Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/typo3/cms-core@9.5.51
purl pkg:composer/typo3/cms-core@9.5.51
Tags Ghost
This package is not known to be subject of any advisories.
Vulnerabilities fixed by this package (6)

Advisory Summary Aliases
CVE-2025-47937
TYPO3 Allows Information Disclosure via DBAL Restriction Handling ### Problem When performing a database query involving multiple tables through the … GHSA-x8pv-fgxp-8v3x
CVE-2025-47939
TYPO3 Allows Unrestricted File Upload in File Abstraction Layer ### Problem By design, the file management module in TYPO3’s backend … GHSA-9hq9-cr36-4wpj
CVE-2025-47938
TYPO3 Unverified Password Change for Backend Users ### Problem The backend user management interface allows password changes without requiring the … GHSA-3jrg-97f3-rqh9
GHSA-3jrg-97f3-rqh9
TYPO3 Unverified Password Change for Backend Users ### Problem The backend user management interface allows password changes without requiring the … CVE-2025-47938
GHSA-9hq9-cr36-4wpj
TYPO3 Allows Unrestricted File Upload in File Abstraction Layer ### Problem By design, the file management module in TYPO3’s backend … CVE-2025-47939
GHSA-x8pv-fgxp-8v3x
TYPO3 Allows Information Disclosure via DBAL Restriction Handling ### Problem When performing a database query involving multiple tables through the … CVE-2025-47937