CVE-2010-3671

Packagist/typo3/cms-install CVE-2010-3671: medium 6.5

TYPO3 is vulnerable to Session Fixation

Action: Upgrade typo3/cms-install to 4.1.14 or later.

composer require typo3/cms-install:4.1.14

composer require typo3/cms-install:4.2.13

composer require typo3/cms-install:4.3.4

composer require typo3/cms-install:4.4.1

Affected

Fixed versions

Sources

• osv: GHSA-gqmh-5xmq-3fhg
• https://nvd.nist.gov/vuln/detail/CVE-2010-3671
• https://github.com/TYPO3/typo3/commit/199cc2d53747d76657d7aab612c6b3f728d0f15d
• https://github.com/TYPO3/typo3/commit/1d649976e1f1bda684cdc7120e9f74a543059181
• https://github.com/TYPO3/typo3/commit/d3577c8e2c49122c4ab5955c70688ee441d06f23
• https://github.com/TYPO3/typo3/commit/ef3676281b0346644041a93fcbaa7bd9844bbbc5
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590719
• https://github.com/TYPO3-CMS/install
• https://security-tracker.debian.org/tracker/CVE-2010-3671
• https://typo3.org/security/advisory/typo3-sa-2010-012/#Broken_Authentication_and_Session_Management

CVE-2010-3671 · published 2022-04-21T01:57:47Z · modified 2024-02-07T22:13:12.023976Z · JSON