CVE-2012-3527: TYPO3 CMS Unserialization Vulnerability Allows Remote Code Execution
Summary
CVE-2012-3527: TYPO3 allows remote authenticated backend users to unserialize arbitrary objects. Affects typo3/cms across 3 version ranges.
>= 4.5.0, < 4.5.19
>= 4.6.0, < 4.6.12
>= 4.7.0, < 4.7.4
Fixed in 4.5.19, 4.6.12 or 4.7.4, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
TYPO3 is an open-source content management system (CMS) widely used for building and managing websites. It offers a robust framework for developers and a user-friendly interface for content editors. However, certain versions of TYPO3 are vulnerable to a security flaw that allows remote authenticated backend users to unserialize arbitrary objects, potentially leading to remote code execution.
Vulnerability Detail
The vulnerability exists in the view_help.php file within the backend help system of TYPO3 versions 4.5.x before 4.5.19, 4.6.x before 4.6.12, and 4.7.x before 4.7.4. It allows remote authenticated backend users to exploit an unspecified parameter due to a missing signature (HMAC), enabling them to unserialize arbitrary objects. This can lead to the execution of arbitrary PHP code, posing a significant security risk.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
>= 4.5.0, < 4.5.194.5.19composer require typo3/cms:4.5.19 -
>= 4.6.0, < 4.6.124.6.12composer require typo3/cms:4.6.12 -
>= 4.7.0, < 4.7.44.7.4composer require typo3/cms:4.7.4
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
As a temporary workaround, restrict access to the backend help system to trusted users only. This can help mitigate the risk until the system is updated to a secure version.
Conclusion
CVE-2012-3527 is a critical vulnerability affecting specific versions of TYPO3 that can lead to remote code execution. It is crucial for users to update their installations to the latest patched versions to safeguard against potential exploits. Utilizing tools like Vulert can help monitor and manage vulnerabilities effectively.
See every vulnerability recorded for typo3/cms →
FAQ
CVE-2012-3527 is a vulnerability in TYPO3 that allows remote authenticated backend users to unserialize arbitrary objects, potentially leading to remote code execution.
The affected versions are TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12, and 4.7.x before 4.7.4.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. You can check if your application is affected by this vulnerability using the Vulert playground at Vulert Scanner without any signup.
If exploited, this vulnerability can allow an attacker to execute arbitrary PHP code on the server, potentially leading to data breaches, site defacement, or complete server takeover.
If an immediate update is not possible, ensure that access to the backend help system is restricted to trusted users only as a temporary measure.
Related vulnerabilities
Recent vulnerabilities recorded for typo3/cms.
