Skip to content
OpenAdvisories

Product · TYPO3

Extension "Kitodo.Presentation"

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.9
    CVE-2026-112237

    Server-Side Request Forgery in extension "Kitodo.Presentation" (dlf)

    The extension provides a public proxy endpoint that fetches a URL on behalf of the visitor. For one HTTP request method, the endpoint does not apply the authorization check that protects the other methods, so the URL it fetches is fully controlled by the requ…

    TYPO3 Extension "Kitodo.Presentation"