CVE-2021-43563

An issue was discovered in the pixxio aka pixx.io integration or DAM extension before 1.0.6 for TYPO3. The Access Control in the bundled media browser is broken, which allows an unauthenticated attacker to perform requests to the pixx.io API for the configured API user. This allows an attacker to...

CVE-2021-43563

CVE-2021-43563 affects the TYPO3 extension pixx.io integration (DAM) prior to version 1.0.6. The issue is a broken Access Control in the bundled media browser, allowing an unauthenticated attacker to make requests to the pixx.io API using the configured API user and download media files from the ...