{"action":"Upgrade typo3/cms to 2.0.5 or later.","affected":[{"fixed":"2.0.5","introduced":"0"},{"fixed":"3.0.3","introduced":"3.0.0"}],"component":"typo3/cms","cve_ids":["CVE-2022-47406"],"ecosystem":"Packagist","epss":0.0047,"exploited":false,"fixed_versions":["2.0.5","3.0.3"],"ghsa_id":"GHSA-53mm-hx32-6475","id":"tcs_01M5KEVJ7JHQ5AXMSR76G52BAS","modified_at":"2023-11-08T04:11:00.109197Z","published_at":"2022-12-14T21:30:16Z","references":["https://osv.dev/vulnerability/GHSA-53mm-hx32-6475","https://nvd.nist.gov/vuln/detail/CVE-2022-47406","https://github.com/FriendsOfPHP/security-advisories/blob/master/derhansen/fe_change_pwd/CVE-2022-47406.yaml","https://github.com/TYPO3/typo3","https://typo3.org/security/advisory/typo3-ext-sa-2022-016"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-53mm-hx32-6475","url":"https://osv.dev/vulnerability/GHSA-53mm-hx32-6475"}],"summary":"TYPO3 vulnerable to Insufficient Session Expiration"}