CVE-2021-43564

The CVE-2021-43564 entry concerns the TYPO3 extension Job Fair (hov/jobfair). The vulnerability arises because the extension does not protect or obfuscate uploaded filenames, enabling an unauthenticated user to access sensitive data by guessing the filename (e.g., uploads/tx_jobfair/cv.pdf). Affe...