Em resumo
- CVE-2019-19634 é uma vulnerabilidade CRÍTICO (CVSS 9.8) que afeta verot/class.upload.php, k2 (joomlaworks), verot (verot project).
- Chance de exploração nos próximos 30 dias (EPSS): 4.2%, maior que 90.9% das vulnerabilidades.
- Correção: atualize para 2.0.4, 1.0.3 ou posterior.
| Package | Affected versions | Patched versions |
|---|
| verot/class.upload.php Packagist | ≥ 2.0.0, ≤ 2.0.4≤ 1.0.3
| No fix yet |
| k2 | ≤ 2.10.1
| No fix yet |
| verot | ≥ 2.0.0, < 2.0.4< 1.0.3
| 2.0.41.0.3
|
Description
class.upload.php in verot.net class.upload through 1.0.3 and 2.x through 2.0.4, as used in the K2 extension for Joomla! and other products, omits .pht from the set of dangerous file extensions, a similar issue to CVE-2019-19576.
NVD description
class.upload.php in verot.net class.upload through 1.0.3 and 2.x through 2.0.4, as used in the K2 extension for Joomla! and other products, omits .pht from the set of dangerous file extensions, a similar issue to CVE-2019-19576.
Mais vulnerabilidades de verot/class.upload.php
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free