TYPO3 up to 12.4.30/13.4.11 authentication bypass

Summaryinfo

A vulnerability was found in TYPO3 up to 12.4.30/13.4.11. It has been classified as critical. Affected is an unknown function. The manipulation leads to authentication bypass. This vulnerability is documented as CVE-2025-47941. The attack can be initiated remotely. There is not any exploit available. Upgrading the affected component is recommended.

Detailsinfo

A vulnerability was found in TYPO3 up to 12.4.30/13.4.11. It has been rated as critical. This issue affects an unknown code block. The manipulation with an unknown input leads to a authentication bypass vulnerability. Using CWE to declare the problem leads to CWE-288. A product requires authentication, but the product has an alternate path or channel that does not require authentication. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

TYPO3 is an open source, PHP based web content management system. In versions on the 12.x branch prior to 12.4.31 LTS and the 13.x branch prior to 13.4.2 LTS, the multifactor authentication (MFA) dialog presented during backend login can be bypassed due to insufficient enforcement of access restrictions on all backend routes. Successful exploitation requires valid backend user credentials, as MFA can only be bypassed after successful authentication. Users should update to TYPO3 version 12.4.31 LTS or 13.4.12 LTS to fix the problem.

It is possible to read the advisory at github.com. The identification of this vulnerability is CVE-2025-47941 since 05/14/2025. The exploitation is known to be easy. The attack may be initiated remotely. The exploitation needs additional levels of successful authentication. The technical details are unknown and an exploit is not publicly available.

The vulnerability scanner Nessus provides a plugin with the ID 236964 (TYPO3 12.0.0 < 12.4.31 / 13.0.0 < 13.4.12 (TYPO3-CORE-SA-2025-015)), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 12.4.31 or 13.4.12 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at Tenable (236964). Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• Content Management System

Name

• TYPO3

Version

• 12.4.0
• 12.4.1
• 12.4.2
• 12.4.3
• 12.4.4
• 12.4.5
• 12.4.6
• 12.4.7
• 12.4.8
• 12.4.9
• 12.4.10
• 12.4.11
• 12.4.12
• 12.4.13
• 12.4.14
• 12.4.15
• 12.4.16
• 12.4.17
• 12.4.18
• 12.4.19
• 12.4.20
• 12.4.21
• 12.4.22
• 12.4.23
• 12.4.24
• 12.4.25
• 12.4.26
• 12.4.27
• 12.4.28
• 12.4.29
• 12.4.30
• 13.4.0
• 13.4.1
• 13.4.2
• 13.4.3
• 13.4.4
• 13.4.5
• 13.4.6
• 13.4.7
• 13.4.8
• 13.4.9
• 13.4.10
• 13.4.11

License

• open-source

Website

• Product: https://typo3.org/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion