EIP-2026-112839

PRE-CVE

TYPO3 Extension Restler 1.7.0 - Local File Disclosure

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-112839. PoCs published by CrashBandicot.

AI-analyzed exploit summary This exploit demonstrates a local file disclosure vulnerability in the Typo3 Restler Extension (version 1.7.0) due to improper path traversal handling in getsource.php. The PoC URL shows how an attacker can read arbitrary files by manipulating the 'file' parameter.

Description

TYPO3 Extension Restler 1.7.0 - Local File Disclosure

Exploits (1)

exploitdb WORKING POC
by CrashBandicot · textwebappsphp
https://www.exploit-db.com/exploits/42985

This exploit demonstrates a local file disclosure vulnerability in the Typo3 Restler Extension (version 1.7.0) due to improper path traversal handling in getsource.php. The PoC URL shows how an attacker can read arbitrary files by manipulating the 'file' parameter.

Classification
Working Poc 95%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: Typo3 Restler Extension 1.7.0
No auth needed
Prerequisites: Access to the vulnerable endpoint
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026