Typo3 Arbitrary File Delete

MEDIO 6.5CVE-2011-4902 · GHSA-9vxq-mxw5-mcgp · Published 06/11/2019 · updated 16/06/2026

En resumen

CVE-2011-4902 es una vulnerabilidad MEDIO (CVSS 6.5) que afecta a typo3/cms, typo3 (typo3).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.98%, mayor que el 62.4% de las vulnerabilidades.
Solución: actualizar a 4.4.9, 4.5.4, 4.3.12 o posterior.

Package	Affected versions	Patched versions
typo3/cms Packagist	`≥ 4.4.0, < 4.4.9≥ 4.5.0, < 4.5.4< 4.3.12`	`4.4.94.5.44.3.12`
typo3 typo3	`≥ 4.3.0, < 4.3.12≥ 4.4.0, < 4.4.9≥ 4.5.0, < 4.5.4`	`4.3.124.4.94.5.4`

TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to delete arbitrary files on the webserver.

NVD description

TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to delete arbitrary files on the webserver.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Packagist

≥ 4.4.0, < 4.4.9≥ 4.5.0, < 4.5.4< 4.3.12

4.4.94.5.44.3.12

≥ 4.3.0, < 4.3.12≥ 4.4.0, < 4.4.9≥ 4.5.0, < 4.5.4

4.3.124.4.94.5.4

Más vulnerabilidades de typo3/cms

Ver todo →