Alexander Künzl

**Name of the Vulnerable Software and Affected Versions** TYPO3 CMS versions prior to 10.4.57 TYPO3 CMS versions 11.0.0 through 11.5.50 TYPO3 CMS versions 12.0.0 through 12.4.45 TYPO3 CMS versions 13.0.0 through 13.4.30 TYPO3 CMS versions 14.0.0 through 14.3.2 **Description** Backend users with file write permissions can bypass upload restrictions in the Form Framework by using mixed-case extensions, such as `.FORM.YAML`. This allows the upload of maliciously crafted form definition files that can execute arbitrary SQL statements, enabling attackers to escalate privileges by creating administrative backend user accounts. **Recommendations** Update to version 10.4.57 or later. Update to version 11.5.51 or later. Update to version 12.4.46 or later. Update to version 13.4.31 or later. Update to version 14.3.3 or later.

**Name of the Vulnerable Software and Affected Versions** TYPO3 versions 10.0.0 through 10.4.49 ELTS TYPO3 versions 11.0.0 through 11.5.43 ELTS TYPO3 versions 12.0.0 through 12.4.30 LTS TYPO3 versions 13.0.0 through 13.4.11 LTS **Description** The issue allows administrator-level backend users without system maintainer privileges to escalate their privileges and gain system maintainer access. Exploiting this requires a valid administrator account. **Recommendations** For versions 10.0.0 through 10.4.49 ELTS, update to version 10.4.50 ELTS. For versions 11.0.0 through 11.5.43 ELTS, update to version 11.5.44 ELTS. For versions 12.0.0 through 12.4.30 LTS, update to version 12.4.31 LTS. For versions 13.0.0 through 13.4.11 LTS, update to version 13.4.12 LTS.