CVE-2019-13187

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

The Rich Text Formatter (Redactor) extension through v1.1.1 for Symphony CMS has an Unauthenticated arbitrary file upload vulnerability in content.fileupload.php and content.imageupload.php.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-434

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://symphonyextensions.com/extensions/richtext_redactor/Release Notes
https://blog.contentsecurity.com.au/redactor-unrestricted-file-uploadExploit, Third Party Advisory
http://symphonyextensions.com/extensions/richtext_redactor/Release Notes
https://blog.contentsecurity.com.au/redactor-unrestricted-file-uploadExploit, Third Party Advisory

Timeline

Published: Sep 5, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-131889.8In Knowage through 6.1.1, an unauthenticated user can bypass access controls and access the entire application.CVE-2019-131896.1In Knowage through 6.1.1, there is XSS via the start_url or user_id field to the ChangePwdServlet page.CVE-2019-13197.8An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka 'Windows Error Repo CVE-2019-131905.3In Knowage through 6.1.1, the sign up page does not invalidate a valid CAPTCHA token. This allows for CAPTCHA bypass in the signup page.CVE-2019-131917.5A SQL injection vulnerability in IntraMaps MapControl 8 allows attackers to execute arbitrary SQL commands via the /ApplicationEngine/Search CVE-2019-131929.8Some Brother printers (such as the HL-L8360CDW v1.20) were affected by a heap buffer overflow vulnerability as the IPP service did not parse CVE-2019-131938.8Some Brother printers (such as the HL-L8360CDW v1.20) were affected by a stack buffer overflow vulnerability as the web server did not parse CVE-2019-131947.5Some Brother printers (such as the HL-L8360CDW v1.20) were affected by different information disclosure vulnerabilities that provided sensit CVE-2019-131957.5The web application of some Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) was vulnerable to path traversal, allowing an un CVE-2019-131968.8Some Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) were affected by a buffer overflow vulnerability in the arg4 and arg9 p CVE-2019-131979.8Some Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) were affected by a buffer overflow vulnerability in the URI paths of th CVE-2019-131986.1The web application of several Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) was affected by Stored XSS. Successful exploi