Vulnerability Details CVE-2025-59015
A deterministic three‑character prefix in the Password Generation component of TYPO3 CMS versions 12.0.0–12.4.36 and 13.0.0–13.4.17 reduces entropy, allowing attackers to carry out brute‑force attacks more quickly.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 12.0%
CVSS Severity
CVSS v3 Score 6.5
Products affected by CVE-2025-59015
-
cpe:2.3:a:typo3:typo3:12.0.0
-
cpe:2.3:a:typo3:typo3:12.1.0
-
cpe:2.3:a:typo3:typo3:12.1.1
-
cpe:2.3:a:typo3:typo3:12.1.2
-
cpe:2.3:a:typo3:typo3:12.1.3
-
cpe:2.3:a:typo3:typo3:12.2.0
-
cpe:2.3:a:typo3:typo3:12.3.0
-
cpe:2.3:a:typo3:typo3:12.4.0
-
cpe:2.3:a:typo3:typo3:12.4.1
-
cpe:2.3:a:typo3:typo3:12.4.10
-
cpe:2.3:a:typo3:typo3:12.4.11
-
cpe:2.3:a:typo3:typo3:12.4.12
-
cpe:2.3:a:typo3:typo3:12.4.13
-
cpe:2.3:a:typo3:typo3:12.4.14
-
cpe:2.3:a:typo3:typo3:12.4.15
-
cpe:2.3:a:typo3:typo3:12.4.16
-
cpe:2.3:a:typo3:typo3:12.4.17
-
cpe:2.3:a:typo3:typo3:12.4.18
-
cpe:2.3:a:typo3:typo3:12.4.19
-
cpe:2.3:a:typo3:typo3:12.4.2
-
cpe:2.3:a:typo3:typo3:12.4.20
-
cpe:2.3:a:typo3:typo3:12.4.21
-
cpe:2.3:a:typo3:typo3:12.4.22
-
cpe:2.3:a:typo3:typo3:12.4.23
-
cpe:2.3:a:typo3:typo3:12.4.24
-
cpe:2.3:a:typo3:typo3:12.4.25
-
cpe:2.3:a:typo3:typo3:12.4.26
-
cpe:2.3:a:typo3:typo3:12.4.27
-
cpe:2.3:a:typo3:typo3:12.4.28
-
cpe:2.3:a:typo3:typo3:12.4.3
-
cpe:2.3:a:typo3:typo3:12.4.4
-
cpe:2.3:a:typo3:typo3:12.4.5
-
cpe:2.3:a:typo3:typo3:12.4.6
-
cpe:2.3:a:typo3:typo3:12.4.7
-
cpe:2.3:a:typo3:typo3:12.4.8
-
cpe:2.3:a:typo3:typo3:12.4.9
-
cpe:2.3:a:typo3:typo3:13.0.0
-
cpe:2.3:a:typo3:typo3:13.0.1
-
cpe:2.3:a:typo3:typo3:13.1.0
-
cpe:2.3:a:typo3:typo3:13.1.1
-
cpe:2.3:a:typo3:typo3:13.2.0
-
cpe:2.3:a:typo3:typo3:13.2.1
-
cpe:2.3:a:typo3:typo3:13.3.0
-
cpe:2.3:a:typo3:typo3:13.3.1
-
cpe:2.3:a:typo3:typo3:13.4.0
-
cpe:2.3:a:typo3:typo3:13.4.1
-
cpe:2.3:a:typo3:typo3:13.4.2
-
cpe:2.3:a:typo3:typo3:13.4.3
-
cpe:2.3:a:typo3:typo3:13.4.4
-
cpe:2.3:a:typo3:typo3:13.4.5
-
cpe:2.3:a:typo3:typo3:13.4.6
-
cpe:2.3:a:typo3:typo3:13.4.7
-
cpe:2.3:a:typo3:typo3:13.4.8
-
cpe:2.3:a:typo3:typo3:13.4.9