High · 8.8 CVE-2019-12747 EUVD-2022-3124GHSA-86hp-xrhj-fhpq

TYPO3 Vulnerable to Insecure Deserialization

Published Jul 9, 2019 · Updated Aug 4, 2024 · Assigned by mitre

Description

TYPO3 8.x through 8.7.26 and 9.x through 9.5.7 allows Deserialization of Untrusted Data.

Ecosystem	Package	Affected	Fixed	Record
Packagist	typo3/cms	>= 8.0.0, < 8.7.27	8.7.27	GHSA-86hp-xrhj-fhpq
Packagist	typo3/cms	>= 9.0.0, < 9.5.8	9.5.8	GHSA-86hp-xrhj-fhpq
Packagist	typo3/cms-core	>= 8.0.0, < 8.7.27	8.7.27	GHSA-86hp-xrhj-fhpq
Packagist	typo3/cms-core	>= 9.0.0, < 9.5.8	9.5.8	GHSA-86hp-xrhj-fhpq