ByteOS Network

NVD Vulnerability Details :

CVE-2026-47351

Received

Source-f4fb688c-4412-4426-b4b8-421ecf27b14a

Published At-09 Jun, 2026 | 11:16

Updated At-09 Jun, 2026 | 11:16

Backend users were able to insert arbitrary records and files into the TYPO3 clipboard without proper read permission checks, which allowed users to gather information about records and files they were not authorized to view. This issue affects TYPO3 CMS versions 10.4.0-13.4.30 and 14.0.0-14.3.2.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	4.0	5.3	MEDIUM	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Type: Secondary

Version: 4.0

Base score: 5.3

Base severity: MEDIUM

Vector:

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weaknesses

CWE ID	Type	Source
CWE-200	Secondary	f4fb688c-4412-4426-b4b8-421ecf27b14a
CWE-862	Secondary	f4fb688c-4412-4426-b4b8-421ecf27b14a

CWE ID: CWE-200

Type: Secondary

Source: f4fb688c-4412-4426-b4b8-421ecf27b14a

CWE ID: CWE-862

Type: Secondary

Source: f4fb688c-4412-4426-b4b8-421ecf27b14a

References

Hyperlink	Source	Resource
https://github.com/TYPO3/typo3/commit/2740707563343d78184c0b7c6303a7484553d7f3	f4fb688c-4412-4426-b4b8-421ecf27b14a	N/A
https://github.com/TYPO3/typo3/commit/932fbb9fcea25094e8bcc0f0ec5aab56b1d92451	f4fb688c-4412-4426-b4b8-421ecf27b14a	N/A
https://typo3.org/security/advisory/typo3-core-sa-2026-014	f4fb688c-4412-4426-b4b8-421ecf27b14a	N/A