VYPR

TYPO3 CMS

by TYPO3

CVEs (1)

  • CVE-2026-15305Jul 14, 2026
    risk 0.00cvss epss 0.00

    Users were able to upload files with arbitrary MIME types to forms using FileUpload or ImageUpload elements with allowedMimeTypes configured. The restriction was not enforced server-side because the MimeTypeValidator was registered during form building before concrete form…