TYPO3 Content Element Selector Extension Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in the TYPO3 extension 'Content Element Selector' (ceselector), specifically in versions 6.0.0, 5.0.0, 4.0.0 - 4.0.1, and 3.0.2 and below. The issue arises from the extension's failure to properly sanitize an attacker-controlled cookie before passing it to PHP's unserialize() function. This vulnerability allows for PHP Object Injection, which can be exploited to execute arbitrary code on the TYPO3 server. Successful exploitation requires the content element to be set to 'Persistent Mode: Static' in the plugin settings.

Impact

Exploitation of this vulnerability allows for remote code execution on the TYPO3 server.

Remediation

Users are advised to update the 'Content Element Selector' extension to version 6.0.1, 5.0.1, 4.0.2, or 3.0.3. These versions are available through the TYPO3 Extension Manager, Packagist, and the TYPO3 Extensions Repository.