Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: TYPO3 Extension "sgalinski Cookie Consent" — typo3.org/security/advisory/typo3-ext-sa-2026-029 Clear all filters
TI-2026-76769 CVE-2026-112065 · GHSA-6hv6-9mqv-c43h

Missing authorization in TYPO3 sgalinski Cookie Consent extension

Priority LOW 24

The routes that provide consent history and statistics data did not check whether the backend user had access to the module or to the requested page.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00324 Published 2026-10-20 Fixed in 8.1.12, 7.4.6 CWE-862
TI-2026-76768 CVE-2026-112064 · GHSA-g9xv-qphg-5rv3

SQL Injection in sgalinski Cookie Consent extension for TYPO3

Priority LOW 31

The backend module for reviewing the consent history accepted sorting, grouping and index options from the request and used them in a database query without validation.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00366 Published 2026-10-20 Fixed in 8.1.12, 7.4.6 CWE-89