{"id":"CVE-2024-47780","aliases":["GHSA-rf5m-h8q9-9w6q"],"url":"https://o3.security/vulnerability/CVE-2024-47780","summary":"Information Disclosure in TYPO3 Page Tree","details":"### Problem\nBackend users could see items in the backend page tree without having access if the mounts pointed to pages restricted for their user/group, or if no mounts were configured but the pages allowed access to \"everybody.\" However, affected users could not manipulate these pages.\n\n### Solution\nUpdate to TYPO3 versions 10.4.46 ELTS, 11.5.40 LTS, 12.4.21 LTS, 13.3.1 that fix the problem described.\n\n### Credits\nThanks to Peter Schuler who reported this issue and to TYPO3 core & security team member Oliver Hader who fixed the issue.","published":"2024-10-08T17:57:21.523Z","modified":"2026-08-27T03:30:48.525089195Z","cvss":{"score":3.1,"severity":"LOW","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N"},"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"Packagist","name":"typo3/cms-backend","fixedVersion":"13.3.1"},{"ecosystem":"Packagist","name":"typo3/cms-backend","fixedVersion":"12.4.21"},{"ecosystem":"Packagist","name":"typo3/cms-backend","fixedVersion":"11.5.40"},{"ecosystem":"Packagist","name":"typo3/cms-backend","fixedVersion":"10.4.46"}],"fix":{"url":"https://github.com/TYPO3-CMS/backend/commit/8b024b08a2c7071a2f2ff7c758766e4e9273f83c","label":"TYPO3-CMS/backend@8b024b0"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/47xxx/CVE-2024-47780.json"},{"type":"ADVISORY","url":"https://github.com/TYPO3/typo3/security/advisories/GHSA-rf5m-h8q9-9w6q"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-47780"},{"type":"ADVISORY","url":"https://typo3.org/security/advisory/typo3-core-sa-2024-012"},{"type":"WEB","url":"https://github.com/TYPO3-CMS/backend/commit/8b024b08a2c7071a2f2ff7c758766e4e9273f83c"},{"type":"WEB","url":"https://github.com/TYPO3-CMS/backend/commit/9ae1ef969b63292a13f80955a95713cabd45cc22"},{"type":"WEB","url":"https://github.com/TYPO3-CMS/backend/commit/a7b3c924014ada61632cd5e3fb9825fcc86c5719"},{"type":"PACKAGE","url":"https://github.com/TYPO3-CMS/backend"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-08-27T03:30:48.525089195Z"}}