Em resumo
- CVE-2019-19576 é uma vulnerabilidade CRÍTICO (CVSS 9.8) que afeta verot/class.upload.php, k2 (joomlaworks), verot (verot project).
- Chance de exploração nos próximos 30 dias (EPSS): 26.4%, maior que 98.0% das vulnerabilidades.
- Correção: atualize para 2.0.4, 1.0.3 ou posterior.
| Package | Affected versions | Patched versions |
|---|
| verot/class.upload.php Packagist | ≥ 2.0.0, < 2.0.4< 1.0.3
| 2.0.41.0.3
|
| k2 | ≤ 2.10.1
| No fix yet |
| verot | ≥ 2.0.0, < 2.0.4< 1.0.3
| 2.0.41.0.3
|
Description
class.upload.php in verot.net class.upload before 1.0.3 and 2.x before 2.0.4, as used in the K2 extension for Joomla! and other products, omits .phar from the set of dangerous file extensions.
NVD description
class.upload.php in verot.net class.upload before 1.0.3 and 2.x before 2.0.4, as used in the K2 extension for Joomla! and other products, omits .phar from the set of dangerous file extensions.
Mais vulnerabilidades de verot/class.upload.php
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free