CVE-2026-109162

Katalog CVE

CVSS 6.3 · Medium

Kerentanan Files or Directories Accessible to External Parties. Skor CVSS 4.0 6.3 (Medium) menurut CNA.

Deskripsi (NVD)

Forms using FileUpload or ImageUpload elements with a custom saveToFileMount configured stored uploaded files in the default storage folder 1:/user_upload/ instead of the configured destination. This could cause uploaded files to end up in a publicly accessible storage even though a restricted, non-public storage had been configured. Files stored this way are served directly, without the access checks applied to non-public storages. Forms that use the default value for saveToFileMount are not affected. This issue affects TYPO3 CMS versions 14.0.0-14.3.8.

Rincian

Terbit di NVD

13 Oktober 2026

Terakhir diubah

14 Oktober 2026

Status NVD

Received

CVSS 4.0

6.3 (Medium), sumber CNA
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-552: Files or Directories Accessible to External Parties
CWE-696: Incorrect Behavior Order

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://github.com/TYPO3/typo3/commit/cc3e8e28b0e830aaf6ad857272f3f2dc3c4ede12
• https://github.com/TYPO3/typo3/commit/f536f75c6bd3456165e4200e5df1b236ddeae3b0
• https://news.typo3.com/security/advisory/typo3-core-sa-2026-024