26 matches found
CVE-2025-48201
The CVE-2025-48201 entry concerns the TYPO3 ns_backup (Backup Plus) extension up to version 13.0.0, which exposes a Predictable Resource Location. The vulnerability allows an unauthenticated remote user to download created backups and configuration files, due to predictable resource paths. Affect...
8.6CVSS8.6AI score0.00368EPSS
SaveExploits0References1
CVE-2025-48206: Improper Neutralization of Input During Web Page Generation
The nsbackup extension through 13.0.0 for TYPO3 allows XSS...
6.1CVSS5.8AI score0.00242EPSS
SaveExploits0References1
CVE-2025-48204: Improper Neutralization of Special Elements used in an OS Command
The nsbackup extension through 13.0.0 for TYPO3 allows command injection...
6.8CVSS6.1AI score0.00769EPSS
SaveExploits0References1
CVE-2025-48201: Direct Request
The nsbackup extension through 13.0.0 for TYPO3 has a Predictable Resource Location...
8.6CVSS7.7AI score0.00368EPSS
SaveExploits0References1
20