What is GHSA-xrcq-533q-8rxw?

GHSA-xrcq-533q-8rxw is a security advisory published by GitHub Security Advisories with Medium severity. TYPO3 Bookmark Toolbar vulnerable to denial of service

Which CVE IDs does GHSA-xrcq-533q-8rxw cover?

GHSA-xrcq-533q-8rxw covers the following CVE IDs: CVE-2025-59014. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-xrcq-533q-8rxw?

GHSA-xrcq-533q-8rxw affects 3 products, including: composer/typo3/cms-backend:\u003e= 11.0.0, \u003c 11.5.48; composer/typo3/cms-backend:\u003e= 12.0.0, \u003c 12.4.37; composer/typo3/cms-backend:\u003e= 13.0.0, \u003c 13.4.18.

GHSA-xrcq-533q-8rxwMedium

TYPO3 Bookmark Toolbar vulnerable to denial of service

Vendor

GitHub Security Advisories

Published

September 9, 2025

Last Modified

September 9, 2025

🔗 CVE IDs covered (1)

CVE-2025-59014 →

📋 Description

An uncaught exception in the Bookmark Toolbar of TYPO3 CMS versions 11.0.0–11.5.47, 12.0.0–12.4.36, and 13.0.0–13.4.17 lets administrator‑level backend users trigger a denial‑of‑service condition in the backend user interface by saving manipulated data in the bookmark toolbar.

🎯 Affected products3

composer/typo3/cms-backend:>= 11.0.0, < 11.5.48
composer/typo3/cms-backend:>= 12.0.0, < 12.4.37
composer/typo3/cms-backend:>= 13.0.0, < 13.4.18

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2025-59014
https://typo3.org/security/advisory/typo3-core-sa-2025-018
https://github.com/TYPO3-CMS/backend/commit/04db7e25de1d3bb2d082ba68f7f974ccd917cc3f
https://github.com/advisories/GHSA-xrcq-533q-8rxw