Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2012-1605

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-7jfm-px59-99w8

Typo3 Extbase Framework Unsafe Deserialization The Extbase Framework in TYPO3 4.6.x through 4.6.6, 4.7, and 6.0 unserializes untrusted data, which allows remote attackers to unserialize arbitrary objects and possibly execute arbitrary code via vectors related to "a missing signature (HMAC) for a request argument."

gitlab/packagist/typo3/cms/CVE-2012-1605

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') The Extbase Framework in TYPO3 4.6.x through 4.6.6, 4.7, and 6.0 unserializes untrusted data, which allows remote attackers to unserialize arbitrary objects and possibly execute arbitrary code via vectors related to "a missing signature (HMAC) for a request argument."