CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
CVE details

CVE-2025-59017

Missing authorization checks in the Backend Routing of TYPO3 CMS versions 9.0.0‑9.5.54, 10.0.0‑10.4.53, 11.0.0‑11.5.47, 12.0.0‑12.4.36, and 13.0.0‑13.4.17 allow backend users to directly invoke AJAX backend routes without having access to the corresponding backend modules.

Score
5.3 medium
Published
2025-09-09
Links
NVD · cve.org · Report wrong data

Matched ports (5)

PortPackageVersionStatusMaintainer
www/typo3-11typo3-11-php8211.5.40_1unaddressedfreebsd-ports@charlieroot.de
www/typo3-11typo3-11-php8311.5.40_1unaddressedfreebsd-ports@charlieroot.de
www/typo3-11typo3-11-php8411.5.40_1unaddressedfreebsd-ports@charlieroot.de
www/typo3-11typo3-11-php8511.5.40_1unaddressedfreebsd-ports@charlieroot.de
www/typo3-11typo3-11-php8611.5.40_1unaddressedfreebsd-ports@charlieroot.de

Template for a VuXML entry

Range taken from the CVE record, check it before committing. make newentry in security/vuxml creates the vid.

  <vuln vid="FIXME (make newentry)">
    <topic>FIXME -- FIXME</topic>
    <affects>
      <package>
	<name>typo3-11-php82</name>
	<range><lt>9.5.55</lt></range>
      </package>
      <package>
	<name>typo3-11-php83</name>
	<range><lt>9.5.55</lt></range>
      </package>
      <package>
	<name>typo3-11-php84</name>
	<range><lt>9.5.55</lt></range>
      </package>
      <package>
	<name>typo3-11-php85</name>
	<range><lt>9.5.55</lt></range>
      </package>
      <package>
	<name>typo3-11-php86</name>
	<range><lt>9.5.55</lt></range>
      </package>
    </affects>
    <description>
      <body xmlns="http://www.w3.org/1999/xhtml">
	<p>Missing authorization checks in the Backend Routing of TYPO3 CMS
	versions 9.0.0‑9.5.54, 10.0.0‑10.4.53, 11.0.0‑11.5.47,
	12.0.0‑12.4.36, and 13.0.0‑13.4.17 allow backend users to directly
	invoke AJAX backend routes without having access to the corresponding
	backend modules.</p>
      </body>
    </description>
    <references>
      <cvename>CVE-2025-59017</cvename>
      <url>https://nvd.nist.gov/vuln/detail/CVE-2025-59017</url>
    </references>
    <dates>
      <discovery>2025-09-09</discovery>
      <entry>2026-10-26</entry>
    </dates>
  </vuln>