Lucene search

K

GoogleOSV:GHSA-WJ85-RG5G-V8JM

HistoryMay 30, 2024 - 6:15 p.m.

TYPO3 Information Disclosure in User Authentication

2024-05-3018:15:08

Google

osv.dev

5

typo3

information disclosure

user authentication

login failures

plain-text credentials

security

AI Score

7.3

Confidence

Low

It has been discovered that login failures have been logged on the default stream with log level “warning” including plain-text user credentials.

References

github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2019-05-07-5.yaml

github.com/TYPO3-CMS/core

github.com/TYPO3-CMS/core/commit/ac0565b7a539398a07adf21f04f85cd2574817d2

typo3.org/security/advisory/typo3-core-sa-2019-010

AI Score

7.3

Confidence

Low