GHSA-wrpf-2x8h-82gr
Typo3 Arbitrary File Disclosure in Form Component
Failing to properly validate user input, the form component is susceptible to Arbitrary File Disclosure. A valid backend user account is needed to exploit this vulnerability. Only forms are vulnerable, which contain upload fields.
What each source reports
GitHub AdvisoriesNo score
Typo3 Arbitrary File Disclosure in Form Component
Failing to properly validate user input, the form component is susceptible to Arbitrary File Disclosure. A valid backend user account is needed to exploit this vulnerability. Only forms are vulnerable, which contain upload fields.
- Record
GHSA-wrpf-2x8h-82gr- Weakness
- CWE-200
- Updated
- 2026-11-02
OSVNo score
Typo3 Arbitrary File Disclosure in Form Component
Failing to properly validate user input, the form component is susceptible to Arbitrary File Disclosure. A valid backend user account is needed to exploit this vulnerability. Only forms are vulnerable, which contain upload fields.
- Record
GHSA-wrpf-2x8h-82gr- Weakness
- CWE-200
- Updated
- 2026-11-02
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
GHSA-wrpf-2x8h-82gr is a vulnerability with no CVSS score yet in typo3/cms, published June 4, 2024. No source lists public exploit code. Fixed in typo3/cms 6.2.20.