What is GHSA-8j7q-247m-7f82?

GHSA-8j7q-247m-7f82 is a security advisory published by GitHub Security Advisories with Medium severity. When OpenSSL is unavailable on the server, the extension transmits TYPO3 system information in...

Which CVE IDs does GHSA-8j7q-247m-7f82 cover?

GHSA-8j7q-247m-7f82 covers the following CVE IDs: CVE-2026-77131. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-8j7q-247m-7f82Medium

When OpenSSL is unavailable on the server, the extension transmits TYPO3 system information in...

Vendor

GitHub Security Advisories

Published

August 25, 2026

Last Modified

August 25, 2026

🔗 CVE IDs covered (1)

CVE-2026-77131 →

📋 Description

When OpenSSL is unavailable on the server, the extension transmits TYPO3 system information in cleartext instead of encrypting it. Exploitation requires the attacker to already be in control of the SYSSY project's API key.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-77131
https://typo3.org/security/advisory/typo3-ext-sa-2026-015
https://github.com/advisories/GHSA-8j7q-247m-7f82