| Package | Affected versions | Patched versions |
|---|---|---|
| typo3/cms | ≥ 8.0.0, < 8.7.25≥ 9.0.0, < 9.5.6 | 8.7.259.5.6 |
| typo3/cms-core | ≥ 8.0.0, < 8.7.25≥ 9.0.0, < 9.5.6 | 8.7.259.5.6 |
| typo3 | ≥ 8.0.0, < 8.7.25≥ 9.0.0, < 9.5.6 | 8.7.259.5.6 |
TYPO3 8.x before 8.7.25 and 9.x before 9.5.6 is susceptible to remote code execution because it does not properly configure the applications used for image processing, as demonstrated by ImageMagick or GraphicsMagick.
For a successful exploit, the GhostScript binary gs must be available on the server system.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free