-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stemmed from missing access control checks in t3:// URI handling. The commit diff shows critical security checks were added to these functions: page access permissions, file/folder read permissions, filename validation, and storage type checks. These functions previously lacked these validations, allowing unauthorized resource access. The high confidence comes from direct correlation between patched code locations and the vulnerability description.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| typo3/cms-core | composer | >= 8.0.0, <= 8.7.56 | 8.7.57 |
| typo3/cms-core | composer | >= 9.0.0, <= 9.5.45 | 9.5.46 |
| typo3/cms-core | composer | >= 10.0.0, <= 10.4.42 | 10.4.43 |
| typo3/cms-core | composer | >= 11.0.0, <= 11.5.34 | 11.5.35 |
| typo3/cms-core | composer | >= 12.0.0, <= 12.4.10 | 12.4.11 |
| typo3/cms-core | composer | = 13.0.0 | 13.0.1 |