GHSA-4r76-xr68-w7m7

Summary

TYPO3 may allow editors to change, create, or delete metadata of files not within their file mounts

Severity

high

Published

2024-05-30

References

• https://github.com/TYPO3/typo3/commit/0decbf83c531cab77497429eb2edecf9a1038b25
• https://github.com/TYPO3/typo3/commit/bff9fa5945801d1d2c641ddc8eb86c6647549d80
• https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2015-07-01-1.yaml

Related advisories

• GHSA-67wg-6j7r-mqh8 — critical · Packagist/typo3/cms
• GHSA-gwfx-p7mr-f92v — critical · Packagist/typo3/cms
• GHSA-f777-f784-36gm — high · Packagist/typo3/cms
• GHSA-8h4m-r4wm-xj7r — high · Packagist/typo3/cms
• GHSA-g585-crjf-vhwq — high · Packagist/typo3/cms
• GHSA-c5mj-39cf-3pp5 — high · Packagist/typo3/cms
• GHSA-hh95-5xm5-v8v7 — high · Packagist/typo3/cms
• GHSA-ppgf-8745-8pgx — high · Packagist/typo3/cms

Is your project exposed to this? Stateward checks every dependency on every pull request and flags it only if your code actually reaches it.

Summarize with AI

ChatGPTClaudePerplexity