CVE-2010-3670
1 advisory.
Packagist/typo3/cms-frontend CVE-2010-3670: medium 4.8
TYPO3 is vulnerable to insecure randomness during hash generation in forgot password function
Action: Upgrade typo3/cms-frontend to 4.3.4 or later.
composer require typo3/cms-frontend:4.3.4composer require typo3/cms-frontend:4.4.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.3.4 | - |
| 4.4.0 | 4.4.1 | - |
Fixed versions
| 4.3.4 | 4.4.1 |
Sources
- osv: GHSA-3276-p9f2-8q89
- https://nvd.nist.gov/vuln/detail/CVE-2010-3670
- https://github.com/TYPO3/typo3/commit/09ab77653161f23e266470a5984d4d5e64588355
- https://github.com/TYPO3/typo3/commit/c03e944d200bf427bb18cad15f2ad36bc83061c9
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590719
- https://github.com/TYPO3-CMS/frontend
- https://security-tracker.debian.org/tracker/CVE-2010-3670
- https://typo3.org/security/advisory/typo3-sa-2010-012/#Insecure_Randomness
CVE-2010-3670 · published · modified · JSON