CVE-2025-12998 — Broken Authentication in extension “Modules” (modules)

CVE-2025-12998

Broken Authentication in extension “Modules” (modules) PUBLISHED

Description (CNA)

Improper Authentication vulnerability in TYPO3 Extension "Modules" codingms/modules.This issue affects Extension "Modules": before 4.3.11, from 5.0.0 before 5.7.4, from 6.0.0 before 6.4.2, from 7.0.0 before 7.5.5.

Affected (CNA)

Vendor / product	Versions
TYPO3 / Extension "Modules"	affected 0 before 4.3.11; affected 5.0.0 before 5.7.4; affected 6.0.0 before 6.4.2; affected 7.0.0 before 7.5.5

CWE

CWE-287

References

https://typo3.org/security/advisory/typo3-ext-sa-2025-015

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.