CVE-2010-3663 | BDVDB-2026-125255 Detail

Description#

TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 contains an insecure default value of the variable fileDenyPattern which could allow remote attackers to execute arbitrary code on the backend.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://security-tracker.debian.org/tracker/CVE-2010-3663
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590719
https://typo3.org/security/advisory/typo3-sa-2010-012/#Arbitrary_Code_Execution

Exploit#

No public exploit known

History#

Version 12019-11-04Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.