Security Advisory

CVE-2008-2717

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2008-06-16 22:00:00

Last updated 2024-08-07 09:14:14

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

TYPO3 4.0.x before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.2.1, uses an insufficiently restrictive default fileDenyPattern for Apache, which allows remote attackers to bypass security restrictions and upload configuration files such as .htaccess, or conduct file upload attacks using multiple extensions.

← Browse all CVEs View on cve.org ↗