CVE 5.3 MEDIUM

Open Redirect in TYPO3 CMS_CVE-2025-59013

5.3 / 10
MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N

Description

An open‑redirect vulnerability in GeneralUtility::sanitizeLocalUrl of TYPO3 CMS 9.0.0–9.5.54, 10.0.0–10.4.53, 11.0.0–11.5.47, 12.0.0–12.4.36, and 13.0.0–13.4.17 allows an attacker to redirect users to arbitrary external sites, enabling phishing attacks by supplying a manipulated, sanitized URL.

Basic Information

ID CVE-2025-59013
Source TYPO3
Published Sep 9, 2025 at 09:00

Affected Product

Vendor TYPO3
Product TYPO3 CMS
Version 9.0.0
Affected Versions TYPO3 TYPO3 CMS 9.0.0
TYPO3 TYPO3 CMS 10.0.0
TYPO3 TYPO3 CMS 11.0.0
TYPO3 TYPO3 CMS 12.0.0
TYPO3 TYPO3 CMS 13.0.0

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.