{"action":"Upgrade typo3/cms-core to 12.4.37 or later.","affected":[{"fixed":"12.4.37","introduced":"9.0.0"},{"fixed":"12.4.37","introduced":"10.0.0"},{"fixed":"12.4.37","introduced":"11.0.0"},{"fixed":"12.4.37","introduced":"12.0.0"},{"fixed":"13.4.18","introduced":"13.0.0"}],"component":"typo3/cms-core","cve_ids":["CVE-2025-59013"],"ecosystem":"Packagist","epss":0.00184,"exploited":false,"fixed_versions":["12.4.37","13.4.18"],"ghsa_id":"GHSA-72jf-5fg5-3cw3","id":"tcs_01M5KEXK00CH17TYB883WBEVWC","modified_at":"2025-09-09T20:44:49.040678Z","published_at":"2025-09-09T09:31:12Z","references":["https://osv.dev/vulnerability/GHSA-72jf-5fg5-3cw3","https://nvd.nist.gov/vuln/detail/CVE-2025-59013","https://github.com/TYPO3-CMS/core/commit/862b9da870815132c31119cd85bc454a5010793c","https://github.com/TYPO3-CMS/core","https://typo3.org/security/advisory/typo3-core-sa-2025-017"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-72jf-5fg5-3cw3","url":"https://osv.dev/vulnerability/GHSA-72jf-5fg5-3cw3"}],"summary":"TYPO3 CMS has an open‑redirect vulnerability"}