CVE-2026-112070: Extension "Analytics" 0 to before 1.1.1

Affected technology

Extension "Analytics" · 0 to before 1.1.1
TYPO3

Component: Not specified by the source

Attack conditions (Source advisory, CVSS 4.0): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

Any backend user can therefore retrieve analytics data of the sites they have page access to. Source advisory’s CVSS 4.0 assessment (base score 5.3/10) rates confidentiality and integrity impact as low; availability impact as none.