CVE-2017-14251 (GCVE-0-2017-14251)
Vulnerability from cvelistv5
Published
2017-09-11 09:00
Modified
2024-08-05 19:20
Severity ?
CWE
  • n/a
Summary
Unrestricted File Upload vulnerability in the fileDenyPattern in sysext/core/Classes/Core/SystemEnvironmentBuilder.php in TYPO3 7.6.0 to 7.6.21 and 8.0.0 to 8.7.4 allows remote authenticated users to upload files with a .pht extension and consequently execute arbitrary PHP code.
References
Impacted products
Vendor Product Version
n/a n/a Version: n/a
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T19:20:41.287Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-007/"
          },
          {
            "name": "100620",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/100620"
          },
          {
            "name": "1039295",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1039295"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://blog.emaze.net/2017/12/typo3-unrestricted-file-upload-remote.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-09-10T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unrestricted File Upload vulnerability in the fileDenyPattern in sysext/core/Classes/Core/SystemEnvironmentBuilder.php in TYPO3 7.6.0 to 7.6.21 and 8.0.0 to 8.7.4 allows remote authenticated users to upload files with a .pht extension and consequently execute arbitrary PHP code."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-03T06:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-007/"
        },
        {
          "name": "100620",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/100620"
        },
        {
          "name": "1039295",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1039295"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://blog.emaze.net/2017/12/typo3-unrestricted-file-upload-remote.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-14251",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unrestricted File Upload vulnerability in the fileDenyPattern in sysext/core/Classes/Core/SystemEnvironmentBuilder.php in TYPO3 7.6.0 to 7.6.21 and 8.0.0 to 8.7.4 allows remote authenticated users to upload files with a .pht extension and consequently execute arbitrary PHP code."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-007/",
              "refsource": "CONFIRM",
              "url": "https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-007/"
            },
            {
              "name": "100620",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/100620"
            },
            {
              "name": "1039295",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1039295"
            },
            {
              "name": "http://blog.emaze.net/2017/12/typo3-unrestricted-file-upload-remote.html",
              "refsource": "MISC",
              "url": "http://blog.emaze.net/2017/12/typo3-unrestricted-file-upload-remote.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-14251",
    "datePublished": "2017-09-11T09:00:00",
    "dateReserved": "2017-09-10T00:00:00",
    "dateUpdated": "2024-08-05T19:20:41.287Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2017-14251\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2017-09-11T09:29:00.467\",\"lastModified\":\"2025-04-20T01:37:25.860\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Unrestricted File Upload vulnerability in the fileDenyPattern in sysext/core/Classes/Core/SystemEnvironmentBuilder.php in TYPO3 7.6.0 to 7.6.21 and 8.0.0 to 8.7.4 allows remote authenticated users to upload files with a .pht extension and consequently execute arbitrary PHP code.\"},{\"lang\":\"es\",\"value\":\"Una vulnerabilidad de subida de archivos sin restricciones en fileDenyPattern en sysext/core/Classes/Core/SystemEnvironmentBuilder.php en TYPO3 para las versiones 7.6.0 a 7.6.21 y 8.0.0 a 8.7.4 permite a los usuarios autenticados remotos subir archivos con una extensi\u00f3n .pht y, como consecuencia, ejecutar c\u00f3digo PHP arbitrario.\"}],\"metrics\":{\"cvssMetricV30\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":5.9}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:S/C:P/I:P/A:P\",\"baseScore\":6.5,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"SINGLE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.0,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-434\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typo3:typo3:7.6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4C022973-D06B-4CEF-87BF-3C016AAD4770\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typo3:typo3:7.6.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"36A63F3A-DC95-49FF-B6AC-FD98F8499905\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typo3:typo3:7.6.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D8E276D9-4C36-4630-BC44-5D49398E4452\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typo3:typo3:7.6.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BBF317B6-656C-4C2C-81F8-4864EE3F4D17\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typo3:typo3:7.6.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D691A7EF-EE47-44EC-A073-04C3C0A432E2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typo3:typo3:7.6.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"83E140F9-73E8-4EF7-BFDA-F56584D7FCFA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typo3:typo3:7.6.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8E576B25-E43B-4C21-B1E5-EF937714ABC8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typo3:typo3:7.6.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BCAB79AD-5991-4FCD-99C4-E742845BF086\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typo3:typo3:7.6.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"19E5EBD4-51A0-4948-BF52-442766C32B05\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typo3:typo3:7.6.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4B431C56-1D78-40BC-9E29-CE3F124ECDF2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typo3:typo3:7.6.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"32E04FC7-CB8E-4F68-94AC-8604DD8CD2E9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typo3:typo3:7.6.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5773A565-8A1C-419D-81BA-F38AB1890AD1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typo3:typo3:7.6.12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"81B1CD9B-C309-442D-A870-89E6B3413878\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typo3:typo3:7.6.13:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"14D44308-795D-4BA4-8631-5888D52866A7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typo3:typo3:7.6.14:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E8DC7A89-35EB-4D15-8ABC-C1B4BBFAE51C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typo3:typo3:7.6.15:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"83755CA5-630F-43F4-A584-4D4A4A8850E5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typo3:typo3:7.6.16:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C5624ED7-228F-4961-A7D4-6631AF72702B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typo3:typo3:7.6.17:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8E21CB97-F010-453F-B823-39F9620EF9E4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typo3:typo3:7.6.18:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BD83B4C9-B519-4B55-9506-8EA7F617B29D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typo3:typo3:7.6.19:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"00509AC8-DCAC-44F1-BC29-6583913A6DE3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typo3:typo3:7.6.20:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"06031E12-E8F9-4D5E-9B93-5D3D650E839F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typo3:typo3:7.6.21:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5B4376EA-D181-4D6B-911A-93BFF586BD3C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typo3:typo3:8.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D05C2314-BE68-448D-A7A9-3A5B5CBC1845\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typo3:typo3:8.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5DC55556-3347-4AAB-AF6D-CC8440CD1C8F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typo3:typo3:8.1.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8C5ADD12-44F2-49AA-BE15-9DEE18C9E80C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typo3:typo3:8.1.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B12C85B0-522C-4526-99EE-8EEFD1830281\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typo3:typo3:8.1.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C7676A2E-513C-4111-AA46-24C3C33DF34A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typo3:typo3:8.2.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1660098C-AFA8-49D6-B78B-2A5E639352FD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typo3:typo3:8.2.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9E16C4B2-5F02-44CF-84CF-D8699BD38548\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typo3:typo3:8.3.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"16F39A9A-3929-4747-BB60-7F415B22C407\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typo3:typo3:8.3.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D0274745-3C5D-4E3B-A41F-48DED56D094C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typo3:typo3:8.4.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4B321C23-AFD1-4586-92DA-8A1DC8FF88F3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typo3:typo3:8.4.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9C171728-F6C4-4B47-80B6-5CC5B67874CE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typo3:typo3:8.5.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"06439EC9-8513-40D5-A918-DBC58879366B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typo3:typo3:8.5.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"05143443-C657-4B75-9BEE-A85AD09BC00D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typo3:typo3:8.6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F725F38B-C2BA-4746-9F1E-B6E89A8BCAD0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typo3:typo3:8.6.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"ED959D2E-37A2-46CB-B21C-91BD526D9804\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typo3:typo3:8.7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2A648456-839C-40F7-B7B4-4D2B9A815925\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typo3:typo3:8.7.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0C3DDDE3-CF53-435F-AB74-0E7BD6490F53\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typo3:typo3:8.7.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BFB7E6E3-F533-4E24-9AAE-45FF2FC9AF7D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typo3:typo3:8.7.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C5D5980B-BA21-4D0C-9005-5D3184806C67\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:typo3:typo3:8.7.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8F7559EA-16E2-4256-90A9-0063A20B658A\"}]}]}],\"references\":[{\"url\":\"http://blog.emaze.net/2017/12/typo3-unrestricted-file-upload-remote.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securityfocus.com/bid/100620\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1039295\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-007/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Exploit\",\"Vendor Advisory\"]},{\"url\":\"http://blog.emaze.net/2017/12/typo3-unrestricted-file-upload-remote.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/100620\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1039295\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2017-007/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Vendor Advisory\"]}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.