---
title: "[20190206] - Core - Implement the TYPO3 PHAR stream wrapper"
description: "We help designers, developers, hobbyists and business owners get the most out of the Joomla CMS.  Join us at our free monthly meetups, and let us help you with your Joomla projects."
url: "https://www.joomlalondon.co.uk/official-joomla-announcements/20190206-core-implement-the-typo3-phar-stream-wrapper"
date: "2026-09-09T15:22:27+00:00"
language: "en-GB"
---

#  \[20190206\] - Core - Implement the TYPO3 PHAR stream wrapper

- **Project:** Joomla!
- **SubProject:** CMS
- **Impact:** Low
- **Severity:** Low
- **Versions:** 2.5.0 through 3.9.2
- **Exploit type:** Object Injection
- **Reported Date:** 2019-January-18
- **Fixed Date:** 2019-February-12
- **CVE Number:** [CVE-2019-7743](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7743)

### Description

The phar:// stream wrapper can be used for objection injection attacks. We now disallow usage of the phar:// handler for non .phar-files within the CMS globally by implementing the TYPO3 PHAR stream wrapper.

### Affected Installs

Joomla! CMS versions 2.5.0 through 3.9.2

### Solution

Upgrade to version 3.9.3

### Contact

The JSST at the [Joomla! Security Centre](https://developer.joomla.org/security-centre.html "Contact the JSST").

David Jardin (JSST)Read more  [http://feeds.joomla.org/~r/JoomlaSecurityNews/~3/fkS3WGexLko/770-20190206-core-implement-the-typo3-phar-stream-wrapper.html](http://feeds.joomla.org/~r/JoomlaSecurityNews/~3/fkS3WGexLko/770-20190206-core-implement-the-typo3-phar-stream-wrapper.html "[20190206] - Core - Implement the TYPO3 PHAR strea")

## Schema

```json
{ "@context": "https://schema.org", "@type": "BreadcrumbList", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Start", "item": "https://www.joomlalondon.co.uk" }, { "@type": "ListItem", "position": 2, "name": "Official Joomla! Announcements", "item": "https://www.joomlalondon.co.uk/official-joomla-announcements" }, { "@type": "ListItem", "position": 3, "name": "[20190206] - Core - Implement the TYPO3 PHAR stream wrapper", "item": "https://www.joomlalondon.co.uk/official-joomla-announcements/20190206-core-implement-the-typo3-phar-stream-wrapper" } ] }
```