CVE-2024-25120

Packagist/typo3/cms-core CVE-2024-25120: medium 4.3, EPSS 0.55%

TYPO3 vulnerable to Improper Access Control of Resources Referenced by t3:// URI Scheme

Action: Upgrade typo3/cms-core to 8.7.57 or later.

composer require typo3/cms-core:8.7.57

composer require typo3/cms-core:9.5.46

composer require typo3/cms-core:10.4.43

composer require typo3/cms-core:11.5.35

composer require typo3/cms-core:12.4.11

composer require typo3/cms-core:13.0.1

Affected

Fixed versions

Sources

• osv: GHSA-wf85-8hx9-gj7c
• https://github.com/TYPO3/typo3/security/advisories/GHSA-wf85-8hx9-gj7c
• https://nvd.nist.gov/vuln/detail/CVE-2024-25120
• https://github.com/TYPO3/typo3/commit/2de87ff113ba24333ab7cbb8078588743f8958d6
• https://github.com/TYPO3/typo3/commit/33f4d279b82bca0a509227a17065244c6156e68f
• https://github.com/TYPO3/typo3/commit/ae0dfc4c058a90c10eedb3f49cfaf33164d21cdd
• https://docs.typo3.org/m/typo3/reference-typoscript/main/en-us/Functions/Typolink.html#resource-references
• https://github.com/TYPO3/typo3
• https://typo3.org/security/advisory/typo3-core-sa-2024-005

CVE-2024-25120 · published 2024-02-13T17:24:59Z · modified 2026-09-10T03:50:00.392956614Z · JSON