~ / search / GHSA-rmqc-wfjm-3f66

GHSA-rmqc-wfjm-3f66

TYPO3 Directory Traversal vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2010-5101

Packages

EcosystemPackageAffectedFixed in
Packagist typo3/cms >= 4.2.0, < 4.2.16 4.2.16
Packagist typo3/cms >= 4.3.0, < 4.3.9 4.3.9
Packagist typo3/cms >= 4.4.0, < 4.4.5 4.4.5

Details

As written in the advisory (Markdown source, shown as plain text).

Directory traversal vulnerability in the TypoScript setup in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allows remote authenticated administrators to read arbitrary files via unspecified vectors related to the "file inclusion functionality."

References

External links from the advisory. They lead to third-party sites.