Packagist/typo3/cms: medium 6.5
TYPO3 Brute Force Protection Bypass in backend login
Action: Upgrade typo3/cms to 6.2.14 or later.
composer require typo3/cms:6.2.14composer require typo3/cms:7.3.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 6.2.0 | 6.2.14 | - |
| 7.0.0 | 7.3.1 | - |
Fixed versions
| 6.2.14 | 7.3.1 |
Sources
- osv: GHSA-jqr8-q455-xx45
- https://github.com/TYPO3/typo3/commit/0b67290bbd941c07b0101bbfd6c7aadcbb93c75c
- https://github.com/TYPO3/typo3/commit/0f3fb37674688aba5a44ca6f5df7f8a327a5b5f6
- https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2015-07-01-5.yaml
- https://github.com/TYPO3/typo3
- https://typo3.org/security/advisory/typo3-core-sa-2015-006
- https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-006
published · modified · JSON