WS-2019-0144 | Mend Vulnerability Database

Vulnerability DatabaseWS-2019-0144

WS-2019-0144

Published:May 14, 2026

Updated:May 14, 2026

It has been discovered that TYPO3 CMS is vulnerable to Arbitrary Code Execution in versions 8.0.0-8.7.26 and 9.0.0-9.5.7

Affected Packages

typo3/cms-core (PHP):

Affected version(s) >=v9.0.0 <v9.4.0

Fix Suggestion:

Update to version v9.4.0

typo3/cms (PHP):

Affected version(s) =v8.7.25 <8.7.26

Fix Suggestion:

Update to version 8.7.26

typo3/cms (PHP):

Affected version(s) =v8.7.15 <8.7.16

Fix Suggestion:

Update to version 8.7.16

typo3/cms-core (PHP):

Affected version(s) >=v8.7.7 <v8.7.19

Fix Suggestion:

Update to version v8.7.19

typo3/cms (PHP):

Affected version(s) >=TYPO3_8-7-1 <TYPO3_8-7-3

Fix Suggestion:

Update to version TYPO3_8-7-3

typo3/cms (PHP):

Affected version(s) =TYPO3_8-7-0 <dev-TYPO3_8-7

Fix Suggestion:

Update to version dev-TYPO3_8-7

typo3/cms (PHP):

Affected version(s) =v8.7.4 <8.7.5

Fix Suggestion:

Update to version 8.7.5

typo3/cms (PHP):

Affected version(s) =8.7.1 <8.7.2

Fix Suggestion:

Update to version 8.7.2

typo3/cms-backend (PHP):

Affected version(s) >=v8.7.7 <v8.7.19

Fix Suggestion:

Update to version v8.7.19

typo3/cms (PHP):

Affected version(s) =v8.7.11 <8.7.12

Fix Suggestion:

Update to version 8.7.12

instituteweb/typo3-cms (PHP):

Affected version(s) >=8.7.0 <=8.7.10

Fix Suggestion:

Update to version no_fix

typo3/cms-frontend (PHP):

Affected version(s) >=v8.7.7 <v8.7.19

Fix Suggestion:

Update to version v8.7.19

typo3/cms (PHP):

Affected version(s) =v8.7.14 <8.7.15

Fix Suggestion:

Update to version 8.7.15

typo3/cms (PHP):

Affected version(s) =v8.7.10 <8.7.11

Fix Suggestion:

Update to version 8.7.11

typo3/cms (PHP):

Affected version(s) =v8.7.8 <8.7.9

Fix Suggestion:

Update to version 8.7.9

typo3/cms (PHP):

Affected version(s) =v8.7.9 <8.7.10

Fix Suggestion:

Update to version 8.7.10

typo3/cms (PHP):

Affected version(s) =v8.7.5 <8.7.6

Fix Suggestion:

Update to version 8.7.6

typo3/cms-backend (PHP):

Affected version(s) >=v9.0.0 <v9.4.0

Fix Suggestion:

Update to version v9.4.0

typo3/cms (PHP):

Affected version(s) >=v9.5.3 <v9.5.5

Fix Suggestion:

Update to version v9.5.5

typo3/cms (PHP):

Affected version(s) =v8.7.13 <8.7.14

Fix Suggestion:

Update to version 8.7.14

typo3/cms (PHP):

Affected version(s) >=v9.0.0 <v9.4.0

Fix Suggestion:

Update to version v9.4.0

instituteweb/typo3-cms (PHP):

Affected version(s) =dev-TYPO3_8 <6.2.19

Fix Suggestion:

Update to version 6.2.19

typo3/cms (PHP):

Affected version(s) =v8.7.17 <8.7.18

Fix Suggestion:

Update to version 8.7.18

typo3/cms (PHP):

Affected version(s) =v8.7.3 <8.7.4

Fix Suggestion:

Update to version 8.7.4

typo3/cms (PHP):

Affected version(s) =v9.5.1 <v9.5.2

Fix Suggestion:

Update to version v9.5.2

typo3/cms (PHP):

Affected version(s) =v8.7.7 <8.7.8

Fix Suggestion:

Update to version 8.7.8

typo3/cms (PHP):

Affected version(s) =v8.7.16 <8.7.17

Fix Suggestion:

Update to version 8.7.17

typo3/cms-frontend (PHP):

Affected version(s) >=v9.0.0 <v9.4.0

Fix Suggestion:

Update to version v9.4.0

typo3/cms (PHP):

Affected version(s) =v8.7.6 <8.7.7

Fix Suggestion:

Update to version 8.7.7

typo3/cms (PHP):

Affected version(s) =v8.7.18 <8.7.19

Fix Suggestion:

Update to version 8.7.19

typo3/cms (PHP):

Affected version(s) =v8.7.12 <8.7.13

Fix Suggestion:

Update to version 8.7.13

typo3/cms (PHP):

Affected version(s) =v9.5.6 <v9.5.7

Fix Suggestion:

Update to version v9.5.7

Related Resources (2)

https://typo3.org/security/advisory/typo3-core-sa-2019-019/

https://github.com/TYPO3/TYPO3.CMS/commit/75cc3d6bfedf70c2120ef8c6f6dd104e905c1569

Do you need more information?

CVSS v4

Base Score:

8.7

Attack Vector

NETWORK

Attack Complexity

LOW

Attack Requirements

NONE

Privileges Required

LOW

User Interaction

NONE

Vulnerable System Confidentiality

HIGH

Vulnerable System Integrity

HIGH

Vulnerable System Availability

HIGH

Subsequent System Confidentiality

NONE

Subsequent System Integrity

NONE

Subsequent System Availability

NONE

CVSS v3

Base Score:

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH