| Package | Affected versions | Patched versions |
|---|---|---|
| typo3/cms-backend | ≥ 4.2, < 4.2.13≥ 4.3, < 4.3.4≥ 4.4, < 4.4.1< 4.1.14 | 4.2.134.3.44.4.14.1.14 |
| typo3 | ≥ 4.2.0, < 4.2.13≥ 4.3.0, < 4.3.4≥ 4.4.0, < 4.4.1< 4.1.14 | 4.2.134.3.44.4.14.1.14 |
TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 contains an insecure default value of the variable fileDenyPattern which could allow remote attackers to execute arbitrary code on the backend.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free