CVE-2025-47940: TYPO3 Privilege Escalation Vulnerability
Summary
CVE-2025-47940: TYPO3 Allows Privilege Escalation to System Maintainer. Affects typo3/cms-core across 4 version ranges.
>= 10.4.0, < 10.4.50
>= 11.0.0, < 11.5.44
>= 12.0.0, < 12.4.31
>= 13.0.0, < 13.4.12
Fixed in 4 releases; the minimum fixed version depends on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
TYPO3 is an open-source content management system (CMS) widely used for building and managing websites. It offers a robust framework for developers and users, enabling them to create dynamic web applications with ease. However, like any software, TYPO3 is susceptible to vulnerabilities that can compromise its security. This particular vulnerability allows administrator-level backend users, who do not possess system maintainer privileges, to escalate their access rights and gain unauthorized system maintainer access.
Vulnerability Detail
The vulnerability arises from a flaw in the TYPO3 backend user permissions system. Specifically, it allows users with administrative privileges to exploit their access and elevate their permissions to that of a system maintainer. This could lead to unauthorized access to sensitive system settings and data, potentially compromising the integrity and confidentiality of the entire TYPO3 installation. The vulnerability requires a valid administrator account to exploit, making it critical for organizations using TYPO3 to address this issue promptly.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
>= 10.4.0, < 10.4.5010.4.50composer require typo3/cms-core:10.4.50 -
>= 11.0.0, < 11.5.4411.5.44composer require typo3/cms-core:11.5.44 -
>= 12.0.0, < 12.4.3112.4.31composer require typo3/cms-core:12.4.31 -
>= 13.0.0, < 13.4.1213.4.12composer require typo3/cms-core:13.4.12
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to update to the patched versions as soon as possible.
Conclusion
In summary, CVE-2025-47940 is a significant vulnerability in TYPO3 that allows privilege escalation for administrator-level users. It is crucial for users to update their TYPO3 installations to the latest patched versions to mitigate the risk associated with this vulnerability. Utilizing tools like Vulert can help monitor and alert for such vulnerabilities in real-time.
See every vulnerability recorded for typo3/cms-core →
FAQ
CVE-2025-47940 is a vulnerability in TYPO3 that allows administrator-level users to escalate their privileges to that of a system maintainer.
You can use Vulert, which monitors open-source vulnerabilities in real-time. You can check your application against this vulnerability using the Vulert playground at Vulert Scanner without any signup.
If exploited, this vulnerability can lead to unauthorized access to sensitive system settings and data, compromising the security of the TYPO3 installation.
You can update TYPO3 using Composer with the command: 'composer require typo3/cms-core:^10.4.50' (or the appropriate version).
Yes, the CVSS score for this vulnerability is 7.2, indicating a high severity level.
References
Related vulnerabilities
Recent vulnerabilities recorded for typo3/cms-core.
