Arbitrary Code Execution in TYPO3 CMS

2024-06-0515:07:09

CWE-94

GitHub Advisory Database

github.com

typo3 cms

arbitrary code execution

filedenypattern

AI Score

7.1

Confidence

Low

JSON

Due to a missing file extension in the fileDenyPattern, backend user are allowed to upload *.pht files which can be executed in certain web server setups. The new default fileDenyPattern is the following, which might have been overridden in the TYPO3 Install Tool.

\.(php[3-7]?|phpsh|phtml|pht)(\..*)?$|^\.htaccess$

Affected configurations

Vulners

Node

typo3typo3_cmsRange8.0.0–8.7.5

typo3typo3_cmsRange7.6.0–7.6.22

VendorProductVersionCPE
typo3typo3_cms*cpe:2.3:a:typo3:typo3_cms:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
typo3	typo3_cms	*	cpe:2.3:a:typo3:typo3_cms::::::::

References

github.com/advisories/GHSA-67wg-6j7r-mqh8

github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2017-09-05-4.yaml

typo3.org/security/advisory/typo3-core-sa-2017-007

AI Score

7.1

Confidence

Low

JSON