Description
The fal_sftp extension before 0.2.6 for TYPO3 uses weak permissions for sFTP driver files and folders, which allows remote authenticated users to obtain sensitive information via unspecified vectors.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | co-stack/fal_sftp | < 0.2.6 | 0.2.6 | GHSA-xwq4-2cwr-fv2q |
| Packagist | vertexvaar/falsftp | < 0.2.6 | 0.2.6 | GHSA-xwq4-2cwr-fv2q |