WID-SEC-W-2026-0151

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

TYPO3 Extension: Mehrere Schwachstellen ermöglichen Manipulation von Dateien

view advisory published 2026-01-19

Ein Angreifer kann mehrere Schwachstellen in TYPO3 Extension ausnutzen, um Dateien zu manipulieren.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2026-0895US——
The extension extends TYPO3’ FileSpool component, which was vulnerable to Insecure Deserialization prior to TYPO3-CORE-SA-2026-004 https://typo3.org/security/advisory/typo3-core-s…
CVE-2025-14761US—OT elevated—
Missing cryptographic key commitment in the AWS SDK for PHP may allow a user with write access to the S3 bucket to introduce a new EDK that decrypts to different plaintext when the…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan