Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-47351

TYPO3 CMS - Broken Access Control in Clipboard

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
TYPO3

Description

Backend users were able to insert arbitrary records and files into the TYPO3 clipboard without proper read permission checks, which allowed users to gather information about records and files they were not authorized to view. This issue affects TYPO3 CMS versions 10.4.0-13.4.30 and 14.0.0-14.3.2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TYPO3 TYPO3 CMS

Default version status: unaffected

  • 10.4.0 to < 13.4.31affected
  • 14.0.0 to < 14.3.3affected

References