Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/typo3/cms-core@10.4.50
purl pkg:composer/typo3/cms-core@10.4.50
Tags Ghost
This package is not known to be subject of any advisories.
Vulnerabilities fixed by this package (8)

Advisory Summary Aliases
CVE-2025-47937
TYPO3 Allows Information Disclosure via DBAL Restriction Handling ### Problem When performing a database query involving multiple tables through the … GHSA-x8pv-fgxp-8v3x
CVE-2025-47940
TYPO3 Allows Privilege Escalation to System Maintainer ### Problem Administrator-level backend users without system maintainer privileges can escalate their privileges … GHSA-6frx-j292-c844
CVE-2025-47939
TYPO3 Allows Unrestricted File Upload in File Abstraction Layer ### Problem By design, the file management module in TYPO3’s backend … GHSA-9hq9-cr36-4wpj
CVE-2025-47938
TYPO3 Unverified Password Change for Backend Users ### Problem The backend user management interface allows password changes without requiring the … GHSA-3jrg-97f3-rqh9
GHSA-3jrg-97f3-rqh9
TYPO3 Unverified Password Change for Backend Users ### Problem The backend user management interface allows password changes without requiring the … CVE-2025-47938
GHSA-6frx-j292-c844
TYPO3 Allows Privilege Escalation to System Maintainer ### Problem Administrator-level backend users without system maintainer privileges can escalate their privileges … CVE-2025-47940
GHSA-9hq9-cr36-4wpj
TYPO3 Allows Unrestricted File Upload in File Abstraction Layer ### Problem By design, the file management module in TYPO3’s backend … CVE-2025-47939
GHSA-x8pv-fgxp-8v3x
TYPO3 Allows Information Disclosure via DBAL Restriction Handling ### Problem When performing a database query involving multiple tables through the … CVE-2025-47937