TYPO3 DataHandler访问控制损坏漏洞公告(CVE-2026-47350)

漏洞概述 漏洞名称: TYPO3-CORE-SA-2026-012: Broken Access Control in DataHandler 发布日期: 2026年6月9日 漏洞类型: 访问控制损坏 严重程度: 中等 CVSS评分: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N 参考链接: CVE-2026-47350, CWE-862 影响范围 受影响版本: 13.0.0-13.4.30, 14.0.0-14.3.2 修复方案 解决方案: 升级到修复了该问题的TYPO3版本13.4.31 LTS或14.3.3 LTS。 问题描述 后端用户能够在没有编辑权限的情况下将记录移动到不同的页面。 建议 遵循TYPO3安全指南中的建议，并订阅TYPO3公告邮件列表。 一般说明 所有与安全相关的代码更改都已标记，以便您可以在我们的审查系统中轻松查找它们。 作者信息 作者: Oliver Hader 职位: TYPO3 GmbH, Hof, Germany 的核心开发者 简介: Oliver自2005年开始使用TYPO3，自2007年起成为TYPO3核心团队成员。他在2014年获得了互联网网络科学的研究生硕士学位，目前研究高级网络技术主题，特别是TYPO3。业余时间喜欢骑行。 页脚信息 版权: © 2026 TYPO3 Association 法律声明: Legal Notice, Privacy Policy 语言选择: Language 其他信息 社区: Community 项目: Project 扩展: Extensions 文档: Documentation 服务: Services 我的TYPO3: My TYPO3 获取TYPO3: Get TYPO3 社交媒体链接 LinkedIn Instagram Bluesky Mastodon Facebook YouTube 语言选择 Language 其他链接 TYPO3 Universe TYPO3 CMS Case Studies Products & Services Solutions Partners More Extensions Documentation My TYPO3 Get TYPO3 Community Meet Get help Contribute Project TYPO3 Association TYPO3 Company Governance & Values Strategic Collaboration 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Language 页脚 © 2026 TYPO3 Association Legal Notice Privacy Policy Lang

目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

TYPO3 DataHandler访问控制损坏漏洞公告(CVE-2026-47350)

目标达成感谢每一位支持者 — 我们达成了 100% 目标！