Path Traversal in TYPO3 Extension "Mask"

CVE-2026-77139

The extension fails to validate a client-supplied template element key before using it to build file paths for saving and deleting Mask template files. An authenticated backend user with access to the Mask module can supply a key containing path traversal sequences to create or delete .html files outside the configured template directory.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.003 (21.2th percentile) — read the EPSS interpretation.