Arbitrary Code Execution in TYPO3 CMS
Summary
GHSA-67wg-6j7r-mqh8: Arbitrary Code Execution in TYPO3 CMS. Affects typo3/cms across 2 version ranges.
>= 7.6.0, < 7.6.22
>= 8.0.0, < 8.7.5
Fixed in 7.6.22 or 8.7.5, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
TYPO3 CMS is an open-source content management system that allows users to create and manage websites. It provides a wide range of features and functionalities, making it a popular choice for website development. However, a vulnerability has been discovered in TYPO3 CMS that allows arbitrary code execution.
Vulnerability Detail
The vulnerability in TYPO3 CMS is due to a missing file extension in the fileDenyPattern. This allows backend users to upload *.pht files, which can be executed in certain web server setups. Attackers can exploit this vulnerability to upload and execute malicious code on the server, potentially leading to unauthorized access, data breaches, and other security issues.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
>= 7.6.0, < 7.6.227.6.22composer require typo3/cms:7.6.22 -
>= 8.0.0, < 8.7.58.7.5composer require typo3/cms:8.7.5
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
If updating TYPO3 CMS is not immediately possible, a temporary workaround is to manually modify the fileDenyPattern in the TYPO3 Install Tool. The new default fileDenyPattern that should be used is:
.(php[3-7]?|phpsh|phtml|pht)(..*)?$|^.htaccess$
Conclusion
The vulnerability in TYPO3 CMS allows for arbitrary code execution, posing a significant security risk. It is crucial to update TYPO3 CMS to the latest version or apply the recommended workaround to mitigate this vulnerability. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for typo3/cms →
FAQ
TYPO3 CMS is an open-source content management system used for website development.
This vulnerability allows attackers to execute arbitrary code on the server, potentially leading to unauthorized access and data breaches.
To fix this vulnerability, update TYPO3 CMS to version 7.6.22 or 8.7.5 or later.
Yes, a temporary workaround is to modify the fileDenyPattern in the TYPO3 Install Tool.
For more information about this vulnerability, refer to the TYPO3 CMS advisory: [link to advisory]
References
Related vulnerabilities
Recent vulnerabilities recorded for typo3/cms.
