PT-2019-15979 · Typo3 · Typo3

Kai Ullrich · Publicado 2019-12-17 · Atualizado 2024-03-12 · CVE-2019-19848

Positive Technologies (AI Summary)

CVSS v3.1

7.2

Alta

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TYPO3 versions prior to 8.7.30 TYPO3 versions 9.x prior to 9.5.12 TYPO3 versions 10.x prior to 10.2.2

Description An issue has been discovered in the extraction of manually uploaded ZIP archives in the Extension Manager, which is vulnerable to directory traversal. This issue requires admin privileges to exploit, and in versions 9 LTS and later, System Maintainer privileges are also required.

Recommendations For versions prior to 8.7.30, update to version 8.7.30 or later. For versions 9.x prior to 9.5.12, update to version 9.5.12 or later. For versions 10.x prior to 10.2.2, update to version 10.2.2 or later.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2019-19848

GHSA-77P4-WFR8-977W

Produtos afetados

Typo3

Referências · 9

• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2019-19848.yaml · Exploit
• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2019-19848.yaml · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-19848 · Nota de Segurança
• https://review.typo3.org/q/%2522Resolves:+%252388764%2522+topic:security · Aviso do Fabricante
• https://twitter.com/Esparta6108713/status/1767676767576150028 · Publicação no Twitter
• https://typo3.org/security/advisory/typo3-core-sa-2019-024 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19848 · Nota
• https://osv.dev/vulnerability/CVE-2019-19848 · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-77p4-wfr8-977w · Aviso do Fabricante