CVE-2008-3049: The PDF Generator 2 (pdf_generator2) extension 0.5.0 and earlier for TYPO3 allows attackers to obtain sensi...

Security readout for executives and security teams

This CVE affects the TYPO3 PDF Generator 2 extension, version 0.5.0 and earlier. The public record says attackers could obtain sensitive information, but it does not describe the exact data, path, or conditions. Treat this as a legacy exposure risk where old TYPO3 sites or archived deployments may still carry vulnerable extension code. Exposure is likely limited to TYPO3 installations that installed PDF Generator 2, especially version 0.5.0 or earlier. General TYPO3 sites without this extension are not shown as affected by the provided sources. Set priority after confirming exposure. If the vulnerable extension exists on an internet-facing TYPO3 site, treat it as a meaningful information disclosure risk. If the extension is absent, no action is indicated by this CVE. Mitigation focus: Inventory TYPO3 sites for the pdf_generator2 extension.; If present, verify the installed extension version.; Check TYPO3 security guidance and extension release notes for the supported fix path..

Prepared

Jun 28, 2026, 18:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.