PT-2019-15980 · Typo3 · Typo3

Daniel Windloff · Publicado 2019-12-17 · Atualizado 2022-05-24 · CVE-2019-19849

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TYPO3 versions prior to 8.7.30 TYPO3 versions 9.x prior to 9.5.12 TYPO3 versions 10.x prior to 10.2.2

Description An issue has been discovered in the classes QueryGenerator and QueryView, which are vulnerable to insecure deserialization. There are two exploitable scenarios: one requires the system extension ext:lowlevel (Backend Module: DB Check) to be installed, with a valid backend user having administrator privileges, and the other requires the system extension ext:sys action to be installed, with a valid backend user having limited privileges.

Recommendations For versions prior to 8.7.30, update to version 8.7.30 or later. For versions 9.x prior to 9.5.12, update to version 9.5.12 or later. For versions 10.x prior to 10.2.2, update to version 10.2.2 or later.

Exploit

Correção

Deserialization of Untrusted Data

Enumeração de Fraquezas

CWE-502

Identificadores relacionados

CVE-2019-19849

GHSA-RCGC-4XFC-564V

Produtos afetados

Typo3

Referências · 8

• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2019-19849.yaml · Exploit
• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2019-19849.yaml · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-19849 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19849 · Nota
• https://review.typo3.org/q/%2522Resolves:+%252389005%2522+topic:security · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-19849 · Aviso do Fabricante
• https://typo3.org/security/advisory/typo3-core-sa-2019-026 · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-rcgc-4xfc-564v · Aviso do Fabricante