CVE-2012-1605 | BDVDB-2026-52054 Detail

Description#

The Extbase Framework in TYPO3 4.6.x through 4.6.6, 4.7, and 6.0 unserializes untrusted data, which allows remote attackers to unserialize arbitrary objects and possibly execute arbitrary code via vectors related to "a missing signature (HMAC) for a request argument."

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12012-09-04Record published in the CVE List.
2. Version 22024-09-16Most recent update recorded in the CVE List.