GitHub Advisoryadvisory · Packagist

GHSA-c72x-mc2p-wv7x TYPO3 ke_search path traversal due to lack of normalization on config directory from file indexer

MEDIUM Published 2026-05-19 Modified 2026-06-29 Official page ↗
Aliases
CVE-2026-46724
Ecosystem
Packagist
Packages
tpwd/ke_search
Severity
Moderate
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N
Weaknesses
CWE-22
Reviewed
2026-06-29

Affected packages

• Packagist tpwd/ke_search: >= 7.0.0, < 7.0.1 → fixed in 7.0.1 • Packagist tpwd/ke_search: >= 6.0.0, < 6.6.1 → fixed in 6.6.1 • Packagist tpwd/ke_search: >= 5.0.0, < 5.6.2 → fixed in 5.6.2 • Packagist tpwd/ke_search: < 4.6.7 → fixed in 4.6.7

Description

In TYPO3 faceted fulltext search (`ke_search`), the file indexer does not normalize the configured directory path. A backend user with permission to edit indexer configurations can index documents from arbitrary locations on the server file system through path traversal sequences. This has been patched in versions 7.0.1, 6.6.1, 5.6.2 and 4.6.7.

Related

Alias · CVE (1)

  • CVE-2026-46724 The file indexer does not normalize the configured directory path. vulnerability

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References