CVE-2023-30451

MEDIUM5.5EPSS 0.40%

Path Traversal in TYPO3 File Abstraction Layer Storages

發布日:2024/2/13修改日:2024/3/6

描述

In TYPO3 11.5.24, the filelist component allows attackers (who have access to the administrator panel) to read arbitrary files via directory traversal in the baseuri field, as demonstrated by POST /typo3/record/edit with ../../../ in data[sys_file_storage]*[data][sDEF][lDEF][basePath][vDEF].

受影響套件(2)

Bitnami/typo3>= 11.5.24, <= 11.5.24
Packagist/typo3/cms-core>= 8.0.0, < 8.7.57

CVSS 分數

來源	版本	嚴重程度	向量
osv	CVSS 3.1	MEDIUM5.5	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N

參考連結(8)

ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2023-30451
PATCHhttps://github.com/TYPO3/typo3
WEBhttp://packetstormsecurity.com/files/176274/TYPO3-11.5.24-Path-Traversal.html
WEBhttps://github.com/TYPO3/typo3/commit/205115cca3d67594a12d0195c937da0e51eb494a
WEBhttps://github.com/TYPO3/typo3/commit/78fb9287a2f0487c39288070cb0493a5265f1789
WEBhttps://github.com/TYPO3/typo3/commit/accf537c7379b4359bc0f957c4d0c07baddd710a
WEBhttps://github.com/TYPO3/typo3/security/advisories/GHSA-w6x2-jg8h-p6mp
WEBhttps://typo3.org/security/advisory/typo3-core-sa-2024-001