Lucene search
K

5 matches found

RedhatCVE
RedhatCVE
added 2026/01/14 12:26 p.m.3 views

CVE-2025-59022

Backend users who had access to the recycler module could delete arbitrary data from any database table defined in the TCA - regardless of whether they had permission to that particular table. This allowed attackers to purge and destroy critical site data, effectively rendering the website...

8.1CVSS6.8AI score0.0038EPSS
Exploits0References1
OSV
OSV
added 2026/01/13 8:37 p.m.3 views

GHSA-P52W-7RHW-9M67 TYPO3 CMS Allows Broken Access Control in Recycler Module

Problem Backend users who had access to the recycler module could delete arbitrary data from any database table defined in the TCA - regardless of whether they had permission to that particular table. This allowed attackers to purge and destroy critical site data, effectively rendering the websit...

7.1CVSS6.7AI score0.0038EPSS
Exploits0References7
Github Security Blog
Github Security Blog
added 2026/01/13 8:37 p.m.9 views

TYPO3 CMS Allows Broken Access Control in Recycler Module

Problem Backend users who had access to the recycler module could delete arbitrary data from any database table defined in the TCA - regardless of whether they had permission to that particular table. This allowed attackers to purge and destroy critical site data, effectively rendering the websit...

8.1CVSS6.8AI score0.0038EPSS
Exploits0References7Affected Software1
CNNVD
CNNVD
added 2026/01/13 12:0 a.m.3 views

TYPO3 CMS 安全漏洞

TYPO3 CMS is a content management system from TYPO3 open source. A security vulnerability exists in TYPO3 CMS that originates from a back-end user with Recycle Bin Module access that can delete arbitrary data from any TCA-defined database table, potentially resulting in the erasure and corruption...

8.1CVSS5.9AI score0.0038EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2026/01/13 12:0 a.m.8 views

PT-2026-2476

Backend users who had access to the recycler module could delete arbitrary data from any database table defined in the TCA - regardless of whether they had permission to that particular table. This allowed attackers to purge and destroy critical site data, effectively rendering the website...

7.1CVSS6.8AI score0.0038EPSS
Exploits0References8
Rows per page
Query Builder