[Ticket#2014112710000045] Improper Access Control vulnerability in extension WebDav for filemounts (webdav)
Dear TYPO3 users, an Improper Access Control vulnerability has been discovered in third party TYPO3 extension WebDav for filemounts (webdav). For further information on the issue please read the related advisory TYPO3-EXT-SA-2014-017 that was published today: http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-017/ In general the TYPO3 Security Team recommends to read the following pages: The TYPO3 Security Guide: http://docs.typo3.org/typo3cms/SecurityGuide/ Make sure you are subscribed to the TYPO3 Announce List: http://lists.typo3.org/cgi-bin/mailman/listinfo/typo3-announce See all TYPO3 security advisories for TYPO3 third party extensions: http://typo3.org/teams/security/security-bulletins/typo3-extensions/ Regards, Marcus Krause Member of the TYPO3 Security Team -- TYPO3 Security Team homepage: http://typo3.org/teams/security/ E-Mail: security@typo3.org Please note: When replying to this e-mail, please leave the header intact.