2025-05-19

2025-05-20

2025-05-21

All (4) Critical (25) High (45) Medium (100) Low (4)

CVE-2025-48015 May 20, 16:15 LOW Monitor

Failed login response could be different depending on whether the username was local or central. Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Information Disclosure

NVD

CVSS 3.1

3.7

EPSS

0.2%

CVE-2025-47938 May 20, 14:15 LOW PATCH Monitor

TYPO3 is an open source, PHP based web content management system. Rated low severity (CVSS 3.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP Authentication Bypass Typo3

NVD GitHub

CVSS 3.1

3.8

EPSS

0.2%

CVE-2025-47937 May 20, 14:15 LOW PATCH Monitor

TYPO3 is an open source, PHP based web content management system. Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

PHP Authentication Bypass Typo3

NVD GitHub

CVSS 3.1

3.7

EPSS

0.2%

CVE-2025-47936 May 20, 14:15 LOW PATCH Monitor

TYPO3 is an open source, PHP based web content management system. Rated low severity (CVSS 3.3), this vulnerability is remotely exploitable. No vendor patch available.

PHP CSRF SSRF Typo3

NVD GitHub

CVSS 3.1

3.3

EPSS

0.2%