CVE-2025-59021

Packagist/typo3/cms-redirects CVE-2025-59021: medium, EPSS 0.27%

TYPO3 CMS Allows Broken Access Control in Redirects Module

Action: Upgrade typo3/cms-redirects to 10.4.55 or later.

composer require typo3/cms-redirects:14.0.2

composer require typo3/cms-redirects:13.4.23

composer require typo3/cms-redirects:12.4.41

composer require typo3/cms-redirects:11.5.49

composer require typo3/cms-redirects:10.4.55

Affected

Fixed versions

Sources

• osv: GHSA-6c46-p6j5-3f49
• https://github.com/TYPO3/typo3/security/advisories/GHSA-6c46-p6j5-3f49
• https://nvd.nist.gov/vuln/detail/CVE-2025-59021
• https://github.com/TYPO3/typo3/commit/8a46abd8993e3a5a31a834dcd6c8f91adef57ce4
• https://github.com/TYPO3/typo3/commit/bac370df5c1c3fcf5ebc1c030fbd2bec86d6a686
• https://github.com/TYPO3/typo3/commit/fbbae3b9a40d0420207ef7af990cdf1ac0612c0b
• https://github.com/TYPO3/typo3
• https://typo3.org/security/advisory/typo3-core-sa-2026-002

CVE-2025-59021 · published 2026-01-13T20:37:37Z · modified 2026-02-03T02:59:59.731946Z · JSON