CVE-2019-11832

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2019-11832

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-11832.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2019-11832

Aliases

GHSA-3w4h-r27h-4r2w

Published

2019-05-09T05:29:01Z

Modified

2026-10-24T10:31:02Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

TYPO3 8.x before 8.7.25 and 9.x before 9.5.6 allows remote code execution because it does not properly configure the applications used for image processing, as demonstrated by ImageMagick or GraphicsMagick.

Database specific

{
    "unresolved_ranges": [
        {
            "cpes": [
                "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "introduced": "8.0.0"
                        },
                        {
                            "fixed": "8.7.25"
                        },
                        {
                            "introduced": "9.0.0"
                        },
                        {
                            "fixed": "9.5.6"
                        }
                    ],
                    "source": "CPE_RANGE"
                }
            ],
            "vendor_product": "typo3:typo3"
        }
    ]
}

References

Affected packages

Git / github.com/TYPO3/typo3

Affected ranges

Type

GIT

Repo

https://github.com/TYPO3/typo3

Events

Introduced

a9a68ed6a41c86e6d46629c15ca4bdffe85344f1

Fixed

3ca26fbd711b62db4cc6df5ff7b98d4a99b14670

Introduced

41235ff8e38c6f3401df03ae8beddd62d662c525

Fixed

77f092b4b9a9690fbd033ee8e2e9112f3ea7e08f

Database specific

Show details

{
    "extracted_events": [
        {
            "cpe": "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "8.0.0"
                },
                {
                    "fixed": "8.7.25"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "cpe": "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "9.0.0"
                },
                {
                    "fixed": "9.5.6"
                }
            ],
            "source": "CPE_RANGE"
        }
    ]
}

Affected versions

8.*

8.0.0

8.1.0

8.2.0

8.3.0

8.4.0

8.5.0

8.6.0

8.7.0

8.7.1

8.7.10

8.7.11

8.7.12

8.7.13

8.7.14

8.7.15

8.7.16

8.7.17

8.7.18

8.7.19

8.7.2

8.7.20

8.7.21

8.7.22

8.7.23

8.7.24

8.7.4

8.7.5

8.7.6

8.7.7

8.7.8

8.7.9

Other

TYPO3_8-0-0

TYPO3_8-1-0

TYPO3_8-2-0

TYPO3_8-3-0

TYPO3_8-4-0

TYPO3_8-5-0

TYPO3_8-6-0

TYPO3_8-7-0

TYPO3_8-7-1

TYPO3_8-7-10

TYPO3_8-7-11

TYPO3_8-7-12

TYPO3_8-7-13

TYPO3_8-7-14

TYPO3_8-7-15

TYPO3_8-7-16

TYPO3_8-7-17

TYPO3_8-7-18

TYPO3_8-7-19

TYPO3_8-7-2

TYPO3_8-7-20

TYPO3_8-7-21

TYPO3_8-7-22

TYPO3_8-7-23

TYPO3_8-7-24

TYPO3_8-7-4

TYPO3_8-7-5

TYPO3_8-7-6

TYPO3_8-7-7

TYPO3_8-7-8

TYPO3_8-7-9

v8.*

v8.7.10

v8.7.11

v8.7.12

v8.7.13

v8.7.14

v8.7.15

v8.7.16

v8.7.17

v8.7.18

v8.7.19

v8.7.20

v8.7.21

v8.7.22

v8.7.23

v8.7.24

v8.7.4

v8.7.5

v8.7.6

v8.7.7

v8.7.8

v8.7.9

v9.*

v9.0.0

v9.1.0

v9.2.0

v9.3.0

v9.4.0

v9.5.0

v9.5.1

v9.5.2

v9.5.3

v9.5.4

v9.5.5

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-11832.json"

Git / github.com/typo3/typo3

Affected ranges

Type

GIT

Repo

https://github.com/typo3/typo3

Events

Introduced

a9a68ed6a41c86e6d46629c15ca4bdffe85344f1

Fixed

3ca26fbd711b62db4cc6df5ff7b98d4a99b14670

Introduced

41235ff8e38c6f3401df03ae8beddd62d662c525

Fixed

77f092b4b9a9690fbd033ee8e2e9112f3ea7e08f

Database specific

Show details

{
    "extracted_events": [
        {
            "cpe": "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "8.0.0"
                },
                {
                    "fixed": "8.7.25"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "cpe": "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "9.0.0"
                },
                {
                    "fixed": "9.5.6"
                }
            ],
            "source": "CPE_RANGE"
        }
    ]
}

Affected versions

8.*

8.0.0

8.1.0

8.2.0

8.3.0

8.4.0

8.5.0

8.6.0

8.7.0

8.7.1

8.7.10

8.7.11

8.7.12

8.7.13

8.7.14

8.7.15

8.7.16

8.7.17

8.7.18

8.7.19

8.7.2

8.7.20

8.7.21

8.7.22

8.7.23

8.7.24

8.7.4

8.7.5

8.7.6

8.7.7

8.7.8

8.7.9

Other

TYPO3_8-0-0

TYPO3_8-1-0

TYPO3_8-2-0

TYPO3_8-3-0

TYPO3_8-4-0

TYPO3_8-5-0

TYPO3_8-6-0

TYPO3_8-7-0

TYPO3_8-7-1

TYPO3_8-7-10

TYPO3_8-7-11

TYPO3_8-7-12

TYPO3_8-7-13

TYPO3_8-7-14

TYPO3_8-7-15

TYPO3_8-7-16

TYPO3_8-7-17

TYPO3_8-7-18

TYPO3_8-7-19

TYPO3_8-7-2

TYPO3_8-7-20

TYPO3_8-7-21

TYPO3_8-7-22

TYPO3_8-7-23

TYPO3_8-7-24

TYPO3_8-7-4

TYPO3_8-7-5

TYPO3_8-7-6

TYPO3_8-7-7

TYPO3_8-7-8

TYPO3_8-7-9

v8.*

v8.7.10

v8.7.11

v8.7.12

v8.7.13

v8.7.14

v8.7.15

v8.7.16

v8.7.17

v8.7.18

v8.7.19

v8.7.20

v8.7.21

v8.7.22

v8.7.23

v8.7.24

v8.7.4

v8.7.5

v8.7.6

v8.7.7

v8.7.8

v8.7.9

v9.*

v9.0.0

v9.1.0

v9.2.0

v9.3.0

v9.4.0

v9.5.0

v9.5.1

v9.5.2

v9.5.3

v9.5.4

v9.5.5

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-11832.json"