MEDIUM 5.3 NVD

CVE-2026-112065

The routes that provide consent history and statistics data did not check whether the backend user had access to the module or to the requested page. Any authen

The routes that provide consent history and statistics data did not check whether the backend user had access to the module or to the requested page. Any authenticated backend user, regardless of permissions, could therefore retrieve consent data of any site in the installation.

References

https://typo3.org/security/advisory/typo3-ext-sa-2026-029

Published: 2026-10-20 · Source: NVD · Feed updated: 2026-10-20

This medium severity vulnerability with a CVSS score of 5.3 was published on 2026-10-20 via NVD.

vulnfeed aggregates 16920 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.