PT-2025-36690

CVE-2025-59014

Published

2025-09-09

Updated

2025-09-09

Description by

CVSS 4.0

5.1

Medium

MetricsAV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions: TYPO3 CMS versions 11.0.0 through 11.5.47 TYPO3 CMS versions 12.0.0 through 12.4.36 TYPO3 CMS versions 13.0.0 through 13.4.17

Description: An uncaught exception within the Bookmark Toolbar component allows administrator-level backend users to trigger a denial-of-service condition in the backend user interface. This occurs when saving manipulated data in the bookmark toolbar.

Recommendations: Update TYPO3 CMS to a version later than 11.5.47. Update TYPO3 CMS to a version later than 12.4.36. Update TYPO3 CMS to a version later than 13.4.17.

Exploitability

Exploit

Fix

Impacts

Researchers

Jakub Świes

Oliver Hader

Vendors

Affected products

Weakness enumeration

CWE-248: Uncaught Exception

Related identifiers