CVE-2025-12998CWE-287

CVE-2025-12998

published November 12, 2025

CVSS
8.2
EPSS
0%
Percentile
28.0
In the wild
Unconfirmed
What it is

Improper Authentication vulnerability in TYPO3 Extension "Modules" codingms/modules.This issue affects Extension "Modules": before 4.3.11, from 5.0.0 before 5.7.4, from 6.0.0 before 6.4.2, from 7.0.0 before 7.5.5.

The record
Technical detail
CVSS
8.2 · NONE
CVSS v4.0
Not supplied
EPSS
0.00355 · 28.0th percentile
Weakness
CWE-287 · Improper Authentication
Published
2025-11-12T17:15Z
References (1)
https://typo3.org/security/advisory/typo3-ext-sa-2025-015 · f4fb688c-4412-4426-b4b8-421ecf27b14a
EPSS history
Timeline
  • 12 NOV 11:16Z
    Broken Authentication in extension “Modules” (modules)
    cvelistv5