[HIGH] TYPO3-CORE-SA-2020-005: Insecure Deserialization in Backend User Settings

PKSA-769c-kbh8-sdc8 CVE-2020-11067 GHSA-2wj9-434x-9hvp

Affected package: typo3/cms-core

Affected version: >=10.0.0,<10.4.2|>=9.0.0,<9.5.17

Reported by:
GitHub, FriendsOfPHP/security-advisories