VULNERABILITY INTELLIGENCE

CVE-2019-11832

CVSS score7.5 HIGH
EPSS probability3.92%
CISA KEVNot currently listed
Published2019-05-09
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

TYPO3 8.x before 8.7.25 and 9.x before 9.5.6 allows remote code execution because it does not properly configure the applications used for image processing, as demonstrated by ImageMagick or GraphicsMagick.

Weakness classification

  • nvd@nist.gov: CWE-20

Primary references