{"action":"Upgrade typo3/cms-core to 4.0.9 or later.","affected":[{"fixed":"4.0.9","introduced":"4.0.0"},{"fixed":"4.1.7","introduced":"4.1.0"},{"fixed":"4.2.1","introduced":"4.2.0"}],"component":"typo3/cms-core","cve_ids":["CVE-2008-2717"],"ecosystem":"Packagist","epss":0.0302,"exploited":false,"fixed_versions":["4.0.9","4.1.7","4.2.1"],"ghsa_id":"GHSA-f35p-hcwf-9f9f","id":"tcs_01M5KF1CDN4VX4TYDK8B7074M5","modified_at":"2024-02-09T16:56:40.618073Z","published_at":"2022-05-01T23:52:38Z","references":["https://osv.dev/vulnerability/GHSA-f35p-hcwf-9f9f","https://nvd.nist.gov/vuln/detail/CVE-2008-2717","https://exchange.xforce.ibmcloud.com/vulnerabilities/42988","https://github.com/TYPO3-CMS/core","https://web.archive.org/web/20080815050856/http://securityreason.com/securityalert/3945","https://web.archive.org/web/20081201212626/http://secunia.com/advisories/30619","https://web.archive.org/web/20081206030529/http://secunia.com/advisories/30660","https://web.archive.org/web/20200228131005/http://www.securityfocus.com/bid/29657","https://web.archive.org/web/20201208012148/http://www.securityfocus.com/archive/1/493270/100/0/threaded","http://buzz.typo3.org/teams/security/article/advice-on-core-security-issue-regarding-filedenypattern","http://typo3.org/teams/security/security-bulletins/typo3-20080611-1","http://www.debian.org/security/2008/dsa-1596"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-f35p-hcwf-9f9f","url":"https://osv.dev/vulnerability/GHSA-f35p-hcwf-9f9f"}],"summary":"TYPO3 Unrestricted File Upload vulnerability"}