Packagist/typo3/cms-core CVE-2021-32767: medium 5.3, EPSS 0.83%

Information Disclosure in User Authentication

Action: Upgrade typo3/cms-core to 7.6.52 or later.

composer require typo3/cms-core:7.6.52

composer require typo3/cms-core:8.7.41

composer require typo3/cms-core:9.5.28

composer require typo3/cms-core:10.4.18

composer require typo3/cms-core:11.3.1

Affected

Fixed versions

Sources

• osv: GHSA-34fr-fhqr-7235
• https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-34fr-fhqr-7235
• https://github.com/TYPO3/typo3/security/advisories/GHSA-34fr-fhqr-7235
• https://nvd.nist.gov/vuln/detail/CVE-2021-32767
• https://github.com/TYPO3/typo3/commit/0b4950163b8919451964133febc65bcdfcec721c
• https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2021-32767.yaml
• https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2021-32767.yaml
• https://github.com/TYPO3/typo3
• https://typo3.org/security/advisory/typo3-core-sa-2021-012
• https://typo3.org/security/advisory/typo3-core-sa-2021-013

CVE-2021-32767 · published 2021-07-26T21:16:28Z · modified 2026-07-08T06:27:26.446733090Z · JSON