GHSA-3V8V-4WG6-R7QH TYPO3 CMS: Destructive Actions on File Mount Folders

🗓️ 12 Jun 2026 20:07:52Reported by GoogleType

osv🔗 osv.dev👁 2 Views

Problem Non-privileged backend users with file mount access were able to perform write operations (move, delete, rename) on folders representing the root of an active file mount due to missing authorization restrictions. Solution Update to TYPO3 v...

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2026-47343	10 Jun 202603:07	–	circl
CVE	CVE-2026-47343	9 Jun 202610:49	–	cve
Cvelist	CVE-2026-47343 TYPO3 CMS - Destructive Actions on File Mount Folders	9 Jun 202610:49	–	cvelist
EUVD	EUVD-2026-35392	12 Jun 202620:07	–	euvd
Friends Of PHP	TYPO3-CORE-SA-2026-007: Broken Access Control in File Abstraction Layer	9 Jun 202608:55	–	friendsofphp
Github Security Blog	TYPO3 CMS: Destructive Actions on File Mount Folders	12 Jun 202620:07	–	github
NVD	CVE-2026-47343	9 Jun 202611:16	–	nvd
Positive Technologies	PT-2026-47738	9 Jun 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-47343	10 Jun 202614:59	–	redhatcve
Vulnrichment	CVE-2026-47343 TYPO3 CMS - Destructive Actions on File Mount Folders	9 Jun 202610:49	–	vulnrichment

Source	Link
github	www.github.com/TYPO3/typo3/security/advisories/GHSA-3v8v-4wg6-r7qh
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-47343
github	www.github.com/TYPO3/typo3/commit/504e72470ff72aaf5d2256878bf473747f389798
github	www.github.com/TYPO3/typo3/commit/ac4125aef8b9b94528a7f74db2444db57b05a87b
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2026-47343.yaml
github	www.github.com/TYPO3/typo3
typo3	www.typo3.org/security/advisory/typo3-core-sa-2026-007

12 Jun 2026 20:15Current

5.3Medium risk

Vulners AI Score5.3

CVSS 47.2

EPSS0.00036