Typo3

CVE-2026-120329: Saving the configuration of the mail backend module writes submitted settings to the page TSconfig without restricting them to the configuration options of the

CVE-2026-120329 Nov 3, 2026 Source: Vendor

Saving the configuration of the mail backend module writes submitted settings to the page TSconfig without restricting them to the configuration options of the module. Backend users with access to the mail module can write arbitrary page TSconfig.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://nvd.nist.gov/vuln/detail/CVE-2026-120329

Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

1 line

Showing 1–1 of 1

CVE-2026-120329 BR2026-0000-041533 unclaimed

Credited as Alexander Grein