Search for vulnerabilities
Vulnerability details: VCID-ubuj-dxgj-n3ha
Vulnerability ID VCID-ubuj-dxgj-n3ha
Aliases CVE-2025-47941
GHSA-744g-7qm9-hjh9
Summary The TYPO3 CMS Backend has Broken Authentication in Backend MFA ### Problem The multifactor authentication (MFA) dialog presented during backend login can be bypassed due to insufficient enforcement of access restrictions on all backend routes. Successful exploitation requires valid backend user credentials, as MFA can only be bypassed after successful authentication. ### Solution Update to TYPO3 versions 12.4.31 LTS, 13.4.12 LTS that fix the problem described. ### Credits Thanks to Jens Jacobsen and Y. Kahveci for reporting this issue, and to TYPO3 security team member Torben Hansen for fixing it.
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-288 Authentication Bypass Using an Alternate Path or Channel
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.00099 https://api.first.org/data/v1/epss?cve=CVE-2025-47941
epss 0.00099 https://api.first.org/data/v1/epss?cve=CVE-2025-47941
cvssv3.1 7.2 https://github.com/TYPO3-CMS/backend
generic_textual HIGH https://github.com/TYPO3-CMS/backend
cvssv3.1 7.2 https://github.com/TYPO3-CMS/backend/commit/034f589029952084771c5f98d42ed0f69f9a7ead
generic_textual HIGH https://github.com/TYPO3-CMS/backend/commit/034f589029952084771c5f98d42ed0f69f9a7ead
cvssv3.1 7.2 https://github.com/TYPO3/typo3/security/advisories/GHSA-744g-7qm9-hjh9
generic_textual HIGH https://github.com/TYPO3/typo3/security/advisories/GHSA-744g-7qm9-hjh9
ssvc Track https://github.com/TYPO3/typo3/security/advisories/GHSA-744g-7qm9-hjh9
cvssv3.1 7.2 https://nvd.nist.gov/vuln/detail/CVE-2025-47941
generic_textual HIGH https://nvd.nist.gov/vuln/detail/CVE-2025-47941
cvssv3.1 7.2 https://typo3.org/security/advisory/typo3-core-sa-2025-015
generic_textual HIGH https://typo3.org/security/advisory/typo3-core-sa-2025-015
ssvc Track https://typo3.org/security/advisory/typo3-core-sa-2025-015
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2025-47941
https://github.com/TYPO3-CMS/backend
https://github.com/TYPO3-CMS/backend/commit/034f589029952084771c5f98d42ed0f69f9a7ead
https://github.com/TYPO3/typo3/security/advisories/GHSA-744g-7qm9-hjh9
https://nvd.nist.gov/vuln/detail/CVE-2025-47941
https://typo3.org/security/advisory/typo3-core-sa-2025-015
GHSA-744g-7qm9-hjh9 https://github.com/advisories/GHSA-744g-7qm9-hjh9
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/TYPO3-CMS/backend
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/TYPO3-CMS/backend/commit/034f589029952084771c5f98d42ed0f69f9a7ead
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/TYPO3/typo3/security/advisories/GHSA-744g-7qm9-hjh9
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-05-20T14:31:58Z/ Found at https://github.com/TYPO3/typo3/security/advisories/GHSA-744g-7qm9-hjh9
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2025-47941
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Found at https://typo3.org/security/advisory/typo3-core-sa-2025-015
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-05-20T14:31:58Z/ Found at https://typo3.org/security/advisory/typo3-core-sa-2025-015
Exploit Prediction Scoring System (EPSS)
Percentile 0.2845
EPSS Score 0.00099
Published At June 30, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-01T12:13:10.236616+00:00 GithubOSV Importer Import https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/05/GHSA-744g-7qm9-hjh9/GHSA-744g-7qm9-hjh9.json 36.1.3