CVE-2019-7743

CVE-2019-7743 is a critical vulnerability affecting Joomla! versions prior to 3.9.3, stemming from the improper handling of the phar:// stream wrapper. This flaw allows for object injection attacks due to the lack of a protective mechanism to restrict the phar:// handler to actual .phar files. With a CVSS score of 9.8, it presents a severe risk as it can be exploited remotely with low attack complexity, potentially leading to complete compromise of confidentiality, integrity, and availability. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules or significant community discussion surrounding this vulnerability.