DeutschShown in its original language — a full translation is planned for a future version.
TYPO3 Extensions: Mehrere Schwachstellen
view advisory published 2026-05-18
Ein Angreifer kann mehrere Schwachstellen in TYPO3 Extensions ausnutzen, um beliebigen Programmcode auszuführen, um einen SQL-Injection Angriff durchzuführen, um Informationen offenzulegen, und um Sicherheitsvorkehrungen zu umgehen.
01
describes (8)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-8827US | — | — | ||
The AddressRepository::getSqlQuery() method constructs a database query without properly sanitizing user input, leading to SQL Injection. The method is not invoked anywhere within… | ||||
| CVE-2026-8727US | — | — | ||
The Crawler extension passes the X-T3Crawler-Meta response header from crawled URLs directly to PHP's unserialize(). An attacker controlling a crawled endpoint can inject arbitrary… | ||||
| CVE-2026-8726US | — | Exploit | ||
The extension fails to properly sanitize user input before using it in a database query. As a result, an unauthenticated attacker can inject arbitrary SQL through a URL parameter o… | ||||
| CVE-2026-46725US | — | — | ||
The extension passes an attacker-controlled cookie directly to PHP's unserialize() without safely processing the input. A remote, unauthenticated attacker can supply a crafted seri… | ||||
| CVE-2026-46724US | — | — | ||
The file indexer does not normalize the configured directory path. A backend user with permission to edit indexer configurations can index documents from arbitrary locations on the… | ||||
| CVE-2026-46723US | — | — | ||
The additional_tables configuration of the page and tt_content indexers accepts arbitrary table and field names. A backend user with permission to edit indexer configurations can c… | ||||
| CVE-2026-46722US | — | — | ||
The OOXML parsing of the file indexer does not disable external entity resolution. A crafted xlsx or pptx document placed in an indexed directory can cause local files to be read o… | ||||
| CVE-2026-46721US | — | — | ||
The create and edit flows do not restrict which user properties may be submitted and do not enforce access control on the frontend user group assignment. As a result, an attacker c… | ||||
02
references
External citations — patches, advisories, analysis.
- Typo3 Security Advisory vom 2026-05-18external
- Typo3 Security Advisory vom 2026-05-18external
- Typo3 Security Advisory vom 2026-05-18external
- Typo3 Security Advisory vom 2026-05-18external
- Typo3 Security Advisory vom 2026-05-18external
- Typo3 Security Advisory vom 2026-05-18external
- WID-SEC-W-2026-1585 - CSAF Versionself
- WID-SEC-2026-1585 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan