GitHub Advisoryadvisory · Packagist

GHSA-wjpc-gjf7-9938 TYPO3 Arbitrary Code Execution vulnerability on the backend

HIGH Published 2022-04-21 Modified 2024-02-06 Official page ↗
Aliases
CVE-2010-3663
Ecosystem
Packagist
Packages
typo3/cms-backend
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-434
Reviewed
2024-02-06

Affected packages

• Packagist typo3/cms-backend: < 4.1.14 → fixed in 4.1.14 • Packagist typo3/cms-backend: >= 4.2, < 4.2.13 → fixed in 4.2.13 • Packagist typo3/cms-backend: >= 4.3, < 4.3.4 → fixed in 4.3.4 • Packagist typo3/cms-backend: >= 4.4, < 4.4.1 → fixed in 4.4.1

Description

TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 contains an insecure default value of the variable fileDenyPattern which could allow remote attackers to execute arbitrary code on the backend.

Related

Alias · CVE (1)

  • CVE-2010-3663 TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 contains an insecure default value of the variable… vulnerability

Weakness · CWE (1)

  • CWE-434 Unrestricted Upload of File with Dangerous Type weakness

References