CVE-2026-112237: Extension "Kitodo.Presentation" 7.0.0 to before 7.0.2, 0 to before 6.0.1

Affected technology

Extension "Kitodo.Presentation" · 7.0.0 to before 7.0.2, 0 to before 6.0.1
TYPO3

Component: Not specified by the source

Attack conditions (Source advisory, CVSS 4.0): Network (remote) · No privileges required · No user interaction required

What an attacker can do

An unauthenticated attacker can make the server send requests to arbitrary internal or external hosts. Source advisory’s CVSS 4.0 assessment (base score 6.9/10) rates confidentiality impact as low; integrity and availability impact as none.