Lucene search

K

Veracode Vulnerability DatabaseVERACODE:47316

HistoryJun 03, 2024 - 7:24 a.m.

Unrestricted Upload Of File With Dangerous Type

2024-06-0307:24:27

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

typo3/cms-core

vulnerability

unrestricted upload

7.1 High

AI Score

Confidence

Low

typo3/cms-core is vulnerable toUnrestricted Upload of File with Dangerous Type. The vulnerability is due to missing file extensions in $GLOBALS['TYPO3_CONF_VARS']['BE']['fileDenyPattern'] allowing attackers to upload files like *.phar, *.shtml, *.pl, or *.cgi, which can be executed in certain web server setups.

7.1 High

AI Score

Confidence

Low