CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
CVE details

CVE-2025-59019

Missing authorization checks in the CSV download feature of TYPO3 CMS versions 11.0.0‑11.5.47, 12.0.0‑12.4.36, and 13.0.0‑13.4.17 allow backend users to disclose information from arbitrary database tables stored within the users' web mounts without having access to them.

Score
5.3 medium
Published
2025-09-09
Links
NVD · cve.org · Report wrong data

Matched ports (5)

PortPackageVersionStatusMaintainer
www/typo3-11typo3-11-php8211.5.40_1unaddressedfreebsd-ports@charlieroot.de
www/typo3-11typo3-11-php8311.5.40_1unaddressedfreebsd-ports@charlieroot.de
www/typo3-11typo3-11-php8411.5.40_1unaddressedfreebsd-ports@charlieroot.de
www/typo3-11typo3-11-php8511.5.40_1unaddressedfreebsd-ports@charlieroot.de
www/typo3-11typo3-11-php8611.5.40_1unaddressedfreebsd-ports@charlieroot.de

Template for a VuXML entry

Range taken from the CVE record, check it before committing. make newentry in security/vuxml creates the vid.

  <vuln vid="FIXME (make newentry)">
    <topic>FIXME -- FIXME</topic>
    <affects>
      <package>
	<name>typo3-11-php82</name>
	<range><lt>11.5.48</lt></range>
      </package>
      <package>
	<name>typo3-11-php83</name>
	<range><lt>11.5.48</lt></range>
      </package>
      <package>
	<name>typo3-11-php84</name>
	<range><lt>11.5.48</lt></range>
      </package>
      <package>
	<name>typo3-11-php85</name>
	<range><lt>11.5.48</lt></range>
      </package>
      <package>
	<name>typo3-11-php86</name>
	<range><lt>11.5.48</lt></range>
      </package>
    </affects>
    <description>
      <body xmlns="http://www.w3.org/1999/xhtml">
	<p>Missing authorization checks in the CSV download feature of TYPO3 CMS
	versions 11.0.0‑11.5.47, 12.0.0‑12.4.36, and 13.0.0‑13.4.17
	allow backend users to disclose information from arbitrary database
	tables stored within the users' web mounts without having access to
	them.</p>
      </body>
    </description>
    <references>
      <cvename>CVE-2025-59019</cvename>
      <url>https://nvd.nist.gov/vuln/detail/CVE-2025-59019</url>
    </references>
    <dates>
      <discovery>2025-09-09</discovery>
      <entry>2026-10-26</entry>
    </dates>
  </vuln>