{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-29T18:42:24.451","vulnerabilities":[{"cve":{"id":"CVE-2024-47780","sourceIdentifier":"security-advisories@github.com","published":"2024-10-08T18:15:30.950","lastModified":"2026-06-17T07:57:44.567","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"TYPO3 is a free and open source Content Management Framework. Backend users could see items in the backend page tree without having access if the mounts pointed to pages restricted for their user/group, or if no mounts were configured but the pages allowed access to \"everybody.\" However, affected users could not manipulate these pages. Users are advised to update to TYPO3 versions 10.4.46 ELTS, 11.5.40 LTS, 12.4.21 LTS, 13.3.1 that fix the problem described. There are no known workarounds for this vulnerability."},{"lang":"es","value":"TYPO3 es un framework de gestión de contenido gratuito y de código abierto. Los usuarios del backend podían ver elementos en el árbol de páginas del backend sin tener acceso si los montajes apuntaban a páginas restringidas para su usuario/grupo, o si no se configuraban montajes pero las páginas permitían el acceso a \"todos\". Sin embargo, los usuarios afectados no podían manipular estas páginas. Se recomienda a los usuarios que actualicen a las versiones 10.4.46 ELTS, 11.5.40 LTS, 12.4.21 LTS, 13.3.1 de TYPO3 que solucionan el problema descrito. No se conocen workarounds para esta vulnerabilidad."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"TYPO3","product":"typo3","versions":[{"version":">= 10.0.0, < 10.4.46","status":"affected"},{"version":">= 11.0.0, < 11.5.40","status":"affected"},{"version":">= 12.0.0, < 12.4.21","status":"affected"},{"version":">= 13.0.0, < 13.3.1","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":3.1,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-08T18:17:16.402927Z","id":"CVE-2024-47780","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-863"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.0","versionEndExcluding":"10.4.46","matchCriteriaId":"DD52EDD0-01D2-44B1-81FE-248BF4319A09"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","versionStartIncluding":"11.0.0","versionEndExcluding":"11.5.40","matchCriteriaId":"C628257E-344C-4688-8615-3D84F77FFA13"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","versionStartIncluding":"12.0.0","versionEndExcluding":"12.4.21","matchCriteriaId":"C3CA3D6C-1394-47B8-8774-375E9A522B70"},{"vulnerable":true,"criteria":"cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*","versionStartIncluding":"13.0.0","versionEndExcluding":"13.3.1","matchCriteriaId":"26A3AB06-C773-47E2-9D59-F3B1F754C10D"}]}]}],"references":[{"url":"https://github.com/TYPO3/typo3/security/advisories/GHSA-rf5m-h8q9-9w6q","source":"security-advisories@github.com","tags":["Vendor Advisory"]},{"url":"https://typo3.org/security/advisory/typo3-core-sa-2024-012","source":"security-advisories@github.com","tags":["Vendor Advisory"]}]}}]}