Lucene search

K
osvGoogleOSV:GHSA-WJPC-GJF7-9938
HistoryApr 21, 2022 - 1:57 a.m.

TYPO3 Arbitrary Code Execution vulnerability on the backend

2022-04-2101:57:46
Google
osv.dev
6

8.2 High

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

81.4%

TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 contains an insecure default value of the variable fileDenyPattern which could allow remote attackers to execute arbitrary code on the backend.

8.2 High

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

81.4%

Related for OSV:GHSA-WJPC-GJF7-9938