7 matches found
GHSA-C78M-C52X-JGWP TYPO3 CMS has Insecure Deserialization via Core API
Problem TYPO3's cache frontend VariableFrontend and persistent key-value store Registry deserialized PHP payloads without integrity validation or class restrictions. An attacker with write access to the underlying storage backend cache store or sysregistry database table could inject a crafted...
6.3CVSS5.9AI score0.00588EPSS
SaveExploits0References7
20