CVE-2008-2717

no score yetEPSS 3.0%

No CVSS score yet. EPSS 3.0% chance of exploitation in the next 30 days.

TYPO3 4.0.x before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.2.1, uses an insufficiently restrictive default fileDenyPattern for Apache, which allows remote attackers to bypass security restrictions and upload configuration files such as .htaccess, or conduct file upload attacks using multiple extensions.

EPSS: 3.0% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2008-06-16
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

apache:apache_webserver
typo3:typo3

References

http://buzz.typo3.org/teams/security/article/advice-on-core-security-issue-regarding-filedenypattern/
http://secunia.com/advisories/30619
http://secunia.com/advisories/30660
http://securityreason.com/securityalert/3945
http://typo3.org/teams/security/security-bulletins/typo3-20080611-1/

Check your stack JSON