CVE-2019-7743

CRITICAL · CVSS 9.8 EPSS 2.67%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-02-12 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2019-7743

Severity

CRITICAL

CVSS

9.8

EPSS

2.67%

Original NVD Description

An issue was discovered in Joomla! before 3.9.3. The phar:// stream wrapper can be used for objection injection attacks because there is no protection mechanism (such as the TYPO3 PHAR stream wrapper) to prevent use of the phar:// handler for non .phar-files.