co-stack/fal_sftp vulnerabilities

Latest co-stack/fal_sftp CVEs

Newest publication first

1. CVE-2014-8327 fal_sftp extension for TYPO3 uses weak permissions for sFTP driver files and folders

   Published 2014-10-27

   Medium·CVSS 4.0 EPSS 1.1%

   The fal_sftp extension before 0.2.6 for TYPO3 uses weak permissions for sFTP driver files and folders, which allows remote authenticated users to obtain sensitive information via unspecified vectors.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.