CVE-2025-12998: Broken Authentication in extension “Modules” (modules)
Improper Authentication vulnerability in TYPO3 Extension "Modules" codingms/modules. This issue affects Extension "Modules": before 4.3.11, from 5.0.0 before 5.7.4, from 6.0.0 before 6.4.2, from 7.0.0 before 7.5.5.
Other sources
Improper Authentication vulnerability in TYPO3 Extension "Modules" codingms/modules.This issue affects Extension "Modules": before 4.3.11, from 5.0.0 before 5.7.4, from 6.0.0 before 6.4.2, from 7.0.0 before 7.5.5.
— NVD
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-12998?
CVE-2025-12998 has been classified as a critical improper authentication vulnerability.
How do I fix CVE-2025-12998?
To fix CVE-2025-12998, upgrade the TYPO3 Modules extension to version 4.3.11 or higher for older versions or to version 5.7.4 or later for versions between 5.0.0 and 5.7.3.
Which TYPO3 Modules versions are affected by CVE-2025-12998?
CVE-2025-12998 affects TYPO3 Modules versions prior to 4.3.11, 5.0.0 through 5.7.3, 6.0.0 through 6.4.1, and 7.0.0 through 7.5.4.
Can CVE-2025-12998 be exploited remotely?
Yes, CVE-2025-12998 can be exploited remotely due to improper authentication mechanisms.
Is there a mitigation for CVE-2025-12998 without upgrading?
There are no effective mitigations for CVE-2025-12998 other than upgrading to the recommended safe versions.