typo3/typo3 · Security
TYPO3 Arbitrary Code Execution
- GHSA ID
- GHSA-fh4q-hxrw-cjqq
- CVE ID
- CVE-2017-14251
- Severity
- high
- Published
- Updated
- CVSS
- 8.8 · CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS v3
- 8.8 · CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
Unrestricted File Upload vulnerability in the fileDenyPattern in sysext/core/Classes/Core/SystemEnvironmentBuilder.php in TYPO3 7.6.0 to 7.6.21 and 8.0.0 to 8.7.4 allows remote authenticated users to upload files with a .pht extension and consequently execute arbitrary PHP code.
CWEs
- CWE-434 · Unrestricted Upload of File with Dangerous Type
References
- https://nvd.nist.gov/vuln/detail/CVE-2017-14251 ↗
- http://blog.emaze.net/2017/12/typo3-unrestricted-file-upload-remote.html ↗
- http://www.securityfocus.com/bid/100620 ↗
- http://www.securitytracker.com/id/1039295 ↗
- https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-007 ↗
- https://github.com/advisories/GHSA-fh4q-hxrw-cjqq ↗