The Content Editing Wizards component in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6 allows remote authenticated backend users to unserialize arbitrary PHP objects, delete arbitrary files, and possibly have other unspecified impacts via an unspecified parameter, related to a "missing signature."
2013-12-23T23:55:04.327
2025-04-11T00:51:21.963
Deferred
CVSSv2: 6.5 (MEDIUM)
AV:N/AC:L/Au:S/C:P/I:P/A:P
8.0
6.4
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | typo3 | typo3 | 6.0 | Yes |
| Application | typo3 | typo3 | 6.0.1 | Yes |
| Application | typo3 | typo3 | 6.0.2 | Yes |
| Application | typo3 | typo3 | 6.0.3 | Yes |
| Application | typo3 | typo3 | 6.0.4 | Yes |
| Application | typo3 | typo3 | 6.0.5 | Yes |
| Application | typo3 | typo3 | 6.0.6 | Yes |
| Application | typo3 | typo3 | 6.0.7 | Yes |
| Application | typo3 | typo3 | 6.0.8 | Yes |
| Application | typo3 | typo3 | 6.0.9 | Yes |
| Application | typo3 | typo3 | 6.0.10 | Yes |
| Application | typo3 | typo3 | 6.0.11 | Yes |
| Application | typo3 | typo3 | 4.7.0 | Yes |
| Application | typo3 | typo3 | 4.7.1 | Yes |
| Application | typo3 | typo3 | 4.7.2 | Yes |
| Application | typo3 | typo3 | 4.7.3 | Yes |
| Application | typo3 | typo3 | 4.7.4 | Yes |
| Application | typo3 | typo3 | 4.7.5 | Yes |
| Application | typo3 | typo3 | 4.7.6 | Yes |
| Application | typo3 | typo3 | 4.7.7 | Yes |
| Application | typo3 | typo3 | 4.7.8 | Yes |
| Application | typo3 | typo3 | 4.7.9 | Yes |
| Application | typo3 | typo3 | 4.7.10 | Yes |
| Application | typo3 | typo3 | 4.7.11 | Yes |
| Application | typo3 | typo3 | 4.7.12 | Yes |
| Application | typo3 | typo3 | 4.7.13 | Yes |
| Application | typo3 | typo3 | 4.7.14 | Yes |
| Application | typo3 | typo3 | 4.7.15 | Yes |
| Application | typo3 | typo3 | 4.7.16 | Yes |
| Application | typo3 | typo3 | 4.5.0 | Yes |
| Application | typo3 | typo3 | 4.5.1 | Yes |
| Application | typo3 | typo3 | 4.5.2 | Yes |
| Application | typo3 | typo3 | 4.5.3 | Yes |
| Application | typo3 | typo3 | 4.5.4 | Yes |
| Application | typo3 | typo3 | 4.5.5 | Yes |
| Application | typo3 | typo3 | 4.5.6 | Yes |
| Application | typo3 | typo3 | 4.5.7 | Yes |
| Application | typo3 | typo3 | 4.5.8 | Yes |
| Application | typo3 | typo3 | 4.5.9 | Yes |
| Application | typo3 | typo3 | 4.5.10 | Yes |
| Application | typo3 | typo3 | 4.5.11 | Yes |
| Application | typo3 | typo3 | 4.5.12 | Yes |
| Application | typo3 | typo3 | 4.5.13 | Yes |
| Application | typo3 | typo3 | 4.5.14 | Yes |
| Application | typo3 | typo3 | 4.5.15 | Yes |
| Application | typo3 | typo3 | 4.5.16 | Yes |
| Application | typo3 | typo3 | 4.5.17 | Yes |
| Application | typo3 | typo3 | 4.5.18 | Yes |
| Application | typo3 | typo3 | 4.5.19 | Yes |
| Application | typo3 | typo3 | 4.5.20 | Yes |
| Application | typo3 | typo3 | 4.5.21 | Yes |
| Application | typo3 | typo3 | 4.5.22 | Yes |
| Application | typo3 | typo3 | 4.5.23 | Yes |
| Application | typo3 | typo3 | 4.5.24 | Yes |
| Application | typo3 | typo3 | 4.5.25 | Yes |
| Application | typo3 | typo3 | 4.5.26 | Yes |
| Application | typo3 | typo3 | 4.5.27 | Yes |
| Application | typo3 | typo3 | 4.5.28 | Yes |
| Application | typo3 | typo3 | 4.5.29 | Yes |
| Application | typo3 | typo3 | 4.5.30 | Yes |
| Application | typo3 | typo3 | 4.5.31 | Yes |
| Application | typo3 | typo3 | 6.1 | Yes |
| Application | typo3 | typo3 | 6.1.1 | Yes |
| Application | typo3 | typo3 | 6.1.2 | Yes |
| Application | typo3 | typo3 | 6.1.3 | Yes |
| Application | typo3 | typo3 | 6.1.4 | Yes |
| Application | typo3 | typo3 | 6.1.5 | Yes |
| Application | typo3 | typo3 | 6.1.6 | Yes |