Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
TYPO3 Permissions Privileges and Access Controls Vulnerability - CVE-2013-4320 - Vulnerability Database
TYPO3

TYPO3 Permissions Privileges and Access Controls Vulnerability - CVE-2013-4320

Medium
Reference: CVE-2013-4320
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2013-4320
Title: TYPO3 Permissions Privileges and Access Controls Vulnerability
Overview:

The File Abstraction Layer (FAL) in TYPO3 6.0.x before 6.0.9 and 6.1.x before 6.1.4 does not properly check permissions which allows remote authenticated users to create or read arbitrary files via a crafted URL.