CVE-2008-6630: Path Traversal
Published Apr 7, 2009
·Updated
Directory traversal vulnerability in the wtgallery extension 2.5.0 and earlier for TYPO3 allows remote attackers to read arbitrary image files and determine directory structure via unspecified vectors.
Affected Software
2 affected components
Typo3 TYPO3
Typo3 WT Gallery<=2.5.0
Remediation
Patch Available
Event History
Apr 7, 2009
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Data Sourced
02:17 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2008-6630?
The severity of CVE-2008-6630 is considered to be medium, as it allows unauthorized access to sensitive files.
2
How do I fix CVE-2008-6630?
To fix CVE-2008-6630, upgrade the wt_gallery extension to a version later than 2.5.0.
3
What does CVE-2008-6630 allow attackers to do?
CVE-2008-6630 allows attackers to read arbitrary image files and determine the directory structure on a TYPO3 server.
4
Which versions of TYPO3 are affected by CVE-2008-6630?
CVE-2008-6630 affects versions of the wt_gallery extension up to and including 2.5.0 for TYPO3.
5
Is CVE-2008-6630 an authenticated or unauthenticated vulnerability?
CVE-2008-6630 is an unauthenticated vulnerability, allowing remote attackers to exploit it without needing user credentials.