CVE-2024-34537: TYPO3

Medium severity, CVSS 4.9. EPSS: 0.7% chance of exploitation in the next 30 days.

TYPO3 before 13.3.1 allows denial of service (interface error) in the Bookmark Toolbar (ext:backend), exploitable by an administrator-level backend user account via manipulated data saved in the bookmark toolbar of the backend user interface. The fixed versions are 10.4.46 ELTS, 11.5.40 LTS, 12.4.21 LTS, and 13.3.1.

Affected products

• TYPO3 TYPO3: from 10.0.0, before 10.4.46 (fixed in 10.4.46); from 11.0.0, before 11.5.40 (fixed in 11.5.40); from 12.0.0, before 12.4.21 (fixed in 12.4.21); from 13.0.0, before 13.3.1 (fixed in 13.3.1)

Published 2024-10-28. Last modified 2026-06-17.