5.1
/ 10
MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Description
An uncaught exception in the Bookmark Toolbar of TYPO3 CMS versions 11.0.0–11.5.47, 12.0.0–12.4.36, and 13.0.0–13.4.17 lets administrator‑level backend users trigger a denial‑of‑service condition in the backend user interface by saving manipulated data in the bookmark toolbar.
Basic Information
ID
CVE-2025-59014
Source
TYPO3
Published
Sep 9, 2025 at 09:00
Affected Product
Vendor
TYPO3
Product
TYPO3 CMS
Version
11.0.0
Affected Versions
TYPO3 TYPO3 CMS 11.0.0
TYPO3 TYPO3 CMS 12.0.0
TYPO3 TYPO3 CMS 13.0.0
TYPO3 TYPO3 CMS 12.0.0
TYPO3 TYPO3 CMS 13.0.0