Packagist/typo3/cms-core: critical 9.8

TYPO3 CMS Insecure Deserialization & Arbitrary Code Execution

Action: Upgrade typo3/cms-core to 7.6.30 or later.

composer require typo3/cms-core:8.7.17

composer require typo3/cms-core:9.3.2

composer require typo3/cms-core:7.6.30

Affected

Fixed versions

Sources

• osv: GHSA-cc97-g92w-jm65
• https://github.com/TYPO3-CMS/core/commit/81c6e9e6e49ee4f924bd340fb007d271fa44aa16
• https://github.com/TYPO3-CMS/core/commit/854d03841b42123ab744c2591199b76ce65a8e45
• https://github.com/TYPO3-CMS/core/commit/aa4e270d04313fe7d8ea508a9c694db83875e981
• https://github.com/TYPO3-CMS/core/commit/dd0487bd8b4ec7204dbfff2b5812d797102a1778
• https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2018-07-12-2.yaml
• https://github.com/TYPO3-CMS/core
• https://typo3.org/security/advisory/typo3-core-sa-2018-002

published 2024-05-30T13:52:08Z · modified 2024-12-05T05:43:00.905676Z · JSON