GHSA-46FQ-683F-2JWQ yag and pt_extbase extensions for TYPO3 allow remote attackers to bypass access restrictions

The Ajax dispatcher for Extbase in the Yet Another Gallery yag extension before 3.0.1 and Tools for Extbase development ptextbase extension before 1.5.1 allows remote attackers to bypass access restrictions and execute arbitrary controller actions via unspecified vectors...