Lucene search

K
cvelistMitreCVELIST:CVE-2024-22188
HistoryMar 05, 2024 - 12:00 a.m.

CVE-2024-22188

2024-03-0500:00:00
mitre
www.cve.org
1
typo3
web admin
command injection
cve-2024-22188

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.8%

TYPO3 before 13.0.1 allows an authenticated admin user (with system maintainer privileges) to execute arbitrary shell commands (with the privileges of the web server) via a command injection vulnerability in form fields of the Install Tool. The fixed versions are 8.7.57 ELTS, 9.5.46 ELTS, 10.4.43 ELTS, 11.5.35 LTS, 12.4.11 LTS, and 13.0.1.

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.8%

Related for CVELIST:CVE-2024-22188