CVE-2025-59014

An uncaught exception in the Bookmark Toolbar of TYPO3 CMS versions 11.0.0–11.5.47, 12.0.0–12.4.36, and 13.0.0–13.4.17 lets administrator‑level backend users trigger a denial‑of‑service condition in the backend user interface by saving manipulated data in the bookmark toolbar.

Score

CVSS 4.0 5.1 Medium

Status

Analyzed - f4fb688c-4412-4426-b4b8-421ecf27b14a

Published

2025-09-09

Last modified

2025-09-09

Weaknesses

CWE-248

Affected products

• Typo3 (Typo3)
• Typo3 Cms (Typo3)

References

• https://typo3.org/security/advisory/typo3-core-sa-2025-018