Packagist/typo3/cms-install CVE-2010-3666: medium 5.3, EPSS 1.20%

TYPO3 is vulnerable to Insecure randomness in uniqid function

Action: Upgrade typo3/cms-install to 4.1.14 or later.

composer require typo3/cms-install:4.1.14

composer require typo3/cms-install:4.2.13

composer require typo3/cms-install:4.3.4

composer require typo3/cms-install:4.4.1

Affected

Fixed versions

Sources

• osv: GHSA-c7xr-736p-29j3
• https://nvd.nist.gov/vuln/detail/CVE-2010-3666
• https://github.com/TYPO3/typo3/commit/302b35e714ca30ddb71ab36b9cbb2bea760a2f0e
• https://github.com/TYPO3/typo3/commit/352d6066bf09137e86705bc060fd4ab3ba8f9191
• https://github.com/TYPO3/typo3/commit/42324b30546b1e49fb16c916fc71cceb99ad9fd0
• https://github.com/TYPO3/typo3/commit/f6d2e33cfab87c9e44eca275d6755be747e3cd7e
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590719
• https://github.com/TYPO3-CMS/install
• https://security-tracker.debian.org/tracker/CVE-2010-3666
• https://typo3.org/security/advisory/typo3-sa-2010-012/#Insecure_Randomness

CVE-2010-3666 · published 2022-04-21T01:57:47Z · modified 2024-02-06T23:41:53.811548Z · JSON