Search for vulnerabilities
Vulnerability details: VCID-6k39-dpuy-8yam
Vulnerability ID VCID-6k39-dpuy-8yam
Aliases CVE-2012-3527
GHSA-m4hw-r893-xh4g
Summary TYPO3 allows remote authenticated backend users to unserialize arbitrary objects view_help.php in the backend help system in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 and 4.7.x before 4.7.4 allows remote authenticated backend users to unserialize arbitrary objects and possibly execute arbitrary PHP code via an unspecified parameter, related to a "missing signature (HMAC)."
Status Published
Exploitability 0.5
Weighted Severity 6.2
Risk 3.1
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-502 Deserialization of Untrusted Data
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.02065 https://api.first.org/data/v1/epss?cve=CVE-2012-3527
epss 0.02065 https://api.first.org/data/v1/epss?cve=CVE-2012-3527
generic_textual MODERATE https://exchange.xforce.ibmcloud.com/vulnerabilities/77791
generic_textual MODERATE https://github.com/TYPO3/typo3
generic_textual MODERATE https://nvd.nist.gov/vuln/detail/CVE-2012-3527
generic_textual MODERATE https://web.archive.org/web/20120817233148/http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-004
generic_textual MODERATE http://www.debian.org/security/2012/dsa-2537
generic_textual MODERATE http://www.openwall.com/lists/oss-security/2012/08/22/8
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2012-3527
https://exchange.xforce.ibmcloud.com/vulnerabilities/77791
https://github.com/TYPO3/typo3
https://nvd.nist.gov/vuln/detail/CVE-2012-3527
https://web.archive.org/web/20120817233148/http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-004
http://www.debian.org/security/2012/dsa-2537
http://www.openwall.com/lists/oss-security/2012/08/22/8
GHSA-m4hw-r893-xh4g https://github.com/advisories/GHSA-m4hw-r893-xh4g
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.8309
EPSS Score 0.02065
Published At June 30, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-01T12:26:16.340054+00:00 GithubOSV Importer Import https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-m4hw-r893-xh4g/GHSA-m4hw-r893-xh4g.json 36.1.3