CVE-2009-3635
1 advisory.
Packagist/typo3/cms CVE-2009-3635: medium
TYPO3 Install Tool Subcomponent Allows Access Using Only a Password's MD5 Hash as a Credential
Action: Upgrade typo3/cms to 4.1.13 or later.
composer require typo3/cms:4.1.13composer require typo3/cms:4.2.10composer require typo3/cms:4.3beta2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 4.0.13 |
| 4.1.0 | 4.1.13 | - |
| 4.2.0 | 4.2.10 | - |
| 4.3beta1 | 4.3beta2 | - |
Fixed versions
| 4.1.13 | 4.2.10 | 4.3beta2 |
Sources
- osv: GHSA-hwrc-w5gg-f335
- https://nvd.nist.gov/vuln/detail/CVE-2009-3635
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53928
- https://github.com/TYPO3/typo3
- https://web.archive.org/web/20100105023145/http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016
- https://web.archive.org/web/20200229210314/http://www.securityfocus.com/bid/36801
- http://marc.info/?l=oss-security&m=125632856206736&w=2
- http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-016
CVE-2009-3635 · published · modified · JSON