CVE-2013-4250

MEDIUM · CVSS 6.5 EPSS 1.15%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2014-05-20 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2013-4250

Severity

MEDIUM

CVSS

6.5

EPSS

1.15%

Original NVD Description

The (1) file upload component and (2) File Abstraction Layer (FAL) in TYPO3 6.0.x before 6.0.8 and 6.1.x before 6.1.3 do not properly check file extensions, which allow remote authenticated editors to execute arbitrary PHP code by uploading a .php file.