Typo3 - Arbitrary deserialisation Requirements A valid username and password of a user with admin rights on Typo3. Exploitation References https://www.synacktiv.com/publications/typo3-leak-to-remote-code-execution.html