Insecure Unserialize in TYPO3 Backend

2024-06-0517:04:41

GitHub Advisory Database

github.com

typo3

unserialize

vulnerability

backend

user account

7 High

AI Score

Confidence

High

JSON

Failing to properly validate incoming data, the suggest wizard is susceptible to insecure unserialize. To exploit this vulnerability a valid backend user account is needed.

Affected configurations

Vulners

Node

typo3cms_poll_system_extensionRange<8.4.1

typo3cms_poll_system_extensionRange<7.6.13

typo3cms_poll_system_extensionRange<6.2.29

CPENameOperatorVersion
typo3/cmslt8.4.1
typo3/cmslt7.6.13
typo3/cmslt6.2.29

Name	Operator	Version
typo3/cms	lt	8.4.1
typo3/cms	lt	7.6.13
typo3/cms	lt	6.2.29

References

github.com/advisories/GHSA-c7rj-92xr-wprg

github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2016-11-22-1.yaml

7 High

AI Score

Confidence

High

JSON