{"action":"Upgrade co-stack/fal_sftp to 0.2.6 or later.","affected":[{"fixed":"0.2.6","introduced":"0"}],"component":"co-stack/fal_sftp","cve_ids":["CVE-2014-8327"],"ecosystem":"Packagist","epss":0.01082,"exploited":false,"fixed_versions":["0.2.6"],"ghsa_id":"GHSA-xwq4-2cwr-fv2q","id":"tcs_01M5KFBE2EBWH1WP8QPR3EN2CF","modified_at":"2025-04-14T20:12:17.655279Z","published_at":"2022-05-17T01:13:38Z","references":["https://osv.dev/vulnerability/GHSA-xwq4-2cwr-fv2q","https://nvd.nist.gov/vuln/detail/CVE-2014-8327","https://exchange.xforce.ibmcloud.com/vulnerabilities/97668","https://typo3.org/security/advisory/typo3-ext-sa-2014-014","http://typo3.org/extensions/repository/view/fal_sftp"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-xwq4-2cwr-fv2q","url":"https://osv.dev/vulnerability/GHSA-xwq4-2cwr-fv2q"}],"summary":"fal_sftp extension for TYPO3 uses weak permissions for sFTP driver files and folders"}