CVE-2026-112068Insecure Direct Object Reference in extension "Analytics" (analytics)

Açıklama

The backend module does not check whether a backend user has access to the requested site. Users with access to the module can therefore open the analytics dashboard of any site.

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

Kaynaklar ve yamalar

• https://typo3.org/security/advisory/typo3-ext-sa-2026-031 vendor-advisory