Lucene search

K
githubGitHub Advisory DatabaseGHSA-QR5F-6FCV-W69Q
HistoryJun 05, 2024 - 5:12 p.m.

Typo3 Security Misconfiguration in Frontend Session Handling

2024-06-0517:12:58
GitHub Advisory Database
github.com
6
typo3
security misconfiguration
frontend session handling
authenticated users
anonymous user session

AI Score

6.9

Confidence

Low

It has been discovered session data of properly authenticated and logged in frontend users is kept and transformed into an anonymous user session during the logout process. This way the next user using the same client application gains access to previous session data.

Affected configurations

Vulners
Node
typo3typo3_cmsRange9.0.09.5.8
OR
typo3typo3_cmsRange8.0.08.7.27
VendorProductVersionCPE
typo3typo3_cms*cpe:2.3:a:typo3:typo3_cms:*:*:*:*:*:*:*:*

AI Score

6.9

Confidence

Low