CVE-2014-3947 TYPO3 powermail extension has unrestricted file upload vulnerability
Remote attackers can execute arbitrary code by uploading a malicious file with a crafted extension in the TYPO3 powermail extension.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2014-3947?
CVE-2014-3947 is a high-severity vulnerability in n/a, published on 3 Oct 2014. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Unrestricted file upload vulnerability in the powermail extension before 1.6.11 and 2.x before 2.0.14 for TYPO3 allows remote attackers to execute arbitrary code by uploading a file with a crafted extension, then accessing it via unspecified vectors.
Weakness: CWE-94
Which versions are affected by CVE-2014-3947?
4 open source packages ship an affected version, including in2code/powermail. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
in2code/powermail Packagist | All versions | 1.6.11 |
in2code/powermail Packagist | All versions | 1.6.11 |
in2code/powermail Packagist | From 2.0.0 | 2.0.14 |
in2code/powermail Packagist | From 2.0.0 | 2.0.14 |
Products include Alex Kellner Powermail.
How do I fix CVE-2014-3947?
Upgrade in2code/powermail to a fixed version for your release line: 1.6.11 or 2.0.14.
Is CVE-2014-3947 being exploited?
There is no known exploitation of CVE-2014-3947 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2014-6288 TYPO3 powermail extension allows remote attackers to bypass CAPTCHA protection mechanism
- CVE-2010-3604 powermail extension for TYPO3 vulnerable to SQL Injection
- CVE-2010-0329 TYPO3 powermail Extension Vulnerable to SQL Injection via Unspecified Vectors
- CVE-2010-3687 Business logic in n/a
- CVE-2014-3948 Cross-site scripting in n/a
Sources
Also known as GHSA-m278-c6gg-4jrr.