Summary
TYPO3 CMS has Privilege Escalation & SQL Injection in its Form Framework
References
Related vulnerabilities
All Supply chain →- CRITICALGHSA-8FQ9-273G-6MRG
Avo: Missing Authorization in Avo Association Attach Endpoint Allows Unauthorized Relationship Manipulation and Privilege Escalation
- HIGHGHSA-2MFG-CC43-9PCJ
LangChain4j: SQL injection via metadata filters in langchain4j-mariadb and langchain4j-pgvector
- MEDIUMGHSA-P5CP-R7RG-QPXC
Open WebUI: RAG ACL Bypass in Milvus Multitenancy Mode
- MEDIUMGHSA-CX9V-4QJ2-JRW6
Open WebUI BOLA: `search_knowledge_files` Allows Unauthorized Knowledge Base File Enumeration
- HIGHGHSA-VJQM-6GCC-62CR
Open WebUI: Forged model meta.knowledge allows cross-user file read and deletion
- HIGHGHSA-VRHC-3FR6-PC3C
Open WebUI: Forged chat-file link allows cross-user file read and deletion