CVE-2012-1605

medium
Published 2012-09-04 · Modified 2023-11-08
CVSS v3
CVSS v2
5.0
VIR risk
5.0

Description

Typo3 Extbase Framework Unsafe Deserialization

Predictions

Exploit likelihood
20%
Patch ETA

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: secalert@redhat.com — http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2012-001/

Package impact

EcosystemPackageVulnerableFixed
php Packagisttypo3/cms>=4.6,<4.6.74.6.7
php Packagisttypo3/cms>=4.4.0,<4.4.144.4.14
php Packagisttypo3/cms>=4.5.0,<4.5.144.5.14

Application impact

VendorProductVersionsFixed
typo3typo34.6
typo3typo34.6.0
typo3typo34.6.1
typo3typo34.6.2
typo3typo34.6.3
typo3typo34.6.4
typo3typo34.6.5
typo3typo34.6.6
typo3typo34.7
typo3typo36.0

References

Verify integrity in audit chain (admin only). AS-IS.