CVE-2026-77131 - CVSS, EPSS & CISA Kev 상세 정보 | CVE Find

CVE 설명

When OpenSSL is unavailable on the server, the extension transmits TYPO3 system information in cleartext instead of encrypting it. Exploitation requires the attacker to already be in control of the SYSSY project's API key.

CVE 정보

관련 약점

CWE-ID	약점 이름	출처
CWE-319	Cleartext Transmission of Sensitive Information The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

참고 자료

https://typo3.org/security/advisory/typo3-ext-sa-2026-015