Description

TYPO3 8.x before 8.7.25 and 9.x before 9.5.6 allows remote code execution because it does not properly configure the applications used for image processing, as demonstrated by ImageMagick or GraphicsMagick.

Remediation

References

CVE-2019-11832

Related Vulnerabilities

WordPress Plugin jRSS Widget Server-Side Request Forgery (1.2)

Internet Information Services Other Vulnerability (CVE-2000-0970)

MOVEit Transfer Improper Authentication Vulnerability (CVE-2024-6576)

WordPress Plugin Revive Old Post-Auto Post to Social Media Security Bypass (6.9.3)

Joomla! Core 3.x.x Information Disclosure (3.4.0 - 3.6.5)

Severity

High

Classification

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities CWE-20 CVE-2019-11832