{"answers":{"affected":"8 open source packages ship an affected version, including tpwd/ke_search.","exploited":"There is no known exploitation of CVE-2026-46723 in the wild and no public exploit code.","fix":"Upgrade tpwd/ke_search to a fixed version for your release line: 4.6.7, 5.6.2, 6.6.1 or 7.0.1.","what":"CVE-2026-46723 is a medium-severity vulnerability in TYPO3 Extension \"Faceted Search\", published on 19 May 2026. An attacker needs administrator access to exploit it, with no action from the victim."},"fix_prompt":"Check this codebase for CVE-2026-46723 and fix it if it is affected.\n\nWhat it is: CVE-2026-46723 is a medium-severity vulnerability in TYPO3 Extension \"Faceted Search\", published on 19 May 2026. An attacker needs administrator access to exploit it, with no action from the victim.\nExploitation: There is no known exploitation of CVE-2026-46723 in the wild and no public exploit code.\n\nAffected packages and fixed versions:\n- tpwd/ke_search (Packagist): affected all versions; fixed in 4.6.7\n- tpwd/ke_search (Packagist): affected all versions; fixed in 4.6.7\n- tpwd/ke_search (Packagist): affected from 5.0.0; fixed in 5.6.2\n- tpwd/ke_search (Packagist): affected from 5.0.0; fixed in 5.6.2\n- tpwd/ke_search (Packagist): affected from 6.0.0; fixed in 6.6.1\n- tpwd/ke_search (Packagist): affected from 6.0.0; fixed in 6.6.1\n- tpwd/ke_search (Packagist): affected from 7.0.0; fixed in 7.0.1\n- tpwd/ke_search (Packagist): affected from 7.0.0; fixed in 7.0.1\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/CVE-2026-46723/ (Markdown: https://insights.sbomify.com/CVE-2026-46723/index.md)","id":"CVE-2026-46723","markdown":"https://insights.sbomify.com/CVE-2026-46723/index.md","name":"CVE-2026-46723","record":{"aliases":["GHSA-67j3-jmm3-32xc"],"analysis":{"component_type":"cms_plugin","fix_type":"patch","impacts":["data_read"],"network_reachable":"yes","non_default_config":false,"product_category":"TYPO3 Faceted Search","requires_auth":"high_privilege","summary":"Backend users can copy sensitive data from internal tables into the search index via arbitrary table configuration in the Faceted Search extension.","user_interaction":"not_required","vuln_class":"information_disclosure"},"analysis_generated_by":"qwen3.8-flash-next","assigner":"TYPO3","cpe":[],"cvss":{"score":5.9,"severity":"medium","source":"cna","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N","version":"4.0"},"cwes":[{"id":"CWE-668","name":"Exposure of Resource to Wrong Sphere"}],"description":"The additional_tables configuration of the page and tt_content indexers accepts arbitrary table and field names. A backend user with permission to edit indexer configurations can copy sensitive data from internal TYPO3 tables into the search index.","ecosystems":["Packagist"],"exploits":{"exploitdb":0,"first_seen":null,"github_poc":0,"max_poc_stars":null,"metasploit":0,"nuclei":0,"refs":[],"tier":"none_known"},"has_fix":true,"headline":"Information Disclosure in extension \"Faceted Search\" (ke_search)","id":"CVE-2026-46723","indexable":true,"kev":null,"kind":"cve","links":{"ecosystem":"Packagist","product":null,"products":[],"type":"information_disclosure","year":"2026"},"n_packages":8,"n_references":1,"next":{"headline":"Path Traversal in extension \"Faceted Search\" (ke_search)","id":"CVE-2026-46724"},"packages":[{"ecosystem":"Packagist","fixed":["4.6.7"],"introduced":["0"],"last_affected":[],"package":"tpwd/ke_search","purl":null,"source":"GHSA-67j3-jmm3-32xc"},{"ecosystem":"Packagist","fixed":["4.6.7"],"introduced":["0"],"last_affected":[],"package":"tpwd/ke_search","purl":"pkg:composer/tpwd/ke_search","source":"GHSA-67j3-jmm3-32xc"},{"ecosystem":"Packagist","fixed":["5.6.2"],"introduced":["5.0.0"],"last_affected":[],"package":"tpwd/ke_search","purl":null,"source":"GHSA-67j3-jmm3-32xc"},{"ecosystem":"Packagist","fixed":["5.6.2"],"introduced":["5.0.0"],"last_affected":[],"package":"tpwd/ke_search","purl":"pkg:composer/tpwd/ke_search","source":"GHSA-67j3-jmm3-32xc"},{"ecosystem":"Packagist","fixed":["6.6.1"],"introduced":["6.0.0"],"last_affected":[],"package":"tpwd/ke_search","purl":null,"source":"GHSA-67j3-jmm3-32xc"},{"ecosystem":"Packagist","fixed":["6.6.1"],"introduced":["6.0.0"],"last_affected":[],"package":"tpwd/ke_search","purl":"pkg:composer/tpwd/ke_search","source":"GHSA-67j3-jmm3-32xc"},{"ecosystem":"Packagist","fixed":["7.0.1"],"introduced":["7.0.0"],"last_affected":[],"package":"tpwd/ke_search","purl":null,"source":"GHSA-67j3-jmm3-32xc"},{"ecosystem":"Packagist","fixed":["7.0.1"],"introduced":["7.0.0"],"last_affected":[],"package":"tpwd/ke_search","purl":"pkg:composer/tpwd/ke_search","source":"GHSA-67j3-jmm3-32xc"}],"prev":{"headline":"XML External Entity Injection in extension \"Faceted Search\" (ke_search)","id":"CVE-2026-46722"},"products":["Extension \"Faceted Search\""],"published":"2026-05-19","related":[],"sources":[{"class":"attribution","licence":"CVE Terms of Use (MITRE)","name":"CVE List","prefix":"CVE"},{"class":"attribution","licence":"CC BY 4.0","name":"GitHub Advisory Database","prefix":"GHSA"},{"class":"attribution","licence":"CWE Terms of Use","name":"CWE (MITRE)"},{"class":"attribution","licence":"FIRST CVSS licence","name":"CVSS (FIRST)"}],"ssvc":{"automatable":"no","exploitation":"none","technical_impact":"partial"},"state":"PUBLISHED","updated":"2026-05-19","vendors":["TYPO3"]},"summary":"Backend users can copy sensitive data from internal tables into the search index via arbitrary table configuration in the Faceted Search extension.","url":"https://insights.sbomify.com/CVE-2026-46723/"}