Arbitrary Code Execution in TYPO3 CMS

2024-06-0515:07:09

CWE-94

GitHub Advisory Database

github.com

typo3 cms

arbitrary code execution

filedenypattern

7.1 High

AI Score

Confidence

Low

JSON

Due to a missing file extension in the fileDenyPattern, backend user are allowed to upload *.pht files which can be executed in certain web server setups. The new default fileDenyPattern is the following, which might have been overridden in the TYPO3 Install Tool.

\.(php[3-7]?|phpsh|phtml|pht)(\..*)?$|^\.htaccess$

Affected configurations

Vulners

Node

typo3cms_poll_system_extensionRange<8.7.5

typo3cms_poll_system_extensionRange<7.6.22

CPENameOperatorVersion
typo3/cmslt8.7.5
typo3/cmslt7.6.22

CPE	Name	Operator	Version
	typo3/cms	lt	8.7.5
	typo3/cms	lt	7.6.22

References

github.com/advisories/GHSA-67wg-6j7r-mqh8

github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2017-09-05-4.yaml

typo3.org/security/advisory/typo3-core-sa-2017-007

7.1 High

AI Score

Confidence

Low

JSON