Search for vulnerabilities
Vulnerability details: VCID-qbwg-dycq-37dv
Vulnerability ID VCID-qbwg-dycq-37dv
Aliases CVE-2025-47940
GHSA-6frx-j292-c844
Summary TYPO3 Allows Privilege Escalation to System Maintainer ### Problem Administrator-level backend users without system maintainer privileges can escalate their privileges and gain system maintainer access. Exploiting this vulnerability requires a valid administrator account. ### Solution Update to TYPO3 versions 10.4.50 ELTS, 11.5.44 ELTS, 12.4.31 LTS, 13.4.12 LTS that fix the problem described. ### Credits Thanks to Alexander Künzl for reporting this issue, and to TYPO3 core & security team member Oliver Hader for fixing it.
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-283 Unverified Ownership
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.00052 https://api.first.org/data/v1/epss?cve=CVE-2025-47940
cvssv3.1 7.2 https://github.com/TYPO3-CMS/core
generic_textual HIGH https://github.com/TYPO3-CMS/core
cvssv3.1 7.2 https://github.com/TYPO3-CMS/core/commit/a659cc8c0ae05c44dd7f01d13629cdd2d0b7219b
generic_textual HIGH https://github.com/TYPO3-CMS/core/commit/a659cc8c0ae05c44dd7f01d13629cdd2d0b7219b
cvssv3.1 7.2 https://github.com/TYPO3/typo3/security/advisories/GHSA-6frx-j292-c844
generic_textual HIGH https://github.com/TYPO3/typo3/security/advisories/GHSA-6frx-j292-c844
ssvc Track https://github.com/TYPO3/typo3/security/advisories/GHSA-6frx-j292-c844
cvssv3.1 7.2 https://nvd.nist.gov/vuln/detail/CVE-2025-47940
generic_textual HIGH https://nvd.nist.gov/vuln/detail/CVE-2025-47940
cvssv3.1 7.2 https://typo3.org/security/advisory/typo3-core-sa-2025-016
generic_textual HIGH https://typo3.org/security/advisory/typo3-core-sa-2025-016
ssvc Track https://typo3.org/security/advisory/typo3-core-sa-2025-016
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2025-47940
https://github.com/TYPO3-CMS/core
https://github.com/TYPO3-CMS/core/commit/a659cc8c0ae05c44dd7f01d13629cdd2d0b7219b
https://github.com/TYPO3/typo3/security/advisories/GHSA-6frx-j292-c844
https://nvd.nist.gov/vuln/detail/CVE-2025-47940
https://typo3.org/security/advisory/typo3-core-sa-2025-016
GHSA-6frx-j292-c844 https://github.com/advisories/GHSA-6frx-j292-c844
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/TYPO3-CMS/core
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/TYPO3-CMS/core/commit/a659cc8c0ae05c44dd7f01d13629cdd2d0b7219b
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/TYPO3/typo3/security/advisories/GHSA-6frx-j292-c844
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-05-20T14:35:19Z/ Found at https://github.com/TYPO3/typo3/security/advisories/GHSA-6frx-j292-c844
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2025-47940
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Found at https://typo3.org/security/advisory/typo3-core-sa-2025-016
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-05-20T14:35:19Z/ Found at https://typo3.org/security/advisory/typo3-core-sa-2025-016
Exploit Prediction Scoring System (EPSS)
Percentile 0.16029
EPSS Score 0.00052
Published At June 30, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-01T12:13:06.861571+00:00 GithubOSV Importer Import https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/05/GHSA-6frx-j292-c844/GHSA-6frx-j292-c844.json 36.1.3