CVE-2019-11832

—

CVSS 3.0

7.5 high

EPSS

4%p90

Published

May 9, 2019 (May 9, 2019)

Modified

Jun 17, 2026

Description

TYPO3 8.x before 8.7.25 and 9.x before 9.5.6 allows remote code execution because it does not properly configure the applications used for image processing, as demonstrated by ImageMagick or GraphicsMagick.

Vendors: typo3
Products: typo3
Weakness: CWE-20
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.9%)

In the news0 stories

No ingested article mentions this CVE yet.