CVE-2025-59019
Information Disclosure via CSV Download
Résumé
Information Disclosure via CSV Download
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Missing authorization checks in the CSV download feature of TYPO3 CMS versions 11.0.0‑11.5.47, 12.0.0‑12.4.36, and 13.0.0‑13.4.17 allow backend users to disclose information from arbitrary database tables stored within the users' web mounts without having access to them.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory typo3.org
- package github.com
- web packagist.org