{"action":"Upgrade typo3/cms to 4.2.16 or later.","affected":[{"fixed":"4.2.16","introduced":"4.2.0"},{"fixed":"4.3.9","introduced":"4.3.0"},{"fixed":"4.4.5","introduced":"4.4.0"}],"component":"typo3/cms","cve_ids":["CVE-2010-5099"],"ecosystem":"Packagist","epss":0.03082,"exploited":false,"fixed_versions":["4.2.16","4.3.9","4.4.5"],"ghsa_id":"GHSA-66j3-66cp-6c2m","id":"tcs_01M5KEWRBJ66E5NECQB87AYSS5","modified_at":"2025-04-12T02:57:06.683400Z","published_at":"2022-05-17T01:55:58Z","references":["https://osv.dev/vulnerability/GHSA-66j3-66cp-6c2m","https://nvd.nist.gov/vuln/detail/CVE-2010-5099","https://exchange.xforce.ibmcloud.com/vulnerabilities/64180","https://github.com/TYPO3/typo3","https://web.archive.org/web/20120801235059/http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-sa-2010-022","http://blog.nibblesec.org/2010/12/typo3-sa-2010-020-typo3-sa-2010-022.html","http://www.exploit-db.com/exploits/15856","http://www.openwall.com/lists/oss-security/2011/01/13/2","http://www.openwall.com/lists/oss-security/2012/05/10/7","http://www.openwall.com/lists/oss-security/2012/05/11/3","http://www.openwall.com/lists/oss-security/2012/05/12/5"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-66j3-66cp-6c2m","url":"https://osv.dev/vulnerability/GHSA-66j3-66cp-6c2m"}],"summary":"TYPO3 Path Traversal vulnerability"}