PT-2025-36691

CVE-2025-59015

·

Published

2025-09-09

·

Updated

2025-09-09

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions: TYPO3 CMS versions 12.0.0 through 12.4.36 TYPO3 CMS versions 13.0.0 through 13.4.17
Description: A deterministic three-character prefix in the Password Generation component reduces entropy, potentially enabling attackers to expedite brute-force attacks.
Recommendations: Update TYPO3 CMS to a version later than 12.4.36. Update TYPO3 CMS to a version later than 13.4.17.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-331: Insufficient Entropy
Related identifiers
CVE-2025-59015
GHSA-P5JQ-5383-QVC7
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com