CVE-2025-59020— TYPO3 CMS Allows Broken Access Control in Edit Document Controller
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-59020
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
TYPO3 CMS Allows Broken Access Control in Edit Document Controller
Source: NVD (National Vulnerability Database)
Vulnerability Description
By exploiting the defVals parameter, attackers could bypass field‑level access checks during record creation in the TYPO3 backend. This gave them the ability to insert arbitrary data into prohibited exclude fields of a database table for which the user already has write permission for a reduced set of fields. This issue affects TYPO3 CMS versions 10.0.0-10.4.54, 11.0.0-11.5.48, 12.0.0-12.4.40, 13.0.0-13.4.22 and 14.0.0-14.0.1.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
授权机制不正确
Source: NVD (National Vulnerability Database)
Vulnerability Title
TYPO3 CMS 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
TYPO3 CMS是TYPO3开源的一个内容管理系统。 TYPO3 CMS存在安全漏洞，该漏洞源于利用defVals参数可绕过字段级访问检查，可能导致向数据库表禁止的排除字段插入任意数据。以下版本受到影响：10.0.0版本至10.4.54版本、11.0.0版本至11.5.48版本、12.0.0版本至12.4.40版本、13.0.0版本至13.4.22版本和14.0.0版本至14.0.1版本。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2025-59020
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-59020
请登录查看更多情报信息。
Same Patch Batch · TYPO3 · 2026-01-13 · 4 CVEs total
| CVE-2026-0859 | TYPO3 CMS Allows Insecure Deserialization via Mailer File Spool | |
| CVE-2025-59021 | TYPO3 CMS Allows Broken Access Control in Redirects Module | |
| CVE-2025-59022 | TYPO3 CMS Allows Broken Access Control in Recycler Module |
IV. Related Vulnerabilities
Same product: TYPO3 CMS
- CVE-2026-6553
TYPO3 CMS Stores Cleartext Password in User Settings Module - CVE-2026-0859
TYPO3 CMS Allows Insecure Deserialization via Mailer File Sp - CVE-2025-59022
TYPO3 CMS Allows Broken Access Control in Recycler Module - CVE-2025-59021
TYPO3 CMS Allows Broken Access Control in Redirects Module - CVE-2025-59019
Information Disclosure via CSV Download
Same vendor: TYPO3
- CVE-2026-6553
TYPO3 CMS Stores Cleartext Password in User Settings Module - CVE-2026-4208
Authentication Bypass in extension "E-Mail MFA Provider" (mf - CVE-2026-4202
Broken Access Control in extension "Redirect Tab" - CVE-2026-1323
Insecure Deserialization in extension "Mailqueue" (mailqueue - CVE-2026-0895
Insecure Deserialization in extension "Mailqueue" (mailqueue
Same weakness: CWE-863
- CVE-2026-42571
Privilege Escalation Attack affecting Pelican Web UI - CVE-2025-15633
HCL BigFix WebUI is affected by an improper authorization vu - CVE-2026-42296
Argo Workflows has incomplete fix for CVE-2026-31892: hostNe - CVE-2025-66170
Apache CloudStack: Any user can list backups that they shoul - CVE-2026-41903
FreeScout IDOR Vulnerability: PERM_EDIT_USERS allows modifyi
V. Comments for CVE-2025-59020
No comments yet