Login Request a demo
PH
Product
Pharstreamwrapper
by Typo3 · last CVE May 9, 2019
2
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities2In the news0Timeline
Severity mix
Critical 2High 0Medium 0Low 0
Severity
All severities2Critical2High0Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Pharstreamwrapper to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-11831
9.8
5%
May 9
The PharStreamWrapper (aka phar-stream-wrapper) package 2.x before 2.1.1 and 3.x before 3.1.1 for TYPO3 does not prevent directory traversal, which allows attackers to bypass a…
Affected: 2.0.0 before 2.1.1; 3.0.0 before 3.1.1
CVE-2019-11830
9.8
3%
May 9
PharMetaDataInterceptor in the PharStreamWrapper (aka phar-stream-wrapper) package 2.x before 2.1.1 and 3.x before 3.1.1 for TYPO3 mishandles Phar stub parsing, which allows…
Affected: 2.0.0 before 2.1.1; 3.0.0 before 3.1.1
Showing 2