CVE-2019-11832

    Dashboard / Vulnerabilities / CVE-2019-11832

    CVE-2019-11832

    Published: 9 May 2019Last Modified: 27 Aug 2026

    Summary:

    Details: TYPO3 8.x before 8.7.25 and 9.x before 9.5.6 allows remote code execution because it does not properly configure the applications used for image processing, as demonstrated by ImageMagick or GraphicsMagick.

    References: http://www.securityfocus.com/bid/108305, https://typo3.org/security/advisory/typo3-core-sa-2019-012/

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- a9a68ed6a41c86e6d46629c15ca4bdffe85344f1
    Fixed -3ca26fbd711b62db4cc6df5ff7b98d4a99b14670

    Affected versions

    v9.5.5
    v9.5.4
    v9.5.3
    v9.5.2
    v9.5.1
    v9.5.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High