[HIGH] TYPO3 CMS has Broken Access Control in its Media Module

PKSA-br9n-75sp-8dqy CVE-2026-49742 GHSA-chm7-4vch-h8vr

Affected package: typo3/cms-filelist

Affected version: >=14.0.0,<14.3.3|>=13.0.0,<13.4.31|>=12.0.0,<12.4.46|>=11.0.0,<11.5.51

Reported by:
GitHub