Beveiligingsadvies

CVE-2026-47352

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-09 10:53:05

Laatst bijgewerkt 2026-07-15 12:47:51

Toegewezen door TYPO3

CVSS-score 5.3

Status PUBLISHED

Beschrijving

Authenticated backend users were able to retrieve file metadata via several Backend API routes without proper permission checks, allowing access to files outside their permitted file mounts or storages. This issue affects TYPO3 CMS versions before 10.4.57, 11.0.0-11.5.50, 12.0.0-12.4.45, 13.0.0-13.4.30 and 14.0.0-14.3.2.

← Alle CVE's bekijken Bekijk op cve.org ↗