TYPO3 Unrestricted Upload of File with Dangerous Type Vulnerability - CVE-2017-14251 - Vulnerability Database

TYPO3 Unrestricted Upload of File with Dangerous Type Vulnerability - CVE-2017-14251

High

Reference: CVE-2017-14251

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2017-14251

Title: TYPO3 Unrestricted Upload of File with Dangerous Type Vulnerability

Overview:

Unrestricted File Upload vulnerability in the fileDenyPattern in sysext/core/Classes/Core/SystemEnvironmentBuilder.php in TYPO3 7.6.0 to 7.6.21 and 8.0.0 to 8.7.4 allows remote authenticated users to upload files with a .pht extension and consequently execute arbitrary PHP code.