend Users ### Problem The backend user management interface allows password changes without requiring the … | There are no reported fixed by versions. |
|
GHSA-6frx-j292-c844
Aliases: CVE-2025-47940 |
TYPO3 Allows Privilege Escalation to System Maintainer ### Problem Administrator-level backend users without system maintainer privileges can escalate their privileges … | There are no reported fixed by versions. |
|
GHSA-9hq9-cr36-4wpj
Aliases: CVE-2025-47939 |
TYPO3 Allows Unrestricted File Upload in File Abstraction Layer ### Problem By design, the file management module in TYPO3’s backend … | There are no reported fixed by versions. |
|
GHSA-x8pv-fgxp-8v3x
Aliases: CVE-2025-47937 |
TYPO3 Allows Information Disclosure via DBAL Restriction Handling ### Problem When performing a database query involving multiple tables through the … | There are no reported fixed by versions. |