Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in the pixxio (aka pixx.io integration or DAM) extension before 1.0.6 for TYPO3. The extension fails to restrict the image download to the configured pixx.io DAM URL, resulting in SSRF. As a result, an attacker can download various content from a remote location and save it to a user-controlled filename, which may result in Remote Code Execution. A TYPO3 backend user account is required to exploit this.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
TYPO3 代码问题漏洞
Vulnerability Description
TYPO3是瑞士TYPO3（Typo3）协会的一套免费开源的内容管理系统(框架)(CMS/CMF)。 TYPO3 1.0.6 之前存在安全漏洞，攻击者可以从远程位置下载各种内容并将其保存到用户控制的文件名中，这可能会导致远程代码执行。需要 TYPO3 后端用户帐户才能利用此漏洞。
CVSS Information
N/A
Vulnerability Type
N/A