Beveiligingsadvies

CVE-2026-77128

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-25 09:00:44

Laatst bijgewerkt 2026-08-25 14:06:14

Toegewezen door TYPO3

CVSS-score 6.3

Status PUBLISHED

Beschrijving

The extension fails to enforce enable-field restrictions on a repository query parameter. An unauthenticated remote user can pass a demand-override parameter to view hidden or time-restricted events, unless the disableOverrideDemand plugin setting is active. Exploitation of this issue requires only that disableOverrideDemand is not enabled.

← Alle CVE's bekijken Bekijk op cve.org ↗