Directory traversal

In TYPO3 11.5.24, the filelist component allows attackers who have access to the administrator panel to read arbitrary files via directory traversal in the baseuri field, as demonstrated by POST /typo3/record/edit with ../../../ in datasysfilestoragedatasDEFlDEFbasePathvDEF...

CVE-2023-30451

In TYPO3 11.5.24, the filelist component allows attackers who have access to the administrator panel to read arbitrary files via directory traversal in the baseuri field, as demonstrated by POST /typo3/record/edit with ../../../ in datasysfilestoragedatasDEFlDEFbasePathvDEF...

TYPO3 Path Traversal Vulnerability

TYPO3 is a free and open source content management system framework CMS/CMF from TYPO3 Association in Switzerland. A path traversal vulnerability exists in TYPO3 version 11.5.24. An attacker could use this vulnerability to read arbitrary files via the Baseuri field using directory traversal...