CVE Intelligence

Vulnerabilidades do Typo3 Extension "FAL Protect"

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Typo3 Extension "FAL Protect": 1 registro(s), com versões afetadas e correções.

CVE-2026-112069 Média · 6.3 CWE-862 20/10/2026
Broken Access Control in extension "FAL Protect" (fal_protect)
The extension no longer applied its access protection to files in file storages that use a non-default relative base path. These files were served directly by the web server, without any authentication or permission check. The issue is only exploitable when the extension is used on a website running TYPO3 14.3.