CVE-2025-59015
1 advisory.
Packagist/typo3/cms-core CVE-2025-59015: medium 6.5, EPSS 0.19%
TYPO3 CMS uses insufficient entropy when generating passwords
Action: Upgrade typo3/cms-core to 12.4.37 or later.
composer require typo3/cms-core:12.4.37composer require typo3/cms-core:13.4.18Affected
| introduced | fixed | last affected |
|---|---|---|
| 12.0.0 | 12.4.37 | - |
| 13.0.0 | 13.4.18 | - |
Fixed versions
| 12.4.37 | 13.4.18 |
Sources
- osv: GHSA-p5jq-5383-qvc7
- https://nvd.nist.gov/vuln/detail/CVE-2025-59015
- https://github.com/TYPO3-CMS/core/commit/d2057cc7b2c2db417a2af38c30cb9da42302ab70
- https://github.com/TYPO3-CMS/core
- https://typo3.org/security/advisory/typo3-core-sa-2025-019
CVE-2025-59015 · published · modified · JSON