Vulnerabilities

TI-2026-53873 CVE-2026-77130 · GHSA-j868-6x23-744q

Insufficient Session Expiration in extension "SYSSY - TYPO3 Monitoring & Security Checks" (syssy)

LOW 24

The extension fails to properly validate the expiration of a client-supplied JWT token, allowing an attacker in control of a valid API key to authenticate with an expired token.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00351 Published 2026-08-25 Fixed in 3.0.6 CWE-613

TI-2026-53874 CVE-2026-77131 · GHSA-8j7q-247m-7f82

Cleartext Transmission of Sensitive Information in extension "SYSSY - TYPO3 Monitoring & Security Checks" (syssy)

LOW 24

When OpenSSL is unavailable on the server, the extension transmits TYPO3 system information in cleartext instead of encrypting it.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00244 Published 2026-08-25 Fixed in 3.0.6 CWE-319

Vulnerabilities

Filters

Insufficient Session Expiration in extension "SYSSY - TYPO3 Monitoring & Security Checks" (syssy)

Cleartext Transmission of Sensitive Information in extension "SYSSY - TYPO3 Monitoring & Security Checks" (syssy)