{
  "document" : {
    "aggregate_severity" : {
      "text" : "hoch"
    },
    "category" : "csaf_base",
    "csaf_version" : "2.0",
    "distribution" : {
      "tlp" : {
        "label" : "WHITE",
        "url" : "https://www.first.org/tlp/"
      }
    },
    "lang" : "de-DE",
    "notes" : [ {
      "category" : "legal_disclaimer",
      "text" : "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen."
    }, {
      "category" : "description",
      "text" : "TYPO3 ist ein freies Content-Management-System, basierend auf der Scriptsprache PHP und einer SQL-Datenbank. Über zahlreiche Extensions kann der Funktionsumfang der Core-Installation individuell erweitert werden.",
      "title" : "Produktbeschreibung"
    }, {
      "category" : "summary",
      "text" : "Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in TYPO3 Core ausnutzen, um Sicherheitsbeschränkungen zu umgehen, Benutzer auf schädliche Websites umzuleiten, beliebigen Code auszuführen, Berechtigungen zu eskalieren oder andere Auswirkungen zu verursachen.",
      "title" : "Angriff"
    }, {
      "category" : "general",
      "text" : "- Linux\n- UNIX\n- Windows",
      "title" : "Betroffene Betriebssysteme"
    } ],
    "publisher" : {
      "category" : "other",
      "contact_details" : "csaf-provider@cert-bund.de",
      "name" : "Bundesamt für Sicherheit in der Informationstechnik",
      "namespace" : "https://www.bsi.bund.de"
    },
    "references" : [ {
      "category" : "self",
      "summary" : "WID-SEC-W-2026-1835 - CSAF Version",
      "url" : "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1835.json"
    }, {
      "category" : "self",
      "summary" : "WID-SEC-2026-1835 - Portal Version",
      "url" : "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1835"
    }, {
      "category" : "external",
      "summary" : "Typo3 Core Security Advisory TYPO3-CORE-SA-2026-006 vom 2026-06-08",
      "url" : "https://typo3.org/security/advisory/typo3-core-sa-2026-006"
    }, {
      "category" : "external",
      "summary" : "Typo3 Core Security Advisory TYPO3-CORE-SA-2026-007 vom 2026-06-08",
      "url" : "https://typo3.org/security/advisory/typo3-core-sa-2026-007"
    }, {
      "category" : "external",
      "summary" : "Typo3 Core Security Advisory TYPO3-CORE-SA-2026-008 vom 2026-06-08",
      "url" : "https://typo3.org/security/advisory/typo3-core-sa-2026-008"
    }, {
      "category" : "external",
      "summary" : "Typo3 Core Security Advisory TYPO3-CORE-SA-2026-009 vom 2026-06-08",
      "url" : "https://typo3.org/security/advisory/typo3-core-sa-2026-009"
    }, {
      "category" : "external",
      "summary" : "Typo3 Core Security Advisory TYPO3-CORE-SA-2026-010 vom 2026-06-08",
      "url" : "https://typo3.org/security/advisory/typo3-core-sa-2026-010"
    }, {
      "category" : "external",
      "summary" : "Typo3 Core Security Advisory TYPO3-CORE-SA-2026-011 vom 2026-06-08",
      "url" : "https://typo3.org/security/advisory/typo3-core-sa-2026-011"
    }, {
      "category" : "external",
      "summary" : "Typo3 Core Security Advisory TYPO3-CORE-SA-2026-012 vom 2026-06-08",
      "url" : "https://typo3.org/security/advisory/typo3-core-sa-2026-012"
    }, {
      "category" : "external",
      "summary" : "Typo3 Core Security Advisory TYPO3-CORE-SA-2026-013 vom 2026-06-08",
      "url" : "https://typo3.org/security/advisory/typo3-core-sa-2026-013"
    }, {
      "category" : "external",
      "summary" : "Typo3 Core Security Advisory TYPO3-CORE-SA-2026-014 vom 2026-06-08",
      "url" : "https://typo3.org/security/advisory/typo3-core-sa-2026-014"
    }, {
      "category" : "external",
      "summary" : "Typo3 Core Security Advisory TYPO3-CORE-SA-2026-015 vom 2026-06-08",
      "url" : "https://typo3.org/security/advisory/typo3-core-sa-2026-015"
    }, {
      "category" : "external",
      "summary" : "Typo3 Core Security Advisory TYPO3-CORE-SA-2026-016 vom 2026-06-08",
      "url" : "https://typo3.org/security/advisory/typo3-core-sa-2026-016"
    }, {
      "category" : "external",
      "summary" : "Typo3 Core Security Advisory TYPO3-CORE-SA-2026-018 vom 2026-06-08",
      "url" : "https://typo3.org/security/advisory/typo3-core-sa-2026-018"
    }, {
      "category" : "external",
      "summary" : "Typo3 Core Security Advisory TYPO3-CORE-SA-2026-019 vom 2026-06-08",
      "url" : "https://typo3.org/security/advisory/typo3-core-sa-2026-019"
    }, {
      "category" : "external",
      "summary" : "Typo3 Core Security Advisory TYPO3-CORE-SA-2026-017 vom 2026-06-08",
      "url" : "https://typo3.org/security/advisory/typo3-core-sa-2026-017"
    } ],
    "source_lang" : "en-US",
    "title" : "TYPO3 Core: Mehrere Schwachstellen",
    "tracking" : {
      "current_release_date" : "2026-06-08T22:00:00.000+00:00",
      "generator" : {
        "date" : "2026-06-09T11:30:55.206+00:00",
        "engine" : {
          "name" : "BSI-WID",
          "version" : "1.6.0"
        }
      },
      "id" : "WID-SEC-W-2026-1835",
      "initial_release_date" : "2026-06-08T22:00:00.000+00:00",
      "revision_history" : [ {
        "date" : "2026-06-08T22:00:00.000+00:00",
        "number" : "1",
        "summary" : "Initiale Fassung"
      } ],
      "status" : "final",
      "version" : "1"
    }
  },
  "product_tree" : {
    "branches" : [ {
      "branches" : [ {
        "branches" : [ {
          "category" : "product_version_range",
          "name" : "<10.4.57 ELTS",
          "product" : {
            "name" : "TYPO3 Core <10.4.57 ELTS",
            "product_id" : "T055074"
          }
        }, {
          "category" : "product_version",
          "name" : "10.4.57 ELTS",
          "product" : {
            "name" : "TYPO3 Core 10.4.57 ELTS",
            "product_id" : "T055074-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:typo3:typo3:10.4.57_elts"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<11.5.51 ELTS",
          "product" : {
            "name" : "TYPO3 Core <11.5.51 ELTS",
            "product_id" : "T055076"
          }
        }, {
          "category" : "product_version",
          "name" : "11.5.51 ELTS",
          "product" : {
            "name" : "TYPO3 Core 11.5.51 ELTS",
            "product_id" : "T055076-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:typo3:typo3:11.5.51_elts"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<12.4.46 ELTS",
          "product" : {
            "name" : "TYPO3 Core <12.4.46 ELTS",
            "product_id" : "T055077"
          }
        }, {
          "category" : "product_version",
          "name" : "12.4.46 ELTS",
          "product" : {
            "name" : "TYPO3 Core 12.4.46 ELTS",
            "product_id" : "T055077-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:typo3:typo3:12.4.46_elts"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<13.4.31 LTS",
          "product" : {
            "name" : "TYPO3 Core <13.4.31 LTS",
            "product_id" : "T055078"
          }
        }, {
          "category" : "product_version",
          "name" : "13.4.31 LTS",
          "product" : {
            "name" : "TYPO3 Core 13.4.31 LTS",
            "product_id" : "T055078-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:typo3:typo3:13.4.31_lts"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<14.3.3 LTS",
          "product" : {
            "name" : "TYPO3 Core <14.3.3 LTS",
            "product_id" : "T055079"
          }
        }, {
          "category" : "product_version",
          "name" : "14.3.3 LTS",
          "product" : {
            "name" : "TYPO3 Core 14.3.3 LTS",
            "product_id" : "T055079-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:typo3:typo3:14.3.3_lts"
            }
          }
        } ],
        "category" : "product_name",
        "name" : "Core"
      } ],
      "category" : "vendor",
      "name" : "TYPO3"
    } ]
  },
  "vulnerabilities" : [ {
    "cve" : "CVE-2026-11607",
    "product_status" : {
      "known_affected" : [ "T055079", "T055078", "T055077", "T055076", "T055074" ]
    },
    "release_date" : "2026-06-08T22:00:00.000+00:00",
    "title" : "CVE-2026-11607"
  }, {
    "cve" : "CVE-2026-47343",
    "product_status" : {
      "known_affected" : [ "T055079", "T055078", "T055077", "T055076", "T055074" ]
    },
    "release_date" : "2026-06-08T22:00:00.000+00:00",
    "title" : "CVE-2026-47343"
  }, {
    "cve" : "CVE-2026-47344",
    "product_status" : {
      "known_affected" : [ "T055079", "T055078", "T055077", "T055076", "T055074" ]
    },
    "release_date" : "2026-06-08T22:00:00.000+00:00",
    "title" : "CVE-2026-47344"
  }, {
    "cve" : "CVE-2026-47345",
    "product_status" : {
      "known_affected" : [ "T055079", "T055078", "T055077", "T055076", "T055074" ]
    },
    "release_date" : "2026-06-08T22:00:00.000+00:00",
    "title" : "CVE-2026-47345"
  }, {
    "cve" : "CVE-2026-47346",
    "product_status" : {
      "known_affected" : [ "T055079", "T055078", "T055077", "T055076", "T055074" ]
    },
    "release_date" : "2026-06-08T22:00:00.000+00:00",
    "title" : "CVE-2026-47346"
  }, {
    "cve" : "CVE-2026-47347",
    "product_status" : {
      "known_affected" : [ "T055079", "T055078", "T055077", "T055076", "T055074" ]
    },
    "release_date" : "2026-06-08T22:00:00.000+00:00",
    "title" : "CVE-2026-47347"
  }, {
    "cve" : "CVE-2026-47348",
    "product_status" : {
      "known_affected" : [ "T055079", "T055078", "T055077", "T055076", "T055074" ]
    },
    "release_date" : "2026-06-08T22:00:00.000+00:00",
    "title" : "CVE-2026-47348"
  }, {
    "cve" : "CVE-2026-47349",
    "product_status" : {
      "known_affected" : [ "T055079", "T055078", "T055077", "T055076", "T055074" ]
    },
    "release_date" : "2026-06-08T22:00:00.000+00:00",
    "title" : "CVE-2026-47349"
  }, {
    "cve" : "CVE-2026-47350",
    "product_status" : {
      "known_affected" : [ "T055079", "T055078", "T055077", "T055076", "T055074" ]
    },
    "release_date" : "2026-06-08T22:00:00.000+00:00",
    "title" : "CVE-2026-47350"
  }, {
    "cve" : "CVE-2026-47352",
    "product_status" : {
      "known_affected" : [ "T055079", "T055078", "T055077", "T055076", "T055074" ]
    },
    "release_date" : "2026-06-08T22:00:00.000+00:00",
    "title" : "CVE-2026-47352"
  }, {
    "cve" : "CVE-2026-49738",
    "product_status" : {
      "known_affected" : [ "T055079", "T055078", "T055077", "T055076", "T055074" ]
    },
    "release_date" : "2026-06-08T22:00:00.000+00:00",
    "title" : "CVE-2026-49738"
  }, {
    "cve" : "CVE-2026-49740",
    "product_status" : {
      "known_affected" : [ "T055079", "T055078", "T055077", "T055076", "T055074" ]
    },
    "release_date" : "2026-06-08T22:00:00.000+00:00",
    "title" : "CVE-2026-49740"
  }, {
    "cve" : "CVE-2026-49741",
    "product_status" : {
      "known_affected" : [ "T055079", "T055078", "T055077", "T055076", "T055074" ]
    },
    "release_date" : "2026-06-08T22:00:00.000+00:00",
    "title" : "CVE-2026-49741"
  }, {
    "cve" : "CVE-2026-49742",
    "product_status" : {
      "known_affected" : [ "T055079", "T055078", "T055077", "T055076", "T055074" ]
    },
    "release_date" : "2026-06-08T22:00:00.000+00:00",
    "title" : "CVE-2026-49742"
  } ]
}