{"action":"Upgrade typo3/cms to 4.5.19 or later.","affected":[{"fixed":"4.5.19","introduced":"4.5.0"},{"fixed":"4.6.12","introduced":"4.6.0"},{"fixed":"4.7.4","introduced":"4.7.0"}],"component":"typo3/cms","cve_ids":["CVE-2012-3527"],"ecosystem":"Packagist","epss":0.0212,"exploited":false,"fixed_versions":["4.5.19","4.6.12","4.7.4"],"ghsa_id":"GHSA-m4hw-r893-xh4g","id":"tcs_01M5KF54KV6HJP309ZT9CNY7P6","modified_at":"2025-04-12T03:27:06.689835Z","published_at":"2022-05-17T01:43:58Z","references":["https://osv.dev/vulnerability/GHSA-m4hw-r893-xh4g","https://nvd.nist.gov/vuln/detail/CVE-2012-3527","https://exchange.xforce.ibmcloud.com/vulnerabilities/77791","https://github.com/TYPO3/typo3","https://web.archive.org/web/20120817233148/http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-004","http://www.debian.org/security/2012/dsa-2537","http://www.openwall.com/lists/oss-security/2012/08/22/8"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-m4hw-r893-xh4g","url":"https://osv.dev/vulnerability/GHSA-m4hw-r893-xh4g"}],"summary":"TYPO3 allows remote authenticated backend users to unserialize arbitrary objects"}