Lucene search
+L

3 matches found

RedhatCVE
RedhatCVE
•added 2026/06/05 7:29 p.m.•25 views

CVE-2026-46723

The additionaltables configuration of the page and ttcontent indexers accepts arbitrary table and field names. A backend user with permission to edit indexer configurations can copy sensitive data from internal TYPO3 tables into the search index...

5.9CVSS5.9AI score0.00318EPSS
SaveExploits0References1
Mend
Mend
•added 2026/05/19 9:23 a.m.•8 views

CVE-2026-46723

The additionaltables configuration of the page and ttcontent indexers accepts arbitrary table and field names. A backend user with permission to edit indexer configurations can copy sensitive data from internal TYPO3 tables into the search index...

6.8CVSS5.9AI score0.00318EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/05/19 9:23 a.m.•64 views

CVE-2026-46723 Information Disclosure in extension "Faceted Search" (ke_search)

The additionaltables configuration of the page and ttcontent indexers accepts arbitrary table and field names. A backend user with permission to edit indexer configurations can copy sensitive data from internal TYPO3 tables into the search index...

5.9CVSS0.00318EPSS
SaveExploits0References1
Rows per page
Query Builder