UpHeron
All vulnerabilities

Servers and applications

CVE-2025-59016

Error messages containing sensitive information in the File Abstraction Layer in TYPO3 CMS versions 9.0.0-9.5.54, 10.0.0-10.4.53, 11.0.0-11.5.47, 12.0.0-12.4.36, and 13.0.0-13.4.17 allow backend users to disclose full file paths via failed low-level file-system operations.

Severity
Medium 5.3
Published
9 Sept 2025
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
9.5.55
Sources
NVD

Affected software

SoftwareAffected versions
TYPO3Servers and applications · cpe:a:typo3:typo3
  • From 9.0.0 before 9.5.55
  • From 10.0.0 up to 10.4.54
  • From 11.0.0 up to 11.5.48
  • From 12.0.0 up to 12.4.37
  • From 13.0.0 up to 13.4.18

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2025-59016
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-59016