CVE-2025-9573 - Command Injection in extension "TYPO3 Backup Plus" (ns_backup)

Back Back to CVE browser

HIGH

Command Injection in extension "TYPO3 Backup Plus" (ns_backup)

Published Sep 2, 2025

8.6

HIGH

CVSS 4.0

EPSS 1.09%

Description

The ns_backup extension through 13.0.2 for TYPO3 allows command injection.

Affected products

Vendor TYPO3 Product Extension "TYPO3 Backup Plus" Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <=13.0.2

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

TYPO3

Extension "TYPO3 Backup Plus"

unaffected

Version	Status	Constraints
0	affected	<=13.0.2

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-78

OS Command Injection

References (1)

https://typo3.org/security/advisory/typo3-ext-sa-2025-011

Link	Providers	Tags
https://typo3.org/security/advisory/typo3-ext-sa-2025-011

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner TYPO3

Published Sep 2, 2025

Updated Sep 2, 2025

Reserved Aug 28, 2025

Link CVE-2025-9573

CISA Vulnrichment

Updated Sep 2, 2025

NVD

Status Deferred

Modified Jun 17, 2026

Link CVE-2025-9573

Red Hat

Severity n/a

Public date n/a

Links CVE-2025-9573