[HIGH] TYPO3-CORE-SA-2020-005: Insecure Deserialization in Backend User Settings

PKSA-dxxk-hc9h-1z3f CVE-2020-11067 GHSA-2wj9-434x-9hvp

Affected package: typo3/cms

Affected version: >=10.0.0,<10.4.2|>=9.0.0,<9.5.17

Reported by:
GitHub, FriendsOfPHP/security-advisories