Session fixation

2019-11-0422:15:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.4%

TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows XSS on the Extension Manager.

CPENameOperatorVersion
typo3ge4.4.0
typo3lt4.4.1
typo3ge4.3.0
typo3lt4.3.4
typo3lt4.1.14
typo3ge4.2.0
typo3lt4.2.13

Name	Operator	Version
typo3	ge	4.4.0
typo3	lt	4.4.1
typo3	ge	4.3.0
typo3	lt	4.3.4
typo3	lt	4.1.14
typo3	ge	4.2.0
typo3	lt	4.2.13

References

bugs.debian.org/cgi-bin/bugreport.cgi?bug=590719

security-tracker.debian.org/tracker/CVE-2010-3665

typo3.org/security/advisory/typo3-sa-2010-012/