cbcvebase.
CVE-2013-4320
published 2014-05-20

CVE-2013-4320: The File Abstraction Layer (FAL) in TYPO3 6.0.x before 6.0.9 and 6.1.x before 6.1.4 does not properly check permissions, which allows remote authenticated…

PriorityP426medium5.5CVSS 2.0
AVNACLAuSCPIPAN
EPSS
0.98%
57.9th percentile
The File Abstraction Layer (FAL) in TYPO3 6.0.x before 6.0.9 and 6.1.x before 6.1.4 does not properly check permissions, which allows remote authenticated users to create or read arbitrary files via a crafted URL.

Affected

15 ranges
VendorProductVersion rangeFixed in
typo3cms-core>= 6.0 < 6.0.96.0.9
typo3cms-core>= 6.1 < 6.1.46.1.4
typo3typo3——
typo3typo3——
typo3typo3——
typo3typo3——
typo3typo3——
typo3typo3——
typo3typo3——
typo3typo3——
typo3typo3——
typo3typo3——
typo3typo3——
typo3typo3——
typo3typo3——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.