Severity
- CVSS 3.x
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H
Affected versions
Repository
| Affected commits | Fixed by commit |
|---|---|
| GIT github.com/TYPO3/typo3 ↗ | |
| 41235ff8e38c6f3401df03ae8beddd62d662c525 to before 33a59bca3098ac08b262929fc9e4087dd44572cb | 33a59bca3098ac08b262929fc9e4087dd44572cb |
| c91b70e450c52d29ffb08115fffbb7832b15a330 to before cf17e40087cd21faa6f9a12683631744d36f3f46 | cf17e40087cd21faa6f9a12683631744d36f3f46 |
Also listed as affected (28)
| |
| GIT github.com/typo3/typo3 ↗ | |
| 41235ff8e38c6f3401df03ae8beddd62d662c525 to before 33a59bca3098ac08b262929fc9e4087dd44572cb | 33a59bca3098ac08b262929fc9e4087dd44572cb |
| c91b70e450c52d29ffb08115fffbb7832b15a330 to before cf17e40087cd21faa6f9a12683631744d36f3f46 | cf17e40087cd21faa6f9a12683631744d36f3f46 |
Also listed as affected (28)
| |
Description
In TYPO3 CMS greater than or equal to 9.0.0 and less than 9.5.17 and greater than or equal to 10.0.0 and less than 10.4.2, calling unserialize() on malicious user-submitted content can lead to modification of dynamically-determined object attributes and result in triggering deletion of an arbitrary directory in the file system, if it is writable for the web server. It can also trigger message submission via email using the identity of the web site (mail relay). Another insecure deserialization vulnerability is required to actually exploit mentioned aspects. This has been fixed in 9.5.17 and 10.4.2.