CVE-2014-8325: The Calendar Base (cal) extension before 1.5.9 and 1.6.x before 1.6.1 for TYPO3 allows remote attackers to...

Security readout for executives and security teams

CVE-2014-8325 affects the TYPO3 Calendar Base extension. A remote attacker could trigger excessive server resource use through behavior tied to PHP PCRE processing, potentially causing denial of service. The sources do not provide a CVSS score or evidence of active exploitation. Exposure is likely limited to TYPO3 installations using the Calendar Base cal extension below 1.5.9 or 1.6.1. Internet-facing calendar functionality would increase operational risk because the issue is remotely triggerable. Treat this as a service-availability risk for legacy TYPO3 sites. Prioritize patching if public calendar pages support business operations, but there is no source-backed evidence here of active exploitation or compromise impact. Mitigation focus: Inventory TYPO3 sites for the Calendar Base cal extension.; Upgrade cal to 1.5.9, 1.6.1, or a later vendor-supported release.; Review TYPO3 vendor guidance for any additional operational mitigations..

Prepared

Jun 14, 2026, 06:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.