En resumen
- CVE-2014-3947 es una vulnerabilidad ALTO (CVSS 7.5) que afecta a in2code/powermail, powermail (alex kellner).
- Probabilidad de explotación en los próximos 30 días (EPSS): 2.3%, mayor que el 83.5% de las vulnerabilidades.
- Solución: actualizar a 2.0.14, 1.6.11 o posterior.
| Package | Affected versions | Patched versions |
|---|
| in2code/powermail Packagist | ≥ 2.0.0, < 2.0.14< 1.6.11
| 2.0.141.6.11
|
| powermail | = 2.0.0= 2.0.1= 2.0.10= 2.0.2= 2.0.3= 2.0.4= 2.0.5= 2.0.6= 2.0.7= 2.0.8= 2.0.9≤ 1.6.10
| No fix yet |
Description
Unrestricted file upload vulnerability in the powermail extension before 1.6.11 and 2.x before 2.0.14 for TYPO3 allows remote attackers to execute arbitrary code by uploading a file with a crafted extension, then accessing it via unspecified vectors.
NVD description
Unrestricted file upload vulnerability in the powermail extension before 1.6.11 and 2.x before 2.0.14 for TYPO3 allows remote attackers to execute arbitrary code by uploading a file with a crafted extension, then accessing it via unspecified vectors.
Más vulnerabilidades de in2code/powermail
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free