The 'Redirect Tabs' extension for TYPO3 fails to verify whether an authenticated user has permission to access redirect records. As a result, when editing a page, the user can view redirect records that they should not be able to see. This constitutes an information disclosure vulnerability, limited to users who can authenticate to the TYPO3 backend and who have access to edit pages. The primary impact is confidentiality loss: sensitive redirect data may be exposed to unauthorized internal users.

The vulnerability affects TYPO3 installations that have the 'Redirect Tabs' extension enabled. No specific version numbers are listed in the advisory, so any deployment with the extension present and not patched may be susceptible.

The CVSS score is 2.3, indicating a low severity. The EPSS score is not available, and the vulnerability is not currently listed in the CISA KEV catalog, suggesting it is not widely exploited. The likely attack vector is local; an attacker must first authenticate to the TYPO3 backend to edit a page and then trigger the exposure. This requires possessing valid credentials and edit access, which limits the exploitation to insiders or compromised accounts.