-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| typo3/cms-core | composer | >= 6.0, < 6.0.9 | 6.0.9 |
| typo3/cms-core | composer | >= 6.1, < 6.1.4 | 6.1.4 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from improper access control in FAL's permission checks. While exact code isn't available, TYPO3's architecture suggests: 1) ResourceStorage handles permission checks for file operations - a flawed implementation here would allow bypassing file mounts. 2) FileProcessor handles incoming file operation requests - missing permission validation in request handling would enable crafted URL exploitation. The medium confidence reflects the lack of direct patch evidence, but aligns with TYPO3's FAL structure and vulnerability patterns in access control systems.
PHPPHPOngoing coverage of React2Shell