https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 24 Oct 2026 18:53:58 +0000 https://cve.radiocsirt.org/vuln/cnvd-2022-17969 cnvd-2022-17969 https://cve.radiocsirt.org/vuln/cnvd-2022-17969 https://cve.radiocsirt.org/vuln/euvd-2026-32601 EUVD-2026-32601 https://cve.radiocsirt.org/vuln/euvd-2026-32601 https://cve.radiocsirt.org/vuln/fkie_cve-2021-43562 <p>An issue was discovered in the pixxio (aka pixx.io integration or DAM) extension before 1.0.6 for TYPO3. The extension fails to restrict the image download to the configured pixx.io DAM URL, resulting in SSRF. As a result, an attacker can download various content from a remote location and save it to a user-controlled filename, which may result in Remote Code Execution. A TYPO3 backend user account is required to exploit this.</p> <p>An issue was discovered in the pixxio (aka pixx.io integration or DAM) extension before 1.0.6 for TYPO3. The extension fails to restrict the image download to the configured pixx.io DAM URL, resulting in SSRF. As a result, an attacker can download various content from a remote location and save it to a user-controlled filename, which may result in Remote Code Execution. A TYPO3 backend user account is required to exploit this.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-43562 https://cve.radiocsirt.org/vuln/ghsa-2cv2-83wv-6whc <p>An issue was discovered in the pixxio (aka pixx.io integration or DAM) extension before 1.0.6 for TYPO3. The extension fails to restrict the image download to the configured pixx.io DAM URL, resulting in SSRF. As a result, an attacker can download various content from a remote location and save it to a user-controlled filename, which may result in Remote Code Execution. A TYPO3 backend user account is required to exploit this.</p> <p>An issue was discovered in the pixxio (aka pixx.io integration or DAM) extension before 1.0.6 for TYPO3. The extension fails to restrict the image download to the configured pixx.io DAM URL, resulting in SSRF. As a result, an attacker can download various content from a remote location and save it to a user-controlled filename, which may result in Remote Code Execution. A TYPO3 backend user account is required to exploit this.</p> https://cve.radiocsirt.org/vuln/ghsa-2cv2-83wv-6whc https://cve.radiocsirt.org/vuln/gsd-2021-43562 gsd-2021-43562 https://cve.radiocsirt.org/vuln/gsd-2021-43562