vulnwire
6.5med

CVE-2008-2717

TYPO3 Unrestricted File Upload vulnerability

Also known as GHSA-f35p-hcwf-9f9f

Published 18 y ago · modified 4 mo ago · JSON

CVSS
6.5
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
3.0%
percentile 88%
Public exploits
0
none known

TYPO3 4.0.x before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.2.1, uses an insufficiently restrictive default fileDenyPattern for Apache, which allows remote attackers to bypass security restrictions and upload configuration files such as .htaccess, or conduct file upload attacks using multiple extensions.

Exploit prediction (EPSS)

3.02% probability of exploitation in the next 30 days, higher than 88% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.06.5AV:N/AC:L/Au:S/C:P/I:P/A:P

Affected packages

EcosystemPackageAffectedFixed in
packagisttypo3/cms-core
>=4.0.0, <4.0.9
>=4.1.0, <4.1.7
>=4.2.0, <4.2.1
4.0.9
4.1.7
4.2.1

Classification

Weakness
  • CWE-264 Permissions, Privileges, and Access Controls
  • CWE-434 Unrestricted Upload of File with Dangerous Type

References

  • securityfocus.com /bid/29657 · vdb-entry, x_refsource_BID, x_transferred
  • buzz.typo3.org /teams/security/article/advice-on-core-security-issue-regarding-filedenypattern/ · x_refsource_CONFIRM, x_transferred
  • secunia.com /advisories/30619 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • securityfocus.com /archive/1/493270/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/42988 · vdb-entry, x_refsource_XF, x_transferred
  • debian.org /security/2008/dsa-1596 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • vupen.com /english/advisories/2008/1802 · vdb-entry, x_refsource_VUPEN, x_transferred
  • secunia.com /advisories/30660 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • typo3.org /teams/security/security-bulletins/typo3-20080611-1/ · x_refsource_CONFIRM, x_transferred
  • securityreason.com /securityalert/3945 · third-party-advisory, x_refsource_SREASON, x_transferred
  • nvd.nist.gov /vuln/detail/CVE-2008-2717 · advisory
  • github.com /TYPO3-CMS/core · package
  • web.archive.org /web/20080815050856/http://securityreason.com/securityalert/3945 · web
  • web.archive.org /web/20081201212626/http://secunia.com/advisories/30619 · web
  • web.archive.org /web/20081206030529/http://secunia.com/advisories/30660 · web
  • web.archive.org /web/20200228131005/http://www.securityfocus.com/bid/29657 · web
  • web.archive.org /web/20201208012148/http://www.securityfocus.com/archive/1/493270/100/0/threaded · web
  • buzz.typo3.org /teams/security/article/advice-on-core-security-issue-regarding-filedenypattern · web
  • typo3.org /teams/security/security-bulletins/typo3-20080611-1 · web

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.