Live › vulnerability › CVE-2026-120329
Saving the mail backend module's configuration writes submitted settings into page TSconfig without limiting them to the module's own options. A backend user with access to the mail module can therefore write arbitrary page TSconfig.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 10:20 UTC. All times on this page are UTC.
Sites running the TYPO3 CMS with the mail backend module, where some backend editors have access to that module. Exposure depends on which backend users are allowed into it. unknown for affected version ranges.
No product ranges from the sources yet.
vendor/bin/typo3 --version or the Composer lock file.No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Saving the configuration of the mail backend module writes submitted settings to the page TSconfig without restricting them to the configuration options of the module. Backend users with access to the mail module can write arbitrary page TSconfig.
This page as .md · .json · in your agent: get_signal("CVE-2026-120329")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.