File Exposure Vulnerability in TYPO3 Extension by TYPO3

CVE-2026-112240

What is CVE-2026-112240?

This security vulnerability allows an attacker to exploit weak token generation for file downloads, enabling unauthorized access to files uploaded through a form. The lack of verification of the file name permits a potential unauthorized user to guess and retrieve sensitive files. Additionally, tokens visible in plain text within notification emails further compromise the security of uploaded content, emphasizing the need for robust mitigation measures.

References