GHSA-34jq-548x-m2x9
Improper Resource Shutdown or Release in TYPO3 extension
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | webcoast/deferred-image-processing | < 1.0.2 | 1.0.2 |
Details
As written in the advisory (Markdown source, shown as plain text).
Wrong usage of the TYPO3 FAL API results in copies of processed files being saved to the /var/transient/ folder of a TYPO3 website on every frontend request. This can result in Denial of Service, since the webspace may be filled up with image files simply by crafting a large amount of requests to the website.
References
External links from the advisory. They lead to third-party sites.