CVE-2010-4068

TYPO3 4.2.x-4.2.14, 4.3.x-4.3.6, 4.4.x-4.4.3 - Authenticated Arbitrary File Read and Write via Extension Manager

Title source: llm
STIX 2.1

Description

Unspecified vulnerability in the Extension Manager in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 allows remote authenticated administrators to read and possibly modify arbitrary files via a crafted parameter, a different vulnerability than CVE-2010-3714.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/43786
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2010/dsa-2121

Scores

EPSS 0.0019
EPSS Percentile 40.9%

Details

CWE
CWE-20
Status published
Products (26)
typo3/typo3 4.2.0
typo3/typo3 4.2.1
typo3/typo3 4.2.2
typo3/typo3 4.2.3
typo3/typo3 4.2.4
typo3/typo3 4.2.5
typo3/typo3 4.2.6
typo3/typo3 4.2.7
typo3/typo3 4.2.8
typo3/typo3 4.2.9
... and 16 more
Published Oct 25, 2010
Tracked Since Feb 18, 2026