https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 22 Oct 2026 12:55:22 +0000 https://cve.radiocsirt.org/vuln/cnvd-2020-28945 cnvd-2020-28945 https://cve.radiocsirt.org/vuln/cnvd-2020-28945 https://cve.radiocsirt.org/vuln/euvd-2026-40343 EUVD-2026-40343 https://cve.radiocsirt.org/vuln/euvd-2026-40343 https://cve.radiocsirt.org/vuln/fkie_cve-2020-11067 <p>In TYPO3 CMS 9.0.0 through 9.5.16 and 10.0.0 through 10.4.1, it has been discovered that backend user settings (in $BE_USER-&gt;uc) are vulnerable to insecure deserialization. In combination with vulnerabilities of third party components, this can lead to remote code execution. A valid backend user account is needed to exploit this vulnerability. This has been fixed in 9.5.17 and 10.4.2.</p> <p>In TYPO3 CMS 9.0.0 through 9.5.16 and 10.0.0 through 10.4.1, it has been discovered that backend user settings (in $BE_USER-&gt;uc) are vulnerable to insecure deserialization. In combination with vulnerabilities of third party components, this can lead to remote code execution. A valid backend user account is needed to exploit this vulnerability. This has been fixed in 9.5.17 and 10.4.2.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-11067 https://cve.radiocsirt.org/vuln/ghsa-2wj9-434x-9hvp <p><strong>Affected:</strong> Packagist: typo3/cms-core, Packagist: typo3/cms</p> <p>It has been discovered that backend user settings (in $BE_USER-&gt;uc) are vulnerable to insecure deserialization. In combination with vulnerabilities of 3rd party components this can lead to remote code execution. A valid backend user account is needed to exploit this vulnerability.</p> <p>Update to TYPO3 versions 9.5.17 or 10.4.2 that fix the problem described.</p> <p>### References * https://typo3.org/security/advisory/typo3-core-sa-2020-005</p> <p><strong>Affected:</strong> Packagist: typo3/cms-core, Packagist: typo3/cms</p> <p>It has been discovered that backend user settings (in $BE_USER-&gt;uc) are vulnerable to insecure deserialization. In combination with vulnerabilities of 3rd party components this can lead to remote code execution. A valid backend user account is needed to exploit this vulnerability.</p> <p>Update to TYPO3 versions 9.5.17 or 10.4.2 that fix the problem described.</p> <p>### References * https://typo3.org/security/advisory/typo3-core-sa-2020-005</p> https://cve.radiocsirt.org/vuln/ghsa-2wj9-434x-9hvp https://cve.radiocsirt.org/vuln/gsd-2020-11067 gsd-2020-11067 https://cve.radiocsirt.org/vuln/gsd-2020-11067