https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T11:03:07.317386+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-367909 EUVD-2026-367909 2026-10-02T11:03:07.385200+00:00 EUVD-2026-367909 https://cve.radiocsirt.org/vuln/fkie_cve-2023-50462 fkie_cve-2023-50462 2026-10-02T11:03:07.385246+00:00

An issue was discovered in the content_consent (aka Content Consent) extension through 2.0.1 for TYPO3. It fails to verify whether a specified content element identifier is permitted by the plugin. This enables an unauthenticated user to display various content elements, leading to an insecure direct object reference (IDOR) issue with the potential to expose internal content elements.

 https://cve.radiocsirt.org/vuln/ghsa-j8cw-ppmv-wj85 GHSA-j8cw-ppmv-wj85 — Insecure Direct Object Reference in extension "Content Consent" (content_consent) 2026-10-02T11:03:07.385279+00:00

Affected: Packagist: t3s/content-consent

The extension fails to verify whether a specified content element identifier is permitted by the plugin. This enables an unauthenticated user to display various content elements, leading to an insecure direct object reference (IDOR) vulnerability with the potential to expose internal content elements.

 https://cve.radiocsirt.org/vuln/gsd-2023-50462 gsd-2023-50462 2026-10-02T11:03:07.385305+00:00 gsd-2023-50462 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-3144 WID-SEC-W-2023-3144 — TYPO3 Extensions: Mehrere Schwachstellen 2026-10-02T11:03:07.385317+00:00

Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in verschiedenen TYPO3 Extensions ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen und beliebigen Code auszuführen.