{"action":"Upgrade typo3/cms-workspaces to 12.4.37 or later.","affected":[{"fixed":"12.4.37","introduced":"9.0.0"},{"fixed":"12.4.37","introduced":"10.0.0"},{"fixed":"12.4.37","introduced":"11.0.0"},{"fixed":"12.4.37","introduced":"12.0.0"},{"fixed":"13.4.18","introduced":"13.0.0"}],"component":"typo3/cms-workspaces","cve_ids":["CVE-2025-59017"],"ecosystem":"Packagist","epss":0.00303,"exploited":false,"fixed_versions":["12.4.37","13.4.18"],"ghsa_id":"GHSA-2fhw-2j7m-mr4m","id":"tcs_01M5KERXC4N3FEJVK6CNJCCVRY","modified_at":"2025-09-09T20:44:49.353963Z","published_at":"2025-09-09T09:31:13Z","references":["https://osv.dev/vulnerability/GHSA-2fhw-2j7m-mr4m","https://nvd.nist.gov/vuln/detail/CVE-2025-59017","https://github.com/TYPO3-CMS/backend/commit/0aedf33d910bceafc2ed0e715743cc0d30124501","https://github.com/TYPO3-CMS/beuser/commit/eb9b0c14a514a7aada8a2aa30e57696e286044c7","https://github.com/TYPO3-CMS/dashboard/commit/582006c6bdf251160001eee6624901baccdcfcd2","https://github.com/TYPO3-CMS/recycler/commit/43475578eb1d9fa3b765537c96bcdf48582ee53b","https://github.com/TYPO3-CMS/workspaces/commit/32222508043940f9073c338d4205c730a2e02070","https://typo3.org/security/advisory/typo3-core-sa-2025-021"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-2fhw-2j7m-mr4m","url":"https://osv.dev/vulnerability/GHSA-2fhw-2j7m-mr4m"}],"summary":"TYPO3 backend modules have Broken Access Control"}