GHSA-34jq-548x-m2x9HighCVSS 7.0

Improper Resource Shutdown or Release in TYPO3 extension

Published
August 30, 2021
Last Modified
February 1, 2023

🔗 CVE IDs covered (1)

CVE-2021-38623 →

📋 Description

Wrong usage of the TYPO3 FAL API results in copies of processed files being saved to the /var/transient/ folder of a TYPO3 website on every frontend request. This can result in Denial of Service, since the webspace may be filled up with image files simply by crafting a large amount of requests to the website.

🎯 Affected products1

  • composer/webcoast/deferred-image-processing:< 1.0.2

🔗 References (3)