CVE-2021-38623: Improper Resource Shutdown or Release

August 30, 2021

The deferred_image_processing (aka Deferred image processing) extension before 1.0.2 for TYPO3 allows Denial of Service via the FAL API because of /var/transient disk consumption.

References

github.com/advisories/GHSA-34jq-548x-m2x9
nvd.nist.gov/vuln/detail/CVE-2021-38623
typo3.org/security/advisory/typo3-ext-sa-2021-009

Code Behaviors & Features

Detect and mitigate CVE-2021-38623 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →