Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-112068

Insecure Direct Object Reference in extension "Analytics" (analytics)

Description

The backend module does not check whether a backend user has access to the requested site. Users with access to the module can therefore open the analytics dashboard of any site.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TYPO3 Extension "Analytics"

Default version status: unaffected

  • 0 to < 1.1.1affected

References