CVE:CVE-2019-11831
CNNVD:CNNVD-201905-217
TYPO3 PharStreamWrapper是瑞士TYPO3协会的一款用于流处理的拦截器。
TYPO3 PharStreamWrapper包2.1.1之前的2.x版本和3.1.1之前的3.x版本中存在代码问题漏洞。该漏洞源于网络系统或产品的代码开发过程中存在设计或实现不当的问题。
solution:Upgrade typo3 pharstreamwrapper to a higher version than 2.1.1,3.1.1,and avoid the version [2.0.0,2.1.1),[3.0.0,3.1.1); Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade fedoraproject fedora to a higher version than 28,29,30,and avoid the version 28,29,30; Upgrade drupal drupal to a higher version than 7.67,8.6.16,8.7.1,and avoid the version [7.0,7.67),[8.6.0,8.6.16),[8.7.0,8.7.1); Upgrade joomla joomla! to a higher version than 3.9.5,and avoid the version [3.9.3,3.9.5]