PT-2010-5272
CVE-2010-4068
·
Published
2010-10-25
·
Updated
2010-10-27
Description by
CVSS 2.0
4.9
MediumMetricsAV:N/AC:M/Au:S/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
TYPO3 versions 4.2.x through 4.2.14
TYPO3 versions 4.3.x through 4.3.6
TYPO3 versions 4.4.x through 4.4.3
Description
The issue allows remote authenticated administrators to read and possibly modify arbitrary files via a crafted parameter.
Recommendations
For versions 4.2.x through 4.2.14, update to version 4.2.15 or later.
For versions 4.3.x through 4.3.6, update to version 4.3.7 or later.
For versions 4.4.x through 4.4.3, update to version 4.4.4 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾