CVE-2019-11832: Input Validation
Possible Arbitrary Code Execution in Image Processing
Other sources
TYPO3 8.x before 8.7.25 and 9.x before 9.5.6 allows remote code execution because it does not properly configure the applications used for image processing, as demonstrated by ImageMagick or GraphicsMagick.
TYPO3 8.x before 8.7.25 and 9.x before 9.5.6 is susceptible to remote code execution because it does not properly configure the applications used for image processing, as demonstrated by ImageMagick or GraphicsMagick. For a successful exploit, the GhostScript binary gs must be available on the server system.
— GitHub
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-11832?
CVE-2019-11832 is considered a critical vulnerability due to the risk of arbitrary code execution.
How do I fix CVE-2019-11832?
To fix CVE-2019-11832, upgrade TYPO3 to version 8.7.25 or 9.5.6 or later.
Which versions of TYPO3 are affected by CVE-2019-11832?
CVE-2019-11832 affects TYPO3 versions 8.0.0 to 8.7.25 and 9.0.0 to 9.5.6.
What types of applications are involved in the CVE-2019-11832 vulnerability?
The vulnerability involves improper configuration of image processing applications like ImageMagick or GraphicsMagick.
Can exploiting CVE-2019-11832 compromise my system?
Yes, exploiting CVE-2019-11832 can lead to remote code execution and potentially compromise your system.