TYPO3 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2010-5102)

Description

Directory traversal vulnerability in mod/tools/em/class.em_unzip.php in the unzip library in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allows remote attackers to write arbitrary files via unspecified vectors.

Remediation

References

CVE-2010-5102

Related Vulnerabilities

WordPress Plugin Csv Import-Export Multiple Cross-Site Scripting Vulnerabilities (1.1.0)

Magento Incorrect Authorization Vulnerability (CVE-2020-24401)

WordPress Plugin Jekyll Exporter Remote Code Execution (2.2.0)

WordPress Plugin Enhanced Plugin Admin Cross-Site Scripting (1.15)

MySQL CVE-2019-2593 Vulnerability (CVE-2019-2593)

Severity

Medium

Classification

CVE-2010-5102 CWE-22