CVE-2025-47941 — Authentication Bypass Using an Alternate Path or Channel in Typo3

CWE-288 — Authentication Bypass Using an Alternate Path or ChannelCWE-401 — Missing Release of Memory after Effective Lifetime5 documents5 sources
Severity
7.2HIGHNVD
EPSS
0.3%
top 48.88%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Typo3Typo3 Cms-backend
Timeline
PublishedMay 20

Description

TYPO3 is an open source, PHP based web content management system. In versions on the 12.x branch prior to 12.4.31 LTS and the 13.x branch prior to 13.4.2 LTS, the multifactor authentication (MFA) dialog presented during backend login can be bypassed due to insufficient enforcement of access restrictions on all backend routes. Successful exploitation requires valid backend user credentials, as MFA can only be bypassed after successful authentication. Users should update to TYPO3 version 12.4.31 L…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 1.2 | Impact: 5.9

Affected Packages3 packages

▶Packagisttypo3/cms-backend12.0.0 — 12.4.31+1
▶NVDtypo3/typo312.0.0 — 12.4.31+1
▶CVEListV5typo3/typo3>= 12.0.0, < 12.4.31, >= 13.0.0, < 13.4.12+1

🔴Vulnerability Details

3
GHSA
The TYPO3 CMS Backend has Broken Authentication in Backend MFA↗2025-05-20
▶
CVEList
TYPO3 Has Broken Authentication in Backend MFA↗2025-05-20
▶
OSV
The TYPO3 CMS Backend has Broken Authentication in Backend MFA↗2025-05-20
▶

📋Vendor Advisories

1
Microsoft
An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. fs/ksmbd/smb2pdu.c omits a kfree call in certain smb2_handle_negotiate error conditions aka a memory leak.↗2022-12-13
▶
CVE-2025-47941 — Typo3 vulnerability | cvebase