{"id":"CVE-2014-6289","aliases":[],"url":"https://o3.security/vulnerability/CVE-2014-6289","summary":"The Ajax dispatcher for Extbase in the Yet Another Gallery (yag) extension before 3.0.1 and Tools for Extbase development (pt_extbase) extension before 1.5.1 allows remote attackers…","details":"The Ajax dispatcher for Extbase in the Yet Another Gallery (yag) extension before 3.0.1 and Tools for Extbase development (pt_extbase) extension before 1.5.1 allows remote attackers to bypass access restrictions and execute arbitrary controller actions via unspecified vectors.","published":"2014-10-03T14:55:08.867","modified":"2026-06-17T00:12:51.287","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[],"fix":null,"references":[{"type":"WEB","url":"http://typo3.org/extensions/repository/view/pt_extbase"},{"type":"WEB","url":"http://typo3.org/extensions/repository/view/yag"},{"type":"ADVISORY","url":"http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-005/"},{"type":"WEB","url":"http://typo3.org/extensions/repository/view/pt_extbase"},{"type":"WEB","url":"http://typo3.org/extensions/repository/view/yag"},{"type":"ADVISORY","url":"http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-005/"}],"provenance":{"sources":["OSV.dev","NVD","FIRST.org (EPSS)"],"lastVerified":"2026-06-17T00:12:51.287"}}