目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1336 CNY

100%
コーヒーを一杯おごる

TYPO3 厂商漏洞列表 / CVE 中文分析 142

TYPO3 厂商相关 142 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

TYPO3 是一款基于 PHP 的开源内容管理系统，广泛用于构建企业级网站与数字平台。其历史漏洞多涉及远程代码执行、跨站脚本及越权访问，部分源于插件扩展或配置不当。尽管核心框架持续强化输入验证与权限控制，但第三方扩展的安全审计仍是关键风险点。截至最新统计，该生态已收录 118 条 CVE，提示用户需定期更新并严格审查集成组件，以维持系统整体安全性。

上位製品 TYPO3: TYPO3 TYPO3 CMS TYPO3.CMS html-sanitizer Extension "Faceted Search" ns backup extension HTML Sanitizer Extension "Mailqueue" Fluid sr feuser register extension Extension "Redirect Tabs" Extension "Address List" Extension "Site Crawler" Extension "News system" Extension "Frontend User Registration" Extension "Content Element Selector" oidc Extension "E-Mail MFA Provider" femanager extension Extension "Modules" Extension "Form to Database" (form_to_database) Extension "TYPO3 Backup Plus" Extension "femanager" Extension "powermail" cs seo extension reint downloadmanager extension
CVE IDタイトルCVSS深刻度公開日
CVE-2025-59022 TYPO3 CMS Allows Broken Access Control in Recycler Module — TYPO3 CMSCWE-862 8.1AIHighAI2026-01-13
CVE-2025-59021 TYPO3 CMS Allows Broken Access Control in Redirects Module — TYPO3 CMSCWE-862 4.6AIMediumAI2026-01-13
CVE-2025-59020 TYPO3 CMS Allows Broken Access Control in Edit Document Controller — TYPO3 CMSCWE-863 4.3AIMediumAI2026-01-13
CVE-2025-12998 Broken Authentication in extension “Modules” (modules) — Extension "Modules"CWE-287 9.1 -2025-11-12
CVE-2025-10316 Cross-Site Scripting in extension "Form to Database" (form_to_database) — Extension "Form to Database" (form_to_database)CWE-79 6.1AIMediumAI2025-09-16
CVE-2025-59019 Information Disclosure via CSV Download — TYPO3 CMSCWE-200 6.5AIMediumAI2025-09-09
CVE-2025-59018 Information Disclosure in Workspaces Module — TYPO3 CMSCWE-200 6.5AIMediumAI2025-09-09
CVE-2025-59017 Broken Access Control in Backend AJAX Routes — TYPO3 CMSCWE-862 8.8AIHighAI2025-09-09
CVE-2025-59016 Information Disclosure via File Abstraction Layer — TYPO3 CMSCWE-209 4.3AIMediumAI2025-09-09
CVE-2025-59015 Insufficient Entropy in Password Generation — TYPO3 CMSCWE-331 9.8AICriticalAI2025-09-09
CVE-2025-59014 Denial of Service in TYPO3 Bookmark Toolbar — TYPO3 CMSCWE-248 4.9AIMediumAI2025-09-09
CVE-2025-59013 Open Redirect in TYPO3 CMS — TYPO3 CMSCWE-601 6.1AIMediumAI2025-09-09
CVE-2025-9573 Command Injection in extension "TYPO3 Backup Plus" (ns_backup) — Extension "TYPO3 Backup Plus"CWE-78 9.8AICriticalAI2025-09-02
CVE-2025-7900 Insecure Direct Object Reference in extension "femanager" (femanager) — Extension "femanager"CWE-639 4.3 -2025-07-22
CVE-2025-7899 Insecure Direct Object Reference in extension "powermail" (powermail) — Extension "powermail"CWE-639 7.5 -2025-07-22
CVE-2025-48200 TYPO3 安全漏洞 — sr feuser register extensionCWE-502 10.0 Critical2025-05-21
CVE-2025-48205 TYPO3 安全漏洞 — sr feuser register extensionCWE-425 8.6 High2025-05-21
CVE-2025-48201 TYPO3 安全漏洞 — ns backup extensionCWE-425 8.6 High2025-05-21
CVE-2025-48206 TYPO3 安全漏洞 — ns backup extensionCWE-79 6.1AIMediumAI2025-05-21
CVE-2025-48202 TYPO3 femanager 安全漏洞 — femanager extensionCWE-425 5.3 Medium2025-05-21
CVE-2025-48207 TYPO3 安全漏洞 — reint downloadmanager extensionCWE-425 8.6 High2025-05-21
CVE-2025-48203 TYPO3 cs_seo 安全漏洞 — cs seo extensionCWE-79 6.4 Medium2025-05-21
CVE-2025-48204 TYPO3 安全漏洞 — ns backup extensionCWE-78 6.8 Medium2025-05-21
CVE-2025-47941 TYPO3 Has Broken Authentication in Backend MFA — typo3CWE-288 7.2 High2025-05-20
CVE-2025-47940 TYPO3 CMS Vulnerable to Privilege Escalation to System Maintainer — typo3CWE-283 7.2 High2025-05-20
CVE-2025-47939 TYPO3 CMS Vulnerable to Unrestricted File Upload in File Abstraction Layer — typo3CWE-351 5.4 Medium2025-05-20
CVE-2025-47938 TYPO3 Vulnerable to Unverified Password Change for Backend Users — typo3CWE-620 3.8 Low2025-05-20
CVE-2025-47937 TYPO3 Vulnerable to Information Disclosure via DBAL Restriction Handling — typo3CWE-863 3.7 Low2025-05-20
CVE-2025-47936 TYPO3 Vulnerable to Server Side Request Forgery via Webhooks — typo3CWE-918 3.3 Low2025-05-20
CVE-2025-24856 TYPO3 安全漏洞 — oidcCWE-348 4.2 Medium2025-03-16

本页汇总了 TYPO3 厂商截至目前公开的全部 142 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。