Severity
Severity not reported.
Affected versions
Repository
| Affected commits | Fixed by commit |
|---|---|
| GIT github.com/TYPO3/typo3 ↗ | |
| ad7d0f33d21226271c814d2767a822ef89c3fa6b through ad7d0f33d21226271c814d2767a822ef89c3fa6b | No fix listed |
Also listed as affected (2)
| |
| GIT github.com/typo3/typo3 ↗ | |
| ad7d0f33d21226271c814d2767a822ef89c3fa6b through ad7d0f33d21226271c814d2767a822ef89c3fa6b | No fix listed |
Also listed as affected (2)
| |
Description
In TYPO3 11.5.24, the filelist component allows attackers (who have access to the administrator panel) to read arbitrary files via directory traversal in the baseuri field, as demonstrated by POST /typo3/record/edit with ../../../ in data[sys_file_storage]*[data][sDEF][lDEF][basePath][vDEF].