Lucene search
Veracode Vulnerability DatabaseVERACODE:47319HistoryJun 03, 2024 - 8:13 a.m.
Remote Code Execution
2024-06-0308:13:01
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
typo3
remote code execution
vulnerability
phar files
obfuscation
8.1 High
AI Score
Confidence
High
typo3/cms-core is vulnerable to Remote Code Execution. The vulnerability is due to the ability to obfuscate Phar files as image or text files, which can then be uploaded and invoked via manipulated URLs in TYPO3 backend forms, which allows an attacker to execute arbitrary code.
8.1 High
AI Score
Confidence
High