Description

TYPO3 8.x before 8.7.25 and 9.x before 9.5.6 allows remote code execution because it does not properly configure the applications used for image processing, as demonstrated by ImageMagick or GraphicsMagick.

Remediation

References

CVE-2019-11832

Related Vulnerabilities

MySQL CVE-2012-1696 Vulnerability (CVE-2012-1696)

MySQL CVE-2015-2567 Vulnerability (CVE-2015-2567)

Zope Web Application Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2023-41050)

WordPress Plugin Crafty Social Buttons Cross-Site Scripting (1.5.6)

WordPress Configuration Vulnerability (CVE-2009-2336)

Severity

High

Classification

CVE-2019-11832 CWE-20 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities