{"action":"Upgrade typo3/cms-backend to 12.4.37 or later.","affected":[{"fixed":"12.4.37","introduced":"12.0.0"},{"fixed":"13.4.18","introduced":"13.0.0"}],"component":"typo3/cms-backend","cve_ids":["CVE-2025-59019"],"ecosystem":"Packagist","epss":0.00235,"exploited":false,"fixed_versions":["12.4.37","13.4.18"],"ghsa_id":"GHSA-j8vm-7q52-2m2m","id":"tcs_01M5KF4DKNGG7G2533AK1HKY13","modified_at":"2025-09-09T20:44:49.487566Z","published_at":"2025-09-09T09:31:13Z","references":["https://osv.dev/vulnerability/GHSA-j8vm-7q52-2m2m","https://nvd.nist.gov/vuln/detail/CVE-2025-59019","https://github.com/TYPO3-CMS/backend/commit/c983415f062c32f8edbb78544a0ff3219bc35d17","https://typo3.org/security/advisory/typo3-core-sa-2025-023"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-j8vm-7q52-2m2m","url":"https://osv.dev/vulnerability/GHSA-j8vm-7q52-2m2m"},{"source":"nvd","source_id":"CVE-2025-59019","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-59019"}],"summary":"TYPO3 CSV download feature information disclosure"}