CVE-2019-11832

EUVD-2022-2250
TYPO3 8.x before 8.7.25 and 9.x before 9.5.6 allows remote code execution because it does not properly configure the applications used for image processing, as demonstrated by ImageMagick or GraphicsMagick.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
HIGH
NONE
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 75%
Affected Products (NVD)
VendorProductVersion
typo3typo3
8.0.0 ≤
𝑥
< 8.7.25
typo3typo3
9.0.0 ≤
𝑥
< 9.5.6
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/108305
https://typo3.org/security/advisory/typo3-core-sa-2019-012/
http://www.securityfocus.com/bid/108305
https://typo3.org/security/advisory/typo3-core-sa-2019-012/