Lucene search
Veracode Vulnerability DatabaseVERACODE:22188HistoryDec 18, 2019 - 2:06 a.m.
Directory Traversal
2019-12-1802:06:20
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
0.002 Low
EPSS
Percentile
55.5%
typo3/cms is vulnerable to directory traversal. Manually uploaded Zip archives are not validated and allows for malicious file names containing the ../ characters. This could potentially result in system files being overwritten upon extraction.
Related
prion
prion
Directory traversal
2019-12-17 17:15:00
friendsofphp
friendsofphp
Directory Traversal on ZIP extraction
2019-12-17 09:50:57
Directory Traversal on ZIP extraction
2019-12-17 09:50:57
typo3
typo3
Directory Traversal on ZIP extraction
2019-12-17 00:00:00
osv
osv
CVE-2019-19848
2019-12-17 17:15:17
TYPO3 Directory Traversal on ZIP extraction
2022-05-24 17:03:52
cve
cve
CVE-2019-19848
2019-12-17 17:15:17
nvd
nvd
CVE-2019-19848
2019-12-17 17:15:17
cvelist
cvelist
CVE-2019-19848
2019-12-17 16:02:50
github
github
TYPO3 Directory Traversal on ZIP extraction
2022-05-24 17:03:52
openvas
openvas
nessus
nessus
TYPO3 8.x < 8.7.30 / 9.x < 9.5.12 / 10.x < 10.2.2 Multiple Vulnerabilities
2020-07-15 00:00:00