CVE-2026-47343

HighCVSS 7.2/10Last modified Jul 23, 2026

Description

Non-privileged backend users with file mount access were able to perform write operations (move, delete, rename) on folders representing the root of an active file mount due to missing authorization restrictions. This issue affects TYPO3 CMS versions before 10.4.57, 11.0.0 through 11.5.50, 12.0.0 through 12.4.45, 13.0.0 through 13.4.30, and 14.0.0 through 14.3.2.

Metrics

CVSS 4.0 7.2/10

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness enumeration

CWE-862

Affected software

No affected versions have been published.

Timeline

Published: Jun 9, 2026
Last modified: Jul 23, 2026
NVD status: Deferred

Related CVEs from 2026

CVE-2026-473442.1When ALLOW_INSECURE_RAW_TEXT is enabled, whitespace-variant closing tags (e.g., </style\t>) are not recognized by the sanitizer but accepted CVE-2026-473455.1Namespace attributes are not encoded correctly during HTML serialization. This allows bypassing the cross-site scripting prevention mechanis CVE-2026-473467.6Backend users with file write permissions were able to upload form definition files with mixed-case extensions (e.g., .FORM.YAML) to bypass CVE-2026-473475.3Applications that use GeneralUtility::sanitizeLocalUrl to allow only local URLs are vulnerable to open redirect attacks if the URL is used a CVE-2026-473485.1Editors with access to create or modify page content were able to include HTML markup in page titles that were stored in the search index wi CVE-2026-473495.3Backend users with access to the Recycler module were able to restore soft-deleted records on pages or for tables they were not authorized t CVE-2026-47358.7Deserialization of Untrusted Data vulnerability in DTStack chunjun (‎chunjun-core/src/main/java/com/dtstack/chunjun/util modules). This vuln CVE-2026-473505.3Backend users were able to move records to a different page without having edit permissions on the source page. This issue affects TYPO3 CMS CVE-2026-473515.3Backend users were able to insert arbitrary records and files into the TYPO3 clipboard without proper read permission checks, which allowed CVE-2026-473525.3Authenticated backend users were able to retrieve file metadata via several Backend API routes without proper permission checks, allowing ac CVE-2026-473568.6Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via the webhook_url parameter in the file scan endpoint (PO CVE-2026-473578.6Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via the remote_url parameter in the remote directory scan e