Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

wt_gallery for TYPO3 lets attackers view any image and map folders

CVE-2008-6630 · published 17 years ago
Summary

The wt_gallery add‑on for TYPO3 versions up to 2.5.0 can be tricked into revealing image files from anywhere on the server and showing the folder layout. This could let an outsider learn sensitive information or locate files they shouldn’t see. Update the extension to a newer version or remove it if it’s not needed, and check server logs for any unusual file requests.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
typo3 wt_gallery <= 2.5.0
cpe:2.3:a:typo3:wt_gallery:*:*:*:*:*:*:*:*
Original advisory text
Directory traversal vulnerability in the wt_gallery extension 2.5.0 and earlier for TYPO3 allows remote attackers to read arbitrary image files and determine directory structure via unspecified vec...
Directory traversal vulnerability in the wt_gallery extension 2.5.0 and earlier for TYPO3 allows remote attackers to read arbitrary image files and determine directory structure via unspecified vectors.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.8 High
Exploitation
2% chance of attack within 30 days
Type
CWE-22Path Traversal
Timeline
Published7 Apr 2009
Updated3 Nov 2026
First seen29 Sep 2026
Sources
CVE-2008-6630 · NVD
Track software like this
Free during beta