Description

TYPO3 8.x before 8.7.25 and 9.x before 9.5.6 allows remote code execution because it does not properly configure the applications used for image processing, as demonstrated by ImageMagick or GraphicsMagick.

Remediation

References

CVE-2019-11832

Related Vulnerabilities

WordPress Plugin The Holiday Calendar Cross-Site Scripting (1.11.2)

ownCloud Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-3835)

Apache Tomcat Improper Certificate Validation Vulnerability (CVE-2018-8034)

WordPress Plugin XML File Export Import for Stamps.com and WooCommerce Cross-Site Request Forgery (1.1.8)

WordPress Plugin All in One SEO-Best WordPress SEO-Easily Improve SEO Rankings & Increase Traffic Information Disclosure (2.2.5.1)

Severity

High

Classification

CVE-2019-11832 CWE-20 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities