CVE-2025-47936
1 advisory.
Packagist/typo3/cms-webhooks CVE-2025-47936: low 3.3, EPSS 0.27%
TYPO3 CMS Webhooks Server Side Request Forgery
Action: Upgrade typo3/cms-webhooks to 12.4.31 or later.
composer require typo3/cms-webhooks:12.4.31composer require typo3/cms-webhooks:13.4.12Affected
| introduced | fixed | last affected |
|---|---|---|
| 12.0.0 | 12.4.31 | - |
| 13.0.0 | 13.4.12 | - |
Fixed versions
| 12.4.31 | 13.4.12 |
Sources
- osv: GHSA-p4xx-m758-3hpx
- https://github.com/TYPO3/typo3/security/advisories/GHSA-p4xx-m758-3hpx
- https://nvd.nist.gov/vuln/detail/CVE-2025-47936
- https://github.com/TYPO3-CMS/webhooks/commit/0df8b8adae577876fa253679c9ef3fe2a7ee64fd
- https://github.com/TYPO3-CMS/webhooks
- https://typo3.org/security/advisory/typo3-core-sa-2025-012
CVE-2025-47936 · published · modified · JSON