TYPO3 t3:// resource access disclosure
CVE-2024-25120 allowed a valid backend user to access resources beyond their permissions through t3:// links under a valid link-handler configuration. TYPO3 published patched versions for affected release lines.
Source ↗
