PT-2019-15979 · Typo3 · Typo3

Kai Ullrich · Published 2019-12-17 · Updated 2024-03-12 · CVE-2019-19848

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TYPO3 versions prior to 8.7.30 TYPO3 versions 9.x prior to 9.5.12 TYPO3 versions 10.x prior to 10.2.2

Description An issue has been discovered in the extraction of manually uploaded ZIP archives in the Extension Manager, which is vulnerable to directory traversal. This issue requires admin privileges to exploit, and in versions 9 LTS and later, System Maintainer privileges are also required.

Recommendations For versions prior to 8.7.30, update to version 8.7.30 or later. For versions 9.x prior to 9.5.12, update to version 9.5.12 or later. For versions 10.x prior to 10.2.2, update to version 10.2.2 or later.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2019-19848

GHSA-77P4-WFR8-977W

Affected Products

Typo3

References · 9

• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2019-19848.yaml · Exploit
• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2019-19848.yaml · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-19848 · Security Note
• https://review.typo3.org/q/%2522Resolves:+%252388764%2522+topic:security · Vendor Advisory
• https://typo3.org/security/advisory/typo3-core-sa-2019-024 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-19848 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-77p4-wfr8-977w · Vendor Advisory
• https://twitter.com/Esparta6108713/status/1767676767576150028 · Twitter Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19848 · Note