Vulnerability advisory

GHSA-4r76-xr68-w7m7

TYPO3 may allow editors to change, create, or delete metadata of files not within their file mounts

Published May 30, 2024Updated Dec 5, 2024OSV record ↗

Severity

CVSS 3.xCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected versions

typo3/cms Packagist

Affected	Fixed in
`6.2.0` to before 6.2.14	`6.2.14`Advisories →
Also listed as affected (15) `6.2.0` `6.2.1` `6.2.10` `6.2.10-rc1` `6.2.11` `6.2.12` `6.2.13` `6.2.2` `6.2.3` `6.2.4` `6.2.5` `6.2.6` `6.2.7` `6.2.8` `6.2.9`
`7.0.0` to before 7.3.1	`7.3.1`Advisories →
Also listed as affected (6) `7.0.0` `7.0.1` `7.0.2` `7.1.0` `7.2.0` `7.3.0`

Description

It has been discovered, that editors with access to file meta data table could change, create or delete metadata of files which are not within their file mounts.

References

Webgithub.com/TYPO3/typo3/commit/0decbf83c531cab77497429eb2edecf9a1038b25 ↗
Webgithub.com/TYPO3/typo3/commit/bff9fa5945801d1d2c641ddc8eb86c6647549d80 ↗
Webgithub.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2015-07-01-1.yaml ↗
Packagegithub.com/TYPO3/typo3 ↗
Webtypo3.org/security/advisory/typo3-core-sa-2015-002 ↗
Webtypo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-002 ↗