CVE-2014-8327: The fal_sftp extension before 0.2.6 for TYPO3 uses weak permissions for sFTP driver files and folders, whic...

Security readout for executives and security teams

CVE-2014-8327 is an information disclosure issue in the TYPO3 fal_sftp extension before version 0.2.6. Weak file and folder permissions could let a remote authenticated user access sensitive information. The public record does not provide CVSS, CWE, detailed vectors, or confirmed active exploitation. Exposure is likely limited to TYPO3 sites that installed the fal_sftp extension before version 0.2.6. Systems without this extension, or running version 0.2.6 or later, are not indicated as affected by the provided sources. Prioritize this where TYPO3 fal_sftp is used to store sensitive business, customer, or operational files. Urgency is lower than unauthenticated remote code execution, but authenticated information disclosure can still create regulatory, privacy, and business exposure. Mitigation focus: Inventory TYPO3 deployments for the fal_sftp extension.; Update fal_sftp to version 0.2.6 or later, following TYPO3 guidance.; Review fal_sftp file and folder permissions against vendor expectations..

Prepared

Jun 14, 2026, 06:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.