| Package | Affected versions | Patched versions |
|---|---|---|
| typo3/cms | ≥ 4.0.0, < 4.0.10≥ 4.1.0, < 4.1.8≥ 4.2.0, < 4.2.4 | 4.0.104.1.84.2.4 |
| typo3 | = 4.0= 4.0.1= 4.0.2= 4.0.3= 4.0.4= 4.0.5= 4.0.6= 4.0.7= 4.0.8= 4.0.9= 4.1.0= 4.1.1= 4.1.2= 4.1.3= 4.1.4= 4.1.5= 4.1.6= 4.1.7= 4.2.0= 4.2.1= 4.2.2= 4.2.3 |
The Indexed Search Engine (indexed_search) system extension in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allows remote attackers to execute arbitrary commands via a crafted filename containing shell metacharacters, which is not properly handled by the command-line indexer.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free