CVE record · 1 source
CVE-2026-113459
In versions running on TYPO3 10 and 11, the configured OpenAI API key is embedded in every backend page, so that the editor plugin can contact the…
- Vendor
- TYPO3, OpenAI
- Product
- TYPO3, ChatGPT / OpenAI
- Exposure class
- Web platform, AI infrastructure
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
In versions running on TYPO3 10 and 11, the configured OpenAI API key is embedded in every backend page, so that the editor plugin can contact the…
In versions running on TYPO3 10 and 11, the configured OpenAI API key is embedded in every backend page, so that the editor plugin can contact the OpenAI service directly from the browser. Any authenticated backend user can read…