TYPO3 Security Misconfiguration in Frontend Session Handling

2024-05-3018:22:41

CWE-488

GitHub Advisory Database

github.com

typo3

security misconfiguration

frontend

session

data

authentication

logout

anonymous user

client application

6.9 Medium

AI Score

Confidence

Low

JSON

It has been discovered session data of properly authenticated and logged in frontend users is kept and transformed into an anonymous user session during the logout process. This way the next user using the same client application gains access to previous session data.

Affected configurations

Vulners

Node

typo3cms_poll_system_extensionRange<9.5.8

typo3cms_poll_system_extensionRange<8.7.27

CPENameOperatorVersion
typo3/cms-corelt9.5.8
typo3/cms-corelt8.7.27

CPE	Name	Operator	Version
	typo3/cms-core	lt	9.5.8
	typo3/cms-core	lt	8.7.27

References

github.com/advisories/GHSA-82vp-jr39-4j2j

github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2019-06-25-3.yaml

github.com/TYPO3-CMS/core/commit/c8c08ca0c26db02753c243e175a8a045628341b6

github.com/TYPO3-CMS/core/commit/fe43834075ae283c8cd91949e9f1dfd18b2d492f

typo3.org/security/advisory/typo3-core-sa-2019-018

6.9 Medium

AI Score

Confidence

Low

JSON