Lucene search

PRIOn knowledge basePRION:CVE-2016-15017

HistoryJan 10, 2023 - 3:15 p.m.

Design/Logic Flaw

2023-01-1015:15:00

PRIOn knowledge base

www.prio-n.com

typo3

vulnerability

critical

pathname traversal

upgrade

patch

vdb-217786

7.1 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

59.0%

JSON

A vulnerability has been found in fabarea media_upload on TYPO3 and classified as critical. This vulnerability affects the function getUploadedFileList of the file Classes/Service/UploadFileService.php. The manipulation leads to pathname traversal. Upgrading to version 0.9.0 is able to address this issue. The patch is identified as b25d42a4981072321c1a363311d8ea2a4ac8763a. It is recommended to upgrade the affected component. VDB-217786 is the identifier assigned to this vulnerability.

CPENameOperatorVersion
media_uploadlt0.9.0

CPE	Name	Operator	Version
	media_upload	lt	0.9.0

References

github.com/fabarea/media_upload/commit/b25d42a4981072321c1a363311d8ea2a4ac8763a

github.com/fabarea/media_upload/issues/6

github.com/fabarea/media_upload/releases/tag/0.9.0

vuldb.com/?ctiid.217786

vuldb.com/?id.217786