CVE-2026-77131
2026-08-25
09h17 +00:00
09h17 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
When OpenSSL is unavailable on the server, the extension transmits TYPO3 system information in cleartext instead of encrypting it. Exploitation requires the attacker to already be in control of the SYSSY project's API key.
CVE 信息
相关弱点
| 弱点名称 | 来源 | |
|---|---|---|
| Cleartext Transmission of Sensitive Information The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors. |
