CVE-2017-14251

Unrestricted File Upload vulnerability in the fileDenyPattern in sysext/core/Classes/Core/SystemEnvironmentBuilder.php in TYPO3 7.6.0 to 7.6.21 and 8.0.0 to 8.7.4 allows remote authenticated users to upload files with a .pht extension and consequently execute arbitrary PHP code...

PT-2017-13324

Name of the Vulnerable Software and Affected Versions TYPO3 versions 7.6.0 through 7.6.21 TYPO3 versions 8.0.0 through 8.7.4 Description The issue allows remote authenticated users to upload files with a .pht extension, which can lead to the execution of arbitrary PHP code due to an Unrestricted...