Packagist/typo3/cms CVE-2022-36105: medium 5.3, EPSS 1.26%

TYPO3 CMS vulnerable to User Enumeration via Response Timing

Action: Upgrade typo3/cms to 10.4.32 or later.

composer require typo3/cms:10.4.32

composer require typo3/cms:11.5.16

Affected

Fixed versions

Sources

• osv: GHSA-m392-235j-9r7r#Packagist/typo3/cms
• https://github.com/TYPO3/typo3/security/advisories/GHSA-m392-235j-9r7r
• https://nvd.nist.gov/vuln/detail/CVE-2022-36105
• https://github.com/TYPO3/typo3/commit/f0fc9c4cd7c38207c30dd158de53ee5d9d6f41a2
• https://github.com/TYPO3/typo3/commit/f8b83ce15d4ea275a5a5e564e5d324242f7937b6
• https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2022-36105.yaml
• https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2022-36105.yaml
• https://github.com/TYPO3/typo3
• https://typo3.org/security/advisory/typo3-core-sa-2022-007

CVE-2022-36105 · published 2022-09-16T17:16:28Z · modified 2023-12-06T01:02:29.779456Z · JSON