Lucene search
GoogleOSV:GHSA-7JFM-PX59-99W8HistoryMay 17, 2022 - 5:23 a.m.
Typo3 Extbase Framework Unsafe Deserialization
2022-05-1705:23:50
Google
osv.dev
1
0.006 Low
EPSS
Percentile
79.5%
The Extbase Framework in TYPO3 4.6.x through 4.6.6, 4.7, and 6.0 unserializes untrusted data, which allows remote attackers to unserialize arbitrary objects and possibly execute arbitrary code via vectors related to “a missing signature (HMAC) for a request argument.”
Related
cve
cve
CVE-2012-1605
2022-10-03 16:15:26
openvas
openvas
TYPO3 Extbase HMAC Unserialization Weakness
2014-01-02 00:00:00
ubuntucve
ubuntucve
CVE-2012-1605
2012-09-04 00:00:00
nvd
nvd
CVE-2012-1605
2012-09-04 20:55:01
github
github
Typo3 Extbase Framework Unsafe Deserialization
2022-05-17 05:23:50
prion
prion
Design/Logic Flaw
2012-09-04 20:55:00
cvelist
cvelist
CVE-2012-1605
2022-10-03 16:15:26
typo3
typo3
Several Vulnerabilities in TYPO3 Core
2012-03-28 00:00:00