Lucene search

K
osvGoogleOSV:GHSA-QR5F-6FCV-W69Q
HistoryJun 05, 2024 - 5:12 p.m.

Typo3 Security Misconfiguration in Frontend Session Handling

2024-06-0517:12:58
Google
osv.dev
5
typo3
security
misconfiguration
frontend
session handling
authenticated users
anonymous user
logout
client application
access
session data

AI Score

6.9

Confidence

Low

It has been discovered session data of properly authenticated and logged in frontend users is kept and transformed into an anonymous user session during the logout process. This way the next user using the same client application gains access to previous session data.

AI Score

6.9

Confidence

Low