What is CVE-2025-59019?

CVE-2025-59019 is a medium-severity vulnerability in Typo3, classified under Information Disclosure. CVSS score: 4.3/10. Published 2025-09-09.

How severe is CVE-2025-59019?

Medium severity. CVSS v3 base score is 4.3 out of 10.

Information disclosure in Typo3

CVE-2025-59019

Missing authorization checks in the CSV download feature of TYPO3 CMS versions 11.0.0‑11.5.47, 12.0.0‑12.4.36, and 13.0.0‑13.4.17 allow backend users to disclose information from arbitrary database tables stored within the users' web mount…

Vulnerability class: Information Disclosure

EPSS: 0.002 (11.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N.

Affected products

Typo3
Typo3 Cms — versions 12.0.0, 13.0.0, 11.0.0

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

f4fb688c-4412-4426-b4b8-421ecf27b14a (vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2025-59019?: CVE-2025-59019 is a medium-severity vulnerability in Typo3, classified under Information Disclosure. CVSS score: 4.3/10. Published 2025-09-09.
How severe is CVE-2025-59019?: Medium severity. CVSS v3 base score is 4.3 out of 10.