Unscored DSA-1596-1 2 CVEs

typo3-src - several vulnerabilities

Published Jun 12, 2008 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 4.0	typo3-src	4.0.2+debian-5

Vulnerabilities 2

Medium —

CVE-2008-2717

TYPO3 Unrestricted File Upload vulnerability

TYPO3 4.0.x before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.2.1, uses an insufficiently restrictive default fileDenyPattern for Apache, which allows remote attackers to bypass security restrictions and upload configuration files such as .htaccess, or con…

typo3/cms-core Packagist

Jun 16, 2008
Unscored —

CVE-2008-2718

Cross-site scripting (XSS) vulnerability in fe_adminlib.inc in TYPO3 4.0.x before 4.0.9, 4.1.x before 4.1.7, and 4.2.x …

Jun 16, 2008