Denial-of-Service Vulnerability in TYPO3 CMS Affects Administrator Users
CVE-2025-59014

5.1MEDIUM

Key Information:

Vendor

Typo3

Status
Typo3 Cms
Vendor
CVE Published:
9 September 2025

What is CVE-2025-59014?

An unhandled exception in the Bookmark Toolbar of TYPO3 CMS allows backend users with administrator privileges to create a denial-of-service condition. By saving specially crafted data within the bookmark toolbar, affected users can disrupt access to the backend interface, potentially leading to interruptions in service and administrative efficiency. This vulnerability impacts TYPO3 versions 11.0.0 through 11.5.47, 12.0.0 through 12.4.36, and 13.0.0 through 13.4.17.

Affected Version(s)

TYPO3 CMS 11.0.0 < 11.5.48

TYPO3 CMS 12.0.0 < 12.4.37

TYPO3 CMS 13.0.0 < 13.4.18

References

https://typo3.org/security/advisory/typo3-core-sa-2025-018
vendor-advisory

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Jakub Świes
Oliver Hader
.