CVE-2026-112068Insecure Direct Object Reference in extension "Analytics" (analytics)

Beschreibung

The backend module does not check whether a backend user has access to the requested site. Users with access to the module can therefore open the analytics dashboard of any site.

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

Referenzen und Patches

• https://typo3.org/security/advisory/typo3-ext-sa-2026-031 vendor-advisory