Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2010-3663

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-wjpc-gjf7-9938

TYPO3 Arbitrary Code Execution vulnerability on the backend TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 contains an insecure default value of the variable fileDenyPattern which could allow remote attackers to execute arbitrary code on the backend.

gitlab/packagist/typo3/cms-backend/CVE-2010-3663

Unrestricted Upload of File with Dangerous Type TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 contains an insecure default value of the variable fileDenyPattern which could allow remote attackers to execute arbitrary code on the backend.