GHSA-xwq4-2cwr-fv2qMedium

fal_sftp extension for TYPO3 uses weak permissions for sFTP driver files and folders

Published
May 17, 2022
Last Modified
April 14, 2025

🔗 CVE IDs covered (1)

CVE-2014-8327 →

📋 Description

The fal_sftp extension before 0.2.6 for TYPO3 uses weak permissions for sFTP driver files and folders, which allows remote authenticated users to obtain sensitive information via unspecified vectors.

🎯 Affected products2

  • composer/co-stack/fal_sftp:< 0.2.6
  • composer/vertexvaar/falsftp:< 0.2.6

🔗 References (5)