GitHub Advisoryadvisory · Packagist

GHSA-77p4-wfr8-977w TYPO3 Directory Traversal on ZIP extraction

MEDIUM Published 2022-05-24 Modified 2024-04-25 Official page ↗
Aliases
CVE-2019-19848
Ecosystem
Packagist
Packages
typo3/cms-core, typo3/cms
Severity
Moderate
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-22
Reviewed
2024-04-25

Affected packages

• Packagist typo3/cms-core: >= 10.0.0, < 10.2.2 → fixed in 10.2.2 • Packagist typo3/cms-core: >= 8.0.0, < 8.7.30 → fixed in 8.7.30 • Packagist typo3/cms-core: >= 9.0.0, < 9.5.12 → fixed in 9.5.12 • Packagist typo3/cms: >= 10.0.0, < 10.2.2 → fixed in 10.2.2 • Packagist typo3/cms: >= 8.0.0, < 8.7.30 → fixed in 8.7.30 • Packagist typo3/cms: >= 9.0.0, < 9.5.12 → fixed in 9.5.12

Description

An issue was discovered in TYPO3 before 8.7.30, 9.x before 9.5.12, and 10.x before 10.2.2. It has been discovered that the extraction of manually uploaded ZIP archives in Extension Manager is vulnerable to directory traversal. Admin privileges are required in order to exploit this vulnerability. (In v9 LTS and later, System Maintainer privileges are also required.)

Related

Alias · CVE (1)

  • CVE-2019-19848 An issue was discovered in TYPO3 before 8.7.30, 9.x before 9.5.12, and 10.x before 10.2.2. vulnerability

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References