{"action":"Upgrade typo3/cms-core to 7.6.30 or later.","affected":[{"fixed":"8.7.17","introduced":"8.0.0"},{"fixed":"9.3.2","introduced":"9.0.0"},{"fixed":"7.6.30","introduced":"7.0.0"}],"component":"typo3/cms-core","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["8.7.17","9.3.2","7.6.30"],"ghsa_id":"GHSA-cc97-g92w-jm65","id":"tcs_01M5KF0WKJ6QWWJ6TZABFRDKH8","modified_at":"2024-12-05T05:43:00.905676Z","published_at":"2024-05-30T13:52:08Z","references":["https://osv.dev/vulnerability/GHSA-cc97-g92w-jm65","https://github.com/TYPO3-CMS/core/commit/81c6e9e6e49ee4f924bd340fb007d271fa44aa16","https://github.com/TYPO3-CMS/core/commit/854d03841b42123ab744c2591199b76ce65a8e45","https://github.com/TYPO3-CMS/core/commit/aa4e270d04313fe7d8ea508a9c694db83875e981","https://github.com/TYPO3-CMS/core/commit/dd0487bd8b4ec7204dbfff2b5812d797102a1778","https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2018-07-12-2.yaml","https://github.com/TYPO3-CMS/core","https://typo3.org/security/advisory/typo3-core-sa-2018-002"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-cc97-g92w-jm65","url":"https://osv.dev/vulnerability/GHSA-cc97-g92w-jm65"}],"summary":"TYPO3 CMS Insecure Deserialization & Arbitrary Code Execution"}