CVE-2026-47351CWE-200CWE-862

TYPO3 CMS - Broken Access Control in Clipboard

Medium · published June 9, 2026

CVSS v4.0
5.3
EPSS
0%
Percentile
34.6
In the wild
Unconfirmed
What it is

Backend users were able to insert arbitrary records and files into the TYPO3 clipboard without proper read permission checks, which allowed users to gather information about records and files they were not authorized to view. This issue affects TYPO3 CMS versions 10.4.0-13.4.30 and 14.0.0-14.3.2.

The record
Technical detail
CVSS v4.0
5.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00414 · 34.6th percentile
Weaknesses
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor; CWE-862 · Missing Authorization
Published
2026-06-09T10:52Z
EPSS history
Timeline
  • 09 JUN 10:52Z
    TYPO3 CMS - Broken Access Control in Clipboard
    cvelistv5