Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/typo3/cms-core@11.5.43
purl pkg:composer/typo3/cms-core@11.5.43
Tags Ghost
Next non-vulnerable version 13.4.34
Latest non-vulnerable version 14.3.6
Risk score 3.2
Vulnerabilities affecting this package (4)
Advisory Summary Fixed in package version
GHSA-3jrg-97f3-rqh9
Aliases:
CVE-2025-47938
TYPO3 Unverified Password Change for Backend Users ### Problem The backend user management interface allows password changes without requiring the … There are no reported fixed by versions.
GHSA-6frx-j292-c844
Aliases:
CVE-2025-47940
TYPO3 Allows Privilege Escalation to System Maintainer ### Problem Administrator-level backend users without system maintainer privileges can escalate their privileges … There are no reported fixed by versions.
GHSA-9hq9-cr36-4wpj
Aliases:
CVE-2025-47939
TYPO3 Allows Unrestricted File Upload in File Abstraction Layer ### Problem By design, the file management module in TYPO3’s backend … There are no reported fixed by versions.
GHSA-x8pv-fgxp-8v3x
Aliases:
CVE-2025-47937
TYPO3 Allows Information Disclosure via DBAL Restriction Handling ### Problem When performing a database query involving multiple tables through the … There are no reported fixed by versions.
This package is not known to fix any advisories.