Vulnerability in Frontend User Upload Project
CVE-2015-4607
Unrestricted file upload vulnerability in the Frontend User Upload (feupload) extension 0.5.0 and earlier for TYPO3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension using a frontend form, then accessing it via a direct request to the file in the fileadmin folder.
EPSS: 0.023 (81.4th percentile) — read the EPSS interpretation.
Affected products
- Frontend_user_upload_project Frontend_user_upload
- N/a — versions n/a
References
- cve@mitre.org (Patch, x_refsource_MISC, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_BID)