{"action":"Upgrade typo3/cms-core to 11.5.0 or later.","affected":[{"fixed":"11.5.0","introduced":"11.2.0"}],"component":"typo3/cms-core","cve_ids":["CVE-2021-41113"],"ecosystem":"Packagist","epss":0.0064,"exploited":false,"fixed_versions":["11.5.0"],"ghsa_id":"GHSA-657m-v5vm-f6rw","id":"tcs_01M5KEWNAJ7A46GD5MYWK4G45F","modified_at":"2026-07-08T06:28:47.245737846Z","published_at":"2021-10-05T20:23:47Z","references":["https://osv.dev/vulnerability/GHSA-657m-v5vm-f6rw","https://github.com/TYPO3/typo3/security/advisories/GHSA-657m-v5vm-f6rw","https://nvd.nist.gov/vuln/detail/CVE-2020-11069","https://nvd.nist.gov/vuln/detail/CVE-2021-41113","https://github.com/TYPO3/typo3/commit/fa51999203c5e5d913ecae5ea843ccb2b95fa33f","https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-41113.yaml","https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-41113.yaml","https://github.com/TYPO3/typo3","https://typo3.org/security/advisory/typo3-core-sa-2020-006","https://typo3.org/security/advisory/typo3-core-sa-2021-014"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-657m-v5vm-f6rw","url":"https://osv.dev/vulnerability/GHSA-657m-v5vm-f6rw"}],"summary":"Cross-Site-Request-Forgery in Backend"}