CVE-2016-15017
Medium
Description
A vulnerability has been found in fabarea media_upload on TYPO3 and classified as critical. This vulnerability affects the function getUploadedFileList of the file Classes/Service/UploadFileService.php. The manipulation leads to pathname traversal. Upgrading to version 0.9.0 is able to address this issue. The patch is identified as b25d42a4981072321c1a363311d8ea2a4ac8763a. It is recommended to upgrade the affected component. VDB-217786 is the identifier assigned to this vulnerability.
SeverityMedium
CVSS5.5
Exploit probability—
ProductEcodev Media Upload
PublishedJan 10, 2023
First seenJan 10, 2023
Weakness typeCWE-21CWE-21
How to fix
Update
- ecodev media_upload0.9.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ecodev media_upload | v < 0.9.0 | 0.9.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.