CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-2717

TYPO3 4.0.x before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.2.1, uses an insufficiently restrictive default fileDenyPattern for Apache, which allows remote attackers to bypass security restrictions and upload configuration files such as .htaccess, or conduct file upload attacks using multiple extensions.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 59.7%

CVSS Severity

CVSS v2 Score 6.5

References

Products affected by CVE-2008-2717

Apache » Apache Webserver » Version: Any

cpe:2.3:a:apache:apache_webserver:*
Typo3 » Typo3 » Version: 4.0

cpe:2.3:a:typo3:typo3:4.0
Typo3 » Typo3 » Version: 4.0.1

cpe:2.3:a:typo3:typo3:4.0.1
Typo3 » Typo3 » Version: 4.0.2

cpe:2.3:a:typo3:typo3:4.0.2
Typo3 » Typo3 » Version: 4.0.3

cpe:2.3:a:typo3:typo3:4.0.3
Typo3 » Typo3 » Version: 4.0.4

cpe:2.3:a:typo3:typo3:4.0.4
Typo3 » Typo3 » Version: 4.0.5

cpe:2.3:a:typo3:typo3:4.0.5
Typo3 » Typo3 » Version: 4.0.6

cpe:2.3:a:typo3:typo3:4.0.6
Typo3 » Typo3 » Version: 4.0.7

cpe:2.3:a:typo3:typo3:4.0.7
Typo3 » Typo3 » Version: 4.0.8

cpe:2.3:a:typo3:typo3:4.0.8
Typo3 » Typo3 » Version: 4.1

cpe:2.3:a:typo3:typo3:4.1
Typo3 » Typo3 » Version: 4.1.1

cpe:2.3:a:typo3:typo3:4.1.1
Typo3 » Typo3 » Version: 4.1.2

cpe:2.3:a:typo3:typo3:4.1.2
Typo3 » Typo3 » Version: 4.1.3

cpe:2.3:a:typo3:typo3:4.1.3
Typo3 » Typo3 » Version: 4.1.4

cpe:2.3:a:typo3:typo3:4.1.4
Typo3 » Typo3 » Version: 4.1.5

cpe:2.3:a:typo3:typo3:4.1.5
Typo3 » Typo3 » Version: 4.1.6

cpe:2.3:a:typo3:typo3:4.1.6
Typo3 » Typo3 » Version: 4.2

cpe:2.3:a:typo3:typo3:4.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-2717

Products

Pricing

Contact Us