PHP object injection vulnerability allows for arbitrary code execution

PKSA-kg5m-pjr6-ystg

Affected package: contao/core

Affected version: >=2.0.0,<2.11.16|>=3.0.0,<3.2.7

Reported by:
FriendsOfPHP/security-advisories