CVE-2020-15515

The turn extension through 0.3.2 for TYPO3 allows Remote Code Execution...

CVE-2020-15515

CVE-2020-15515 concerns the TYPO3 Turn extension (Turn! 0.3.2 and earlier). The vulnerability arises from improper sanitization of user input in the extension, enabling Remote Code Execution. The issue is specifically exploitable if an attacker has FTP/SFTP access to the TYPO3 website. The connec...