{"action":"Upgrade typo3/cms-core to 8.7.57 or later.","affected":[{"fixed":"8.7.57","introduced":"8.0.0"},{"fixed":"9.5.46","introduced":"9.0.0"},{"fixed":"10.4.43","introduced":"10.0.0"},{"fixed":"11.5.35","introduced":"11.0.0"},{"fixed":"12.4.11","introduced":"12.0.0"},{"fixed":"13.0.1","introduced":"13.0.0"}],"component":"typo3/cms-core","cve_ids":["CVE-2024-25120"],"ecosystem":"Packagist","epss":0.00548,"exploited":false,"fixed_versions":["8.7.57","9.5.46","10.4.43","11.5.35","12.4.11","13.0.1"],"ghsa_id":"GHSA-wf85-8hx9-gj7c","id":"tcs_01M5KFA0VNGAQXH52SPN6PSVCD","modified_at":"2026-09-10T03:50:00.392956614Z","published_at":"2024-02-13T17:24:59Z","references":["https://osv.dev/vulnerability/GHSA-wf85-8hx9-gj7c","https://github.com/TYPO3/typo3/security/advisories/GHSA-wf85-8hx9-gj7c","https://nvd.nist.gov/vuln/detail/CVE-2024-25120","https://github.com/TYPO3/typo3/commit/2de87ff113ba24333ab7cbb8078588743f8958d6","https://github.com/TYPO3/typo3/commit/33f4d279b82bca0a509227a17065244c6156e68f","https://github.com/TYPO3/typo3/commit/ae0dfc4c058a90c10eedb3f49cfaf33164d21cdd","https://docs.typo3.org/m/typo3/reference-typoscript/main/en-us/Functions/Typolink.html#resource-references","https://github.com/TYPO3/typo3","https://typo3.org/security/advisory/typo3-core-sa-2024-005"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-wf85-8hx9-gj7c","url":"https://osv.dev/vulnerability/GHSA-wf85-8hx9-gj7c"}],"summary":"TYPO3 vulnerable to Improper Access Control of Resources Referenced by t3:// URI Scheme"}