CVE-2026-112065: Missing Authorization in extension "sgalinski Cookie Consent" (sg_cookie_optin)
The routes that provide consent history and statistics data did not check whether the backend user had access to the module or to the requested page. Any authenticated backend user, regardless of permissions, could therefore retrieve consent data of any site in the installation.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
Any authenticated backend user in the TYPO3 installation can retrieve consent history and statistics data, even if that user lacks permission for the relevant module or requested page.
What access is required to retrieve the exposed data?
An attacker needs valid backend authentication. The issue does not describe unauthenticated access.
What data can an unauthorized backend user access?
The affected routes expose consent history and statistics data for any site in the installation.
How can I determine whether a backend user is affected by the authorization bypass?
Review whether a backend user without access to the extension's module or to a target page can request the consent-history or statistics routes and receive data. Successful retrieval despite missing module or page permissions indicates exposure.