Packagist/typo3/cms CVE-2020-11063: low 3.7, EPSS 1.22%

Information Disclosure in Password Reset

Action: Upgrade typo3/cms to 10.4.2 or later.

composer require typo3/cms:10.4.2

Affected

Fixed versions

Sources

• osv: GHSA-347x-877p-hcwx#Packagist/typo3/cms
• https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-347x-877p-hcwx
• https://github.com/TYPO3/typo3/security/advisories/GHSA-347x-877p-hcwx
• https://nvd.nist.gov/vuln/detail/CVE-2020-11063
• https://github.com/TYPO3/typo3/commit/14929b98ecda0ce67329b0f25ca7c01ee85df574
• https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2020-11063.yaml
• https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2020-11063.yaml
• https://github.com/TYPO3/typo3
• https://typo3.org/security/advisory/typo3-core-sa-2020-001

CVE-2020-11063 · published 2020-05-13T22:19:21Z · modified 2026-09-10T03:48:29.882187135Z · JSON