CVE-2010-4068

Severity: medium (CVSS 4.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-10-25 · updated 2026-06-16
Weakness: CWE-20

Description

Unspecified vulnerability in the Extension Manager in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 allows remote authenticated administrators to read and possibly modify arbitrary files via a crafted parameter, a different vulnerability than CVE-2010-3714.

Affected products

typo3: 4.2.0, 4.2.1, 4.2.2, 4.2.3, 4.2.4, 4.2.5 (+20)

References

http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-020/
http://www.debian.org/security/2010/dsa-2121
http://www.securityfocus.com/bid/43786
http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-020/
http://www.debian.org/security/2010/dsa-2121
http://www.securityfocus.com/bid/43786

Get alerted when CVE-2010-4068 or the next vulnerability affects your stack