← Back to CVE List

CVE-2019-7743

Published: 2019-02-12T18:29Z
Last Modified: 2024-11-21T04:48Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
An issue was discovered in Joomla! before 3.9.3. The phar:// stream wrapper can be used for objection injection attacks because there is no protection mechanism (such as the TYPO3 PHAR stream wrapper) to prevent use of the phar:// handler for non .phar-files. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt