Em resumo
- CVE-2014-3947 é uma vulnerabilidade ALTO (CVSS 7.5) que afeta in2code/powermail, powermail (alex kellner).
- Chance de exploração nos próximos 30 dias (EPSS): 2.3%, maior que 83.5% das vulnerabilidades.
- Correção: atualize para 2.0.14, 1.6.11 ou posterior.
| Package | Affected versions | Patched versions |
|---|
| in2code/powermail Packagist | ≥ 2.0.0, < 2.0.14< 1.6.11
| 2.0.141.6.11
|
| powermail | = 2.0.0= 2.0.1= 2.0.10= 2.0.2= 2.0.3= 2.0.4= 2.0.5= 2.0.6= 2.0.7= 2.0.8= 2.0.9≤ 1.6.10
| No fix yet |
Description
Unrestricted file upload vulnerability in the powermail extension before 1.6.11 and 2.x before 2.0.14 for TYPO3 allows remote attackers to execute arbitrary code by uploading a file with a crafted extension, then accessing it via unspecified vectors.
NVD description
Unrestricted file upload vulnerability in the powermail extension before 1.6.11 and 2.x before 2.0.14 for TYPO3 allows remote attackers to execute arbitrary code by uploading a file with a crafted extension, then accessing it via unspecified vectors.
Mais vulnerabilidades de in2code/powermail
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free