CVE-2026-46722

{
  "id": "CVE-2026-46722",
  "sourceIdentifier": "f4fb688c-4412-4426-b4b8-421ecf27b14a",
  "published": "2026-05-19T10:16:25.027",
  "lastModified": "2026-10-26T13:10:00.140",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The OOXML parsing of the file indexer does not disable external entity resolution. A crafted xlsx or pptx document placed in an indexed directory can cause local files to be read or outbound HTTP requests to be performed, with the retrieved content being written to the search index."
    },
    {
      "lang": "es",
      "value": "El análisis OOXML del indexador de archivos no deshabilita la resolución de entidades externas. Un documento xlsx o pptx especialmente diseñado, colocado en un directorio indexado, puede provocar la lectura de archivos locales o que se realicen solicitudes HTTP salientes, con el contenido recuperado siendo escrito en el índice de búsqueda."
    }
  ],
  "affected": [
    {
      "source": "f4fb688c-4412-4426-b4b8-421ecf27b14a",
      "affectedData": [
        {
          "vendor": "TYPO3",
          "product": "Extension \"Faceted Search\"",
          "defaultStatus": "unaffected",
          "collectionURL": "https://packagist.org/",
          "packageName": "tpwd/ke_search",
          "repo": "https://github.com/tpwd/ke_search",
          "versions": [
            {
              "version": "7.0.0",
              "lessThan": "7.0.1",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "6.0.0",
              "lessThan": "6.6.1",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "5.0.0",
              "lessThan": "5.6.2",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "0",
              "lessThan": "4.6.7",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV40": [
      {
        "source": "f4fb688c-4412-4426-b4b8-421ecf27b14a",
        "type": "Secondary",
        "cvssData": {
          "version": "4.0",
          "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "baseScore": 5.9,
          "baseSeverity": "MEDIUM",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "attackRequirements": "PRESENT",
          "privilegesRequired": "HIGH",
          "userInteraction": "NONE",
          "vulnConfidentialityImpact": "HIGH",
          "vulnIntegrityImpact": "NONE",
          "vulnAvailabilityImpact": "NONE",
          "subConfidentialityImpact": "LOW",
          "subIntegrityImpact": "NONE",
          "subAvailabilityImpact": "NONE",
          "exploitMaturity": "NOT_DEFINED",
          "confidentialityRequirement": "NOT_DEFINED",
          "integrityRequirement": "NOT_DEFINED",
          "availabilityRequirement": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "Safety": "NOT_DEFINED",
          "Automatable": "NOT_DEFINED",
          "Recovery": "NOT_DEFINED",
          "valueDensity": "NOT_DEFINED",
          "vulnerabilityResponseEffort": "NOT_DEFINED",
          "providerUrgency": "NOT_DEFINED"
        }
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-05-19T13:29:49.636642Z",
          "id": "CVE-2026-46722",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "f4fb688c-4412-4426-b4b8-421ecf27b14a",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-611"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://typo3.org/security/advisory/typo3-ext-sa-2026-011",
      "source": "f4fb688c-4412-4426-b4b8-421ecf27b14a"
    }
  ]
}