{"id":"CVE-2024-25120","aliases":["GHSA-wf85-8hx9-gj7c"],"url":"https://o3.security/vulnerability/CVE-2024-25120","summary":"Improper Access Control of Resources Referenced by t3:// URI Scheme in TYPO3","details":"### Problem\nThe TYPO3-specific [`t3://` URI scheme](https://docs.typo3.org/m/typo3/reference-typoscript/main/en-us/Functions/Typolink.html#resource-references) could be used to access resources outside of the users' permission scope. This encompassed files, folders, pages, and records (although only if a valid link-handling configuration was provided). Exploiting this vulnerability requires a valid backend user account.\n\n### Solution\nUpdate to TYPO3 versions 8.7.57 ELTS, 9.5.46 ELTS, 10.4.43 ELTS, 11.5.35 LTS, 12.4.11 LTS, 13.0.1 that fix the problem described.\n\n### Credits\nThanks to Richie Lee who reported this issue and to TYPO3 core & security team member Benjamin Franzke who fixed the issue.\n\n### References\n* [TYPO3-CORE-SA-2024-005](https://typo3.org/security/advisory/typo3-core-sa-2024-005)\n","published":"2024-02-13T22:15:13.294Z","modified":"2026-10-28T02:31:02.258363989Z","cvss":{"score":4.3,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"},"epss":{"score":0.00548,"percentile":0.43452,"asOf":"2026-08-23"},"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"Packagist","name":"typo3/cms-core","fixedVersion":"8.7.57"},{"ecosystem":"Packagist","name":"typo3/cms-core","fixedVersion":"9.5.46"},{"ecosystem":"Packagist","name":"typo3/cms-core","fixedVersion":"10.4.43"},{"ecosystem":"Packagist","name":"typo3/cms-core","fixedVersion":"11.5.35"},{"ecosystem":"Packagist","name":"typo3/cms-core","fixedVersion":"12.4.11"},{"ecosystem":"Packagist","name":"typo3/cms-core","fixedVersion":"13.0.1"}],"fix":{"url":"https://github.com/TYPO3/typo3/commit/2de87ff113ba24333ab7cbb8078588743f8958d6","label":"TYPO3/typo3@2de87ff"},"references":[{"type":"WEB","url":"https://docs.typo3.org/m/typo3/reference-typoscript/main/en-us/Functions/Typolink.html#resource-references"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/25xxx/CVE-2024-25120.json"},{"type":"ADVISORY","url":"https://github.com/TYPO3/typo3/security/advisories/GHSA-wf85-8hx9-gj7c"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-25120"},{"type":"ADVISORY","url":"https://typo3.org/security/advisory/typo3-core-sa-2024-005"},{"type":"WEB","url":"https://github.com/TYPO3/typo3/commit/2de87ff113ba24333ab7cbb8078588743f8958d6"},{"type":"WEB","url":"https://github.com/TYPO3/typo3/commit/33f4d279b82bca0a509227a17065244c6156e68f"},{"type":"WEB","url":"https://github.com/TYPO3/typo3/commit/ae0dfc4c058a90c10eedb3f49cfaf33164d21cdd"},{"type":"PACKAGE","url":"https://github.com/TYPO3/typo3"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-10-28T02:31:02.258363989Z"}}