PT-2019-15980 · Typo3 · Typo3

Daniel Windloff · Published 2019-12-17 · Updated 2022-05-24 · CVE-2019-19849

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TYPO3 versions prior to 8.7.30 TYPO3 versions 9.x prior to 9.5.12 TYPO3 versions 10.x prior to 10.2.2

Description An issue has been discovered in the classes QueryGenerator and QueryView, which are vulnerable to insecure deserialization. There are two exploitable scenarios: one requires the system extension ext:lowlevel (Backend Module: DB Check) to be installed, with a valid backend user having administrator privileges, and the other requires the system extension ext:sys action to be installed, with a valid backend user having limited privileges.

Recommendations For versions prior to 8.7.30, update to version 8.7.30 or later. For versions 9.x prior to 9.5.12, update to version 9.5.12 or later. For versions 10.x prior to 10.2.2, update to version 10.2.2 or later.

Exploit

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2019-19849

GHSA-RCGC-4XFC-564V

Affected Products

Typo3

References · 8

• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2019-19849.yaml · Exploit
• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2019-19849.yaml · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-19849 · Security Note
• https://review.typo3.org/q/%2522Resolves:+%252389005%2522+topic:security · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-19849 · Vendor Advisory
• https://typo3.org/security/advisory/typo3-core-sa-2019-026 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-rcgc-4xfc-564v · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19849 · Note