Lucene search

K
osvGoogleOSV:GHSA-P9JG-9W87-6RG4
HistoryMay 17, 2022 - 4:43 a.m.

TYPO3 Improper Access Management in the File Abstraction Layer

2022-05-1704:43:27
Google
osv.dev
12

0.001 Low

EPSS

Percentile

48.7%

The File Abstraction Layer (FAL) in TYPO3 6.0.x before 6.0.9 and 6.1.x before 6.1.4 does not properly check permissions, which allows remote authenticated users to create or read arbitrary files via a crafted URL.

0.001 Low

EPSS

Percentile

48.7%

Related for OSV:GHSA-P9JG-9W87-6RG4