CVE-2025-48201: TYPO3-EXT-SA-2025-007: Multiple vulnerabilities in extension "Backup Plus" (ns_backup)
The nsbackup extension through 13.0.0 for TYPO3 has a Predictable Resource Location.
Other sources
TYPO3-EXT-SA-2025-007: Multiple vulnerabilities in extension "Backup Plus" (nsbackup)
— Packagist
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/nitsan/ns-backupto a version that resolves this vulnerability.Fixed in 13.0.1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-48201?
The severity of CVE-2025-48201 has not been officially rated, but it poses a significant risk due to its predictable resource location feature.
How do I fix CVE-2025-48201?
To fix CVE-2025-48201, upgrade the TYPO3 ns_backup extension to a version higher than 13.0.0.
What systems are affected by CVE-2025-48201?
CVE-2025-48201 affects the TYPO3 ns_backup extension versions up to and including 13.0.0.
What issues does CVE-2025-48201 lead to?
CVE-2025-48201 can lead to unauthorized access to resources due to its predictable resource location flaw.
Is there a patch available for CVE-2025-48201?
A patch is typically released with new versions of the software, so updating to a version above 13.0.0 addresses CVE-2025-48201.