CVE-2017-14251

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2017-14251
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-14251.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-14251
Aliases
Published
2017-09-11T09:29:00.467Z
Modified
2026-04-10T03:57:07.667529Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Unrestricted File Upload vulnerability in the fileDenyPattern in sysext/core/Classes/Core/SystemEnvironmentBuilder.php in TYPO3 7.6.0 to 7.6.21 and 8.0.0 to 8.7.4 allows remote authenticated users to upload files with a .pht extension and consequently execute arbitrary PHP code.

References

Affected packages

Git / github.com/typo3/typo3.cms

Affected ranges

Type
GIT
Repo
https://github.com/typo3/typo3.cms
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a2585ba26b9df87ef67fdbb4f53d2f1a891d919f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e889c3dc9ae1265ab8570f4bf88002a8c8e7e8cd
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
124f5470b931f06fd2e6ecc2cbe46221375c863a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
654c6751a04ef60c5a3f7a95ac0b11cd8e06a742
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
bd0c7f6ca9cb3093bd647e85035e9f36bf1e9e86
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3809f75057d2651bc42dd1d9980a4f96f10301df
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7a6112192ecdb3f82f59a1d89e075406546b5988
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
23f9f11c7150054885c92a0f2db0a5682a9acfcf
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
02c1c1744cc8437df58f94bdeb2b88c9a82b73b1
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ecc552537efb1bfe184c7e1d8b1e79facf0a2c20
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
540f30a1072c77ae377198a337924b2b1b338e9f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e6580859412b5a9bb508ba8a8be0db5bc2ba166b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
6c158c9afb959bda715e66aff8cf764fe29258e3
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
1a295a64c200bfffe7b0f595f71146670c5ccb9b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9de61953bd98bebfbf7cc985896009db4245c24b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
83c94ad5ee39aa4faeebfdd8d0eb66a7450f2ab1
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4cf10b1d32c1c4c074d14cacba64890640937015
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
dc0e7ac33250302f0ef5affea50737d15203fd8b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9219e4fa9af5e4bd2ea1f208056cb396667cce45
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7e72aa52ef9631112276820a20cf3e1a1f1d82db
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ecb6538c2380f46c03b914eea48b6d5da9ab1f5d
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a32a598fd6c4c0e671e28d83aa94df095596c333
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a9a68ed6a41c86e6d46629c15ca4bdffe85344f1
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
22458921d7ce084db37edcc1a6851de97a740709
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a8092e52750e3ba88f17357a2b2813ca3e4d9ee6
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0833baed1fedfc868c64330fc8dc348b8c07ce02
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e324debe08f557d7e0b22e180f7e25bc6ddd3ad2
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
46014e2af8ce9081dc4183ba3490e829231a0bbd
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2ecfc86fbd4bf3cd9e6ae7b5eece7847ba1c7636
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ce3a12b18327f3fa232fa00e94f7c6fd57b55743
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
aa6163301999945a7c1ff57151a1c6aaffea1534
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e67cfa06065c24ba90a728667f5366c4f6653744
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
60da75ab81b4626983fbe7d4adac20322b3f39bb
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
aa94fbd7a11544229105ed9ac7c6c55144648ea8
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
37ad0060363bfee3bc7acecbd68fe67cec819360
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
1f1c186b1b698136a4fff59aaa34466fc7d15e45
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5ef31ecdde74ae11e33290d59751c5292291e303
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f4aa757eef23411a47f9172580eb0808c90c0eaf
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5e3a0e4f2124311f9676155580d0794cb1051a2c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e05c6943b1ce5999dddb26f2acf0a14bc73f3a81
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0356a94c3e9846df9ed55d2fd15cd5beced3ee4a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c7c31332ac2222d03f29be627de34bb58bde0954
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.6.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.6.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.6.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.6.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.6.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.6.5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.6.6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.6.7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.6.8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.6.9"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.6.10"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.6.11"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.6.12"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.6.13"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.6.14"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.6.15"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.6.16"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.6.17"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.6.18"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.6.19"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.6.20"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "7.6.21"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.0.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.0.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.1.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.1.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.1.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.2.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.2.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.3.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.3.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.4.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.4.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.5.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.5.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.6.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.6.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.7.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.7.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.7.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.7.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.7.4"
        }
    ]
}

Affected versions

6.*
6.2.0
6.2.1
6.2.2
6.2.3
7.*
7.0.0
7.1.0
7.2.0
7.3.0
7.4.0
7.5.0
7.6.0
7.6.1
7.6.10
7.6.11
7.6.12
7.6.13
7.6.14
7.6.15
7.6.16
7.6.17
7.6.18
7.6.19
7.6.2
7.6.20
7.6.21
7.6.3
7.6.4
7.6.5
7.6.6
7.6.7
7.6.8
7.6.9
8.*
8.0.0
8.0.1
8.1.0
8.1.1
8.1.2
8.2.0
8.2.1
8.3.0
8.3.1
8.4.0
8.4.1
8.5.0
8.5.1
8.6.0
8.6.1
8.7.0
8.7.1
8.7.2
8.7.3
8.7.4
Other
TYPO3_6-1-0rc1
TYPO3_6-2-0
TYPO3_6-2-0alpha1
TYPO3_6-2-0alpha2
TYPO3_6-2-0alpha3
TYPO3_6-2-0beta1
TYPO3_6-2-0beta2
TYPO3_6-2-0beta3
TYPO3_6-2-0beta4
TYPO3_6-2-0beta5
TYPO3_6-2-0beta6
TYPO3_6-2-0beta7
TYPO3_6-2-0rc1
TYPO3_6-2-0rc2
TYPO3_6-2-1
TYPO3_6-2-2
TYPO3_6-2-3
TYPO3_7-0-0
TYPO3_7-1-0
TYPO3_7-2-0
TYPO3_7-3-0
TYPO3_7-4-0
TYPO3_7-5-0
TYPO3_7-6-0
TYPO3_7-6-1
TYPO3_7-6-10
TYPO3_7-6-11
TYPO3_7-6-12
TYPO3_7-6-13
TYPO3_7-6-14
TYPO3_7-6-15
TYPO3_7-6-16
TYPO3_7-6-17
TYPO3_7-6-18
TYPO3_7-6-19
TYPO3_7-6-2
TYPO3_7-6-20
TYPO3_7-6-21
TYPO3_7-6-3
TYPO3_7-6-4
TYPO3_7-6-5
TYPO3_7-6-6
TYPO3_7-6-7
TYPO3_7-6-8
TYPO3_7-6-9
TYPO3_8-0-0
TYPO3_8-0-1
TYPO3_8-1-0
TYPO3_8-1-1
TYPO3_8-1-2
TYPO3_8-2-0
TYPO3_8-2-1
TYPO3_8-3-0
TYPO3_8-3-1
TYPO3_8-4-0
TYPO3_8-4-1
TYPO3_8-5-0
TYPO3_8-5-1
TYPO3_8-6-0
TYPO3_8-6-1
TYPO3_8-7-0
TYPO3_8-7-1
TYPO3_8-7-2
TYPO3_8-7-3
TYPO3_8-7-4
v7.*
v7.6.20
v7.6.21
v8.*
v8.7.3
v8.7.4

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-14251.json"