medium6.0
CVE-2025-48204
The Backup Plus extension for TYPO3 (ns_backup) allows command injections
Impact
The ns_backup extension through 13.0.0 for TYPO3 allows command injection when creating a backup. An authenticated backend user with access to the extensions backend module is required to exploit the vulnerability.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | nitsan/ns-backup | < 13.0.1 | 13.0.1 |
Affected products
| Product | Affected versions |
|---|---|
| Ns Backup Extension | through 13.0.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.