TYPO3 SB Folderdownload Extension Unspecified File Disclosure Vulnerability

Bugtraq ID:	60275
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 03 2013 12:00AM
Updated:	Jun 03 2013 12:00AM
Credit:	Georg Ringer
Vulnerable:	Typo3 SB Folderdownload 0.2.3 Typo3 SB Folderdownload 0.2.2
Not Vulnerable:

TYPO3 SB Folderdownload Extension Unspecified File Disclosure Vulnerability

SB Folderdownload for TYPO3 is prone to a vulnerability that lets attacker access arbitrary files because it fails to adequately validate user-supplied input.

An attacker can exploit this vulnerability to view arbitrary files within the context of the affected application.

SB Folderdownload 1.1.1 and prior are vulnerable.

TYPO3 SB Folderdownload Extension Unspecified File Disclosure Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

TYPO3 SB Folderdownload Extension Unspecified File Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

TYPO3 SB Folderdownload Extension Unspecified File Disclosure Vulnerability

References:

• TYPO3 Homepage (TYPO3)