Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2025-59013

Open Redirect in TYPO3 CMS

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
TYPO3

Description

An open‑redirect vulnerability in GeneralUtility::sanitizeLocalUrl of TYPO3 CMS 9.0.0–9.5.54, 10.0.0–10.4.53, 11.0.0–11.5.47, 12.0.0–12.4.36, and 13.0.0–13.4.17 allows an attacker to redirect users to arbitrary external sites, enabling phishing attacks by supplying a manipulated, sanitized URL.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TYPO3 TYPO3 CMS

Default version status: unaffected

  • 9.0.0 to < 9.5.55affected
  • 10.0.0 to < 10.4.54affected
  • 11.0.0 to < 11.5.48affected
  • 12.0.0 to < 12.4.37affected
  • 13.0.0 to < 13.4.18affected

References