Skip to content
RequestGuard Vulnerabilities
Pricing
Vulnerability intelligence Composer

typo3/cms-filelist

TYPO3 CMS Filelist - TYPO3 backend module (File>Filelist) used for managing files.

Composer latest 13.4.35 GPL-2.0-or-later

Evidence path

Version, exploitation, severity

RequestGuard keeps these facts separate. A KEV match refers to a CVE, while OSV supplies the package and version match.

1

Latest version

13.4.35

No matching published advisory returned

2

Known exploitation

No KEV match

Checked by exact CVE identifier

3

Highest advisory severity

High

1 active advisory

Check an exact version

The registry confirms the version, then OSV checks advisories for that exact value.

Published records

Advisories

1
GHSA-chm7-4vch-h8vr high

TYPO3 CMS has Broken Access Control in its Media Module

Affected range

ECOSYSTEM: introduced 11.0.0; fixed 11.5.51ECOSYSTEM: introduced 12.0.0; fixed 12.4.46ECOSYSTEM: introduced 13.0.0; fixed 13.4.31ECOSYSTEM: introduced 14.0.0; fixed 14.3.3>=14.0.0,<14.3.3|>=13.0.0,<13.4.31|>=12.0.0,<12.4.46|>=11.0.0,<11.5.51

Fixed versions: 11.5.51, 12.4.46, 13.4.31, 14.3.3

CVE-2026-49742 Source ↗Source ↗