GCVE - cpe:2.3:a:pixxio:pixx.io:*:*:*:*:*:typo3:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:pixxio:pixx.io:*:*:*:*:*:typo3:*:*

part: a version: * update: *

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-43563`	vulnerable	2026-06-08 05:36:43.560347	Details available An issue was discovered in the pixxio (aka pixx.io integration or DAM) extension before 1.0.6 for TYPO3. The Access Control in the bundled media browser is broken, which allows an unauthenticated attacker to perform requests to the pixx.io API for the configured API user. This allows an attacker to download various media files from the DAM system. Published: 2021-11-10T15:02:41.000Z Updated: 2024-08-04T04:03:08.345Z Open on db.gcve.eu Reference links https://typo3.org/security/advisory/typo3-ext-sa-2021-017	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-43562`	vulnerable	2026-06-08 05:36:43.559941	Details available An issue was discovered in the pixxio (aka pixx.io integration or DAM) extension before 1.0.6 for TYPO3. The extension fails to restrict the image download to the configured pixx.io DAM URL, resulting in SSRF. As a result, an attacker can download various content from a remote location and save it to a user-controlled filename, which may result in Remote Code Execution. A TYPO3 backend user account is required to exploit this. Published: 2021-11-10T15:01:18.000Z Updated: 2024-08-04T04:03:08.612Z Open on db.gcve.eu Reference links https://typo3.org/security/advisory/typo3-ext-sa-2021-017	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.