The Ajax dispatcher for Extbase in the Yet Another Gallery (yag) extension before 3.0.1 and Tools for Extbase development (pt_extbase) extension before 1.5.1 allows remote attackers to bypass access restrictions and exec…
CVSS 2.0HIGH 7.5·Network·No auth·Interaction —·EPSS 0.01523·Published 2014-10-03·Fixed in 3.0.1, 1.5.1CWE-264