GHSA-fpwg-7c56-4vq5Medium

The extension no longer applied its access protection to files in file storages that use a non...

Published
October 20, 2026
Last Modified
October 20, 2026

🔗 CVE IDs covered (1)

📋 Description

The extension no longer applied its access protection to files in file storages that use a non-default relative base path. These files were served directly by the web server, without any authentication or permission check. The issue is only exploitable when the extension is used on a website running TYPO3 14.3.

🔗 References (3)