Packagist/co-stack/fal_sftp CVE-2014-8327: medium, EPSS 1.08%
fal_sftp extension for TYPO3 uses weak permissions for sFTP driver files and folders
Action: Upgrade co-stack/fal_sftp to 0.2.6 or later.
composer require co-stack/fal_sftp:0.2.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.2.6 | - |
Fixed versions
| 0.2.6 |
Sources
- osv: GHSA-xwq4-2cwr-fv2q
- https://nvd.nist.gov/vuln/detail/CVE-2014-8327
- https://exchange.xforce.ibmcloud.com/vulnerabilities/97668
- https://typo3.org/security/advisory/typo3-ext-sa-2014-014
- http://typo3.org/extensions/repository/view/fal_sftp
CVE-2014-8327 · published · modified · JSON