Unrestricted file upload

2017-09-1109:29:00

PRIOn knowledge base

www.prio-n.com

8.6 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.6%

JSON

Unrestricted File Upload vulnerability in the fileDenyPattern in sysext/core/Classes/Core/SystemEnvironmentBuilder.php in TYPO3 7.6.0 to 7.6.21 and 8.0.0 to 8.7.4 allows remote authenticated users to upload files with a .pht extension and consequently execute arbitrary PHP code.

CPENameOperatorVersion
typo3eq8.6.1
typo3eq7.6.6
typo3eq8.3.1
typo3eq7.6.0
typo3eq7.6.5
typo3eq7.6.20
typo3eq8.2.0
typo3eq8.7.0
typo3eq7.6.2
typo3eq7.6.3