Skip to content
RequestGuard Vulnerabilities
Pricing
Vulnerability intelligence Composer

typo3/cms-dashboard

TYPO3 CMS Dashboard - TYPO3 backend module used to configure and create backend widgets.

Composer latest 13.4.35 GPL-2.0-or-later

Evidence path

Version, exploitation, severity

RequestGuard keeps these facts separate. A KEV match refers to a CVE, while OSV supplies the package and version match.

1

Latest version

13.4.35

No matching published advisory returned

2

Known exploitation

No KEV match

Checked by exact CVE identifier

3

Highest advisory severity

Moderate

2 active advisories

Check an exact version

The registry confirms the version, then OSV checks advisories for that exact value.

Published records

Advisories

2
GHSA-2fhw-2j7m-mr4m moderate

TYPO3 backend modules have Broken Access Control

Affected range

ECOSYSTEM: introduced 10.0.0; fixed 12.4.37ECOSYSTEM: introduced 11.0.0; fixed 12.4.37ECOSYSTEM: introduced 12.0.0; fixed 12.4.37ECOSYSTEM: introduced 13.0.0; fixed 13.4.18>=13.0.0,<13.4.18|>=12.0.0,<12.4.37|>=11.0.0,<11.5.48|>=10.0.0,<10.4.54

Fixed versions: 12.4.37, 13.4.18

CVE-2025-59017 Source ↗Source ↗
GHSA-qwx7-39pw-2mhr moderate

TYPO3 Cross-Site Request Forgery in Dashboard Module

Affected range

ECOSYSTEM: introduced 10.0.0; fixed 10.4.48ECOSYSTEM: introduced 11.0.0; fixed 11.5.42ECOSYSTEM: introduced 12.0.0; fixed 12.4.25ECOSYSTEM: introduced 13.0.0; fixed 13.4.3>=13.0.0,<=13.4.2|>=12.0.0,<=12.4.24|>=11.0.0,<=11.5.41|>=10.0.0,<=10.4.47

Fixed versions: 10.4.48, 11.5.42, 12.4.25, 13.4.3

CVE-2024-55920 Source ↗Source ↗