Apache » Apache Webserver : Security Vulnerabilities, CVEs, CVSS score >= 1
TYPO3 4.0.x before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.2.1, uses an insufficiently restrictive default fileDenyPattern for Apache, which allows remote attackers to bypass security restrictions and upload configuration files such as .htaccess, or conduct file upload attacks using multiple extensions.
Max CVSS
6.5
EPSS Score
0.29%
Published
2008-06-16
Updated
2018-10-11
1 vulnerabilities found