{"id":"CVE-2010-3663","aliases":["DSA-2098-1","EUVD-2022-1857","GHSA-wjpc-gjf7-9938"],"status":"published","title":"TYPO3 Arbitrary Code Execution vulnerability on the backend","description":"TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 contains an insecure default value of the variable fileDenyPattern which could allow remote attackers to execute arbitrary code on the backend.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.02395,"percentile":0.84086,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-434"],"published":"2010-08-29T00:00:00Z","modified":"2026-06-16T23:23:17Z","fixes":[{"ecosystem":"Packagist","package":"typo3/cms-backend","fixed_in":["4.1.14","4.2.13","4.3.4","4.4.1"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"Packagist","package":"typo3/cms-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.14"}]}]},{"source":"ghsa","ecosystem":"Packagist","package":"typo3/cms-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2"},{"fixed":"4.2.13"}]}]},{"source":"ghsa","ecosystem":"Packagist","package":"typo3/cms-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3"},{"fixed":"4.3.4"}]}]},{"source":"ghsa","ecosystem":"Packagist","package":"typo3/cms-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.4"},{"fixed":"4.4.1"}]}]},{"source":"osv","ecosystem":"Debian:5.0","package":"typo3-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.5-1+lenny4"}]}],"versions":["4.2.5-1","4.2.5-1+lenny1","4.2.5-1+lenny2","4.2.5-1+lenny3"],"bundled":16},{"source":"osv","ecosystem":"Packagist","package":"typo3/cms-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.14"}]}]},{"source":"osv","ecosystem":"Packagist","package":"typo3/cms-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2"},{"fixed":"4.2.13"}]}]},{"source":"osv","ecosystem":"Packagist","package":"typo3/cms-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3"},{"fixed":"4.3.4"}]}]},{"source":"osv","ecosystem":"Packagist","package":"typo3/cms-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.4"},{"fixed":"4.4.1"}]}]}],"products":[{"vendor":"typo3","product":"typo3"}],"references":[{"url":"https://security-tracker.debian.org/tracker/CVE-2010-3663","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","web"]},{"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590719","tags":["x_refsource_MISC","x_transferred","Mailing List","Third Party Advisory","web"]},{"url":"https://typo3.org/security/advisory/typo3-sa-2010-012/#Arbitrary_Code_Execution","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-3663","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-wjpc-gjf7-9938"},{"url":"https://github.com/TYPO3-CMS/backend","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2010-3663","description":"TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 contains an insecure default value of the variable fileDenyPattern which could allow remote attackers to execute arbitrary code on the backend.","status":"published","published":"2019-11-04T21:18:24Z","modified":"2024-08-07T03:18:52.962Z","updated_at":"2026-11-02T14:33:28.115387Z"}],"euvd":[{"id":"EUVD-2022-1857","description":"TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 contains an insecure default value of the variable fileDenyPattern which could allow remote attackers to execute arbitrary code on the backend.","status":"published","published":"2019-11-04T21:18:24Z","modified":"2024-08-07T03:18:52Z","updated_at":"2026-11-03T01:39:33.066036Z"}],"ghsa":[{"id":"GHSA-wjpc-gjf7-9938","title":"TYPO3 Arbitrary Code Execution vulnerability on the backend","description":"TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 contains an insecure default value of the variable fileDenyPattern which could allow remote attackers to execute arbitrary code on the backend.","status":"published","published":"2022-04-21T01:57:46Z","modified":"2024-02-06T23:03:55Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-434"],"updated_at":"2026-11-02T14:37:36.076201Z"}],"nvd":[{"id":"CVE-2010-3663","description":"TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 contains an insecure default value of the variable fileDenyPattern which could allow remote attackers to execute arbitrary code on the backend.","status":"published","published":"2019-11-04T22:15:10.53Z","modified":"2026-06-16T23:23:17.01Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-434"],"updated_at":"2026-11-02T14:02:04.957683Z"}],"osv":[{"id":"GHSA-wjpc-gjf7-9938","title":"TYPO3 Arbitrary Code Execution vulnerability on the backend","description":"TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 contains an insecure default value of the variable fileDenyPattern which could allow remote attackers to execute arbitrary code on the backend.","status":"published","published":"2022-04-21T01:57:46Z","modified":"2024-02-06T23:41:53.676004Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-434"],"updated_at":"2026-11-02T15:46:58.767335Z"},{"id":"DSA-2098-1","title":"typo3-src - several vulnerabilities","status":"published","published":"2010-08-29T00:00:00Z","modified":"2026-03-09T01:23:38.724504Z","updated_at":"2026-11-02T15:46:15.108335Z"}]}}