{"action":"Upgrade vertexvaar/falsftp to 0.2.6 or later.","affected":[{"fixed":"0.2.6","introduced":"0"}],"component":"vertexvaar/falsftp","cve_ids":["CVE-2014-8327"],"ecosystem":"Packagist","epss":0.01082,"exploited":false,"fixed_versions":["0.2.6"],"ghsa_id":"GHSA-xwq4-2cwr-fv2q","id":"tcs_01M5KFBE5PHT5A04WEDXQ2JC05","modified_at":"2025-04-14T20:12:17.655279Z","published_at":"2022-05-17T01:13:38Z","references":["https://osv.dev/vulnerability/GHSA-xwq4-2cwr-fv2q","https://nvd.nist.gov/vuln/detail/CVE-2014-8327","https://exchange.xforce.ibmcloud.com/vulnerabilities/97668","https://typo3.org/security/advisory/typo3-ext-sa-2014-014","http://typo3.org/extensions/repository/view/fal_sftp"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-xwq4-2cwr-fv2q#Packagist/vertexvaar/falsftp","url":"https://osv.dev/vulnerability/GHSA-xwq4-2cwr-fv2q"}],"summary":"fal_sftp extension for TYPO3 uses weak permissions for sFTP driver files and folders"}