Veille CVE

Recherche « TYPO3 Extension "Analytics" »

2 CVE

Critique 0 Élevée 0 Moyenne 2 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « TYPO3 Extension "Analytics" » ✕
  1. CVE-2026-112070 5.3 Moyenne

    TYPO3 Extension "Analytics"

    The AJAX routes of the extension do not check whether a backend user has access to the related module or dashboard widget. Any backend user can therefore retrieve analytics data of the sites they have page access to.

  2. CVE-2026-112068 5.3 Moyenne

    TYPO3 Extension "Analytics"

    The backend module does not check whether a backend user has access to the requested site. Users with access to the module can therefore open the analytics dashboard of any site.