Veille CVE

Recherche « TYPO3 Extension "Site Crawler" »

1 CVE

Critique 0 Élevée 1 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « TYPO3 Extension "Site Crawler" » ✕
  1. CVE-2026-8727 7.1 Élevée

    TYPO3 Extension "Site Crawler"

    The Crawler extension passes the X-T3Crawler-Meta response header from crawled URLs directly to PHP's unserialize(). An attacker controlling a crawled endpoint can inject arbitrary serialized PHP objects, leading to Remote Code Execution on the TYPO3 server. Exploitation requires administrative privileges to configure a crawler-enabled page and trigger the crawl via a Scheduler task.