Security Advisory

CVE-2017-14251

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2017-09-11 09:00:00

Last updated 2024-08-05 19:20:41

Assigner mitre

State PUBLISHED

Description

Unrestricted File Upload vulnerability in the fileDenyPattern in sysext/core/Classes/Core/SystemEnvironmentBuilder.php in TYPO3 7.6.0 to 7.6.21 and 8.0.0 to 8.7.4 allows remote authenticated users to upload files with a .pht extension and consequently execute arbitrary PHP code.

← Browse all CVEs View on cve.org ↗