CVE-2020-11067
In TYPO3 CMS 9.0.0 through 9.5.16 and 10.0.0 through 10.4.1, it has been discovered that backend user settings (in $BE_USER->uc) are vulnerable to ins...
Summary
Insecure Deserialization in Backend User Settings in TYPO3 CMS
Original description
The description as published by the source.
In TYPO3 CMS 9.0.0 through 9.5.16 and 10.0.0 through 10.4.1, it has been discovered that backend user settings (in $BE_USER->uc) are vulnerable to insecure deserialization. In combination with vulnerabilities of third party components, this can lead to remote code execution. A valid backend user account is needed to exploit this vulnerability. This has been fixed in 9.5.17 and 10.4.2.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Packagist
typo3/cms-core
[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.0"},{"fixed":"10.4.2"}]}]
Packagist
typo3/cms
[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.0"},{"fixed":"9.5.17"}]}]
References
- advisory github.com
- advisory nvd.nist.gov
- web github.com
- web github.com
- web typo3.org