CVE-2023-30451

In TYPO3 11.5.24, the filelist component allows attackers (who have access to the administrator panel) to read arbitrary files via directory traversal in the…

published December 25, 2023

CVSS
—
EPSS
1%
Percentile
66.9
In the wild
Unconfirmed
What it is

In TYPO3 11.5.24, the filelist component allows attackers (who have access to the administrator panel) to read arbitrary files via directory traversal in the baseuri field, as demonstrated by POST /typo3/record/edit with ../../../ in data[sys_file_storage]*[data][sDEF][lDEF][basePath][vDEF].

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01161 · 66.9th percentile
Published
2023-12-25T00:00Z
EPSS history
Timeline
  • 25 DEC 00:00Z
    In TYPO3 11.5.24, the filelist component allows attackers (who have access to the administrator panel) to read arbitrary files via directory traversal in the…
    cvelistv5