Typo3 Cms-Recycler vulnerabilities

CVE-2025-59022 [HIGH] CWE-862 TYPO3 CMS Allows Broken Access Control in Recycler Module TYPO3 CMS Allows Broken Access Control in Recycler Module ### Problem Backend users who had access to the recycler module could delete arbitrary data from any database table defined in the TCA - regardless of whether they had permission to that particular table. This allowed attackers to purge and destroy critical site data, effectively rendering the website unavailable. ### Solution Update to TYPO3 version

CVE-2025-59017 [MEDIUM] CWE-862 TYPO3 backend modules have Broken Access Control TYPO3 backend modules have Broken Access Control Missing authorization checks in the Backend Routing of TYPO3 CMS versions 9.0.0‑9.5.54, 10.0.0‑10.4.53, 11.0.0‑11.5.47, 12.0.0‑12.4.36, and 13.0.0‑13.4.17 allow backend users to directly invoke AJAX backend routes without having access to the corresponding backend modules.