5.3

CVSS Score

4.0

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-47351

CVE-2026-47351: TYPO3 CMS - Broken Access Control in Clipboard

Backend users were able to insert arbitrary records and files into the TYPO3 clipboard without proper read permission checks, which allowed users to gather information about records and files they were not authorized to view. This issue affects TYPO3 CMS versions 10.4.0-13.4.30 and 14.0.0-14.3.2.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-47351

CVE-2026-47351:

5.3

CVSS Score

4.0

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

SSVC / BOD 26-04 ↗

Exploitation NoneAutomatable NoTech Impact Partial

Select your environment

→SSVCDeferfix on upgrade

Runtime reachability resolves your actual outcome.Book a demo

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
typo3/cms-core	composer	< 10.4.57	10.4.57
typo3/cms-core	composer	>= 11.0.0, < 11.5.51	11.5.51
typo3/cms-core	composer	>= 12.0.0, < 12.4.46	12.4.46
typo3/cms-core	composer	>= 13.0.0, < 13.4.31	13.4.31
typo3/cms-core	composer	>= 14.0.0, < 14.3.3	14.3.3
typo3/cms-backend	composer	< 10.4.57	10.4.57
typo3/cms-backend	composer	>= 11.0.0, < 11.5.51	11.5.51
typo3/cms-backend	composer	>= 12.0.0, < 12.4.46	12.4.46
typo3/cms-backend	composer	>= 13.0.0, < 13.4.31	13.4.31
typo3/cms-backend	composer	>= 14.0.0, < 14.3.3	14.3.3

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability described is a broken access control issue in the TYPO3 CMS clipboard functionality. The provided patches in commits 2740707563343d78184c0b7c6303a7484553d7f3 and 932fbb9fcea25094e8bcc0f0ec5aab56b1d92451 modify the cleanCurrent function in typo3/sysext/backend/Classes/Clipboard/Clipboard.php. The analysis of the code changes reveals that the cleanCurrent function was not performing proper permission checks when validating clipboard items. The original code only checked for the existence of a record or file, which could be abused by a low-privileged backend user to check for the existence of sensitive information. The patch introduces checks to ensure the user has read permissions for the records and files in the clipboard. Therefore, the TYPO3\CMS\Backend\Clipboard\Clipboard::cleanCurrent function is identified as the vulnerable function.

Vulnerable functions

TYPO3\CMS\Backend\Clipboard\Clipboard::cleanCurrent

typo3/sysext/backend/Classes/Clipboard/Clipboard.php

The vulnerability lies in the `cleanCurrent` function, which is responsible for validating items in the clipboard. Before the patch, this function only checked for the existence of records or files, but not whether the current backend user had permission to read them. This allowed a user to add an item to the clipboard and, by observing whether it was removed by `cleanCurrent`, infer the existence of a file or record they were not authorized to see. The patch adds explicit permission checks for both files and database records.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.