Insecure Deserialization in Backend User Settings in TYPO3 CMS

CAO 8.8CVE-2020-11067 · BIT-typo3-2020-11067 · GHSA-2wj9-434x-9hvp · Công bố 14/05/2020 · cập nhật 17/06/2026

Tóm tắt nhanh

CVE-2020-11067 là lỗ hổng mức CAO (CVSS 8.8) ảnh hưởng typo3/cms, typo3/cms-core, typo3 (typo3).
Xác suất bị khai thác trong 30 ngày tới (EPSS): 2.0%, cao hơn 80.6% các lỗ hổng khác.
Cách xử lý: cập nhật lên 10.4.2, 9.5.17 hoặc mới hơn.

Gói / sản phẩm	Phiên bản bị ảnh hưởng	Phiên bản đã vá
typo3/cms Packagist	`≥ 10.0.0, < 10.4.2≥ 9.0.0, < 9.5.17`	`10.4.29.5.17`
typo3/cms-core Packagist	`≥ 10.0.0, < 10.4.2≥ 9.0.0, < 9.5.17`	`10.4.29.5.17`
typo3 typo3	`≥ 10.0.0, ≤ 10.4.1≥ 9.0.0, ≤ 9.5.16`	Chưa có bản vá

Mô tả

It has been discovered that backend user settings (in $BE_USER->uc) are vulnerable to insecure deserialization. In combination with vulnerabilities of 3rd party components this can lead to remote code execution. A valid backend user account is needed to exploit this vulnerability.

Update to TYPO3 versions 9.5.17 or 10.4.2 that fix the problem described.

References

https://typo3.org/security/advisory/typo3-core-sa-2020-005

Mô tả của NVD

In TYPO3 CMS 9.0.0 through 9.5.16 and 10.0.0 through 10.4.1, it has been discovered that backend user settings (in $BE_USER->uc) are vulnerable to insecure deserialization. In combination with vulnerabilities of third party components, this can lead to remote code execution. A valid backend user account is needed to exploit this vulnerability. This has been fixed in 9.5.17 and 10.4.2.