CVEvulnerability

CVE-2012-1605

5.0 MEDIUM Published 2012-09-04 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-09-04
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N

Description

The Extbase Framework in TYPO3 4.6.x through 4.6.6, 4.7, and 6.0 unserializes untrusted data, which allows remote attackers to unserialize arbitrary objects and possibly execute arbitrary code via vectors related to "a missing signature (HMAC) for a request argument."

Affected configurations

• typo3 typo3 4.6 • typo3 typo3 4.6.0 • typo3 typo3 4.6.1 • typo3 typo3 4.6.2 • typo3 typo3 4.6.3 • typo3 typo3 4.6.4 • typo3 typo3 4.6.5 • typo3 typo3 4.6.6 • typo3 typo3 4.7 • typo3 typo3 6.0

References