GHSA-wrpf-2x8h-82gr: Typo3 Arbitrary File Disclosure in Form Component

June 4, 2024

Failing to properly validate user input, the form component is susceptible to Arbitrary File Disclosure. A valid backend user account is needed to exploit this vulnerability. Only forms are vulnerable, which contain upload fields.

References

github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2016-04-12-2.yaml
github.com/advisories/GHSA-wrpf-2x8h-82gr
typo3.org/security/advisory/typo3-core-sa-2016-010

Code Behaviors & Features

Detect and mitigate GHSA-wrpf-2x8h-82gr with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →