Description

Directory traversal vulnerability in mod/tools/em/class.em_unzip.php in the unzip library in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allows remote attackers to write arbitrary files via unspecified vectors.

Remediation

References

CVE-2010-5102

Related Vulnerabilities

WordPress Plugin BuddyPress Information Disclosure (5.1.1)

Grafana Incorrect Authorization Vulnerability (CVE-2022-31107)

WordPress Plugin Email Subscriber Cross-Site Scripting (1.1)

WordPress Plugin MalCare Security-Free Malware Scanner, Protection & Security for WordPress Cross-Site Scripting (4.57)

Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-1000395)

Severity

Medium

Classification

CVE-2010-5102 CWE-22

Tags

Missing Update Known Vulnerabilities