CRITICAL
GHSA-8x3j-439w-537c
TYPO3 Remote Code Execution in extension "Content Element Selector" (ceselector)
Quick fix
GHSA-8x3j-439w-537c — mmc/ceselector: upgrade to the fixed version with the command below.
composer require mmc/ceselector:^6.0.1Details
The TYPO3 "Content Element Selector" (ceselector) extension passes an attacker-controlled cookie directly to PHP's `unserialize()` without safely processing the input. A remote, unauthenticated attacker can supply a crafted serialized payload to trigger PHP Object Injection, leading to Remote Code Execution on the TYPO3 server. Exploitation requires the content element to be configured with `Persistent Mode: Static` in the plugin settings. This has been patched in version 3.0.3, 4.0.2, 5.0.1, and 6.0.1.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist/mmc/ceselector
Introduced in:
6.0.0Fixed in: 6.0.1Fix
composer require mmc/ceselector:^6.0.1Packagist/mmc/ceselector
Introduced in:
5.0.0Fixed in: 5.0.1Fix
composer require mmc/ceselector:^5.0.1Packagist/mmc/ceselector
Introduced in:
4.0.0Fixed in: 4.0.2Fix
composer require mmc/ceselector:^4.0.2