Packagist/typo3/cms: high 7.1
TYPO3 frontend login vulnerable to Session Fixation
Action: Upgrade typo3/cms to 6.2.14 or later.
composer require typo3/cms:6.2.14composer require typo3/cms:7.3.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 6.2.0 | 6.2.14 | - |
| 7.0.0 | 7.3.1 | - |
Fixed versions
| 6.2.14 | 7.3.1 |
Sources
- osv: GHSA-r9vc-jfmh-6j48
- https://github.com/TYPO3/typo3/commit/4c9aba94a930d56ab374693c9c5cc0458587278a
- https://github.com/TYPO3/typo3/commit/4f6e84bba3c13ea8b2652af1a4c47758aa0705f4
- https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2015-07-01-2.yaml
- https://github.com/TYPO3/typo3
- https://typo3.org/security/advisory/typo3-core-sa-2015-003
- https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-003
published · modified · JSON