TYPO3 Insecure Deserialization in Query Generator & Query View

🗓️ 24 May 2022 17:03:52Reported by GitHub Advisory DatabaseType

TYPO3 Insecure Deserialization in Query Generator & Query View. Vulnerable to ext:lowlevel & ext:sys_action privilege escalation

Reporter	Title	Published	Views	Family All 14
Circl	CVE-2019-19849	12 Mar 202417:21	–	circl
CNVD	TYPO3 code issue vulnerability (CNVD-2020-04075)	18 Dec 201900:00	–	cnvd
CVE	CVE-2019-19849	17 Dec 201916:03	–	cve
Cvelist	CVE-2019-19849	17 Dec 201916:03	–	cvelist
EUVD	EUVD-2022-5150	3 Oct 202520:07	–	euvd
Friends Of PHP	Insecure Deserialization in Query Generator & Query View	17 Dec 201909:51	–	friendsofphp
Friends Of PHP	Insecure Deserialization in Query Generator & Query View	17 Dec 201909:51	–	friendsofphp
NVD	CVE-2019-19849	17 Dec 201917:15	–	nvd
OSV	GHSA-RCGC-4XFC-564V TYPO3 Insecure Deserialization in Query Generator & Query View	24 May 202217:03	–	osv
Prion	Deserialization of untrusted data	17 Dec 201917:15	–	prion

Vulners

Node

typo3 cms-coreRange9.0.0–9.5.12composer

typo3 cms-coreRange8.0.0–8.7.30composer

typo3 cms-coreRange10.0.0–10.2.1composer

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-19849
review	www.review.typo3.org/q/%2522Resolves:+%252389005%2522+topic:security
typo3	www.typo3.org/security/advisory/typo3-core-sa-2019-026/
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2019-19849.yaml
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2019-19849.yaml
typo3	www.typo3.org/security/advisory/typo3-core-sa-2019-026
github	www.github.com/advisories/GHSA-rcgc-4xfc-564v

25 Apr 2024 21:35Current

6.6Medium risk

Vulners AI Score6.6

CVSS 26.5

CVSS 3.18.8

CVSS 38.8

EPSS0.00746