Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2025-59016

Information Disclosure via File Abstraction Layer

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
TYPO3

Description

Error messages containing sensitive information in the File Abstraction Layer in TYPO3 CMS versions 9.0.0-9.5.54, 10.0.0-10.4.53, 11.0.0-11.5.47, 12.0.0-12.4.36, and 13.0.0-13.4.17 allow backend users to disclose full file paths via failed low-level file-system operations.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TYPO3 TYPO3 CMS

Default version status: unaffected

  • 9.0.0 to < 9.5.55affected
  • 10.0.0 to < 10.4.54affected
  • 11.0.0 to < 11.5.48affected
  • 12.0.0 to < 12.4.37affected
  • 13.0.0 to < 13.4.18affected

References