VYPR

Mask

by TYPO3

CVEs (1)

  • CVE-2026-77139MedAug 25, 2026
    risk 0.39cvss epss

    The extension fails to validate a client-supplied template element key before using it to build file paths for saving and deleting Mask template files. An authenticated backend user with access to the Mask module can supply a key containing path traversal sequences to create or…