{"id":"CVE-2026-112064","published":"2026-10-20T10:17:03.467","lastModified":"2026-10-20T19:28:52.970","description":"The backend module for reviewing the consent history accepted sorting, grouping and index options from the request and used them in a database query without validation. Only the filter conditions of that query were bound as parameters. A backend user with access to the history or statistics functions could use this to read arbitrary data from the database, including password hashes of backend and frontend users.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-89"],"vendors":[],"products":[],"references":[{"url":"https://typo3.org/security/advisory/typo3-ext-sa-2026-029","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}