VDB
BDU%3A2020-01708
BDU%3A2020-01708
PUBLISHED
CVSS 7.5 HIGH
Уязвимость пакета PharStreamWrapper системы управления контентом TYPO3, позволяющая нарушителю раскрыть защищаемую информацию
Risk Scores
CVSS 2.0
7.5
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Canonical Ltd., Сообщество свободного программного обеспечения, Fedora Project, TYPO3 | Ubuntu, Debian GNU/Linux, Fedora, Drupal, PharStreamWrapper |
Timeline
- Apr 23, 2020 CVE Published
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Security Advisory
References
- https://www.debian.org/security/2019/dsa-4445 url
- https://www.securityfocus.com/bid/108302 url
- https://nvd.nist.gov/vuln/detail/CVE-2019-11831 url
- https://github.com/TYPO3/phar-stream-wrapper/releases/tag/v2.1.1 url
- https://github.com/TYPO3/phar-stream-wrapper/releases/tag/v3.1.1 url
- https://security-tracker.debian.org/tracker/CVE-2019-11831 url
- https://security-tracker.debian.org/tracker/DLA-1797-1 url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6QDJVUJPUW3RZ4746SC6BX4F4T6ZXNBH/ url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AUEXS4HRI4XZ2DTZMWAVQBYBTFSJ34AR/ url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E3NUKPG7V4QEM6QXRMHYR4ABFMW5MM2P/ url
- https://typo3.org/security/advisory/typo3-psa-2019-007/ url
- https://www.drupal.org/sa-core-2019-007 url
- https://people.canonical.com/~ubuntu-security/cve/2019/CVE-2019-11831.html url