CVE-2020-11067 - CVE House
Back to Database
Status published High CVE-2020-11067

Deserialization of Untrusted Data in TYPO3 CMS

Vulnerability Description

In TYPO3 CMS 9.0.0 through 9.5.16 and 10.0.0 through 10.4.1, it has been discovered that backend user settings (in $BE_USER->uc) are vulnerable to insecure deserialization. In combination with vulnerabilities of third party components, this can lead to remote code execution. A valid backend user account is needed to exploit this vulnerability. This has been fixed in 9.5.17 and 10.4.2.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-11067

Credits & Attribution

No credits recorded in the NVD database.

References

More from TYPO3

View All →
CVE-2025-9573
Command Injection in extension "TYPO3 Backup Plus" (ns_backup)
High 8.6
CVE-2025-7900
Insecure Direct Object Reference in extension "femanager" (femanager)
Medium 5.3
CVE-2025-7899
Insecure Direct Object Reference in extension "powermail" (powermail)
Medium 6
CVE-2025-59022
TYPO3 CMS Allows Broken Access Control in Recycler Module
High 7.1
CVE-2025-59021
TYPO3 CMS Allows Broken Access Control in Redirects Module
Medium 5.3

Affected Vendor

Affected Software

TYPO3 CMS
Vulnerable Versions:
>= 9.0.0, < 9.5.17, >= 10.0.0, < 10.4.2

Timeline

Official Publish: May 13th, 2020
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-502

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1059 Command and Scripting Interpreter
Execution
T1505.003 Web Shell
Persistence
T1105 Ingress Tool Transfer
Command and Control
T1068 Exploitation for Privilege Escalation
Privilege Escalation