The slub_events (aka SLUB: Event Registration) extension through 3.0.2 for TYPO3 allows uploading of arbitrary files to the webserver. For versions 1.2.2 and below, this results in Remote Code Execution. In versions later than 1.2.2, this can result in Denial of Service, since the web space can be filled up with arbitrary files.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2019-10-16T18:37:38

Updated: 2024-08-05T01:17:41.123Z

Reserved: 2019-09-22T00:00:00

Link: CVE-2019-16700

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2019-10-16T19:15:15.927

Modified: 2024-11-21T04:31:00.450

Link: CVE-2019-16700

cve-icon Redhat

No data.