CVE-2013-4250

medium

Published 2014-05-20 · Modified 2025-04-14

CVSS v3

—

CVSS v2

6.5

VIR risk

6.5

Description

TYPO3 doesn't properly check file extensions

Exploit likelihood

20%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

vendor Authored 2026-05-27

Vendor advisory: secalert@redhat.com — https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2013-002/

Ecosystem	Package	Vulnerable	Fixed
Packagist	typo3/cms	`>=6.0.0,<6.0.8`	`6.0.8`
Packagist	typo3/cms	`>=6.1.0,<6.1.3`	`6.1.3`

Vendor	Product	Versions
typo3	typo3	`6.0`
typo3	typo3	`6.0.1`
typo3	typo3	`6.0.2`
typo3	typo3	`6.0.3`
typo3	typo3	`6.0.4`
typo3	typo3	`6.0.5`
typo3	typo3	`6.0.6`
typo3	typo3	`6.0.7`
typo3	typo3	`6.0.9`
typo3	typo3	`6.1`
typo3	typo3	`6.1.1`
typo3	typo3	`6.1.2`

CWE-20

Verify integrity in audit chain (admin only). AS-IS.