high8.8
CVE-2010-3663
TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 contains an insecure default value of the variable fileDenyPattern which co…
Impact
TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 contains an insecure default value of the variable fileDenyPattern which could allow remote attackers to execute arbitrary code on the backend.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Typo3 | Typo3 | before 4.1.14 from 4.2.0 before 4.2.13 from 4.3.0 before 4.3.4 from 4.4.0 before 4.4.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590719
- https://security-tracker.debian.org/tracker/CVE-2010-3663
- https://typo3.org/security/advisory/typo3-sa-2010-012/#Arbitrary_Code_Execution
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590719
- https://security-tracker.debian.org/tracker/CVE-2010-3663
- https://typo3.org/security/advisory/typo3-sa-2010-012/#Arbitrary_Code_Execution